$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/621/0p4OnuorqVemfKiNz4jb1ANy_VQ.roa File: 0p4OnuorqVemfKiNz4jb1ANy_VQ.roa (raw, json) Hash identifier: XoSGiFq8O6Q57IRgvp7PfupeNUc2/oaY3bSF8APHxvs= Subject key identifier: D2:9E:0E:9E:EA:2B:A9:57:A6:7C:A8:8D:CF:88:DB:D4:03:72:FD:54 Certificate issuer: /CN=E56DA4C275F3CCC92D086202A1EDA7783F0C3D0D Certificate serial: 1F3B Authority key identifier: E5:6D:A4:C2:75:F3:CC:C9:2D:08:62:02:A1:ED:A7:78:3F:0C:3D:0D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5W2kwnXzzMktCGICoe2neD8MPQ0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/0p4OnuorqVemfKiNz4jb1ANy_VQ.roa Signing time: Fri 17 Jan 2025 01:30:06 +0000 ROA not before: Fri 17 Jan 2025 01:30:06 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 138915 IP address blocks: 27.0.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/5W2kwnXzzMktCGICoe2neD8MPQ0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/5W2kwnXzzMktCGICoe2neD8MPQ0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5W2kwnXzzMktCGICoe2neD8MPQ0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7995 (0x1f3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E56DA4C275F3CCC92D086202A1EDA7783F0C3D0D Validity Not Before: Jan 17 01:30:06 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=D29E0E9EEA2BA957A67CA88DCF88DBD40372FD54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d4:a4:3c:81:b3:a4:5e:81:cb:39:ec:69:1c: 43:b2:28:9f:9c:7e:74:2a:86:6b:dd:ab:d3:11:c3: c4:8f:17:a1:50:bb:f3:04:bb:10:63:1e:dc:b4:8b: e6:09:cf:d5:48:9e:7e:c9:3d:ef:dc:3f:49:03:57: 69:2b:c3:d1:89:e8:eb:72:25:4e:0e:be:0c:d2:0a: 52:fc:65:3d:41:85:21:89:e6:e5:8e:a6:2c:14:56: 45:62:7b:a4:0f:c3:f7:99:e6:ab:52:a3:3a:f4:15: d6:43:73:53:e0:c1:ef:99:f0:43:e2:63:c7:75:19: 67:49:9e:60:bf:1c:df:e7:23:b4:5a:50:f1:65:30: b6:ca:3e:ee:58:03:65:07:db:f0:81:68:46:46:28: 6b:34:97:62:7c:99:1e:0a:41:b9:fa:c8:20:62:75: 32:b0:55:74:84:76:e0:0e:7a:a2:94:94:57:76:5c: ff:83:ee:b2:b5:68:7d:21:66:1e:e4:09:86:3e:eb: e4:20:5d:27:65:85:74:b2:43:70:c8:8c:ca:32:da: 99:a7:86:3b:74:32:5e:bc:6b:18:56:e6:f5:06:e0: 51:81:59:12:61:3a:a3:dd:c7:f4:9d:66:ea:e6:1f: 98:7e:58:20:8c:bf:d4:09:5c:12:db:41:af:36:76: f4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:9E:0E:9E:EA:2B:A9:57:A6:7C:A8:8D:CF:88:DB:D4:03:72:FD:54 X509v3 Authority Key Identifier: keyid:E5:6D:A4:C2:75:F3:CC:C9:2D:08:62:02:A1:ED:A7:78:3F:0C:3D:0D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/5W2kwnXzzMktCGICoe2neD8MPQ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5W2kwnXzzMktCGICoe2neD8MPQ0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/0p4OnuorqVemfKiNz4jb1ANy_VQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.0.133.0/24 