$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/656/nsUhg10ALNcOLwzb7ZK6S80CZ7o.roa File: nsUhg10ALNcOLwzb7ZK6S80CZ7o.roa (raw, json) Hash identifier: tzx/Pgs9abSF+uG8pAxr0ZAmgG6hG/gRwaPP+1wjsRI= Subject key identifier: 9E:C5:21:83:5D:00:2C:D7:0E:2F:0C:DB:ED:92:BA:4B:CD:02:67:BA Certificate issuer: /CN=64DC20D9612C5B77499A6D223A652B2E38B11647 Certificate serial: 1787 Authority key identifier: 64:DC:20:D9:61:2C:5B:77:49:9A:6D:22:3A:65:2B:2E:38:B1:16:47 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZNwg2WEsW3dJmm0iOmUrLjixFkc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/nsUhg10ALNcOLwzb7ZK6S80CZ7o.roa Signing time: Fri 17 Jan 2025 01:28:19 +0000 ROA not before: Fri 17 Jan 2025 01:28:19 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 45090 IP address blocks: 124.220.0.0/14 maxlen: 24 175.178.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/ZNwg2WEsW3dJmm0iOmUrLjixFkc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/ZNwg2WEsW3dJmm0iOmUrLjixFkc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZNwg2WEsW3dJmm0iOmUrLjixFkc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 14:38:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6023 (0x1787) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64DC20D9612C5B77499A6D223A652B2E38B11647 Validity Not Before: Jan 17 01:28:19 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=9EC521835D002CD70E2F0CDBED92BA4BCD0267BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:81:e8:10:44:fd:7f:49:89:63:e3:09:61:2e: 7c:e3:53:0a:28:82:98:ab:6d:ff:91:cd:83:75:4c: 1e:b8:4d:b0:aa:b4:41:18:f1:b4:60:6e:f9:3f:f9: 43:be:ef:0b:a1:23:42:0d:be:53:a3:79:14:8f:62: d1:8d:b5:8b:a5:bf:ef:20:8f:72:9f:74:27:b1:3b: b2:84:6f:47:68:83:2f:7d:a3:47:52:99:e8:f9:45: 4a:cd:e2:08:fc:4a:39:76:7d:24:57:4d:0b:9d:26: 54:40:88:a8:68:a9:ad:41:b7:99:59:fc:5b:28:cf: 93:f4:73:3a:fc:b1:40:3d:48:58:64:b9:3e:c1:00: 4e:78:64:81:ef:27:28:60:55:70:36:f1:0e:9f:44: 76:ff:db:09:8e:0a:52:1c:6f:c0:14:89:e1:5f:01: f9:10:8e:78:06:d4:fa:73:b5:9b:9c:c1:34:79:35: 1b:a9:30:01:00:06:50:81:ae:0e:8f:fd:83:5d:66: 1e:9f:e0:12:95:82:3c:13:0a:1d:b2:73:98:63:15: 1c:95:28:c2:33:eb:ee:8d:9c:86:25:aa:ce:5b:2b: 8e:ed:f6:8a:e4:49:0c:0c:19:da:35:e5:17:45:4e: b6:fc:07:1d:37:f8:08:f3:40:c0:46:64:68:bc:0d: 02:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:C5:21:83:5D:00:2C:D7:0E:2F:0C:DB:ED:92:BA:4B:CD:02:67:BA X509v3 Authority Key Identifier: keyid:64:DC:20:D9:61:2C:5B:77:49:9A:6D:22:3A:65:2B:2E:38:B1:16:47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/ZNwg2WEsW3dJmm0iOmUrLjixFkc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZNwg2WEsW3dJmm0iOmUrLjixFkc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/nsUhg10ALNcOLwzb7ZK6S80CZ7o.