$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/623/j_aknzHBQsWS4GSGe35pMbQYRKU.roa File: j_aknzHBQsWS4GSGe35pMbQYRKU.roa (raw, json) Hash identifier: Bc7SrmcT1xsSZXF1Pu896OMrlBE2ImckzSlz8J4OFd0= Subject key identifier: 8F:F6:A4:9F:31:C1:42:C5:92:E0:64:86:7B:7E:69:31:B4:18:44:A5 Certificate issuer: /CN=DEBFC900EDC34F81DA4827F1F9F63D04E0E2F756 Certificate serial: 06DC Authority key identifier: DE:BF:C9:00:ED:C3:4F:81:DA:48:27:F1:F9:F6:3D:04:E0:E2:F7:56 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/j_aknzHBQsWS4GSGe35pMbQYRKU.roa Signing time: Tue 01 Apr 2025 09:30:05 +0000 ROA not before: Tue 01 Apr 2025 09:30:05 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 58834 IP address blocks: 119.2.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/3r_JAO3DT4HaSCfx-fY9BODi91Y.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/3r_JAO3DT4HaSCfx-fY9BODi91Y.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 14:36:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1756 (0x6dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEBFC900EDC34F81DA4827F1F9F63D04E0E2F756 Validity Not Before: Apr 1 09:30:05 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=8FF6A49F31C142C592E064867B7E6931B41844A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:71:24:76:bd:a8:eb:d2:f6:38:5b:78:ab:c8: d5:d4:76:ca:9a:4a:c3:30:3e:4e:0e:e0:ef:02:75: 33:85:16:98:1f:6e:1e:d3:5c:f2:6b:55:c8:5a:30: 64:b0:fb:64:ff:aa:46:9c:ed:17:2b:9d:b3:af:a3: c3:17:45:21:ad:d6:d6:ce:b4:fe:63:ad:ad:0d:be: 12:d3:be:d7:83:05:13:0b:22:34:a5:23:10:ad:4c: 71:40:94:30:bc:91:16:a7:eb:9d:b9:bd:60:f3:ff: dd:b2:4e:22:f1:1a:2c:c0:24:90:66:36:86:fd:a0: 70:93:92:1b:09:40:f1:85:fe:73:53:62:0f:ea:b9: 73:08:2e:28:5e:fc:dc:02:50:b8:52:ae:ba:64:bd: 16:b8:e7:d0:2e:9b:f7:d6:19:93:ad:99:d9:40:7e: 6d:71:5c:bb:0e:02:b0:f2:2a:42:bb:9e:5c:86:42: 16:6b:f7:51:e3:d3:fd:ba:be:95:95:78:7f:a3:ee: 4b:1f:29:67:32:7d:a8:01:e3:36:18:02:6d:b6:1d: e6:0f:bb:6e:27:10:6b:0a:37:a4:db:e5:46:2e:ee: 7c:9f:5b:72:d2:f8:84:db:3d:2c:b4:ff:38:f4:a1: 44:85:42:be:79:24:7b:56:3a:c6:3b:63:43:8e:7e: b3:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F6:A4:9F:31:C1:42:C5:92:E0:64:86:7B:7E:69:31:B4:18:44:A5 X509v3 Authority Key Identifier: keyid:DE:BF:C9:00:ED:C3:4F:81:DA:48:27:F1:F9:F6:3D:04:E0:E2:F7:56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/3r_JAO3DT4HaSCfx-fY9BODi91Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/j_aknzHBQsWS4GSGe35pMbQYRKU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.2.255.