Signature Algorithm: sha256WithRSAEncryption 33:df:1b:c2:16:e0:c8:f8:31:fb:a5:d6:fb:5e:78:c0:0b:02: c2:25:6a:9b:60:3b:2f:6b:67:e3:35:7f:07:76:4f:c4:35:d9: ac:29:53:1b:d3:94:73:04:d9:48:3d:4a:2a:eb:35:12:a4:9d: cb:74:93:80:89:19:bf:24:fe:61:72:aa:65:07:3d:37:2c:a4: e8:dc:15:61:58:c7:00:63:ae:0d:72:67:b5:4b:b2:7b:9f:62: 6c:30:ef:af:38:58:9f:c1:be:d9:bb:4d:64:c9:e1:f8:99:c4: 8f:ea:ac:3d:ce:08:75:44:7c:1e:b0:74:55:28:9c:8f:b7:4c: fe:66:09:3e:40:5d:58:29:dd:e7:65:05:8d:ca:34:c1:fa:bc: d1:e5:9f:11:1d:bf:58:7e:e1:0f:6a:d8:85:69:7d:51:fc:db: ca:14:12:d8:e3:64:0b:8b:0e:72:80:5d:31:4b:64:73:00:eb: f2:be:53:06:ad:ae:67:4c:85:47:83:c3:f6:0a:03:35:35:e7: da:db:6b:77:dd:fe:29:74:67:77:1e:f8:b0:f0:7e:b2:8a:0a: e6:a9:87:65:d4:eb:3a:b0:ea:da:72:56:4d:5c:40:02:c6:79: ad:5c:4d:73:28:52:2d:dd:fd:70:24:a8:81:df:de:d7:7e:c3: 61:c4:a2:e9 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHzswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTU2 REE0QzI3NUYzQ0NDOTJEMDg2MjAyQTFFREE3NzgzRjBDM0QwRDAeFw0yNTAxMTcw MTMwMDZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEQyOUUwRTlFRUEyQkE5 NTdBNjdDQTg4RENGODhEQkQ0MDM3MkZENTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCd1KQ8gbOkXoHLOexpHEOyKJ+cfnQqhmvdq9MRw8SPF6FQu/ME uxBjHty0i+YJz9VInn7JPe/cP0kDV2krw9GJ6OtyJU4OvgzSClL8ZT1BhSGJ5uWO piwUVkVie6QPw/eZ5qtSozr0FdZDc1Pgwe+Z8EPiY8d1GWdJnmC/HN/nI7RaUPFl MLbKPu5YA2UH2/CBaEZGKGs0l2J8mR4KQbn6yCBidTKwVXSEduAOeqKUlFd2XP+D 7rK1aH0hZh7kCYY+6+QgXSdlhXSyQ3DIjMoy2pmnhjt0Ml68axhW5vUG4FGBWRJh OqPdx/SdZurmH5h+WCCMv9QJXBLbQa82dvQzAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU0p4OnuorqVemfKiNz4jb1ANy/VQwHwYDVR0jBBgwFoAU5W2kwnXzzMktCGIC oe2neD8MPQ0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIx LzVXMmt3blh6ek1rdENHSUNvZTJuZUQ4TVBRMC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvNVcya3duWHp6TWt0Q0dJQ29lMm5lRDhNUFEwLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIxLzBwNE9udW9ycVZlbWZL aU56NGpiMUFOeV9WUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAbAIUwDQYJKoZIhvcNAQELBQADggEBADPfG8IW4Mj4Mful1vteeMALAsIlaptg Oy9rZ+M1fwd2T8Q12awpUxvTlHME2Ug9SirrNRKknct0k4CJGb8k/mFyqmUHPTcs pOjcFWFYxwBjrg1yZ7VLsnufYmww7684WJ/Bvtm7TWTJ4fiZxI/qrD3OCHVEfB6w dFUonI+3TP5mCT5AXVgp3edlBY3KNMH6vNHlnxEdv1h+4Q9q2IVpfVH828oUEtjj ZAuLDnKAXTFLZHMA6/K+UwatrmdMhUeDw/YKAzU159rba3fd/il0Z3ce+LDwfrKK Cuaph2XU6zqw6tpyVk1cQALGea1cTXMoUi3d/XAkqIHf3td+w2HEouk= -----END CERTIFICATE-----Generated at Sat Apr 26 13:12:40 2025 by rpki-client