$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1826/_lPMw5cHZkoIFnabusH1RcrzR20.roa File: _lPMw5cHZkoIFnabusH1RcrzR20.roa (raw, json) Hash identifier: upEdPmE9Qtl5KKW2RwdPr5fdTQBE0wA5+a6QjYLc15w= Subject key identifier: FE:53:CC:C3:97:07:66:4A:08:16:76:9B:BA:C1:F5:45:CA:F3:47:6D Certificate issuer: /CN=75324D3B8F1D5EBA5770E661EE16AF24A750554F Certificate serial: 14C0 Authority key identifier: 75:32:4D:3B:8F:1D:5E:BA:57:70:E6:61:EE:16:AF:24:A7:50:55:4F Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dTJNO48dXrpXcOZh7havJKdQVU8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/_lPMw5cHZkoIFnabusH1RcrzR20.roa Signing time: Sun 27 Apr 2025 09:29:37 +0000 ROA not before: Sun 27 Apr 2025 09:29:37 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 152320 IP address blocks: 45.254.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/dTJNO48dXrpXcOZh7havJKdQVU8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/dTJNO48dXrpXcOZh7havJKdQVU8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dTJNO48dXrpXcOZh7havJKdQVU8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:42:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5312 (0x14c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75324D3B8F1D5EBA5770E661EE16AF24A750554F Validity Not Before: Apr 27 09:29:37 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=FE53CCC39707664A0816769BBAC1F545CAF3476D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b4:41:1c:60:e3:a8:9a:bd:56:e9:5b:53:1d: 4c:a2:c7:72:a3:a9:9b:54:7a:9b:d1:76:fe:2d:92: c5:3a:ab:73:5d:ca:e6:44:eb:0c:d4:d6:27:ba:4a: 7f:ec:bf:54:d4:f2:53:9d:c4:78:6f:cf:41:c0:0d: f3:06:c8:5b:ef:09:44:12:06:40:4f:95:c6:f0:13: 22:7e:ef:4d:b4:82:7a:d4:40:ed:85:6c:af:05:1d: 00:a2:13:34:e1:29:11:76:74:2b:8e:3e:4c:12:2b: a1:49:c7:68:51:00:d6:42:a1:be:40:9d:6a:91:68: 48:84:a5:85:65:26:5a:dc:79:22:1d:4b:8f:cb:4c: f0:46:11:66:87:51:6d:4c:43:45:b4:49:9b:18:3c: 3a:6a:aa:dd:17:82:46:31:71:b4:a6:dd:de:f6:4a: 34:3b:c9:67:42:78:18:02:86:58:55:a2:e2:ae:11: cf:ab:37:37:77:6a:b8:8c:cb:62:05:6a:36:c7:70: 44:62:8c:c5:96:a0:39:89:0c:b0:fa:45:2c:57:73: dd:ef:04:48:18:b7:41:fa:19:ac:34:81:49:bb:f9: 0c:65:28:7e:50:de:4f:10:ab:e1:11:94:f2:c5:74: 3d:e9:4e:3b:eb:b9:e6:0c:c9:03:fd:af:8a:98:ab: f0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:53:CC:C3:97:07:66:4A:08:16:76:9B:BA:C1:F5:45:CA:F3:47:6D X509v3 Authority Key Identifier: keyid:75:32:4D:3B:8F:1D:5E:BA:57:70:E6:61:EE:16:AF:24:A7:50:55:4F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/dTJNO48dXrpXcOZh7havJKdQVU8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dTJNO48dXrpXcOZh7havJKdQVU8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/_lPMw5cHZkoIFnabusH1RcrzR20.