$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/vkP4IAtkibJ6w-wWIM-oD40h3AY.roa File: vkP4IAtkibJ6w-wWIM-oD40h3AY.roa (raw, json) Hash identifier: 4mc0LS8CjsUHpOBh0mQ7O6D44D2yI0qrq6e/pOG0Eng= Subject key identifier: BE:43:F8:20:0B:64:89:B2:7A:C3:EC:16:20:CF:A8:0F:8D:21:DC:06 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 18BB Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/vkP4IAtkibJ6w-wWIM-oD40h3AY.roa Signing time: Fri 17 Jan 2025 01:25:30 +0000 ROA not before: Fri 17 Jan 2025 01:25:30 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 4812 IP address blocks: 202.89.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6331 (0x18bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:30 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=BE43F8200B6489B27AC3EC1620CFA80F8D21DC06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:1b:45:95:65:b2:e9:1e:0e:e2:ed:ec:7e:a5: c0:c7:0a:5d:c7:46:31:2e:8d:49:1f:4f:6b:8a:4c: 47:21:52:dd:f2:37:1a:fa:4d:20:a3:d3:38:c9:ca: 68:d3:73:4d:8e:75:4c:6c:a2:91:b7:91:e9:ad:4d: b1:95:20:9c:29:39:bd:76:df:bc:eb:02:32:47:a5: 06:f0:ee:a2:06:ee:0d:cf:be:5e:62:6d:de:d9:3c: 1d:de:e9:a6:69:77:59:10:c8:2c:13:1b:1a:34:cc: 1d:e6:08:36:c2:42:a4:a0:4e:28:bf:50:16:df:6d: 25:26:09:22:be:34:e9:bd:55:3c:62:22:58:f3:02: 6f:6d:a2:24:37:9f:af:01:a9:ad:a8:77:7e:71:34: b1:54:e6:3c:83:38:2d:5c:95:46:8d:45:05:03:25: 03:a9:f4:61:52:54:5a:f1:69:72:f4:fd:6f:c2:8b: 8e:b3:bb:d3:5b:0d:cb:fc:af:a0:12:2b:32:4a:3f: 26:b1:a8:4f:70:dd:2a:42:8d:38:48:34:f4:64:c2: 2f:e5:e6:ff:79:eb:17:85:05:43:a1:1d:eb:1b:8c: 1a:fc:95:a0:3f:f0:df:5e:52:c3:d3:d9:a7:e3:a5: 36:dd:4e:9f:c1:cd:b1:6c:ec:4b:7f:fe:a6:c8:9c: 31:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:43:F8:20:0B:64:89:B2:7A:C3:EC:16:20:CF:A8:0F:8D:21:DC:06 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/vkP4IAtkibJ6w-wWIM-oD40h3AY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.89.96.0/24 Signature Algorithm: sha256WithRSAEncryption 47:08:f1:3d:2d:a3:df:fa:9d:e0:ac:e6:9d:36:da:5e:7d:75: c2:36:fb:f1:45:79:a7:51:6d:d0:c6:e2:5a:02:22:17:44:00: 9f:fd:3d:09:3b:23:39:7e:5b:45:4b:92:c5:c6:9a:25:19:30: 59:ef:8d:76:2d:03:eb:6a:54:37:b1:f6:ff:0e:55:4a:20:57: 40:db:a5:ad:8f:91:84:54:77:5b:f9:d3:1f:1f:32:40:44:f7: 5f:dd:1e:15:40:5c:72:fd:2e:4d:13:75:7b:89:7f:3c:e8:ce: d0:8d:33:11:62:55:da:47:94:26:a0:4f:7a:f8:54:27:b8:08: 9e:b1:1c:65:39:01:b1:37:a8:68:ab:ef:37:b3:dc:50:c6:b0: e0:81:f6:73:31:aa:dc:3a:7a:58:8b:51:6d:42:4a:28:f8:64: 52:e6:dc:41:bc:a5:37:6a:a1:9a:b5:18:b9:a7:c9:30:94:04: 18:2a:fa:1c:75:6b:32:2a:1a:e0:81:a0:f1:2b:95:b4:b5:d1: 63:85:56:d1:84:49:d9:12:89:68:4d:2b:b5:28:eb:9b:00:bb: 75:28:8d:06:3a:0b:68:4b:74:73:07:79:fe:86:3b:ae:c6:48: 7a:9c:78:ea:43:44:83:27:81:48:c1:db:28:55:52:b3:73:51: 6e:7a:7b:dd -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGLswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1MzBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEJFNDNGODIwMEI2NDg5 QjI3QUMzRUMxNjIwQ0ZBODBGOEQyMURDMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDjG0WVZbLpHg7i7ex+pcDHCl3HRjEujUkfT2uKTEchUt3yNxr6 TSCj0zjJymjTc02OdUxsopG3kemtTbGVIJwpOb1237zrAjJHpQbw7qIG7g3Pvl5i bd7ZPB3e6aZpd1kQyCwTGxo0zB3mCDbCQqSgTii/UBbfbSUmCSK+NOm9VTxiIljz Am9toiQ3n68Bqa2od35xNLFU5jyDOC1clUaNRQUDJQOp9GFSVFrxaXL0/W/Ci46z u9NbDcv8r6ASKzJKPyaxqE9w3SpCjThINPRkwi/l5v956xeFBUOhHesbjBr8laA/ 8N9eUsPT2afjpTbdTp/BzbFs7Et//qbInDFnAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUvkP4IAtkibJ6w+wWIM+oD40h3AYwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3ZrUDRJQXRraWJKNnct d1dJTS1vRDQwaDNBWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADKWWAwDQYJKoZIhvcNAQELBQADggEBAEcI8T0to9/6neCs5p022l59dcI2+/FF eadRbdDG4loCIhdEAJ/9PQk7Izl+W0VLksXGmiUZMFnvjXYtA+tqVDex9v8OVUog V0Dbpa2PkYRUd1v50x8fMkBE91/dHhVAXHL9Lk0TdXuJfzzoztCNMxFiVdpHlCag T3r4VCe4CJ6xHGU5AbE3qGir7zez3FDGsOCB9nMxqtw6eliLUW1CSij4ZFLm3EG8 pTdqoZq1GLmnyTCUBBgq+hx1azIqGuCBoPErlbS10WOFVtGESdkSiWhNK7Uo65sA u3UojQY6C2hLdHMHef6GO67GSHqceOpDRIMngUjB2yhVUrNzUW56e90= -----END CERTIFICATE-----Generated at Sat Apr 26 14:24:24 2025 by rpki-client