$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/890/YyhKthcstRYuxEk3vjZ1r9l9QLU.roa File: YyhKthcstRYuxEk3vjZ1r9l9QLU.roa (raw, json) Hash identifier: q/lDyBbaaNfLnxkYm+vwzCtroSsOL+Bif2m9eBvik+0= Subject key identifier: 63:28:4A:B6:17:2C:B5:16:2E:C4:49:37:BE:36:75:AF:D9:7D:40:B5 Certificate issuer: /CN=DBB4C5FA96B8741BF68B48BF004DBD6FD9636FAD Certificate serial: 0B29 Authority key identifier: DB:B4:C5:FA:96:B8:74:1B:F6:8B:48:BF:00:4D:BD:6F:D9:63:6F:AD Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27TF-pa4dBv2i0i_AE29b9ljb60.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/YyhKthcstRYuxEk3vjZ1r9l9QLU.roa Signing time: Wed 09 Apr 2025 06:48:13 +0000 ROA not before: Wed 09 Apr 2025 06:48:13 +0000 ROA not after: Thu 09 Apr 2026 06:41:00 +0000 asID: 63567 IP address blocks: 43.248.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/27TF-pa4dBv2i0i_AE29b9ljb60.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/27TF-pa4dBv2i0i_AE29b9ljb60.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27TF-pa4dBv2i0i_AE29b9ljb60.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 14:38:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2857 (0xb29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBB4C5FA96B8741BF68B48BF004DBD6FD9636FAD Validity Not Before: Apr 9 06:48:13 2025 GMT Not After : Apr 9 06:41:00 2026 GMT Subject: CN=63284AB6172CB5162EC44937BE3675AFD97D40B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:11:49:37:d5:d3:0d:18:58:ad:39:07:61:4e: 20:e8:ad:15:63:e2:a7:8a:7b:04:cb:28:e7:1d:61: c3:5f:e6:23:3c:fc:9a:aa:75:f2:be:da:9d:3d:e3: 73:b4:23:ff:03:11:46:34:bf:67:27:3a:57:97:d3: 02:3b:2c:13:44:4a:58:3c:d2:42:79:46:d5:78:c1: 23:0a:9b:4c:b9:76:1b:35:46:7f:d1:0d:ac:15:d7: 4a:de:c5:d0:d1:3a:c3:71:db:77:fe:37:36:e3:21: 1d:4a:fd:09:ee:37:c9:be:13:ea:0c:40:53:fc:e6: 2f:f8:ef:03:a4:e5:57:16:e7:7c:be:b2:fc:96:d4: 73:14:21:8d:a4:96:ae:96:13:a5:5e:cc:b6:b2:d9: 99:57:df:33:45:97:4f:ae:d9:55:cd:f7:4f:d0:a3: da:42:67:08:66:64:d4:30:b1:7f:c5:72:bb:45:27: 75:0a:1e:94:c4:76:ff:74:24:c7:90:9f:b2:19:aa: e3:95:b2:82:76:d3:86:46:bc:0d:36:2f:e9:26:a3: 6a:6d:7e:ee:ca:d3:27:0f:03:af:de:a9:3f:99:d5: 7a:5f:11:9b:9e:0e:10:fc:b8:72:ae:2d:82:c8:4b: ae:b1:83:c8:e7:c2:2b:28:2f:74:ac:1b:47:18:26: e1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:28:4A:B6:17:2C:B5:16:2E:C4:49:37:BE:36:75:AF:D9:7D:40:B5 X509v3 Authority Key Identifier: keyid:DB:B4:C5:FA:96:B8:74:1B:F6:8B:48:BF:00:4D:BD:6F:D9:63:6F:AD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/27TF-pa4dBv2i0i_AE29b9ljb60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27TF-pa4dBv2i0i_AE29b9ljb60.