$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/wetF1EOCyhjF7SUzg5hyzYMH25A.roa File: wetF1EOCyhjF7SUzg5hyzYMH25A.roa (raw, json) Hash identifier: eDdCWeEU16qIS+Z2wrwgNXLRb/dpccc7xnl67LZF7Bo= Subject key identifier: C1:EB:45:D4:43:82:CA:18:C5:ED:25:33:83:98:72:CD:83:07:DB:90 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1802 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/wetF1EOCyhjF7SUzg5hyzYMH25A.roa Signing time: Fri 17 Jan 2025 01:24:26 +0000 ROA not before: Fri 17 Jan 2025 01:24:26 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 59803 IP address blocks: 2403:1b80::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6146 (0x1802) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:24:26 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=C1EB45D44382CA18C5ED2533839872CD8307DB90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f9:fd:2e:73:9a:49:39:60:54:09:97:d8:75: 3b:21:9e:fb:23:0f:88:ad:e7:26:f5:69:8a:96:16: 81:83:b0:1a:fa:c9:5c:e4:de:c6:94:53:96:93:6e: 52:ee:80:f7:64:f3:bb:38:ed:62:2b:42:c8:f1:05: 3c:ff:4a:c2:bd:42:1d:24:02:11:11:57:73:d8:35: a6:5b:1b:3a:fe:21:50:9f:20:86:f9:d8:28:91:7a: c2:b7:b9:d7:5c:7f:a4:b1:67:cf:07:5a:1d:0e:04: e9:06:f7:73:eb:e2:44:7c:25:b1:fd:21:31:8b:15: 90:05:34:51:c5:61:be:f0:fc:b9:85:9c:e8:8d:b5: a8:70:59:cb:5d:04:a8:8b:2c:5c:fe:7b:f5:56:9f: b8:eb:bf:fa:2b:f8:97:c4:36:af:c7:49:15:4b:ca: 55:13:06:3c:37:f0:10:65:07:3b:82:9b:ed:67:36: b1:f1:a2:9a:4f:2b:cb:ed:09:3c:20:fa:16:fc:2c: 20:32:37:ca:0d:0b:c1:e6:56:a7:be:80:dc:4d:d6: 7d:de:cd:5c:d3:3f:fe:9d:78:35:70:8c:7d:5b:eb: 40:c1:6e:1f:a6:5c:cd:65:29:92:f1:81:9c:9c:95: 1b:9e:3c:03:d3:23:8c:13:71:20:f5:f3:ea:2f:30: 70:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:EB:45:D4:43:82:CA:18:C5:ED:25:33:83:98:72:CD:83:07:DB:90 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/wetF1EOCyhjF7SUzg5hyzYMH25A.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2403:1b80::/32 Signature Algorithm: sha256WithRSAEncryption 68:39:e2:41:c5:5f:1c:00:04:c4:ef:4d:30:ba:7e:39:27:2e: 0c:bc:8b:33:5b:8e:93:90:5d:4a:5b:d8:12:47:8f:62:83:94: cf:a2:34:dd:bc:e3:34:b8:0f:40:9d:5a:9c:d4:5d:b1:c9:33: ed:3d:4f:fe:97:1c:83:fa:bd:e2:b2:f9:9d:32:00:74:1b:b2: 62:42:96:ae:0b:80:eb:df:18:b9:0e:ba:3d:cb:35:cb:e5:cc: c8:e6:09:10:06:b3:35:74:49:6f:86:06:e0:ea:e8:d3:d0:10: ad:64:fb:36:ba:06:77:dd:38:7e:2b:80:cf:20:4b:ad:78:be: 7d:56:f0:98:7d:c5:3e:c3:9a:65:3f:30:b5:54:c0:79:dd:8a: 8d:86:6d:60:70:87:95:4e:50:5f:eb:8e:8e:7b:0e:9a:dc:7f: 51:84:e4:75:20:c7:d6:5b:64:ed:ac:8e:cb:ba:9c:17:ab:42: 96:ad:42:ed:51:54:d2:bb:6c:ea:4d:ad:3d:e3:4b:23:93:90: e4:01:f3:be:06:90:3e:b9:b5:9f:c7:29:39:2e:a0:74:7f:b4: da:2d:53:c7:62:1b:b1:3f:67:42:bd:dc:3a:5e:f6:47:6d:44: a3:32:c1:ee:e5:f4:6b:5e:46:8c:8c:20:bd:ec:2c:f3:16:80: ae:5f:de:20 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICGAIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI0MjZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEMxRUI0NUQ0NDM4MkNB MThDNUVEMjUzMzgzOTg3MkNEODMwN0RCOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCu+f0uc5pJOWBUCZfYdTshnvsjD4it5yb1aYqWFoGDsBr6yVzk 3saUU5aTblLugPdk87s47WIrQsjxBTz/SsK9Qh0kAhERV3PYNaZbGzr+IVCfIIb5 2CiResK3uddcf6SxZ88HWh0OBOkG93Pr4kR8JbH9ITGLFZAFNFHFYb7w/LmFnOiN tahwWctdBKiLLFz+e/VWn7jrv/or+JfENq/HSRVLylUTBjw38BBlBzuCm+1nNrHx oppPK8vtCTwg+hb8LCAyN8oNC8HmVqe+gNxN1n3ezVzTP/6deDVwjH1b60DBbh+m XM1lKZLxgZyclRuePAPTI4wTcSD18+ovMHAHAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUwetF1EOCyhjF7SUzg5hyzYMH25AwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3dldEYxRU9DeWhqRjdT VXpnNWh5ellNSDI1QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcD BQAkAxuAMA0GCSqGSIb3DQEBCwUAA4IBAQBoOeJBxV8cAATE700wun45Jy4MvIsz W46TkF1KW9gSR49ig5TPojTdvOM0uA9AnVqc1F2xyTPtPU/+lxyD+r3isvmdMgB0 G7JiQpauC4Dr3xi5Dro9yzXL5czI5gkQBrM1dElvhgbg6ujT0BCtZPs2ugZ33Th+ K4DPIEuteL59VvCYfcU+w5plPzC1VMB53YqNhm1gcIeVTlBf646Oew6a3H9RhOR1 IMfWW2TtrI7LupwXq0KWrULtUVTSu2zqTa0940sjk5DkAfO+BpA+ubWfxyk5LqB0 f7TaLVPHYhuxP2dCvdw6XvZHbUSjMsHu5fRrXkaMjCC97CzzFoCuX94g -----END CERTIFICATE-----Generated at Sat Apr 26 14:42:14 2025 by rpki-client