$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/2Us_SLA8fkTkG4Tt7UKyaQH8JHU.roa File: 2Us_SLA8fkTkG4Tt7UKyaQH8JHU.roa (raw, json) Hash identifier: 3whVHRdPL9qVkb9F40ZO/YXFioVwgUO8P1UNik4R5Jk= Subject key identifier: D9:4B:3F:48:B0:3C:7E:44:E4:1B:84:ED:ED:42:B2:69:01:FC:24:75 Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0 Certificate serial: 09ED Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/2Us_SLA8fkTkG4Tt7UKyaQH8JHU.roa Signing time: Mon 17 Feb 2025 13:58:32 +0000 ROA not before: Mon 17 Feb 2025 13:58:32 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 10103 IP address blocks: 59.107.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 15:36:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2541 (0x9ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0 Validity Not Before: Feb 17 13:58:32 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=D94B3F48B03C7E44E41B84EDED42B26901FC2475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ef:d7:a6:d1:48:23:56:64:9f:6f:4a:4a:64: e1:54:1e:b1:21:eb:14:17:10:33:9d:77:49:3a:8c: d7:a1:96:49:e8:8c:87:13:c8:e7:b5:37:39:a9:5c: 0f:8b:84:85:1f:2e:3e:3b:0f:bd:0c:96:af:66:bc: 9b:76:98:ff:92:19:39:38:0d:35:39:91:8b:05:8c: 9e:2b:3a:c7:22:37:57:88:98:b9:ea:73:4e:19:91: 49:c3:40:eb:03:7b:81:f0:5b:22:68:b8:e9:59:0f: 98:55:cb:b4:ea:8c:f0:df:62:63:0f:81:b3:b6:fd: 32:f7:34:5b:59:2c:53:57:dc:8e:55:43:f1:1c:65: eb:2d:7f:62:eb:99:97:f7:64:0e:fa:95:1a:7a:5f: 8f:c7:65:59:7d:54:f5:b0:fc:e5:2b:65:a8:43:9a: bb:fd:21:81:04:a5:56:30:12:bc:87:ef:4b:e3:1e: cc:47:4b:e0:82:ca:0c:05:20:be:6d:2d:e6:3c:da: 06:61:df:51:79:8f:4c:9b:31:9a:70:a2:c0:49:73: 45:d2:fe:74:93:4d:2a:69:ba:f8:2e:96:d0:cf:5d: a8:25:4a:ba:1a:76:8d:be:d1:29:ab:35:04:2f:e3: c7:1e:33:4e:33:1b:61:74:94:7b:d6:cd:d4:9d:78: c4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:4B:3F:48:B0:3C:7E:44:E4:1B:84:ED:ED:42:B2:69:01:FC:24:75 X509v3 Authority Key Identifier: keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/2Us_SLA8fkTkG4Tt7UKyaQH8JHU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 59.107.192.0/18 Signature Algorithm: sha256WithRSAEncryption 19:d5:bf:68:30:ea:f7:b1:11:18:49:4b:f1:c6:82:0a:9e:6a: 31:b3:70:49:1b:c7:ca:6e:72:e3:14:23:16:e8:f4:96:17:5c: 67:b0:36:20:42:65:40:27:66:05:d8:fe:b8:b5:b6:1e:c0:7e: 3c:f9:3b:0a:64:13:6c:92:50:49:f5:42:b6:06:66:39:0c:a1: e1:49:3c:2f:27:2e:da:ad:a9:b3:e4:83:36:c2:e8:72:5a:33: 30:ba:8b:e7:41:aa:b5:00:f4:70:45:4d:18:69:8e:c2:0a:85: ab:48:21:03:71:a7:13:f0:3f:a4:dc:84:86:71:00:6c:78:ac: 38:f8:e1:fa:7b:8c:11:7f:b4:9a:a3:c5:a2:b6:16:c9:2d:c5: 73:21:77:fa:e6:ec:61:10:8c:81:b4:6f:31:5b:ee:79:5d:38: 9f:52:03:fe:4c:db:19:29:05:82:e6:09:4b:4a:c5:c6:95:b5: 49:0e:00:ef:7d:3a:7b:16:73:71:e1:7f:f8:d3:a2:86:de:e9: 6f:2e:fb:18:43:90:71:16:8b:b0:36:96:a8:35:47:41:aa:98: cf:d6:b9:6b:1a:88:af:d2:65:f8:5c:a3:ed:b1:1b:f6:a7:d6: 0c:2a:4f:0d:ff:79:dc:1b:7e:17:6d:6f:b5:b4:19:8c:b3:84: 15:bf:41:6c -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICCe0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTQ4 MUI0RTQwOTAxNUQ4RUI3RDAzRjM2MDM4ODMwRUMxMDk4QUJDMDAeFw0yNTAyMTcx MzU4MzJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEQ5NEIzRjQ4QjAzQzdF NDRFNDFCODRFREVENDJCMjY5MDFGQzI0NzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCz79em0UgjVmSfb0pKZOFUHrEh6xQXEDOdd0k6jNehlknojIcT yOe1NzmpXA+LhIUfLj47D70Mlq9mvJt2mP+SGTk4DTU5kYsFjJ4rOsciN1eImLnq c04ZkUnDQOsDe4HwWyJouOlZD5hVy7TqjPDfYmMPgbO2/TL3NFtZLFNX3I5VQ/Ec Zestf2LrmZf3ZA76lRp6X4/HZVl9VPWw/OUrZahDmrv9IYEEpVYwEryH70vjHsxH S+CCygwFIL5tLeY82gZh31F5j0ybMZpwosBJc0XS/nSTTSppuvgultDPXaglSroa do2+0SmrNQQv48ceM04zG2F0lHvWzdSdeMSfAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQU2Us/SLA8fkTkG4Tt7UKyaQH8JHUwHwYDVR0jBBgwFoAUlIG05AkBXY630D82 A4gw7BCYq8AwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNi9s SUcwNUFrQlhZNjMwRDgyQTRndzdCQ1lxOEEuY3JsMGMGCCsGAQUFBwEBBFcwVTBT BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw MDAwL2xJRzA1QWtCWFk2MzBEODJBNGd3N0JDWXE4QS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtp LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzYvMlVzX1NMQThma1RrRzRUdDdV S3lhUUg4SkhVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNu L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBjtr wDANBgkqhkiG9w0BAQsFAAOCAQEAGdW/aDDq97ERGElL8caCCp5qMbNwSRvHym5y 4xQjFuj0lhdcZ7A2IEJlQCdmBdj+uLW2HsB+PPk7CmQTbJJQSfVCtgZmOQyh4Uk8 Lycu2q2ps+SDNsLoclozMLqL50GqtQD0cEVNGGmOwgqFq0ghA3GnE/A/pNyEhnEA bHisOPjh+nuMEX+0mqPForYWyS3FcyF3+ubsYRCMgbRvMVvueV04n1ID/kzbGSkF guYJS0rFxpW1SQ4A7306exZzceF/+NOiht7pby77GEOQcRaLsDaWqDVHQaqYz9a5 axqIr9Jl+Fyj7bEb9qfWDCpPDf953Bt+F21vtbQZjLOEFb9BbA== -----END CERTIFICATE-----Generated at Sat Apr 26 13:07:30 2025 by rpki-client