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:c6:31:b7:7f:cc:7b:c7:6a:c8:3a:45:d0:35:94:16:12:45: cf:ca:4b:0e:ef:cb:f9:7c:88:ad:2f:78:3a:07:b2:ec:3a:eb: 4a:d6:e3:98:65:91:44:b6:9d:73:a7:5c:43:65:71:11:3c:7a: 9d:a3:cc:d7:97:14:27:83:7c:55:19:57:f5:b6:30:9e:c0:82: 25:1c:54:84:7b:3b:26:63:c6:94:b8:c5:eb:14:ea:79:c6:c1: ff:3f:a9:13:36:5d:99:67:ef:d7:86:d9:91:18:d5:8d:0e:31: cb:02:41:4a:59:44:c1:6a:08:6b:d5:a5:dc:61:8d:8b:d3:54: 77:3a:f8:25:19:5b:5d:0c:1c:9e:d4:3d:9f:fc:0a:f0:e6:ca: b2:7c:26:5d:a2:57:09:85:28:45:b7:25:39:a5:78:9e:70:47: 06:64:a0:43:93:3f:aa:ed:66:93:9a:aa:b9:94:75:ee:f0:ae: ed:6f:7e:6e:8e:9d:38:20:7f:25:3c:d4:4b:1b:9a:08:d3:63: e8:3a:45:70:2e:2d:b2:d3:32:35:f4:44:3f:8a:3a:ee:bc:8e: b7:ae:cb:d7:77:d6:e1:ae:bc:8b:cd:fb:33:01:f1:47:e4:39: e7:45:fc:14:bc:66:de:f0:ca:36:b2:68:c4:d0:e4:f2:b7:dc: 8e:b5:c8:4e -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICBtwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREVC RkM5MDBFREMzNEY4MURBNDgyN0YxRjlGNjNEMDRFMEUyRjc1NjAeFw0yNTA0MDEw OTMwMDVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDhGRjZBNDlGMzFDMTQy QzU5MkUwNjQ4NjdCN0U2OTMxQjQxODQ0QTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkcSR2vajr0vY4W3iryNXUdsqaSsMwPk4O4O8CdTOFFpgfbh7T XPJrVchaMGSw+2T/qkac7RcrnbOvo8MXRSGt1tbOtP5jra0NvhLTvteDBRMLIjSl IxCtTHFAlDC8kRan6525vWDz/92yTiLxGizAJJBmNob9oHCTkhsJQPGF/nNTYg/q uXMILihe/NwCULhSrrpkvRa459Aum/fWGZOtmdlAfm1xXLsOArDyKkK7nlyGQhZr 91Hj0/26vpWVeH+j7ksfKWcyfagB4zYYAm22HeYPu24nEGsKN6Tb5UYu7nyfW3LS +ITbPSy0/zj0oUSFQr55JHtWOsY7Y0OOfrPvAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUj/aknzHBQsWS4GSGe35pMbQYRKUwHwYDVR0jBBgwFoAU3r/JAO3DT4HaSCfx +fY9BODi91YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIz LzNyX0pBTzNEVDRIYVNDZngtZlk5Qk9EaTkxWS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvM3JfSkFPM0RUNEhhU0NmeC1mWTlCT0RpOTFZLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIzL2pfYWtuekhCUXNXUzRH U0dlMzVwTWJRWVJLVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAB3Av8wDQYJKoZIhvcNAQELBQADggEBAGrGMbd/zHvHasg6RdA1lBYSRc/KSw7v y/l8iK0veDoHsuw660rW45hlkUS2nXOnXENlcRE8ep2jzNeXFCeDfFUZV/W2MJ7A giUcVIR7OyZjxpS4xesU6nnGwf8/qRM2XZln79eG2ZEY1Y0OMcsCQUpZRMFqCGvV pdxhjYvTVHc6+CUZW10MHJ7UPZ/8CvDmyrJ8Jl2iVwmFKEW3JTmleJ5wRwZkoEOT P6rtZpOaqrmUde7wru1vfm6OnTggfyU81EsbmgjTY+g6RXAuLbLTMjX0RD+KOu68 jreuy9d31uGuvIvN+zMB8UfkOedF/BS8Zt7wyjayaMTQ5PK33I61yE4= -----END CERTIFICATE-----Generated at Sat Apr 26 14:31:51 2025 by rpki-client