$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/65/T1qJkMelAH5BDDXM2O_7G3hQtek.roa File: T1qJkMelAH5BDDXM2O_7G3hQtek.roa (raw, json) Hash identifier: 6Dgu5HFLUyjuGDgvq7uDKM/uTcIWm6vVC7Nt5rbPCSs= Subject key identifier: 4F:5A:89:90:C7:A5:00:7E:41:0C:35:CC:D8:EF:FB:1B:78:50:B5:E9 Certificate issuer: /CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9 Certificate serial: 11EC Authority key identifier: 98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/T1qJkMelAH5BDDXM2O_7G3hQtek.roa Signing time: Sat 26 Apr 2025 13:19:05 +0000 ROA not before: Sat 26 Apr 2025 13:19:05 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 23853 IP address blocks: 211.147.92.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 03:07:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4588 (0x11ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9 Validity Not Before: Apr 26 13:19:05 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=4F5A8990C7A5007E410C35CCD8EFFB1B7850B5E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d0:90:ce:22:70:f8:49:40:18:73:38:c0:1a: 4b:e0:63:4f:09:59:10:29:7e:e7:cb:97:f6:78:8e: 83:db:e6:0d:5e:52:6c:57:bc:5d:6f:5c:fb:31:97: 2b:0a:56:ad:4c:54:76:53:d9:75:11:f2:6d:9d:18: 51:fe:11:44:15:a9:30:8d:03:c0:31:62:55:66:90: eb:fd:de:77:6e:5b:fd:24:4b:74:71:82:92:b3:93: 12:b3:11:05:5a:0a:c7:a0:c2:ad:00:d4:ce:83:b8: 4f:e5:24:0b:3d:70:b1:39:52:cf:d9:4d:bd:32:87: 58:1d:9b:8a:f2:86:29:d7:65:1b:57:cb:f7:a1:1c: a1:2c:b1:b3:91:21:39:0d:ca:e4:86:d9:c6:ea:d6: a0:1d:0f:48:64:7f:1e:97:4b:c0:78:d7:48:c2:79: 28:ff:b1:01:fb:bd:82:65:ab:0e:e8:eb:e5:6f:aa: c6:21:4a:98:e8:28:fc:07:d2:bd:86:b4:86:b1:51: 5d:10:a3:36:15:fc:94:09:d1:94:c0:94:30:4d:a9: 6e:d7:a0:f0:a1:9c:a4:fe:a9:ee:d8:4b:f5:cf:d5: 54:be:91:a0:3f:e7:fe:b5:48:5a:da:e5:c6:29:d7: 4f:61:cb:df:0a:ac:a6:df:93:b9:6e:d1:d5:eb:19: cb:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:5A:89:90:C7:A5:00:7E:41:0C:35:CC:D8:EF:FB:1B:78:50:B5:E9 X509v3 Authority Key Identifier: keyid:98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/T1qJkMelAH5BDDXM2O_7G3hQtek.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.147.92.0/24 Signature Algorithm: sha256WithRSAEncryption de:fe:fc:cb:7b:e0:02:63:1a:7d:b4:1a:6c:f5:44:ae:01:de: 8b:1a:fa:93:3f:4f:16:d2:32:31:d4:91:5e:c6:8b:48:00:d8: 6d:aa:4b:83:0a:04:4d:78:d8:0d:6c:d9:9b:91:e5:2a:eb:9a: aa:89:ea:ec:16:70:95:3a:7d:61:e0:c7:65:8e:fc:47:1c:91: a6:d8:f6:83:66:8b:4e:8a:a1:82:d4:d5:24:b7:4b:05:e4:08: 46:53:f5:81:c0:a0:fb:d7:5e:f2:96:bb:29:12:f4:e3:f4:17: f3:af:59:f4:7b:dd:43:d0:3e:cb:03:3f:48:08:95:e6:4d:0a: 32:38:23:86:1e:d7:82:0e:e1:96:1c:8d:9b:e7:a7:b1:6e:37: 78:a7:78:79:61:ab:3f:90:15:ed:a3:e7:4e:a8:89:f7:13:fc: ee:36:cf:4a:25:68:e5:1d:1e:17:10:c0:5d:05:c7:dd:0e:e5: 9e:6c:75:0b:bc:6b:ec:9d:84:e7:43:10:e1:de:6d:14:f1:0c: 43:f2:0f:a0:a8:7f:8d:35:51:9a:f6:53:e3:6a:f0:26:0a:23: 31:8d:83:4a:74:5f:ba:b8:73:38:9e:98:e8:2e:a9:44:cb:ca: 76:a7:f0:8e:37:51:60:1f:91:9d:da:48:9f:f5:af:7f:7c:9c: 2f:09:24:88 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICEewwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTgy NEM1NTUyMjhCMjhCNjk4RERFNzdCQzFBREQwRTI4MDdCODZCOTAeFw0yNTA0MjYx MzE5MDVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDRGNUE4OTkwQzdBNTAw N0U0MTBDMzVDQ0Q4RUZGQjFCNzg1MEI1RTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCo0JDOInD4SUAYczjAGkvgY08JWRApfufLl/Z4joPb5g1eUmxX vF1vXPsxlysKVq1MVHZT2XUR8m2dGFH+EUQVqTCNA8AxYlVmkOv93nduW/0kS3Rx gpKzkxKzEQVaCsegwq0A1M6DuE/lJAs9cLE5Us/ZTb0yh1gdm4ryhinXZRtXy/eh HKEssbORITkNyuSG2cbq1qAdD0hkfx6XS8B410jCeSj/sQH7vYJlqw7o6+VvqsYh SpjoKPwH0r2GtIaxUV0QozYV/JQJ0ZTAlDBNqW7XoPChnKT+qe7YS/XP1VS+kaA/ 5/61SFra5cYp109hy98KrKbfk7lu0dXrGctlAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUT1qJkMelAH5BDDXM2O/7G3hQtekwHwYDVR0jBBgwFoAUmCTFVSKLKLaY3ed7 wa3Q4oB7hrkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjUv bUNURlZTS0xLTGFZM2VkN3dhM1E0b0I3aHJrLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9tQ1RGVlNLTEtMYVkzZWQ3d2EzUTRvQjdocmsuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC82NS9UMXFKa01lbEFINUJERFhN Mk9fN0czaFF0ZWsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA 05NcMA0GCSqGSIb3DQEBCwUAA4IBAQDe/vzLe+ACYxp9tBps9USuAd6LGvqTP08W 0jIx1JFexotIANhtqkuDCgRNeNgNbNmbkeUq65qqiersFnCVOn1h4MdljvxHHJGm 2PaDZotOiqGC1NUkt0sF5AhGU/WBwKD7117ylrspEvTj9Bfzr1n0e91D0D7LAz9I CJXmTQoyOCOGHteCDuGWHI2b56exbjd4p3h5Yas/kBXto+dOqIn3E/zuNs9KJWjl HR4XEMBdBcfdDuWebHULvGvsnYTnQxDh3m0U8QxD8g+gqH+NNVGa9lPjavAmCiMx jYNKdF+6uHM4npjoLqlEy8p2p/CON1FgH5Gd2kif9a9/fJwvCSSI -----END CERTIFICATE-----Generated at Sun May 4 03:02:09 2025 by rpki-client