$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/Cy7TAf1zVzX2iK99fg7P1Itftok.roa File: Cy7TAf1zVzX2iK99fg7P1Itftok.roa (raw, json) Hash identifier: eRxv48zowRgxarkLY8dTldTlt53McAMBxEXJUGLRBK8= Subject key identifier: 0B:2E:D3:01:FD:73:57:35:F6:88:AF:7D:7E:0E:CF:D4:8B:5F:B6:89 Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0 Certificate serial: 09EE Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/Cy7TAf1zVzX2iK99fg7P1Itftok.roa Signing time: Mon 17 Feb 2025 13:58:32 +0000 ROA not before: Mon 17 Feb 2025 13:58:32 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 7018 IP address blocks: 59.107.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 15:36:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2542 (0x9ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0 Validity Not Before: Feb 17 13:58:32 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=0B2ED301FD735735F688AF7D7E0ECFD48B5FB689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0c:b5:39:cd:97:95:d0:de:56:0b:7e:a9:73: d2:db:64:1e:45:f3:8b:2f:01:6a:d4:d5:48:dc:6c: 71:47:38:4c:02:57:30:1c:45:69:c7:28:46:ae:48: 3e:62:0c:ec:c1:25:5e:45:61:92:0a:9f:98:42:fa: 8c:96:c0:6c:9d:00:a8:97:43:e8:93:58:cd:28:71: d9:9c:9b:28:0d:54:b0:d8:06:40:3b:22:2d:d7:7d: 76:40:d7:43:bd:0c:03:08:58:78:db:e1:46:58:57: c4:17:e2:1a:47:f9:95:d0:57:1e:b1:35:84:e5:3c: 97:0b:62:ee:42:42:36:d8:d3:f4:9c:27:d1:79:46: b0:87:03:71:a6:6d:04:66:17:4a:81:f2:d7:51:31: a7:c8:53:11:cc:86:0d:53:74:a7:de:96:6f:c1:6c: d7:81:67:1f:65:b9:28:36:58:9f:1e:1d:0d:1f:12: b1:b3:8c:67:ec:e3:7f:47:5b:25:9b:a0:ed:cb:b0: 4d:a5:13:26:36:70:d4:b3:ee:ca:34:d4:e8:8d:13: 16:47:5e:29:96:20:1a:ed:c5:b1:c7:13:9c:9d:d1: 4a:36:3c:cb:18:3b:01:f3:ae:a0:6e:1a:6f:d1:c5: 02:58:ff:c6:38:05:8e:bd:73:40:a5:a5:63:66:20: 06:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:2E:D3:01:FD:73:57:35:F6:88:AF:7D:7E:0E:CF:D4:8B:5F:B6:89 X509v3 Authority Key Identifier: keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/Cy7TAf1zVzX2iK99fg7P1Itftok.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 59.107.192.0/18 Signature Algorithm: sha256WithRSAEncryption b8:2f:e3:6f:0b:bd:3e:57:ed:8a:3a:1c:98:20:d2:d6:21:aa: fd:25:15:9c:e2:f0:c1:d1:16:0a:41:80:b2:b7:b6:ed:79:ef: b9:56:1d:fa:d0:93:93:b5:5a:5e:89:3d:16:d6:3f:61:76:c1: dd:32:19:9a:f5:f7:74:60:9e:41:a0:31:6c:45:89:59:f0:11: 9b:25:98:a1:a9:48:a2:a8:48:f3:36:79:24:79:bd:7a:a6:a4: d6:4b:43:5c:77:86:07:cb:cd:8e:86:b7:e8:bc:e3:23:92:29: e7:29:86:20:4f:cc:ce:43:27:0d:4e:a4:1d:8a:12:7e:72:ff: 74:4d:a8:48:4d:68:6f:36:03:83:5d:80:33:84:ea:0c:a6:16: 7c:31:fe:0c:66:38:83:6c:3a:a2:e9:02:4e:9d:11:ce:2d:ca: 64:6f:66:3d:73:70:aa:e4:f8:28:83:48:b7:8d:1c:e4:a3:32: 3d:f9:68:74:1b:4b:bd:33:22:a6:81:a6:ea:50:db:f6:f3:48: 9d:51:15:0f:42:0c:75:40:50:7c:15:a7:6c:9f:bd:14:41:09: 44:b8:3b:aa:96:63:d5:28:92:56:26:a4:7f:52:ec:59:a6:5f: ca:df:7e:db:0e:f1:6f:9f:73:d0:b9:38:30:df:f1:26:d0:f6: 99:2d:f2:4d -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICCe4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTQ4 MUI0RTQwOTAxNUQ4RUI3RDAzRjM2MDM4ODMwRUMxMDk4QUJDMDAeFw0yNTAyMTcx MzU4MzJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDBCMkVEMzAxRkQ3MzU3 MzVGNjg4QUY3RDdFMEVDRkQ0OEI1RkI2ODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6DLU5zZeV0N5WC36pc9LbZB5F84svAWrU1UjcbHFHOEwCVzAc RWnHKEauSD5iDOzBJV5FYZIKn5hC+oyWwGydAKiXQ+iTWM0ocdmcmygNVLDYBkA7 Ii3XfXZA10O9DAMIWHjb4UZYV8QX4hpH+ZXQVx6xNYTlPJcLYu5CQjbY0/ScJ9F5 RrCHA3GmbQRmF0qB8tdRMafIUxHMhg1TdKfelm/BbNeBZx9luSg2WJ8eHQ0fErGz jGfs439HWyWboO3LsE2lEyY2cNSz7so01OiNExZHXimWIBrtxbHHE5yd0Uo2PMsY OwHzrqBuGm/RxQJY/8Y4BY69c0ClpWNmIAaFAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUCy7TAf1zVzX2iK99fg7P1ItftokwHwYDVR0jBBgwFoAUlIG05AkBXY630D82 A4gw7BCYq8AwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNi9s SUcwNUFrQlhZNjMwRDgyQTRndzdCQ1lxOEEuY3JsMGMGCCsGAQUFBwEBBFcwVTBT BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw MDAwL2xJRzA1QWtCWFk2MzBEODJBNGd3N0JDWXE4QS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtp LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzYvQ3k3VEFmMXpWelgyaUs5OWZn N1AxSXRmdG9rLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNu L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBjtr wDANBgkqhkiG9w0BAQsFAAOCAQEAuC/jbwu9PlftijocmCDS1iGq/SUVnOLwwdEW CkGAsre27XnvuVYd+tCTk7VaXok9FtY/YXbB3TIZmvX3dGCeQaAxbEWJWfARmyWY oalIoqhI8zZ5JHm9eqak1ktDXHeGB8vNjoa36LzjI5Ip5ymGIE/MzkMnDU6kHYoS fnL/dE2oSE1obzYDg12AM4TqDKYWfDH+DGY4g2w6oukCTp0Rzi3KZG9mPXNwquT4 KINIt40c5KMyPflodBtLvTMipoGm6lDb9vNInVEVD0IMdUBQfBWnbJ+9FEEJRLg7 qpZj1SiSViakf1LsWaZfyt9+2w7xb59z0Lk4MN/xJtD2mS3yTQ== -----END CERTIFICATE-----Generated at Sat Apr 26 15:07:22 2025 by rpki-client