$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/767/ms8RnKGTTw3_ry0oEkfg_z4fm-0.roa File: ms8RnKGTTw3_ry0oEkfg_z4fm-0.roa (raw, json) Hash identifier: 1Wf5tMULJp/oY3v1yVmlTk+j0HQcaIjT1gyZNmt3AFU= Subject key identifier: 9A:CF:11:9C:A1:93:4F:0D:FF:AF:2D:28:12:47:E0:FF:3E:1F:9B:ED Certificate issuer: /CN=FEE0C827CE296202006EB4ED2B6595DCE0E97C7B Certificate serial: 179B Authority key identifier: FE:E0:C8:27:CE:29:62:02:00:6E:B4:ED:2B:65:95:DC:E0:E9:7C:7B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_uDIJ84pYgIAbrTtK2WV3ODpfHs.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/ms8RnKGTTw3_ry0oEkfg_z4fm-0.roa Signing time: Wed 09 Apr 2025 07:08:37 +0000 ROA not before: Wed 09 Apr 2025 07:08:37 +0000 ROA not after: Thu 09 Apr 2026 06:40:47 +0000 asID: 59015 IP address blocks: 43.224.240.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/_uDIJ84pYgIAbrTtK2WV3ODpfHs.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/_uDIJ84pYgIAbrTtK2WV3ODpfHs.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_uDIJ84pYgIAbrTtK2WV3ODpfHs.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6043 (0x179b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FEE0C827CE296202006EB4ED2B6595DCE0E97C7B Validity Not Before: Apr 9 07:08:37 2025 GMT Not After : Apr 9 06:40:47 2026 GMT Subject: CN=9ACF119CA1934F0DFFAF2D281247E0FF3E1F9BED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2e:3e:ba:e1:53:33:2f:e0:5c:40:01:07:42: f0:68:10:e3:5e:98:b0:3b:dc:5e:a8:66:e0:0d:68: 2a:b0:7e:b1:b0:37:d8:5e:dc:44:70:06:12:77:32: c3:e6:60:68:4d:b8:4d:91:78:32:06:7d:41:09:72: 86:21:b6:94:06:c9:44:f5:18:e8:c5:a3:6a:9c:9c: e9:8a:31:cc:60:dc:b6:14:06:6e:fc:8b:b3:5e:b0: 93:28:48:db:49:05:99:44:ae:e9:20:86:46:7d:a2: 25:a9:2c:0c:14:8a:ea:ff:3c:26:11:07:d1:03:f1: 69:92:c2:2d:61:df:38:62:5c:eb:7e:55:d4:8c:76: 6a:21:4a:74:f4:ed:7e:45:db:f2:98:ba:83:43:9b: c8:f9:3b:7c:d9:c9:86:8d:28:01:8c:7c:65:e2:03: 0b:66:b7:b8:fb:dd:68:9b:d4:80:39:cd:1f:46:b8: e2:b4:88:5e:ef:56:7d:a6:e1:d6:cc:6b:df:ac:2a: 3c:5d:ef:ae:6f:0c:0f:33:a4:4c:3d:da:a7:6a:29: 03:6a:fc:be:2a:bf:7c:57:f0:e8:fd:7f:d0:e6:d5: e2:85:e3:d2:5b:67:4b:a9:01:c2:41:18:c5:ac:76: 55:1a:48:fb:b0:ab:64:41:de:fa:68:8c:a7:3c:ef: 21:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:CF:11:9C:A1:93:4F:0D:FF:AF:2D:28:12:47:E0:FF:3E:1F:9B:ED X509v3 Authority Key Identifier: keyid:FE:E0:C8:27:CE:29:62:02:00:6E:B4:ED:2B:65:95:DC:E0:E9:7C:7B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/_uDIJ84pYgIAbrTtK2WV3ODpfHs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_uDIJ84pYgIAbrTtK2WV3ODpfHs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/ms8RnKGTTw3_ry0oEkfg_z4fm-0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.224.240.0/22 