$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2329/S08gk3iwLLEpMcj1QO7K4KhStgU.roa File: S08gk3iwLLEpMcj1QO7K4KhStgU.roa (raw, json) Hash identifier: yOf9iY1WMYzrbZrzaW1zGaZqbmiHAxIWjmbN/VW8KO8= Subject key identifier: 4B:4F:20:93:78:B0:2C:B1:29:31:C8:F5:40:EE:CA:E0:A8:52:B6:05 Certificate issuer: /CN=EC10C93455759C659D2BB819FB07FF7063CECC32 Certificate serial: 1BF9 Authority key identifier: EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/S08gk3iwLLEpMcj1QO7K4KhStgU.roa Signing time: Fri 17 Jan 2025 01:27:20 +0000 ROA not before: Fri 17 Jan 2025 01:27:20 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 138950 IP address blocks: 118.184.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 21:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7161 (0x1bf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC10C93455759C659D2BB819FB07FF7063CECC32 Validity Not Before: Jan 17 01:27:20 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=4B4F209378B02CB12931C8F540EECAE0A852B605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0d:67:0a:b8:67:11:92:4f:49:f1:67:6e:45: 32:eb:c5:54:28:85:94:f9:8f:d2:a1:ca:2f:74:47: 7a:64:cb:3d:a2:e6:59:b1:3d:42:5e:80:80:ec:72: 74:ec:a7:3c:4d:92:08:6f:f2:d7:80:f7:68:c6:95: 5f:57:25:84:5e:72:5b:8c:f4:0b:6e:20:9b:a6:ab: cd:99:96:5a:36:eb:9a:95:86:53:cb:06:79:fa:35: c4:c7:6e:c6:85:ca:8c:79:63:d7:77:0a:26:8c:db: f9:c0:cb:28:95:1b:31:9e:41:01:b7:f1:9b:25:a3: 7c:8d:7b:59:47:31:4c:a7:3a:62:8d:74:8f:fc:f3: c0:71:93:37:3c:c6:92:c1:e2:66:bb:fd:cb:7a:23: 6e:ef:a2:7b:76:8d:db:a7:c5:ec:24:40:54:ea:fe: 41:65:d0:75:20:c1:92:d0:1a:22:e9:89:6c:5d:94: fb:a1:d0:a9:b0:cc:99:2c:40:62:b6:c0:b5:6e:7b: 6a:29:46:14:3e:be:83:14:77:3a:e4:9f:d9:8c:dd: 76:fa:d6:16:01:b0:a6:32:0f:97:70:20:82:90:be: fc:5a:2b:1c:98:6c:f3:9b:95:04:7a:af:70:18:a6: 83:8c:1b:57:53:a5:c9:19:01:57:dd:7c:6d:a6:5f: 9f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:4F:20:93:78:B0:2C:B1:29:31:C8:F5:40:EE:CA:E0:A8:52:B6:05 X509v3 Authority Key Identifier: keyid:EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/S08gk3iwLLEpMcj1QO7K4KhStgU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.184.128.0/17 Signature Algorithm: sha256WithRSAEncryption 2c:87:a9:2e:0e:10:96:00:71:53:f3:dc:d2:4a:42:11:11:31: b8:31:d6:ba:0a:8b:af:ed:cd:20:fb:52:45:a8:75:de:49:38: d4:0a:9d:65:24:dc:cc:71:de:75:50:f0:c2:25:a6:3c:d4:5c: a8:ab:07:35:87:d5:0f:8b:a5:62:8b:8f:ee:84:0e:24:1d:42: 7c:40:b2:3b:1d:e8:41:f1:57:63:e3:2f:c7:0d:b7:f3:4a:3f: 5f:20:33:cb:36:76:aa:9e:50:f5:ab:be:38:35:32:92:27:d9: 47:33:4e:19:c4:51:5e:63:ef:6e:c0:51:8b:02:48:01:d3:a4: f1:54:2c:bc:3b:3b:2b:d2:04:c1:b3:d4:12:4e:2e:40:ca:ad: 0f:16:25:a2:72:4e:13:91:6f:5e:36:72:a0:24:4f:19:b6:96: 53:73:4f:8c:9d:6b:84:2d:85:ab:3d:9c:a4:56:3e:27:23:7d: cb:28:d0:d8:c9:3c:32:81:66:d4:ca:8b:dc:5b:e1:ac:3a:3b: 6e:90:e5:64:76:ba:fd:07:30:a2:78:a8:ea:fd:7d:20:06:d8: c4:8f:53:7d:c9:f0:f4:78:63:97:80:ea:43:6e:c2:c1:a3:d8: 3c:1e:6f:0b:1b:b5:55:27:92:0b:a7:b5:9b:17:4e:53:ba:da: 16:fc:07:c8 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICG/kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUMx MEM5MzQ1NTc1OUM2NTlEMkJCODE5RkIwN0ZGNzA2M0NFQ0MzMjAeFw0yNTAxMTcw MTI3MjBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDRCNEYyMDkzNzhCMDJD QjEyOTMxQzhGNTQwRUVDQUUwQTg1MkI2MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+DWcKuGcRkk9J8WduRTLrxVQohZT5j9Khyi90R3pkyz2i5lmx PUJegIDscnTspzxNkghv8teA92jGlV9XJYRecluM9AtuIJumq82Zllo265qVhlPL Bnn6NcTHbsaFyox5Y9d3CiaM2/nAyyiVGzGeQQG38Zslo3yNe1lHMUynOmKNdI/8 88Bxkzc8xpLB4ma7/ct6I27vont2jdunxewkQFTq/kFl0HUgwZLQGiLpiWxdlPuh 0KmwzJksQGK2wLVue2opRhQ+voMUdzrkn9mM3Xb61hYBsKYyD5dwIIKQvvxaKxyY bPOblQR6r3AYpoOMG1dTpckZAVfdfG2mX58FAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUS08gk3iwLLEpMcj1QO7K4KhStgUwHwYDVR0jBBgwFoAU7BDJNFV1nGWdK7gZ +wf/cGPOzDIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjMy OS83QkRKTkZWMW5HV2RLN2daLXdmX2NHUE96REkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzdCREpORlYxbkdXZEs3Z1otd2ZfY0dQT3pESS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzMjkvUzA4Z2szaXdMTEVw TWNqMVFPN0s0S2hTdGdVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEB3a4gDANBgkqhkiG9w0BAQsFAAOCAQEALIepLg4QlgBxU/Pc0kpCERExuDHW ugqLr+3NIPtSRah13kk41AqdZSTczHHedVDwwiWmPNRcqKsHNYfVD4ulYouP7oQO JB1CfECyOx3oQfFXY+Mvxw2380o/XyAzyzZ2qp5Q9au+ODUykifZRzNOGcRRXmPv bsBRiwJIAdOk8VQsvDs7K9IEwbPUEk4uQMqtDxYlonJOE5FvXjZyoCRPGbaWU3NP jJ1rhC2Fqz2cpFY+JyN9yyjQ2Mk8MoFm1MqL3FvhrDo7bpDlZHa6/Qcwonio6v19 IAbYxI9Tfcnw9Hhjl4DqQ27CwaPYPB5vCxu1VSeSC6e1mxdOU7raFvwHyA== -----END CERTIFICATE-----Generated at Fri Jul 4 18:59:21 2025 by rpki-client