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.254.24.0/24 Signature Algorithm: sha256WithRSAEncryption 79:dd:b0:0a:9e:73:d4:28:81:e2:db:78:6c:d2:24:e4:62:47: de:d3:0c:0f:f1:9a:55:91:b0:e0:e7:ae:de:13:f7:5a:e2:a8: 3f:e4:7a:31:8c:d2:57:1a:a9:c8:40:d3:00:cb:de:c7:2d:f9: cf:91:3d:52:9f:b6:db:4c:fa:28:0a:b0:dd:b6:d5:d2:8a:87: 9b:62:64:ea:d6:07:95:b8:ff:39:be:a9:84:49:b2:5a:2d:81: 12:be:59:9e:4f:70:8a:b3:59:f4:83:1a:33:72:44:7d:16:56: 8d:59:fd:20:c1:82:f3:c3:f3:e1:50:bf:14:3d:ca:6c:f3:ec: 27:29:bc:da:6a:8d:9e:02:74:65:7d:8a:b5:bf:e4:8a:14:47: 18:af:6c:87:ee:f4:4c:4f:c7:30:d3:65:89:86:81:f1:f1:c9: fb:e4:4e:45:8b:ee:a8:d4:e4:b0:e3:30:1d:fe:6e:77:3e:1e: 1a:2a:0b:04:d5:16:bf:b6:4b:f1:55:d8:70:e1:80:23:8a:d7: 08:70:92:5e:e3:e1:29:92:fb:e5:1c:ab:70:4e:e6:d5:54:c1: c6:ab:00:39:98:23:e5:53:79:68:0a:aa:ce:b0:7b:26:9d:f4: 72:37:aa:8e:66:e0:50:fc:3f:7a:78:40:a9:ed:56:53:00:2d: d0:44:67:a1 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFMAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzUz MjREM0I4RjFENUVCQTU3NzBFNjYxRUUxNkFGMjRBNzUwNTU0RjAeFw0yNTA0Mjcw OTI5MzdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEZFNTNDQ0MzOTcwNzY2 NEEwODE2NzY5QkJBQzFGNTQ1Q0FGMzQ3NkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3tEEcYOOomr1W6VtTHUyix3KjqZtUepvRdv4tksU6q3NdyuZE 6wzU1ie6Sn/sv1TU8lOdxHhvz0HADfMGyFvvCUQSBkBPlcbwEyJ+7020gnrUQO2F bK8FHQCiEzThKRF2dCuOPkwSK6FJx2hRANZCob5AnWqRaEiEpYVlJlrceSIdS4/L TPBGEWaHUW1MQ0W0SZsYPDpqqt0XgkYxcbSm3d72SjQ7yWdCeBgChlhVouKuEc+r Nzd3ariMy2IFajbHcERijMWWoDmJDLD6RSxXc93vBEgYt0H6Gaw0gUm7+QxlKH5Q 3k8Qq+ERlPLFdD3pTjvrueYMyQP9r4qYq/C1AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU/lPMw5cHZkoIFnabusH1RcrzR20wHwYDVR0jBBgwFoAUdTJNO48dXrpXcOZh 7havJKdQVU8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTgy Ni9kVEpOTzQ4ZFhycFhjT1poN2hhdkpLZFFWVTguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2RUSk5PNDhkWHJwWGNPWmg3aGF2SktkUVZVOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE4MjYvX2xQTXc1Y0haa29J Rm5hYnVzSDFSY3J6UjIwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAC3+GDANBgkqhkiG9w0BAQsFAAOCAQEAed2wCp5z1CiB4tt4bNIk5GJH3tMM D/GaVZGw4Oeu3hP3WuKoP+R6MYzSVxqpyEDTAMvexy35z5E9Up+220z6KAqw3bbV 0oqHm2Jk6tYHlbj/Ob6phEmyWi2BEr5Znk9wirNZ9IMaM3JEfRZWjVn9IMGC88Pz 4VC/FD3KbPPsJym82mqNngJ0ZX2Ktb/kihRHGK9sh+70TE/HMNNliYaB8fHJ++RO RYvuqNTksOMwHf5udz4eGioLBNUWv7ZL8VXYcOGAI4rXCHCSXuPhKZL75RyrcE7m 1VTBxqsAOZgj5VN5aAqqzrB7Jp30cjeqjmbgUPw/enhAqe1WUwAt0ERnoQ== -----END CERTIFICATE-----Generated at Sat May 17 21:42:47 2025 by rpki-client