$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/620/2GjMcAPIwQ9A3nYHTe17im5dKpk.roa File: 2GjMcAPIwQ9A3nYHTe17im5dKpk.roa (raw, json) Hash identifier: 8clIZ8TDnNT+D8EcevoDYRlpTbp3pyPMOB/ztKGT3EA= Subject key identifier: D8:68:CC:70:03:C8:C1:0F:40:DE:76:07:4D:ED:7B:8A:6E:5D:2A:99 Certificate issuer: /CN=309C2A943B28DC0858C39B9208A1609C0973E49A Certificate serial: 0240 Authority key identifier: 30:9C:2A:94:3B:28:DC:08:58:C3:9B:92:08:A1:60:9C:09:73:E4:9A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/2GjMcAPIwQ9A3nYHTe17im5dKpk.roa Signing time: Thu 24 Apr 2025 08:50:27 +0000 ROA not before: Thu 24 Apr 2025 08:50:27 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 142132 IP address blocks: 202.46.41.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 14:36:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 576 (0x240) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=309C2A943B28DC0858C39B9208A1609C0973E49A Validity Not Before: Apr 24 08:50:27 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=D868CC7003C8C10F40DE76074DED7B8A6E5D2A99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:af:29:0c:ba:28:74:0a:9d:4b:4c:4d:80:b9: 4f:0f:bf:56:87:41:2a:44:0c:d7:2b:78:38:d0:2e: 79:a8:bd:bc:79:46:79:3e:9a:c3:9d:df:98:32:8f: 5f:c0:ba:e4:24:12:e7:62:d6:3a:66:ac:46:c1:96: d7:64:73:f8:3a:92:5b:1b:2a:c7:d1:3f:2c:b0:4a: d0:ae:d5:ac:0f:1c:c5:44:15:aa:9d:ba:2b:87:4f: 4e:d8:46:ea:4a:0e:fe:65:95:66:1a:e7:8b:dc:21: 4c:15:96:37:ff:61:d4:17:0f:7d:20:01:10:f2:9f: a8:60:1a:72:af:b9:94:fb:ea:dd:b0:e6:68:d4:71: f8:d5:b9:fd:94:a9:be:83:44:8f:60:d9:84:c7:9d: 9e:b7:04:ac:9b:1f:ab:97:76:64:87:11:0d:ce:e3: d1:53:64:b1:03:cb:f0:ee:fd:2c:fc:da:4a:a1:c9: 44:a4:47:a6:a2:27:75:02:77:7e:fc:87:9e:ff:61: e9:a9:b3:4c:30:bf:af:8d:1b:93:1b:ed:97:b6:6f: 52:c6:a2:f5:9b:6d:50:a2:35:f1:9f:86:b9:7c:7d: b7:a4:d4:95:d6:c0:76:7d:07:a5:bf:35:65:70:39: bf:64:a9:86:31:64:5d:2a:f9:e4:80:6f:16:4c:65: 26:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:68:CC:70:03:C8:C1:0F:40:DE:76:07:4D:ED:7B:8A:6E:5D:2A:99 X509v3 Authority Key Identifier: keyid:30:9C:2A:94:3B:28:DC:08:58:C3:9B:92:08:A1:60:9C:09:73:E4:9A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/2GjMcAPIwQ9A3nYHTe17im5dKpk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.46.41.0/24 Signature Algorithm: sha256WithRSAEncryption d1:ce:f4:13:5d:73:be:89:43:09:69:40:61:21:ea:63:97:2c: 48:7a:6a:71:92:60:d6:a9:4b:bf:54:3e:64:e9:bf:29:2d:95: b2:5f:7b:04:b9:3c:38:db:a3:4d:46:54:3a:46:06:3c:97:80: e9:2b:54:e2:e5:37:e5:64:68:ab:b3:97:74:5c:ff:ee:6e:3a: a6:a3:f2:bf:ca:24:a4:78:45:2d:cf:f9:f7:f5:06:b4:03:29: 42:b8:aa:6e:ac:73:e7:fa:22:68:d0:0f:12:b0:ee:38:ee:65: de:68:b8:8e:e5:52:8d:e4:94:bc:de:b7:0c:c9:49:4e:5a:78: cf:3b:55:f0:d5:c4:72:2e:d8:64:3b:0e:b9:68:00:ad:7d:0b: 3b:6f:dc:f4:1d:91:20:b5:05:a4:a0:47:04:33:b3:43:ab:61: 82:63:24:d9:8a:6d:9e:94:31:62:56:f9:ed:1e:38:1f:54:e6: 70:b8:0d:33:4f:4e:79:ae:3f:a2:7a:9d:a4:f4:fa:60:81:c4: 11:8b:31:a1:fe:25:b9:44:99:67:a8:b3:95:d5:c4:37:50:ba: 72:48:66:76:4b:9c:7b:3c:99:00:c2:ac:29:1a:1b:40:e3:43: 2a:92:a4:04:d2:ab:fb:d9:e5:64:88:15:61:1e:77:31:2d:52: bb:19:90:82 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICAkAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzA5 QzJBOTQzQjI4REMwODU4QzM5QjkyMDhBMTYwOUMwOTczRTQ5QTAeFw0yNTA0MjQw ODUwMjdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEQ4NjhDQzcwMDNDOEMx MEY0MERFNzYwNzRERUQ3QjhBNkU1RDJBOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBrykMuih0Cp1LTE2AuU8Pv1aHQSpEDNcreDjQLnmovbx5Rnk+ msOd35gyj1/AuuQkEudi1jpmrEbBltdkc/g6klsbKsfRPyywStCu1awPHMVEFaqd uiuHT07YRupKDv5llWYa54vcIUwVljf/YdQXD30gARDyn6hgGnKvuZT76t2w5mjU cfjVuf2Uqb6DRI9g2YTHnZ63BKybH6uXdmSHEQ3O49FTZLEDy/Du/Sz82kqhyUSk R6aiJ3UCd378h57/Yemps0wwv6+NG5Mb7Ze2b1LGovWbbVCiNfGfhrl8fbek1JXW wHZ9B6W/NWVwOb9kqYYxZF0q+eSAbxZMZSalAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU2GjMcAPIwQ9A3nYHTe17im5dKpkwHwYDVR0jBBgwFoAUMJwqlDso3AhYw5uS CKFgnAlz5JowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIw L01Kd3FsRHNvM0FoWXc1dVNDS0ZnbkFsejVKby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvTUp3cWxEc28zQWhZdzV1U0NLRmduQWx6NUpvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIwLzJHak1jQVBJd1E5QTNu WUhUZTE3aW01ZEtway5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADKLikwDQYJKoZIhvcNAQELBQADggEBANHO9BNdc76JQwlpQGEh6mOXLEh6anGS YNapS79UPmTpvyktlbJfewS5PDjbo01GVDpGBjyXgOkrVOLlN+VkaKuzl3Rc/+5u Oqaj8r/KJKR4RS3P+ff1BrQDKUK4qm6sc+f6ImjQDxKw7jjuZd5ouI7lUo3klLze twzJSU5aeM87VfDVxHIu2GQ7DrloAK19Cztv3PQdkSC1BaSgRwQzs0OrYYJjJNmK bZ6UMWJW+e0eOB9U5nC4DTNPTnmuP6J6naT0+mCBxBGLMaH+JblEmWeos5XVxDdQ unJIZnZLnHs8mQDCrCkaG0DjQyqSpATSq/vZ5WSIFWEedzEtUrsZkII= -----END CERTIFICATE-----Generated at Sat Apr 26 14:29:08 2025 by rpki-client