$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/756/Eiz4UhuTTi63d_GLPqRNdBYiZAk.roa File: Eiz4UhuTTi63d_GLPqRNdBYiZAk.roa (raw, json) Hash identifier: m4W5sYfutDIBGUa1Xlob/CH9YeApB50kyDS7XSN9X8k= Subject key identifier: 12:2C:F8:52:1B:93:4E:2E:B7:77:F1:8B:3E:A4:4D:74:16:22:64:09 Certificate issuer: /CN=591C5B03C97CE0FE3EC78E23C6856F792C20D404 Certificate serial: 12CB Authority key identifier: 59:1C:5B:03:C9:7C:E0:FE:3E:C7:8E:23:C6:85:6F:79:2C:20:D4:04 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WRxbA8l84P4-x44jxoVveSwg1AQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/Eiz4UhuTTi63d_GLPqRNdBYiZAk.roa Signing time: Fri 17 Jan 2025 01:23:34 +0000 ROA not before: Fri 17 Jan 2025 01:23:34 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 63719 IP address blocks: 2401:2780::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WRxbA8l84P4-x44jxoVveSwg1AQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4811 (0x12cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=591C5B03C97CE0FE3EC78E23C6856F792C20D404 Validity Not Before: Jan 17 01:23:34 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=122CF8521B934E2EB777F18B3EA44D7416226409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:98:0b:10:36:c9:ee:3c:59:e8:2b:f4:64:2a: c7:7e:a2:d2:ce:23:27:56:b6:83:28:f0:30:06:43: fa:5d:74:e9:11:df:b2:70:f4:9e:c7:ef:97:04:6c: 37:92:5c:38:c0:0a:3a:76:b1:30:b2:e8:ab:b9:d4: c5:f4:a6:ab:72:34:b0:d5:cc:0d:30:34:93:54:8b: 87:0f:38:b3:64:e4:69:dc:1b:00:a8:c4:5c:5e:e9: 9b:d4:04:05:fa:0f:c1:0b:f0:f9:53:f3:2d:9d:ee: fb:a6:1a:5b:02:67:2a:87:93:c0:81:5f:d8:9e:9d: 57:68:62:0b:20:c1:1b:7f:af:3a:4e:b0:4c:0e:bb: e7:cb:c0:0a:d5:e4:b4:33:0e:9e:5f:91:ab:a1:03: a3:24:3e:04:31:f5:9b:08:bb:a0:6f:d8:be:1b:1d: e2:99:94:38:19:19:90:52:ca:c1:25:3e:94:2c:fd: 1c:40:96:cd:e9:7e:ba:66:d6:1f:f5:dc:ad:ff:d2: ee:5f:48:db:d2:c5:e6:48:21:18:6e:0b:b5:0a:ce: 39:46:ee:11:f8:8a:5f:53:73:e2:7b:46:e9:90:4f: 35:df:49:a8:19:83:14:c7:32:9a:9d:81:cf:52:b0: 8a:e0:54:7d:81:42:02:32:7c:43:e4:be:df:6d:5a: b1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:2C:F8:52:1B:93:4E:2E:B7:77:F1:8B:3E:A4:4D:74:16:22:64:09 X509v3 Authority Key Identifier: keyid:59:1C:5B:03:C9:7C:E0:FE:3E:C7:8E:23:C6:85:6F:79:2C:20:D4:04 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WRxbA8l84P4-x44jxoVveSwg1AQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/Eiz4UhuTTi63d_GLPqRNdBYiZAk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:2780::/32 