$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2122/cREs8hmh_CmOnkUd4fU9j_ntn0w.roa File: cREs8hmh_CmOnkUd4fU9j_ntn0w.roa (raw, json) Hash identifier: CP7BSCAsooYTWgzemNYrDx/XFHt9xqP+ChJ75EbH+cE= Subject key identifier: 71:11:2C:F2:19:A1:FC:29:8E:9E:45:1D:E1:F5:3D:8F:F9:ED:9F:4C Certificate issuer: /CN=88884D4D4A75F17F08DD44CBA9592FE70F539D97 Certificate serial: 1D4C Authority key identifier: 88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/cREs8hmh_CmOnkUd4fU9j_ntn0w.roa Signing time: Wed 26 Mar 2025 02:11:17 +0000 ROA not before: Wed 26 Mar 2025 02:11:17 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 4515 IP address blocks: 123.49.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/iIhNTUp18X8I3UTLqVkv5w9TnZc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/iIhNTUp18X8I3UTLqVkv5w9TnZc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 09:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7500 (0x1d4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88884D4D4A75F17F08DD44CBA9592FE70F539D97 Validity Not Before: Mar 26 02:11:17 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=71112CF219A1FC298E9E451DE1F53D8FF9ED9F4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:30:aa:60:1f:f2:08:01:1e:09:43:50:cf:3f: dd:f6:1e:b2:f3:45:47:36:f3:58:30:5b:87:44:d2: 6f:99:c2:af:1d:73:1c:18:5f:c7:d3:9b:6d:a9:8d: 99:59:f7:43:ac:04:3d:82:32:fc:49:af:e3:53:12: e1:cb:86:9d:c6:8e:ac:91:a7:5c:8f:27:2b:52:a1: 15:3f:ab:91:17:50:10:b7:6f:02:b6:23:bd:c3:bd: 8d:fd:e1:5c:5b:a2:db:94:85:16:d2:81:95:f2:9f: 3c:e1:dd:7c:94:f0:60:6e:2f:e2:28:28:fe:f7:d3: 57:15:c2:56:4b:20:10:e7:df:0a:60:32:4b:18:3e: fd:9c:32:d4:0e:80:ae:e9:8b:f1:ca:7b:0e:46:5c: 75:b5:5a:57:19:a7:9e:10:56:2b:40:33:f8:13:96: fc:f8:8b:9e:37:52:69:eb:3e:fa:c5:4a:09:8a:c4: 04:3c:b2:02:49:bf:11:4e:f4:f7:c0:88:f3:5d:f3: 58:b6:60:31:b8:d1:86:4d:87:50:52:0a:f9:ed:56: 7d:1a:eb:c3:51:cf:5b:b6:42:71:4d:5f:9a:38:27: 16:21:0f:9e:d5:e5:ff:39:a4:bd:3c:76:4d:99:a0: 3f:6e:88:ed:00:62:19:e6:6b:6f:2c:75:68:b2:66: 4c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:11:2C:F2:19:A1:FC:29:8E:9E:45:1D:E1:F5:3D:8F:F9:ED:9F:4C X509v3 Authority Key Identifier: keyid:88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/iIhNTUp18X8I3UTLqVkv5w9TnZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/cREs8hmh_CmOnkUd4fU9j_ntn0w.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.49.246.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:7d:7d:0c:fb:73:de:18:5e:97:00:90:c3:ad:fe:1f:07:fe: 94:8d:45:0b:ec:ba:c8:9a:65:b6:9a:0b:61:4d:ab:43:d1:30: f4:1a:91:f1:9d:36:0c:08:bf:37:8b:0a:ca:9e:20:d0:a1:ab: 8a:f7:b2:a3:fd:e0:5a:0f:7e:3c:ae:b8:fa:72:d0:61:3a:55: 62:92:e2:fa:2c:29:40:d6:e5:24:ee:d3:ae:04:7f:7c:56:52: 22:06:d7:06:b4:81:fa:2a:ad:01:9b:73:de:8b:81:15:a6:af: 83:7e:eb:e0:db:8f:85:2a:ab:d7:e8:47:fe:48:9f:f6:2f:bc: c3:5f:43:63:04:bb:8d:87:ee:6a:4e:32:1d:47:b7:1d:af:ad: ef:e4:9d:37:91:01:2a:5e:c3:24:e0:5d:dc:09:16:25:cf:6d: b9:b0:9f:ae:0e:0f:7b:bc:3b:3e:78:52:c8:0b:61:1f:e9:6a: 9b:bb:0e:d4:aa:80:f8:bb:52:b2:5f:7a:0c:53:54:f5:be:03: 5e:f3:94:3d:6e:a8:77:df:62:0f:3b:ca:81:25:36:14:93:a0: 7a:e5:82:8a:8b:2d:d7:0e:45:59:c2:c7:4a:17:e9:64:c8:2c: e2:a6:29:49:5d:96:1c:20:7c:d2:89:dc:3b:7c:1a:73:a6:33: aa:73:3d:b0 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICHUwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODg4 ODRENEQ0QTc1RjE3RjA4REQ0NENCQTk1OTJGRTcwRjUzOUQ5NzAeFw0yNTAzMjYw MjExMTdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDcxMTEyQ0YyMTlBMUZD Mjk4RTlFNDUxREUxRjUzRDhGRjlFRDlGNEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFMKpgH/IIAR4JQ1DPP932HrLzRUc281gwW4dE0m+Zwq8dcxwY X8fTm22pjZlZ90OsBD2CMvxJr+NTEuHLhp3GjqyRp1yPJytSoRU/q5EXUBC3bwK2 I73DvY394VxbotuUhRbSgZXynzzh3XyU8GBuL+IoKP7301cVwlZLIBDn3wpgMksY Pv2cMtQOgK7pi/HKew5GXHW1WlcZp54QVitAM/gTlvz4i543UmnrPvrFSgmKxAQ8 sgJJvxFO9PfAiPNd81i2YDG40YZNh1BSCvntVn0a68NRz1u2QnFNX5o4JxYhD57V 5f85pL08dk2ZoD9uiO0AYhnma28sdWiyZkxVAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUcREs8hmh/CmOnkUd4fU9j/ntn0wwHwYDVR0jBBgwFoAUiIhNTUp18X8I3UTL qVkv5w9TnZcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjEy Mi9pSWhOVFVwMThYOEkzVVRMcVZrdjV3OVRuWmMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2lJaE5UVXAxOFg4STNVVExxVmt2NXc5VG5aYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIxMjIvY1JFczhobWhfQ21P bmtVZDRmVTlqX250bjB3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAHsx9jANBgkqhkiG9w0BAQsFAAOCAQEAfH19DPtz3hhelwCQw63+Hwf+lI1F C+y6yJpltpoLYU2rQ9Ew9BqR8Z02DAi/N4sKyp4g0KGriveyo/3gWg9+PK64+nLQ YTpVYpLi+iwpQNblJO7TrgR/fFZSIgbXBrSB+iqtAZtz3ouBFaavg37r4NuPhSqr 1+hH/kif9i+8w19DYwS7jYfuak4yHUe3Ha+t7+SdN5EBKl7DJOBd3AkWJc9tubCf rg4Pe7w7PnhSyAthH+lqm7sO1KqA+LtSsl96DFNU9b4DXvOUPW6od99iDzvKgSU2 FJOgeuWCiost1w5FWcLHShfpZMgs4qYpSV2WHCB80oncO3wac6YzqnM9sA== -----END CERTIFICATE-----Generated at Fri May 16 07:05:03 2025 by rpki-client