Signature Algorithm: sha256WithRSAEncryption 3a:db:c8:81:a2:5a:69:c8:7a:f9:23:0a:16:f1:03:3b:28:f6: e4:16:5b:c9:be:14:18:fb:4f:e0:ab:e8:f0:b5:d8:7a:fb:1b: c6:d2:e1:a4:71:b8:9d:12:1f:d0:24:8f:ec:02:92:f7:15:ab: db:c8:9c:9c:99:72:da:0e:e5:90:ed:20:47:70:c7:a2:a6:b2: a1:79:5f:3c:cb:d7:4a:cd:75:05:e2:89:ee:53:c3:5d:9d:d8: 3e:bc:c5:6d:bd:e7:87:51:00:9d:5a:31:76:e5:e4:79:ac:21: f4:0c:c3:6e:8b:dd:17:31:b6:0f:7f:88:be:28:08:7b:2f:62: ca:72:6b:6e:cb:3c:59:7a:73:28:0d:1d:b7:09:b1:02:f2:f9: f6:b0:87:69:e3:2f:f8:ba:a9:f1:b4:5b:b8:86:9b:a1:49:f8: 9e:e5:10:69:0a:b8:dd:fd:47:5a:b0:48:c1:25:01:66:20:46: 0a:78:50:64:79:f0:74:b8:b7:75:b1:dd:64:ee:dd:f9:2f:44: 66:b5:71:b8:a4:2d:9b:63:7d:49:bb:cd:b6:4c:6e:3d:c1:fe: 56:5d:d7:b4:45:ce:51:ee:8d:05:aa:23:df:e4:cd:68:33:67: 9e:10:cb:5a:d8:96:30:5c:b2:aa:a6:56:1d:a6:47:3e:3d:35: ec:ac:58:e4 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICF5swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkVF MEM4MjdDRTI5NjIwMjAwNkVCNEVEMkI2NTk1RENFMEU5N0M3QjAeFw0yNTA0MDkw NzA4MzdaFw0yNjA0MDkwNjQwNDdaMDMxMTAvBgNVBAMTKDlBQ0YxMTlDQTE5MzRG MERGRkFGMkQyODEyNDdFMEZGM0UxRjlCRUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDLj664VMzL+BcQAEHQvBoEONemLA73F6oZuANaCqwfrGwN9he 3ERwBhJ3MsPmYGhNuE2ReDIGfUEJcoYhtpQGyUT1GOjFo2qcnOmKMcxg3LYUBm78 i7NesJMoSNtJBZlErukghkZ9oiWpLAwUiur/PCYRB9ED8WmSwi1h3zhiXOt+VdSM dmohSnT07X5F2/KYuoNDm8j5O3zZyYaNKAGMfGXiAwtmt7j73Wib1IA5zR9GuOK0 iF7vVn2m4dbMa9+sKjxd765vDA8zpEw92qdqKQNq/L4qv3xX8Oj9f9Dm1eKF49Jb Z0upAcJBGMWsdlUaSPuwq2RB3vpojKc87yEtAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUms8RnKGTTw3/ry0oEkfg/z4fm+0wHwYDVR0jBBgwFoAU/uDIJ84pYgIAbrTt K2WV3ODpfHswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzY3 L191RElKODRwWWdJQWJyVHRLMldWM09EcGZIcy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvX3VESUo4NHBZZ0lBYnJUdEsyV1YzT0RwZkhzLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzY3L21zOFJuS0dUVHczX3J5 MG9Fa2ZnX3o0Zm0tMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIr4PAwDQYJKoZIhvcNAQELBQADggEBADrbyIGiWmnIevkjChbxAzso9uQWW8m+ FBj7T+Cr6PC12Hr7G8bS4aRxuJ0SH9Akj+wCkvcVq9vInJyZctoO5ZDtIEdwx6Km sqF5XzzL10rNdQXiie5Tw12d2D68xW2954dRAJ1aMXbl5HmsIfQMw26L3Rcxtg9/ iL4oCHsvYspya27LPFl6cygNHbcJsQLy+fawh2njL/i6qfG0W7iGm6FJ+J7lEGkK uN39R1qwSMElAWYgRgp4UGR58HS4t3Wx3WTu3fkvRGa1cbikLZtjfUm7zbZMbj3B /lZd17RFzlHujQWqI9/kzWgzZ54Qy1rYljBcsqqmVh2mRz49NeysWOQ= -----END CERTIFICATE-----Generated at Sat Apr 26 14:37:21 2025 by rpki-client