$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/tXzrkTh7JSUTkkYgs8hGb0uHNF0.roa File: tXzrkTh7JSUTkkYgs8hGb0uHNF0.roa (raw, json) Hash identifier: fP/wKd3t08iTpMXvMgA0ex051qyZXxh1ScmI6IUB0Eo= Subject key identifier: B5:7C:EB:91:38:7B:25:25:13:92:46:20:B3:C8:46:6F:4B:87:34:5D Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1857 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/tXzrkTh7JSUTkkYgs8hGb0uHNF0.roa Signing time: Fri 17 Jan 2025 01:24:56 +0000 ROA not before: Fri 17 Jan 2025 01:24:56 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 59083 IP address blocks: 150.242.238.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6231 (0x1857) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:24:56 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=B57CEB91387B252513924620B3C8466F4B87345D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d8:b0:68:3a:e2:e0:16:ca:7b:8b:61:bb:1c: 96:da:00:b0:c5:72:3b:07:86:20:27:c7:88:51:1b: 3d:5e:56:81:77:c1:63:d2:86:53:cd:c7:be:7b:19: 02:8a:b2:c3:65:ce:21:2b:57:e3:c0:12:92:f9:0b: 0a:81:11:ff:0e:5f:79:7e:4b:81:26:2f:6d:e4:25: 04:87:ab:e4:84:22:02:11:ed:4e:79:34:15:27:f6: d4:f2:5c:aa:e1:02:b3:ef:73:81:ca:90:5a:23:f6: e5:fa:b3:e5:9e:f9:58:d9:02:01:67:33:65:04:95: c1:a9:88:d9:1a:90:0d:8c:ae:3e:3f:b3:d8:d8:cb: ac:88:02:f8:44:d2:de:75:5e:e8:a6:27:95:89:d2: de:88:08:85:36:9f:fd:e9:12:c4:55:00:43:10:ec: 4e:7e:20:0f:fe:9a:7d:ea:44:2a:f0:a6:eb:39:c6: b6:44:a1:f8:6a:49:20:79:7d:8d:5a:7d:75:4a:52: f1:b0:ea:b7:ac:65:26:67:bf:73:f3:2d:12:d5:a1: 92:cc:7f:bd:e1:48:5e:7a:28:73:0e:d0:99:aa:bf: be:1c:29:50:77:fc:5e:3f:b5:94:d8:24:c0:81:e0: 0c:75:13:19:1b:b4:b0:5a:18:5c:f3:a3:30:f2:5d: b8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:7C:EB:91:38:7B:25:25:13:92:46:20:B3:C8:46:6F:4B:87:34:5D X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/tXzrkTh7JSUTkkYgs8hGb0uHNF0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.242.238.0/23 Signature Algorithm: sha256WithRSAEncryption 06:0b:75:e5:35:27:3e:92:12:0c:22:26:3d:6c:40:ed:47:21: 60:b7:2c:1d:97:6f:4c:3f:e3:9a:5f:19:d2:2a:78:eb:b5:14: 71:42:f3:e6:ac:20:64:36:7f:48:dc:87:3f:e6:79:e6:0d:34: a0:b6:3a:9c:b7:56:1d:fe:15:02:2a:bc:50:c7:53:83:5b:f1: e1:a0:0f:15:11:af:c6:de:45:8b:cc:2d:da:6a:73:0e:82:5e: 2e:e6:1a:b4:05:25:86:fb:76:f3:41:d3:61:02:6c:fb:e6:a6: 39:6b:52:62:bd:f9:4a:3b:95:fc:e6:45:e6:55:a2:d6:dc:f6: 47:6e:9d:a6:c8:70:55:3b:93:95:0a:5d:c3:fb:75:2c:9e:12: 76:34:42:61:f4:2b:05:91:a2:a3:0b:99:b2:cd:9e:21:2b:78: cd:c1:ee:c2:7c:cf:48:6c:be:fd:a7:24:b5:fc:7e:3a:9c:1a: 9c:5b:22:2d:97:21:eb:80:cc:1f:b1:9b:86:50:3a:20:7f:f5: 13:ef:4b:59:fb:f8:e4:4e:50:37:33:c1:d8:3c:58:72:4f:61: df:ad:00:46:09:a5:c8:f3:0b:26:29:0c:36:aa:e0:15:07:c5: e0:f1:1d:84:07:17:70:93:fc:ca:e4:f4:b0:96:99:2c:f2:72: 3b:8a:d5:b9 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGFcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI0NTZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEI1N0NFQjkxMzg3QjI1 MjUxMzkyNDYyMEIzQzg0NjZGNEI4NzM0NUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/2LBoOuLgFsp7i2G7HJbaALDFcjsHhiAnx4hRGz1eVoF3wWPS hlPNx757GQKKssNlziErV+PAEpL5CwqBEf8OX3l+S4EmL23kJQSHq+SEIgIR7U55 NBUn9tTyXKrhArPvc4HKkFoj9uX6s+We+VjZAgFnM2UElcGpiNkakA2Mrj4/s9jY y6yIAvhE0t51XuimJ5WJ0t6ICIU2n/3pEsRVAEMQ7E5+IA/+mn3qRCrwpus5xrZE ofhqSSB5fY1afXVKUvGw6resZSZnv3PzLRLVoZLMf73hSF56KHMO0Jmqv74cKVB3 /F4/tZTYJMCB4Ax1ExkbtLBaGFzzozDyXbjnAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUtXzrkTh7JSUTkkYgs8hGb0uHNF0wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3RYenJrVGg3SlNVVGtr WWdzOGhHYjB1SE5GMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGW8u4wDQYJKoZIhvcNAQELBQADggEBAAYLdeU1Jz6SEgwiJj1sQO1HIWC3LB2X b0w/45pfGdIqeOu1FHFC8+asIGQ2f0jchz/meeYNNKC2Opy3Vh3+FQIqvFDHU4Nb 8eGgDxURr8beRYvMLdpqcw6CXi7mGrQFJYb7dvNB02ECbPvmpjlrUmK9+Uo7lfzm ReZVotbc9kdunabIcFU7k5UKXcP7dSyeEnY0QmH0KwWRoqMLmbLNniEreM3B7sJ8 z0hsvv2nJLX8fjqcGpxbIi2XIeuAzB+xm4ZQOiB/9RPvS1n7+OROUDczwdg8WHJP Yd+tAEYJpcjzCyYpDDaq4BUHxeDxHYQHF3CT/Mrk9LCWmSzycjuK1bk= -----END CERTIFICATE-----Generated at Sat Apr 26 14:24:42 2025 by rpki-client