$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1826/kV9AEml-csA__CqqpnYCMCAIuy0.roa File: kV9AEml-csA__CqqpnYCMCAIuy0.roa (raw, json) Hash identifier: A5yckUhA+xMi/p84UjQVEu846ClLWJ01fmT4T/D8rGo= Subject key identifier: 91:5F:40:12:69:7E:72:C0:3F:FC:2A:AA:A6:76:02:30:20:08:BB:2D Certificate issuer: /CN=75324D3B8F1D5EBA5770E661EE16AF24A750554F Certificate serial: 14C7 Authority key identifier: 75:32:4D:3B:8F:1D:5E:BA:57:70:E6:61:EE:16:AF:24:A7:50:55:4F Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dTJNO48dXrpXcOZh7havJKdQVU8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/kV9AEml-csA__CqqpnYCMCAIuy0.roa Signing time: Sun 27 Apr 2025 09:29:39 +0000 ROA not before: Sun 27 Apr 2025 09:29:39 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 152320 IP address blocks: 45.254.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/dTJNO48dXrpXcOZh7havJKdQVU8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/dTJNO48dXrpXcOZh7havJKdQVU8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dTJNO48dXrpXcOZh7havJKdQVU8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 16:13:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5319 (0x14c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75324D3B8F1D5EBA5770E661EE16AF24A750554F Validity Not Before: Apr 27 09:29:39 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=915F4012697E72C03FFC2AAAA67602302008BB2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2f:ba:f8:e2:46:b3:32:1f:10:16:ad:0a:69: f3:9a:f8:80:91:64:08:43:9a:6b:69:4a:48:e6:64: 92:f5:86:76:ed:ae:72:08:93:de:de:a2:ba:57:19: 71:9c:8d:d7:c2:a3:bf:99:68:34:49:81:5c:f0:3d: 08:f7:25:80:bc:40:10:52:ee:df:e4:98:32:53:f2: f4:2d:2f:b8:e7:d0:7c:df:c0:2d:aa:c4:6d:79:ce: 37:06:68:58:cf:65:07:35:d5:d2:42:4e:00:fc:d9: bf:4e:03:ff:9e:7e:a3:e1:0c:bd:f7:22:4a:39:6d: d6:e7:20:0a:35:a7:8e:8b:1e:e9:d0:07:59:20:44: a1:91:ba:b3:8a:c8:9e:1a:eb:04:e8:72:cb:d5:e6: ae:ab:cb:d4:72:b1:47:d2:58:17:00:67:bc:2e:d7: 02:74:5d:bf:1c:d5:42:c4:8e:4b:f6:a5:ee:b1:d4: 9d:67:68:0e:4b:e3:86:00:ec:1b:4c:be:e5:cf:78: 2e:53:a6:3b:1d:52:91:86:45:1d:27:99:0e:a9:60: fb:2d:7f:e7:20:21:a5:21:23:ab:9f:cd:1e:61:b6: 0b:cb:33:8c:cd:ca:09:07:2b:4d:95:30:c2:55:82: 71:73:97:d5:de:df:e8:3d:bd:84:de:cb:c1:a1:c9: 0f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:5F:40:12:69:7E:72:C0:3F:FC:2A:AA:A6:76:02:30:20:08:BB:2D X509v3 Authority Key Identifier: keyid:75:32:4D:3B:8F:1D:5E:BA:57:70:E6:61:EE:16:AF:24:A7:50:55:4F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/dTJNO48dXrpXcOZh7havJKdQVU8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dTJNO48dXrpXcOZh7havJKdQVU8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/kV9AEml-csA__CqqpnYCMCAIuy0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.254.26.0/24 