$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/zhixem9-6PYgJNY_w_1_B0jvDlM.roa File: zhixem9-6PYgJNY_w_1_B0jvDlM.roa (raw, json) Hash identifier: E4u11bMmTcGT2Ci1KClDnhmnBBEiHD/3MK910DyWFwA= Subject key identifier: CE:18:B1:7A:6F:7E:E8:F6:20:24:D6:3F:C3:FD:7F:07:48:EF:0E:53 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 186D Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/zhixem9-6PYgJNY_w_1_B0jvDlM.roa Signing time: Fri 17 Jan 2025 01:25:03 +0000 ROA not before: Fri 17 Jan 2025 01:25:03 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 59803 IP address blocks: 2406:1e80::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6253 (0x186d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:03 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=CE18B17A6F7EE8F62024D63FC3FD7F0748EF0E53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:96:51:e1:f8:20:11:74:52:b9:dc:5a:45:97: 2d:3b:68:a5:c9:e7:4b:8c:85:36:54:56:d3:84:4f: 96:87:a4:e1:7d:d2:c2:aa:3c:bd:6e:69:6e:33:2f: 7c:a2:7a:b2:d4:80:a9:99:b7:0b:8e:c4:95:a7:f6: 93:38:a4:1c:60:1d:ba:ab:ae:f2:3c:a5:1f:62:81: 1c:8c:76:7e:e4:b2:90:8b:74:d1:ff:89:b7:aa:82: 0e:a6:ae:c5:7c:73:d3:d1:ed:cb:eb:cb:dc:4f:c4: 67:d4:c8:91:44:a9:ba:e6:08:7c:fe:2f:35:5d:5b: 2d:2d:b9:ff:5f:04:8c:93:4f:85:8d:f2:f0:b0:73: b8:25:1f:79:be:5a:b3:48:d0:7e:27:97:6b:4e:f6: 97:11:00:d9:d6:02:80:c3:d8:8b:80:88:1c:fd:b4: 07:24:0e:cb:b9:05:6f:88:a4:22:2c:2b:61:23:d2: ca:a4:4b:41:ca:78:aa:7a:71:d0:ff:19:06:18:e4: de:08:9e:87:b8:8c:65:22:1b:66:ec:b9:b4:af:ad: 16:ec:ed:50:a4:f2:79:5a:88:02:b8:9e:63:51:cb: 18:a0:75:80:d7:a5:de:a5:3b:53:b2:6e:95:da:dd: e7:57:1d:25:fd:3e:52:79:d1:33:35:79:06:24:ff: 93:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:18:B1:7A:6F:7E:E8:F6:20:24:D6:3F:C3:FD:7F:07:48:EF:0E:53 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/zhixem9-6PYgJNY_w_1_B0jvDlM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2406:1e80::/32 Signature Algorithm: sha256WithRSAEncryption 77:ad:d0:01:26:45:a0:d0:2b:26:10:1a:ef:4f:9e:0f:e4:de: 4b:a7:11:20:2a:48:1f:80:9b:97:7c:b8:f7:15:25:a5:f7:bf: 61:5d:49:e5:ed:95:71:a4:a7:fd:0b:8d:1f:08:9f:1c:c4:b3: f7:98:c6:9e:f3:fa:77:05:69:f5:98:8a:fc:dc:84:ba:3f:b6: 8a:52:7e:e1:59:2e:46:53:fe:36:b4:a9:26:0a:29:56:eb:46: ec:39:bc:08:eb:d6:fd:f1:ae:0f:b6:4f:ea:a2:a1:49:e4:89: f2:2c:0d:40:87:fd:2f:2c:42:c8:03:c0:27:91:3d:15:fa:98: d1:e9:87:e2:1e:28:22:e1:c9:9c:b4:bb:9e:05:a3:ca:28:e8: ee:9e:c2:ee:bc:ee:40:62:bd:e9:dd:70:5b:e3:b3:63:d5:47: 5b:28:b4:53:df:56:d1:ce:89:2d:26:d0:d7:81:e4:40:04:e4: 21:b3:b5:13:89:a2:81:b0:6e:82:27:7d:8d:ce:53:56:d3:a7: 6b:b1:6b:40:84:c1:2a:01:32:30:bb:53:d3:b2:d1:72:ca:cd: 72:c5:78:4f:73:c2:7d:5f:59:2d:e4:28:02:7e:f8:96:93:32: 47:df:60:14:db:75:b7:00:40:2f:4e:86:29:ce:b9:bb:e6:39: dd:b0:37:bc -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICGG0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1MDNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKENFMThCMTdBNkY3RUU4 RjYyMDI0RDYzRkMzRkQ3RjA3NDhFRjBFNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFllHh+CARdFK53FpFly07aKXJ50uMhTZUVtOET5aHpOF90sKq PL1uaW4zL3yierLUgKmZtwuOxJWn9pM4pBxgHbqrrvI8pR9igRyMdn7kspCLdNH/ ibeqgg6mrsV8c9PR7cvry9xPxGfUyJFEqbrmCHz+LzVdWy0tuf9fBIyTT4WN8vCw c7glH3m+WrNI0H4nl2tO9pcRANnWAoDD2IuAiBz9tAckDsu5BW+IpCIsK2Ej0sqk S0HKeKp6cdD/GQYY5N4Inoe4jGUiG2bsubSvrRbs7VCk8nlaiAK4nmNRyxigdYDX pd6lO1OybpXa3edXHSX9PlJ50TM1eQYk/5M/AgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUzhixem9+6PYgJNY/w/1/B0jvDlMwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3poaXhlbTktNlBZZ0pO WV93XzFfQjBqdkRsTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcD BQAkBh6AMA0GCSqGSIb3DQEBCwUAA4IBAQB3rdABJkWg0CsmEBrvT54P5N5LpxEg KkgfgJuXfLj3FSWl979hXUnl7ZVxpKf9C40fCJ8cxLP3mMae8/p3BWn1mIr83IS6 P7aKUn7hWS5GU/42tKkmCilW60bsObwI69b98a4Ptk/qoqFJ5InyLA1Ah/0vLELI A8AnkT0V+pjR6YfiHigi4cmctLueBaPKKOjunsLuvO5AYr3p3XBb47Nj1UdbKLRT 31bRzoktJtDXgeRABOQhs7UTiaKBsG6CJ32NzlNW06drsWtAhMEqATIwu1PTstFy ys1yxXhPc8J9X1kt5CgCfviWkzJH32AU23W3AEAvToYpzrm75jndsDe8 -----END CERTIFICATE-----Generated at Sat Apr 26 14:40:04 2025 by rpki-client