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/YyhKthcstRYuxEk3vjZ1r9l9QLU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.248.80.0/20 Signature Algorithm: sha256WithRSAEncryption 60:aa:07:95:08:52:ee:14:9a:9e:22:e8:e5:c6:3c:7d:fd:bf: 22:05:d6:ae:30:99:b7:01:13:53:0d:75:4c:0e:49:92:bf:94: 7e:8e:26:d3:60:ba:d6:0d:fc:0b:4f:01:3e:89:53:6d:4a:1c: bb:73:4e:9c:84:8b:03:3b:4d:f7:5e:10:bc:c7:f4:02:ae:5d: 91:a7:c8:38:d3:af:10:6d:e6:54:f9:5a:49:df:08:6c:d9:90: 1b:b6:0e:8b:4c:57:af:03:0a:eb:bd:19:45:16:31:5f:a7:58: 19:92:f9:76:0b:b0:a0:fd:e1:39:76:57:42:30:00:c5:b5:52: e0:9c:4a:8b:86:d6:e1:7c:e8:23:20:63:d5:30:ab:e6:9a:ac: e4:14:c8:e6:cf:03:64:eb:ca:5f:e5:15:8d:e3:e1:a2:db:4e: ec:13:15:e7:ef:4f:c9:1d:d7:68:3e:bd:c1:09:22:96:0a:a9: 56:26:be:23:72:d0:22:60:f7:a1:3d:dc:e5:2c:cd:2c:b7:81: 87:8b:f0:5e:f7:f3:84:df:b0:94:c1:1f:98:0a:04:35:26:39: 41:84:26:69:e7:1e:37:b4:4c:fd:26:a6:6f:ed:f0:b5:bb:fb: e1:50:53:f3:f5:4f:b6:8b:4b:4e:fa:61:57:18:91:32:67:14: 21:78:b3:26 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICCykwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREJC NEM1RkE5NkI4NzQxQkY2OEI0OEJGMDA0REJENkZEOTYzNkZBRDAeFw0yNTA0MDkw NjQ4MTNaFw0yNjA0MDkwNjQxMDBaMDMxMTAvBgNVBAMTKDYzMjg0QUI2MTcyQ0I1 MTYyRUM0NDkzN0JFMzY3NUFGRDk3RDQwQjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjEUk31dMNGFitOQdhTiDorRVj4qeKewTLKOcdYcNf5iM8/Jqq dfK+2p0943O0I/8DEUY0v2cnOleX0wI7LBNESlg80kJ5RtV4wSMKm0y5dhs1Rn/R DawV10rexdDROsNx23f+NzbjIR1K/QnuN8m+E+oMQFP85i/47wOk5VcW53y+svyW 1HMUIY2klq6WE6VezLay2ZlX3zNFl0+u2VXN90/Qo9pCZwhmZNQwsX/FcrtFJ3UK HpTEdv90JMeQn7IZquOVsoJ204ZGvA02L+kmo2ptfu7K0ycPA6/eqT+Z1XpfEZue DhD8uHKuLYLIS66xg8jnwisoL3SsG0cYJuFLAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUYyhKthcstRYuxEk3vjZ1r9l9QLUwHwYDVR0jBBgwFoAU27TF+pa4dBv2i0i/ AE29b9ljb60wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODkw LzI3VEYtcGE0ZEJ2MmkwaV9BRTI5YjlsamI2MC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvMjdURi1wYTRkQnYyaTBpX0FFMjliOWxqYjYwLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODkwL1l5aEt0aGNzdFJZdXhF azN2aloxcjlsOVFMVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAQr+FAwDQYJKoZIhvcNAQELBQADggEBAGCqB5UIUu4Ump4i6OXGPH39vyIF1q4w mbcBE1MNdUwOSZK/lH6OJtNgutYN/AtPAT6JU21KHLtzTpyEiwM7TfdeELzH9AKu XZGnyDjTrxBt5lT5WknfCGzZkBu2DotMV68DCuu9GUUWMV+nWBmS+XYLsKD94Tl2 V0IwAMW1UuCcSouG1uF86CMgY9Uwq+aarOQUyObPA2Tryl/lFY3j4aLbTuwTFefv T8kd12g+vcEJIpYKqVYmviNy0CJg96E93OUszSy3gYeL8F7384TfsJTBH5gKBDUm OUGEJmnnHje0TP0mpm/t8LW7++FQU/P1T7aLS076YVcYkTJnFCF4syY= -----END CERTIFICATE-----Generated at Sat Apr 26 13:10:38 2025 by rpki-client