Signature Algorithm: sha256WithRSAEncryption 91:cf:9c:64:6d:3e:31:8d:cd:24:48:93:b3:44:1d:3c:ed:b8: 2a:3e:5c:48:58:27:14:ce:8f:21:5c:db:4e:3f:a9:7f:41:65: d1:1b:7e:cf:dd:7c:6c:01:72:4f:c6:d9:71:fb:c8:12:07:6c: 88:48:d5:98:8d:0d:f4:b9:e0:05:62:46:c8:e8:95:90:4e:44: 01:cf:85:41:37:f9:2b:87:89:bd:67:d1:1a:b3:9d:8c:17:c9: fd:4d:3b:d9:e2:43:c4:9f:21:48:76:0e:22:86:6d:f3:49:be: aa:b6:df:51:65:5e:e5:aa:7c:c3:bd:b2:17:3f:aa:76:67:7e: ae:1b:48:b6:32:95:6b:28:be:78:81:ee:8b:25:66:04:8a:8d: 18:23:85:69:4b:be:24:07:64:78:71:9e:48:b7:eb:f0:a2:1a: c0:19:4c:28:d0:5f:df:17:79:c5:40:c0:99:4e:f6:c7:bd:f7: 98:6d:90:09:ef:88:94:2d:72:c8:34:7c:f8:e7:6a:c6:0b:d7: 3e:a8:8f:e3:e6:3b:b7:87:51:a6:7d:c1:5b:a7:9f:4e:68:2a: 68:49:18:5a:31:3f:b3:b5:d4:52:91:b6:07:e9:66:89:42:02: 33:72:a0:fb:92:f3:22:99:4f:54:a6:a5:ab:f0:e4:5b:0e:69: f1:df:9d:55 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFMcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzUz MjREM0I4RjFENUVCQTU3NzBFNjYxRUUxNkFGMjRBNzUwNTU0RjAeFw0yNTA0Mjcw OTI5MzlaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDkxNUY0MDEyNjk3RTcy QzAzRkZDMkFBQUE2NzYwMjMwMjAwOEJCMkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCiL7r44kazMh8QFq0KafOa+ICRZAhDmmtpSkjmZJL1hnbtrnII k97eorpXGXGcjdfCo7+ZaDRJgVzwPQj3JYC8QBBS7t/kmDJT8vQtL7jn0HzfwC2q xG15zjcGaFjPZQc11dJCTgD82b9OA/+efqPhDL33Iko5bdbnIAo1p46LHunQB1kg RKGRurOKyJ4a6wTocsvV5q6ry9RysUfSWBcAZ7wu1wJ0Xb8c1ULEjkv2pe6x1J1n aA5L44YA7BtMvuXPeC5TpjsdUpGGRR0nmQ6pYPstf+cgIaUhI6ufzR5htgvLM4zN ygkHK02VMMJVgnFzl9Xe3+g9vYTey8GhyQ8zAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUkV9AEml+csA//CqqpnYCMCAIuy0wHwYDVR0jBBgwFoAUdTJNO48dXrpXcOZh 7havJKdQVU8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTgy Ni9kVEpOTzQ4ZFhycFhjT1poN2hhdkpLZFFWVTguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2RUSk5PNDhkWHJwWGNPWmg3aGF2SktkUVZVOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE4MjYva1Y5QUVtbC1jc0Ff X0NxcXBuWUNNQ0FJdXkwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAC3+GjANBgkqhkiG9w0BAQsFAAOCAQEAkc+cZG0+MY3NJEiTs0QdPO24Kj5c SFgnFM6PIVzbTj+pf0Fl0Rt+z918bAFyT8bZcfvIEgdsiEjVmI0N9LngBWJGyOiV kE5EAc+FQTf5K4eJvWfRGrOdjBfJ/U072eJDxJ8hSHYOIoZt80m+qrbfUWVe5ap8 w72yFz+qdmd+rhtItjKVayi+eIHuiyVmBIqNGCOFaUu+JAdkeHGeSLfr8KIawBlM KNBf3xd5xUDAmU72x733mG2QCe+IlC1yyDR8+OdqxgvXPqiP4+Y7t4dRpn3BW6ef TmgqaEkYWjE/s7XUUpG2B+lmiUICM3Kg+5LzIplPVKalq/DkWw5p8d+dVQ== -----END CERTIFICATE-----Generated at Tue May 13 15:21:10 2025 by rpki-client