$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2618/LiWYQlfqSr9wMOKBXQGhtyFiVRk.roa File: LiWYQlfqSr9wMOKBXQGhtyFiVRk.roa (raw, json) Hash identifier: efqng/VZ0qObM6O+6R64v60Zms/fZuugEkKrT05KSfU= Subject key identifier: 2E:25:98:42:57:EA:4A:BF:70:30:E2:81:5D:01:A1:B7:21:62:55:19 Certificate issuer: /CN=0136041A2F53F26B420D6BD4FD0E9C2D77320971 Certificate serial: 4C29 Authority key identifier: 01:36:04:1A:2F:53:F2:6B:42:0D:6B:D4:FD:0E:9C:2D:77:32:09:71 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/LiWYQlfqSr9wMOKBXQGhtyFiVRk.roa Signing time: Tue 25 Mar 2025 06:07:55 +0000 ROA not before: Tue 25 Mar 2025 06:07:55 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 63603 IP address blocks: 2400:de80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 05:07:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19497 (0x4c29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0136041A2F53F26B420D6BD4FD0E9C2D77320971 Validity Not Before: Mar 25 06:07:55 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=2E25984257EA4ABF7030E2815D01A1B721625519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0d:68:cc:04:02:4a:2f:62:6e:b9:01:18:8f: 4d:a9:d8:26:25:26:17:fa:eb:4f:75:63:1a:cf:a6: 52:5a:db:36:a9:7d:2a:60:5a:06:88:ab:b1:1a:c8: be:ce:60:35:74:fc:d4:24:cf:d7:67:4f:3b:ba:8d: 5c:58:c9:9e:a5:fb:23:27:e0:6a:20:64:06:f9:5d: e3:df:eb:b6:67:b9:9b:b2:01:b3:8d:d2:34:e6:33: 19:53:f5:6a:39:64:69:29:35:6e:f3:f5:75:4d:84: a9:ee:02:cf:38:f8:e2:7c:8f:2b:8a:12:76:9d:57: 33:c9:d4:4e:55:40:67:8b:78:33:a3:90:0c:18:99: eb:54:94:19:ac:4e:31:49:d9:4e:5b:49:ff:47:58: 79:44:d6:0c:34:cc:40:56:46:bc:4c:bf:7e:b7:6c: 97:a0:17:47:e4:fd:ba:0f:14:c0:9d:0e:4b:a5:77: d8:fb:26:61:32:68:ed:5d:5e:19:5e:01:fc:80:cf: c3:d9:5b:9a:f4:45:38:98:06:84:b1:db:ac:5f:30: 24:e0:0f:ed:67:8f:64:a8:aa:62:11:23:87:19:50: b2:1b:b7:d0:0e:a3:02:25:32:dd:0f:7b:7a:99:5d: 9a:41:cb:05:e0:8f:47:01:05:e5:4e:80:fd:cf:28: 3b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:25:98:42:57:EA:4A:BF:70:30:E2:81:5D:01:A1:B7:21:62:55:19 X509v3 Authority Key Identifier: keyid:01:36:04:1A:2F:53:F2:6B:42:0D:6B:D4:FD:0E:9C:2D:77:32:09:71 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/LiWYQlfqSr9wMOKBXQGhtyFiVRk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2400:de80::/32 Signature Algorithm: sha256WithRSAEncryption 5a:23:0a:ed:20:96:28:6d:e1:cf:fc:ef:c3:93:a2:72:12:cd: f9:3a:0c:38:50:03:b6:65:22:99:70:37:ea:4a:34:7c:70:55: 63:4c:8a:28:ad:63:cd:91:ae:3f:90:84:b3:d2:49:c6:d2:1e: 69:51:a6:fa:ac:25:4b:dd:53:04:49:6c:2a:6d:19:4a:1f:73: 2d:0f:10:80:3d:1b:db:8a:6b:8f:e5:79:7a:fb:0e:c2:9c:bb: dd:56:bd:90:4a:f7:e2:35:64:d5:ba:7c:3c:50:d1:65:dc:1e: b3:61:63:c6:e9:03:98:85:76:db:0a:04:5e:73:73:50:ab:23: a1:37:48:3e:2e:93:d4:d6:5a:02:f2:66:2d:d7:35:d2:db:24: f3:7f:0a:2c:55:00:eb:3e:5b:35:05:64:a5:d7:f8:25:27:9e: 18:f9:42:e7:30:97:6f:97:0a:a5:e2:ee:cd:48:ef:7a:e8:b2: 33:59:27:f1:0e:e8:c6:04:d4:2c:db:1f:7f:fa:22:cd:2d:5b: 58:d4:c8:a3:e4:c2:31:36:06:bf:52:52:a6:d1:57:3e:27:19: 95:fc:44:5c:c6:93:dc:61:aa:c1:4e:2a:bc:0b:8a:4e:64:9d: e6:25:5f:38:48:63:05:f2:6d:3f:42:eb:b4:d2:83:9d:4a:8f: e2:1b:4c:3e -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICTCkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDEz NjA0MUEyRjUzRjI2QjQyMEQ2QkQ0RkQwRTlDMkQ3NzMyMDk3MTAeFw0yNTAzMjUw NjA3NTVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDJFMjU5ODQyNTdFQTRB QkY3MDMwRTI4MTVEMDFBMUI3MjE2MjU1MTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCZDWjMBAJKL2JuuQEYj02p2CYlJhf66091YxrPplJa2zapfSpg WgaIq7EayL7OYDV0/NQkz9dnTzu6jVxYyZ6l+yMn4GogZAb5XePf67ZnuZuyAbON 0jTmMxlT9Wo5ZGkpNW7z9XVNhKnuAs84+OJ8jyuKEnadVzPJ1E5VQGeLeDOjkAwY metUlBmsTjFJ2U5bSf9HWHlE1gw0zEBWRrxMv363bJegF0fk/boPFMCdDkuld9j7 JmEyaO1dXhleAfyAz8PZW5r0RTiYBoSx26xfMCTgD+1nj2SoqmIRI4cZULIbt9AO owIlMt0Pe3qZXZpBywXgj0cBBeVOgP3PKDspAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQULiWYQlfqSr9wMOKBXQGhtyFiVRkwHwYDVR0jBBgwFoAUATYEGi9T8mtCDWvU /Q6cLXcyCXEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjYx OC9BVFlFR2k5VDhtdENEV3ZVX1E2Y0xYY3lDWEUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0FUWUVHaTlUOG10Q0RXdlVfUTZjTFhjeUNYRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2MTgvTGlXWVFsZnFTcjl3 TU9LQlhRR2h0eUZpVlJrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQA3oAwDQYJKoZIhvcNAQELBQADggEBAFojCu0gliht4c/878OTonISzfk6 DDhQA7ZlIplwN+pKNHxwVWNMiiitY82Rrj+QhLPSScbSHmlRpvqsJUvdUwRJbCpt GUofcy0PEIA9G9uKa4/leXr7DsKcu91WvZBK9+I1ZNW6fDxQ0WXcHrNhY8bpA5iF dtsKBF5zc1CrI6E3SD4uk9TWWgLyZi3XNdLbJPN/CixVAOs+WzUFZKXX+CUnnhj5 Qucwl2+XCqXi7s1I73rosjNZJ/EO6MYE1CzbH3/6Is0tW1jUyKPkwjE2Br9SUqbR Vz4nGZX8RFzGk9xhqsFOKrwLik5kneYlXzhIYwXybT9C67TSg51Kj+IbTD4= -----END CERTIFICATE-----Generated at Sun May 18 02:06:31 2025 by rpki-client