$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/lU4MINnEocHPf7DsLjN6TqQBr9g.roa File: lU4MINnEocHPf7DsLjN6TqQBr9g.roa (raw, json) Hash identifier: nWkWTYJDtFBZOZTTk+NylLr//gEQhbEtZuQsgeEL7No= Subject key identifier: 95:4E:0C:20:D9:C4:A1:C1:CF:7F:B0:EC:2E:33:7A:4E:A4:01:AF:D8 Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Certificate serial: 1D0F Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/lU4MINnEocHPf7DsLjN6TqQBr9g.roa Signing time: Fri 17 Jan 2025 01:26:48 +0000 ROA not before: Fri 17 Jan 2025 01:26:48 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 4811 IP address blocks: 106.75.208.0/20 maxlen: 20 113.31.96.0/20 maxlen: 20 113.31.112.0/20 maxlen: 20 113.31.144.0/20 maxlen: 20 113.31.160.0/20 maxlen: 20 113.31.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 21:38:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7439 (0x1d0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Validity Not Before: Jan 17 01:26:48 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=954E0C20D9C4A1C1CF7FB0EC2E337A4EA401AFD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b8:2d:1f:d1:ba:4f:69:24:16:1f:10:85:d1: 09:71:d8:c1:59:5e:4c:fa:83:e3:36:46:b9:d0:99: 44:e7:a3:63:09:61:91:1f:94:af:2c:2b:74:11:4a: 97:65:54:d7:70:2e:ec:9f:f2:04:3e:89:56:a6:76: f4:95:32:9a:90:09:0b:65:e1:e1:a4:23:7b:43:7e: d6:36:ca:e7:fd:e8:03:0c:e3:db:33:7d:85:c5:eb: 3d:26:42:25:b1:ad:77:11:55:23:aa:0b:53:0f:0d: 5b:e9:64:b6:6d:bd:e9:30:38:98:bc:5d:4c:13:11: 01:28:cf:8a:e1:5c:a1:29:0b:a0:50:67:43:b4:0a: 4a:71:63:85:b2:50:34:2e:76:34:84:45:df:3d:c3: 54:ec:35:e9:2d:4e:a4:f5:79:25:c2:ca:b0:7a:32: 30:ca:09:f4:29:41:0c:ae:1c:aa:85:26:43:ec:59: a2:3a:66:6f:54:ea:8a:58:46:22:9e:30:a9:89:71: 5a:a2:76:bd:2c:26:0e:c8:90:6f:4e:46:2b:87:a2: 35:b5:38:2c:ff:22:fe:0f:bc:d0:ce:59:3a:56:74: 1d:39:f5:2b:e5:18:40:79:14:47:1f:17:95:5e:1a: 31:77:e8:fd:cc:36:f1:87:f6:82:7c:18:50:4a:91: b5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:4E:0C:20:D9:C4:A1:C1:CF:7F:B0:EC:2E:33:7A:4E:A4:01:AF:D8 X509v3 Authority Key Identifier: keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/lU4MINnEocHPf7DsLjN6TqQBr9g.