$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/620/wM98mz6k7POB_T0MejRXUHUVaGo.roa File: wM98mz6k7POB_T0MejRXUHUVaGo.roa (raw, json) Hash identifier: WNcoKWTZ1mOgrWS4oU63OxebnJDM9+7UOuhg2pg9Irc= Subject key identifier: C0:CF:7C:9B:3E:A4:EC:F3:81:FD:3D:0C:7A:34:57:50:75:15:68:6A Certificate issuer: /CN=309C2A943B28DC0858C39B9208A1609C0973E49A Certificate serial: 01DB Authority key identifier: 30:9C:2A:94:3B:28:DC:08:58:C3:9B:92:08:A1:60:9C:09:73:E4:9A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/wM98mz6k7POB_T0MejRXUHUVaGo.roa Signing time: Mon 07 Apr 2025 04:01:51 +0000 ROA not before: Mon 07 Apr 2025 04:01:51 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 24413 IP address blocks: 114.28.232.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 14:36:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 475 (0x1db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=309C2A943B28DC0858C39B9208A1609C0973E49A Validity Not Before: Apr 7 04:01:51 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=C0CF7C9B3EA4ECF381FD3D0C7A3457507515686A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c2:6b:21:b5:e4:ad:dd:fa:02:6f:74:5a:51: c6:d3:29:17:fd:53:f0:6f:67:66:e6:30:cd:0a:e5: f2:68:60:38:f2:8a:f2:42:07:88:12:93:32:7d:e8: d1:30:64:22:a2:00:d4:ad:bd:00:4f:9d:7b:e6:18: 8c:d4:c3:c8:e1:5d:87:0a:c8:ab:c0:f0:d4:e1:97: 54:e1:bb:4d:69:d2:9b:c8:03:2e:22:d2:a4:0b:91: 4c:c0:07:d1:9c:84:c7:1c:14:f6:6f:80:5b:9e:30: 67:e8:a8:aa:62:65:7b:40:75:15:f0:e1:9f:4b:a5: 80:52:de:80:e9:04:22:1e:2f:ff:7e:cd:a0:3c:b6: 7a:2f:45:4e:b6:5a:31:7f:c3:c7:af:99:70:79:ad: af:20:b3:1e:34:46:ab:44:0f:c9:97:07:4b:71:fb: ca:54:7e:92:3a:0b:a6:48:5b:fe:32:48:10:26:8b: 4f:9e:91:59:f9:e8:49:3e:54:f4:85:99:44:80:ab: 7e:9d:c2:7d:63:d9:1b:fe:75:e7:56:82:ac:65:ad: 98:0e:d1:af:ae:51:ef:ed:4c:f1:bc:5c:7d:3b:b9: 48:f3:7c:bf:4f:45:ad:41:c2:f0:25:5e:30:9a:c3: 09:44:b9:56:2f:92:22:b8:95:27:f9:3e:23:ce:04: eb:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:CF:7C:9B:3E:A4:EC:F3:81:FD:3D:0C:7A:34:57:50:75:15:68:6A X509v3 Authority Key Identifier: keyid:30:9C:2A:94:3B:28:DC:08:58:C3:9B:92:08:A1:60:9C:09:73:E4:9A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/wM98mz6k7POB_T0MejRXUHUVaGo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.28.232.0/24 Signature Algorithm: sha256WithRSAEncryption 95:18:f2:69:7e:71:14:ec:b1:a4:23:2c:ef:99:12:9d:9d:79: 0d:be:31:e4:19:25:34:70:dc:c9:ae:b2:b3:34:2f:14:64:65: 49:69:a9:27:2b:72:0a:53:4a:16:48:71:85:74:f8:ab:8f:90: a9:98:f6:0f:11:b5:ea:03:e6:6e:4f:2b:2f:41:9f:f3:f2:41: e6:5a:c4:57:79:38:a6:f5:29:22:ef:7c:52:e5:dd:be:81:a4: 0f:73:cb:26:07:8f:41:bd:14:48:6e:a7:74:be:72:c8:4e:1b: 83:42:25:fd:92:08:5c:12:41:ba:11:20:f8:75:9d:cc:b4:52: 1f:ab:a7:a8:3c:51:a8:84:5f:6e:72:33:fa:30:2f:40:15:c8: 31:be:c3:ce:26:71:31:52:ef:0e:51:69:c1:2d:c8:38:56:34: 99:f2:2c:00:1c:31:d7:d1:f1:42:b1:f7:ca:b8:9c:72:e0:22: ea:2b:07:72:2c:a3:44:ab:fa:51:f9:2a:02:b6:85:be:0a:f4: 24:d7:ef:d5:e3:75:37:ed:fd:d5:12:76:6f:19:f2:a0:82:c4: 0e:49:7f:ce:9f:dc:ef:58:97:38:90:ec:24:52:4f:5f:42:17: a8:36:2c:7e:43:5b:aa:55:b6:54:43:d4:92:b9:ad:c3:46:cc: 69:d6:2d:2e -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICAdswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzA5 QzJBOTQzQjI4REMwODU4QzM5QjkyMDhBMTYwOUMwOTczRTQ5QTAeFw0yNTA0MDcw NDAxNTFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEMwQ0Y3QzlCM0VBNEVD RjM4MUZEM0QwQzdBMzQ1NzUwNzUxNTY4NkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuwmshteSt3foCb3RaUcbTKRf9U/BvZ2bmMM0K5fJoYDjyivJC B4gSkzJ96NEwZCKiANStvQBPnXvmGIzUw8jhXYcKyKvA8NThl1Thu01p0pvIAy4i 0qQLkUzAB9GchMccFPZvgFueMGfoqKpiZXtAdRXw4Z9LpYBS3oDpBCIeL/9+zaA8 tnovRU62WjF/w8evmXB5ra8gsx40RqtED8mXB0tx+8pUfpI6C6ZIW/4ySBAmi0+e kVn56Ek+VPSFmUSAq36dwn1j2Rv+dedWgqxlrZgO0a+uUe/tTPG8XH07uUjzfL9P Ra1BwvAlXjCawwlEuVYvkiK4lSf5PiPOBOvzAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUwM98mz6k7POB/T0MejRXUHUVaGowHwYDVR0jBBgwFoAUMJwqlDso3AhYw5uS CKFgnAlz5JowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIw L01Kd3FsRHNvM0FoWXc1dVNDS0ZnbkFsejVKby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvTUp3cWxEc28zQWhZdzV1U0NLRmduQWx6NUpvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIwL3dNOThtejZrN1BPQl9U ME1lalJYVUhVVmFHby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAByHOgwDQYJKoZIhvcNAQELBQADggEBAJUY8ml+cRTssaQjLO+ZEp2deQ2+MeQZ JTRw3MmusrM0LxRkZUlpqScrcgpTShZIcYV0+KuPkKmY9g8RteoD5m5PKy9Bn/Py QeZaxFd5OKb1KSLvfFLl3b6BpA9zyyYHj0G9FEhup3S+cshOG4NCJf2SCFwSQboR IPh1ncy0Uh+rp6g8UaiEX25yM/owL0AVyDG+w84mcTFS7w5RacEtyDhWNJnyLAAc MdfR8UKx98q4nHLgIuorB3Iso0Sr+lH5KgK2hb4K9CTX79XjdTft/dUSdm8Z8qCC xA5Jf86f3O9YlziQ7CRST19CF6g2LH5DW6pVtlRD1JK5rcNGzGnWLS4= -----END CERTIFICATE-----Generated at Sat Apr 26 14:31:37 2025 by rpki-client