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.220.0.0/14 175.178.0.0/16 Signature Algorithm: sha256WithRSAEncryption 23:18:b9:2c:1b:60:b5:46:51:b9:6e:3b:a0:9a:5d:86:49:82: 22:eb:05:fa:f7:cc:1b:f1:f4:fb:79:cf:0a:70:de:e8:df:41: e9:09:a1:85:9c:ec:44:86:0a:c5:00:c2:9c:2c:b2:e6:b9:b0: 1e:c5:75:d4:b8:6f:b9:55:7f:a7:c0:b8:91:2f:6f:3f:e8:bc: 59:91:2f:5f:87:81:03:d0:74:b0:38:74:af:b7:c8:65:7b:03: 59:97:99:ff:d7:d1:7b:b4:0a:b2:d3:3e:f4:e6:05:a6:4a:b8: a9:12:69:ac:2f:93:32:90:57:a7:f3:b7:c9:f0:6b:bf:37:bc: fb:83:3a:ab:66:df:07:ed:2e:48:2e:4a:f2:33:08:4d:64:81: 13:9c:56:bb:8e:17:5d:80:b6:e9:1c:c7:a7:8a:43:6c:b7:c1: 63:45:2c:79:21:7a:ab:75:e1:ba:54:bb:ca:21:5f:fe:de:1f: b6:9a:00:58:38:49:31:fc:fa:65:63:e2:96:5e:16:2b:44:f9: b1:21:94:44:c4:91:59:c0:f9:f1:6c:15:35:67:a8:48:f3:06: 3f:57:47:d8:82:25:0d:94:09:b4:5a:05:0d:46:1a:ce:0c:46: 6f:95:b6:4d:c8:86:b4:16:2a:d5:da:8d:1d:77:33:ef:0e:a0: 59:c6:5d:c8 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgICF4cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjRE QzIwRDk2MTJDNUI3NzQ5OUE2RDIyM0E2NTJCMkUzOEIxMTY0NzAeFw0yNTAxMTcw MTI4MTlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDlFQzUyMTgzNUQwMDJD RDcwRTJGMENEQkVEOTJCQTRCQ0QwMjY3QkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDrgegQRP1/SYlj4wlhLnzjUwoogpirbf+RzYN1TB64TbCqtEEY 8bRgbvk/+UO+7wuhI0INvlOjeRSPYtGNtYulv+8gj3KfdCexO7KEb0dogy99o0dS mej5RUrN4gj8Sjl2fSRXTQudJlRAiKhoqa1Bt5lZ/Fsoz5P0czr8sUA9SFhkuT7B AE54ZIHvJyhgVXA28Q6fRHb/2wmOClIcb8AUieFfAfkQjngG1PpztZucwTR5NRup MAEABlCBrg6P/YNdZh6f4BKVgjwTCh2yc5hjFRyVKMIz6+6NnIYlqs5bK47t9ork SQwMGdo15RdFTrb8Bx03+AjzQMBGZGi8DQIVAgMBAAGjggH1MIIB8TAdBgNVHQ4E FgQUnsUhg10ALNcOLwzb7ZK6S80CZ7owHwYDVR0jBBgwFoAUZNwg2WEsW3dJmm0i OmUrLjixFkcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjU2 L1pOd2cyV0VzVzNkSm1tMGlPbVVyTGppeEZrYy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvWk53ZzJXRXNXM2RKbW0waU9tVXJMaml4RmtjLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjU2L25zVWhnMTBBTE5jT0x3 emI3Wks2UzgwQ1o3by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwIwYIKwYBBQUHAQcBAf8EFDASMBAEAgABMAoD AwJ83AMDAK+yMA0GCSqGSIb3DQEBCwUAA4IBAQAjGLksG2C1RlG5bjugml2GSYIi 6wX698wb8fT7ec8KcN7o30HpCaGFnOxEhgrFAMKcLLLmubAexXXUuG+5VX+nwLiR L28/6LxZkS9fh4ED0HSwOHSvt8hlewNZl5n/19F7tAqy0z705gWmSripEmmsL5My kFen87fJ8Gu/N7z7gzqrZt8H7S5ILkryMwhNZIETnFa7jhddgLbpHMenikNst8Fj RSx5IXqrdeG6VLvKIV/+3h+2mgBYOEkx/PplY+KWXhYrRPmxIZRExJFZwPnxbBU1 Z6hI8wY/V0fYgiUNlAm0WgUNRhrODEZvlbZNyIa0FirV2o0ddzPvDqBZxl3I -----END CERTIFICATE-----Generated at Sat Apr 26 14:29:15 2025 by rpki-client