Signature Algorithm: sha256WithRSAEncryption 76:81:00:b0:aa:db:5b:f2:cc:b9:12:02:f6:ca:d6:df:b1:e0: f2:ae:1d:73:12:27:15:07:45:c4:7b:28:6b:49:37:d5:e8:21: e5:dd:fc:7d:43:df:7f:8a:d8:9a:3b:81:cf:fa:41:d1:61:98: 91:48:3d:1d:c4:53:da:c8:e6:40:99:e4:b5:69:b0:3e:58:27: 28:5c:61:ea:b5:2c:ed:a3:c8:c8:3a:0c:fc:ef:3b:7e:a8:27: bd:29:5c:9a:9f:29:c4:cd:72:f2:c4:3a:c4:23:d7:d5:03:57: 61:62:2e:34:8c:22:da:46:59:68:f4:8b:85:1a:22:4e:fe:1a: 35:73:48:aa:a3:26:57:27:59:22:0f:a0:0e:fa:f4:a8:84:e2: 0c:0e:d6:c9:0c:92:01:81:c4:bc:e8:7b:be:82:a0:23:c6:74: 90:ea:5e:12:6e:19:bb:e2:1d:37:60:ef:05:dc:91:11:5e:30: d8:bc:55:82:cf:4d:41:5c:b2:5c:c9:a9:6f:83:cd:be:e2:55: 56:1a:25:89:8d:7f:c8:be:1a:f3:c8:a5:76:9e:cf:b5:70:8b: b1:4e:f0:bd:7b:0e:d1:92:77:3d:ff:57:e7:85:9f:f3:40:20: 54:27:2d:87:c2:b6:b2:8c:a1:e2:b0:47:cb:fd:d1:8b:0c:63: 9a:58:93:26 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICEsswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkx QzVCMDNDOTdDRTBGRTNFQzc4RTIzQzY4NTZGNzkyQzIwRDQwNDAeFw0yNTAxMTcw MTIzMzRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDEyMkNGODUyMUI5MzRF MkVCNzc3RjE4QjNFQTQ0RDc0MTYyMjY0MDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDgmAsQNsnuPFnoK/RkKsd+otLOIydWtoMo8DAGQ/pddOkR37Jw 9J7H75cEbDeSXDjACjp2sTCy6Ku51MX0pqtyNLDVzA0wNJNUi4cPOLNk5GncGwCo xFxe6ZvUBAX6D8EL8PlT8y2d7vumGlsCZyqHk8CBX9ienVdoYgsgwRt/rzpOsEwO u+fLwArV5LQzDp5fkauhA6MkPgQx9ZsIu6Bv2L4bHeKZlDgZGZBSysElPpQs/RxA ls3pfrpm1h/13K3/0u5fSNvSxeZIIRhuC7UKzjlG7hH4il9Tc+J7RumQTzXfSagZ gxTHMpqdgc9SsIrgVH2BQgIyfEPkvt9tWrEVAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUEiz4UhuTTi63d/GLPqRNdBYiZAkwHwYDVR0jBBgwFoAUWRxbA8l84P4+x44j xoVveSwg1AQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzU2 L1dSeGJBOGw4NFA0LXg0NGp4b1Z2ZVN3ZzFBUS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvV1J4YkE4bDg0UDQteDQ0anhvVnZlU3dnMUFRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzU2L0VpejRVaHVUVGk2M2Rf R0xQcVJOZEJZaVpBay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcD BQAkASeAMA0GCSqGSIb3DQEBCwUAA4IBAQB2gQCwqttb8sy5EgL2ytbfseDyrh1z EicVB0XEeyhrSTfV6CHl3fx9Q99/itiaO4HP+kHRYZiRSD0dxFPayOZAmeS1abA+ WCcoXGHqtSzto8jIOgz87zt+qCe9KVyanynEzXLyxDrEI9fVA1dhYi40jCLaRllo 9IuFGiJO/ho1c0iqoyZXJ1kiD6AO+vSohOIMDtbJDJIBgcS86Hu+gqAjxnSQ6l4S bhm74h03YO8F3JERXjDYvFWCz01BXLJcyalvg82+4lVWGiWJjX/IvhrzyKV2ns+1 cIuxTvC9ew7Rknc9/1fnhZ/zQCBUJy2HwrayjKHisEfL/dGLDGOaWJMm -----END CERTIFICATE-----Generated at Sat Apr 26 15:25:14 2025 by rpki-client