$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/620/bLoMS5F7WEVO1TrATAHo69-sLmU.roa File: bLoMS5F7WEVO1TrATAHo69-sLmU.roa (raw, json) Hash identifier: jj9rU/19HityI5gOVZgVafYfRGECZo1chPDBmDx8hY0= Subject key identifier: 6C:BA:0C:4B:91:7B:58:45:4E:D5:3A:C0:4C:01:E8:EB:DF:AC:2E:65 Certificate issuer: /CN=309C2A943B28DC0858C39B9208A1609C0973E49A Certificate serial: 0231 Authority key identifier: 30:9C:2A:94:3B:28:DC:08:58:C3:9B:92:08:A1:60:9C:09:73:E4:9A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/bLoMS5F7WEVO1TrATAHo69-sLmU.roa Signing time: Thu 24 Apr 2025 02:55:04 +0000 ROA not before: Thu 24 Apr 2025 02:55:04 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 24413 IP address blocks: 202.46.33.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 14:36:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 561 (0x231) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=309C2A943B28DC0858C39B9208A1609C0973E49A Validity Not Before: Apr 24 02:55:04 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=6CBA0C4B917B58454ED53AC04C01E8EBDFAC2E65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:34:8d:98:cb:0c:80:90:7f:51:da:34:91:f1: 1b:7a:8d:3d:f4:84:88:35:51:bf:9f:84:1f:f7:d5: 8e:79:f0:4d:4c:77:a4:7c:eb:28:0b:e7:13:e7:fc: 51:27:9f:84:83:59:cf:c2:4a:d3:48:7d:cc:96:1d: 30:62:9f:a6:22:0a:d2:43:52:f8:47:54:ed:df:4d: c9:1f:10:17:9d:4c:f9:c5:5d:f6:34:cb:ed:32:45: e2:bd:0c:90:15:9e:16:38:19:f6:3b:7d:31:27:5f: 35:6e:58:3e:03:b7:fd:40:7d:f4:c0:b0:50:66:a2: d9:18:b1:af:bc:dc:3a:bc:41:90:1b:d9:64:4f:e2: 6c:f9:02:d1:c4:4a:8a:c2:1a:2b:64:27:ad:c9:c8: bc:be:09:32:c4:22:41:3b:1d:e8:87:f5:5a:95:60: 1f:31:48:4e:bf:be:61:77:66:11:8b:cb:63:c1:43: d9:15:14:aa:4d:5d:80:80:9b:17:8e:f2:39:4e:38: 7e:29:2f:01:49:f7:a0:33:ae:a4:24:46:fd:49:ae: 14:ec:4a:b4:f9:48:42:8e:e8:5f:22:b4:b4:7c:c2: 42:62:da:a4:9a:39:3c:67:72:40:b7:4a:52:56:f5: bb:bf:0e:ca:9a:3d:c5:59:13:48:40:b0:6f:3c:db: 5e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:BA:0C:4B:91:7B:58:45:4E:D5:3A:C0:4C:01:E8:EB:DF:AC:2E:65 X509v3 Authority Key Identifier: keyid:30:9C:2A:94:3B:28:DC:08:58:C3:9B:92:08:A1:60:9C:09:73:E4:9A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/bLoMS5F7WEVO1TrATAHo69-sLmU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.46.33.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:42:7e:87:c9:ca:d4:16:c9:58:4e:69:05:b5:ee:49:95:2e: 71:bd:af:bb:52:ab:44:8b:e9:db:4c:c5:ad:92:25:c0:fc:e9: ff:60:40:5d:48:27:38:15:80:f6:ae:41:51:ae:1d:b1:cb:96: 25:c6:aa:8d:0f:f0:1d:1c:25:7f:94:54:22:16:c0:e9:b5:ff: c7:5c:07:80:6d:42:b1:10:8d:19:c9:1a:fb:08:0d:70:62:30: dc:00:ff:83:7d:a8:a2:09:9b:65:52:c5:d6:71:c5:7e:da:aa: f7:1d:fb:74:2a:c6:2f:56:c1:df:47:52:d8:61:31:eb:80:84: 03:13:5d:b7:80:3e:22:6e:0e:f6:6b:79:17:4e:9b:e3:34:9d: 47:3a:59:a6:0f:b5:56:9c:e3:32:f3:97:1a:f5:2c:3e:a1:81: 31:14:3f:bc:c7:19:3e:3d:d8:87:ae:81:0f:98:31:3b:3c:2d: b7:a1:b8:16:69:a7:c8:7c:01:d6:af:ab:fe:a9:63:b3:34:61: 6e:90:8b:e3:6e:02:7a:5d:31:7f:79:fc:c6:33:98:15:7a:65: 50:c0:93:29:08:c0:43:66:0f:25:d4:d8:b2:15:40:9e:6d:ff: 97:f3:8e:c0:63:7b:17:9c:9c:3e:5c:23:68:b1:f9:49:a5:12: b4:45:5f:d0 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICAjEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzA5 QzJBOTQzQjI4REMwODU4QzM5QjkyMDhBMTYwOUMwOTczRTQ5QTAeFw0yNTA0MjQw MjU1MDRaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDZDQkEwQzRCOTE3QjU4 NDU0RUQ1M0FDMDRDMDFFOEVCREZBQzJFNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXNI2YywyAkH9R2jSR8Rt6jT30hIg1Ub+fhB/31Y558E1Md6R8 6ygL5xPn/FEnn4SDWc/CStNIfcyWHTBin6YiCtJDUvhHVO3fTckfEBedTPnFXfY0 y+0yReK9DJAVnhY4GfY7fTEnXzVuWD4Dt/1AffTAsFBmotkYsa+83Dq8QZAb2WRP 4mz5AtHESorCGitkJ63JyLy+CTLEIkE7HeiH9VqVYB8xSE6/vmF3ZhGLy2PBQ9kV FKpNXYCAmxeO8jlOOH4pLwFJ96AzrqQkRv1JrhTsSrT5SEKO6F8itLR8wkJi2qSa OTxnckC3SlJW9bu/DsqaPcVZE0hAsG882161AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUbLoMS5F7WEVO1TrATAHo69+sLmUwHwYDVR0jBBgwFoAUMJwqlDso3AhYw5uS CKFgnAlz5JowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIw L01Kd3FsRHNvM0FoWXc1dVNDS0ZnbkFsejVKby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvTUp3cWxEc28zQWhZdzV1U0NLRmduQWx6NUpvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIwL2JMb01TNUY3V0VWTzFU ckFUQUhvNjktc0xtVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADKLiEwDQYJKoZIhvcNAQELBQADggEBAApCfofJytQWyVhOaQW17kmVLnG9r7tS q0SL6dtMxa2SJcD86f9gQF1IJzgVgPauQVGuHbHLliXGqo0P8B0cJX+UVCIWwOm1 /8dcB4BtQrEQjRnJGvsIDXBiMNwA/4N9qKIJm2VSxdZxxX7aqvcd+3Qqxi9Wwd9H UthhMeuAhAMTXbeAPiJuDvZreRdOm+M0nUc6WaYPtVac4zLzlxr1LD6hgTEUP7zH GT492IeugQ+YMTs8LbehuBZpp8h8Adavq/6pY7M0YW6Qi+NuAnpdMX95/MYzmBV6 ZVDAkykIwENmDyXU2LIVQJ5t/5fzjsBjexecnD5cI2ix+UmlErRFX9A= -----END CERTIFICATE-----Generated at Sat Apr 26 14:29:18 2025 by rpki-client