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.75.208.0/20 113.31.96.0/19 113.31.144.0-113.31.191.255 Signature Algorithm: sha256WithRSAEncryption 0a:b3:be:3b:11:48:35:44:da:07:39:e5:fc:4f:e9:fc:18:ab: db:bb:d8:80:b1:18:27:98:c9:f3:16:f6:11:54:87:e4:8e:9d: 5b:27:54:28:4f:62:eb:d7:11:dc:f1:f4:2b:30:ea:59:6a:17: e2:17:f0:2a:ee:c5:d1:8b:94:ff:20:18:f0:69:c2:22:8c:cd: 39:50:7c:41:c9:3b:fa:fb:35:f0:19:13:d0:b8:ec:8d:5f:67: 04:5b:88:96:3c:92:c9:78:e1:c1:ba:3b:05:4d:3e:70:d0:35: a1:aa:57:7b:b7:91:1a:7e:02:0b:20:1f:22:17:da:89:1e:1c: 55:cb:a1:15:a2:34:33:60:95:f9:6e:44:d7:bb:4f:f0:88:c3: a0:88:0d:b6:a7:55:13:e4:05:b3:0b:80:9c:31:69:fa:c2:46: 25:e3:4c:1f:93:4c:5c:c1:5a:24:30:76:9c:ea:9a:18:42:fe: d3:31:04:83:38:a9:77:ef:40:53:4f:c8:52:c1:bb:74:73:ab: 16:20:fa:43:16:2f:81:f3:2f:36:3b:17:14:f7:af:fb:d8:2d: 8f:92:ff:06:91:73:4a:b6:f1:4f:55:bd:4a:cc:b5:54:fb:d4: 39:ca:06:62:5d:3e:56:8b:b5:f2:bd:26:36:12:f3:58:b9:a5: e5:37:57:b6 -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgICHQ8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE3 MTFBQTdEQzYwMDQ5QjBCMEQ4ODQ4OTdFMDE1QjExNzFGMzdCOTAeFw0yNTAxMTcw MTI2NDhaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDk1NEUwQzIwRDlDNEEx QzFDRjdGQjBFQzJFMzM3QTRFQTQwMUFGRDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmuC0f0bpPaSQWHxCF0Qlx2MFZXkz6g+M2RrnQmUTno2MJYZEf lK8sK3QRSpdlVNdwLuyf8gQ+iVamdvSVMpqQCQtl4eGkI3tDftY2yuf96AMM49sz fYXF6z0mQiWxrXcRVSOqC1MPDVvpZLZtvekwOJi8XUwTEQEoz4rhXKEpC6BQZ0O0 CkpxY4WyUDQudjSERd89w1TsNektTqT1eSXCyrB6MjDKCfQpQQyuHKqFJkPsWaI6 Zm9U6opYRiKeMKmJcVqidr0sJg7IkG9ORiuHojW1OCz/Iv4PvNDOWTpWdB059Svl GEB5FEcfF5VeGjF36P3MNvGH9oJ8GFBKkbU5AgMBAAGjggIFMIICATAdBgNVHQ4E FgQUlU4MINnEocHPf7DsLjN6TqQBr9gwHwYDVR0jBBgwFoAUKnEap9xgBJsLDYhI l+AVsRcfN7kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3 L0tuRWFwOXhnQkpzTERZaElsLUFWc1JjZk43ay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvS25FYXA5eGdCSnNMRFloSWwtQVZzUmNmTjdrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3L2xVNE1JTm5Fb2NIUGY3 RHNMak42VHFRQnI5Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwMwYIKwYBBQUHAQcBAf8EJDAiMCAEAgABMBoD BARqS9ADBAVxH2AwDAMEBHEfkAMEBnEfgDANBgkqhkiG9w0BAQsFAAOCAQEACrO+ OxFINUTaBznl/E/p/Bir27vYgLEYJ5jJ8xb2EVSH5I6dWydUKE9i69cR3PH0KzDq WWoX4hfwKu7F0YuU/yAY8GnCIozNOVB8Qck7+vs18BkT0LjsjV9nBFuIljySyXjh wbo7BU0+cNA1oapXe7eRGn4CCyAfIhfaiR4cVcuhFaI0M2CV+W5E17tP8IjDoIgN tqdVE+QFswuAnDFp+sJGJeNMH5NMXMFaJDB2nOqaGEL+0zEEgzipd+9AU0/IUsG7 dHOrFiD6QxYvgfMvNjsXFPev+9gtj5L/BpFzSrbxT1W9Ssy1VPvUOcoGYl0+Vou1 8r0mNhLzWLml5TdXtg== -----END CERTIFICATE-----Generated at Sat Apr 26 20:25:43 2025 by rpki-client