$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/dehnZT7WynVSuqPgVPT60NPmYfI.roa File: dehnZT7WynVSuqPgVPT60NPmYfI.roa (raw, json) Hash identifier: GkKex5KucznCpBFxilb40uDJY+DsjPVXxtCtghruIoU= Subject key identifier: 75:E8:67:65:3E:D6:CA:75:52:BA:A3:E0:54:F4:FA:D0:D3:E6:61:F2 Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Certificate serial: 7A Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/dehnZT7WynVSuqPgVPT60NPmYfI.roa Signing time: Wed 23 Apr 2025 14:50:22 +0000 ROA not before: Wed 23 Apr 2025 14:50:22 +0000 ROA not after: Wed 15 Apr 2026 09:08:30 +0000 asID: 208242 IP address blocks: 45.248.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 21:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Validity Not Before: Apr 23 14:50:22 2025 GMT Not After : Apr 15 09:08:30 2026 GMT Subject: CN=75E867653ED6CA7552BAA3E054F4FAD0D3E661F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:85:44:eb:5e:8a:46:27:d8:bc:0b:54:a2:b5: 57:c0:a9:07:14:35:d2:f8:0f:d3:9b:65:21:54:b3: eb:57:dd:a8:d1:06:18:82:97:94:ac:1c:92:3b:87: 04:73:a6:10:1b:82:4d:a3:31:88:11:95:ac:bf:11: 15:5c:ff:dd:91:08:f1:51:34:2a:bb:66:f2:28:e8: 16:70:40:ec:d8:d9:28:9e:f2:df:1e:1f:a3:64:9c: 62:f7:3c:f7:6a:91:1c:b8:7c:83:46:d0:f3:87:e5: a0:7e:b0:70:f6:ec:c4:7a:97:36:ce:fd:42:98:ba: 39:0b:ca:8a:2c:4d:20:b5:34:f2:b1:81:1a:9f:b7: d6:c3:6e:83:8b:c4:0c:6f:ba:8d:c9:80:d8:36:15: 1d:e1:b6:68:0d:17:74:87:02:a8:c5:bd:09:b9:d6: 45:11:53:32:56:1f:c2:3f:97:39:55:5d:d9:3c:fb: 44:67:04:10:12:d8:b9:50:37:0c:16:02:36:29:56: 8a:0c:83:11:5b:ec:1f:55:34:96:32:37:16:42:f7: d0:64:a7:2a:fb:de:cc:53:f2:86:1b:4f:34:ba:ba: 59:ca:86:86:2f:92:e0:eb:dc:88:7e:64:87:28:81: e9:7f:ee:e8:fe:0f:07:61:d0:71:39:4c:66:ca:fa: 08:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:E8:67:65:3E:D6:CA:75:52:BA:A3:E0:54:F4:FA:D0:D3:E6:61:F2 X509v3 Authority Key Identifier: keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/dehnZT7WynVSuqPgVPT60NPmYfI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.248.88.0/24 Signature Algorithm: sha256WithRSAEncryption d0:72:70:83:c1:cf:d3:ed:57:74:9a:57:fe:c0:f8:3e:65:26: a4:c2:83:52:60:ab:db:cd:82:07:a7:b5:22:a7:b7:18:44:85: 93:7b:46:2d:5a:74:2a:2d:d5:04:e6:06:76:18:58:96:cb:05: 1d:e1:b2:2b:0b:0a:63:17:a0:97:52:c6:2d:03:1b:a0:42:5f: c5:20:72:81:37:03:2d:4a:e2:0a:a6:0a:d1:ad:48:ef:9f:53: 72:de:67:04:f5:a5:fb:fe:2f:13:b3:4d:ad:23:f2:b5:7b:0d: 9d:e4:12:7a:0e:1c:b7:a4:cf:d5:03:42:c4:6d:cb:af:9a:48: ee:89:93:05:a5:88:94:20:16:ce:02:d2:ed:ee:61:28:49:15: 33:cd:9e:bb:12:10:92:02:ef:1e:5d:28:c3:84:7f:c0:df:10: c3:e6:7e:9a:9d:bf:ab:8a:c9:29:66:0a:ab:ba:47:db:b8:fb: 9c:97:b2:05:80:db:6b:a0:0c:88:df:76:e5:c3:67:6e:71:bc: e7:da:92:ac:f8:1c:d2:08:4f:b3:a1:aa:51:f6:77:ee:b6:1e: a9:26:a7:cd:6b:92:44:d8:c2:41:3c:63:50:6d:05:32:1b:22: 84:34:84:12:c7:34:e9:e5:68:41:93:bc:c0:40:c4:fd:62:bb: 6c:13:b8:d0 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBejANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzOUVF ODUyRkUxMzhDREVEQzVCNDJEMTFBMzQyOTVEMTA5QUQ0OTI1MB4XDTI1MDQyMzE0 NTAyMloXDTI2MDQxNTA5MDgzMFowMzExMC8GA1UEAxMoNzVFODY3NjUzRUQ2Q0E3 NTUyQkFBM0UwNTRGNEZBRDBEM0U2NjFGMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKqFROteikYn2LwLVKK1V8CpBxQ10vgP05tlIVSz61fdqNEGGIKX lKwckjuHBHOmEBuCTaMxiBGVrL8RFVz/3ZEI8VE0Krtm8ijoFnBA7NjZKJ7y3x4f o2ScYvc892qRHLh8g0bQ84floH6wcPbsxHqXNs79Qpi6OQvKiixNILU08rGBGp+3 1sNug4vEDG+6jcmA2DYVHeG2aA0XdIcCqMW9CbnWRRFTMlYfwj+XOVVd2Tz7RGcE EBLYuVA3DBYCNilWigyDEVvsH1U0ljI3FkL30GSnKvvezFPyhhtPNLq6WcqGhi+S 4OvciH5khyiB6X/u6P4PB2HQcTlMZsr6CB8CAwEAAaOCAfMwggHvMB0GA1UdDgQW BBR16GdlPtbKdVK6o+BU9PrQ0+Zh8jAfBgNVHSMEGDAWgBQ57oUv4TjN7cW0LRGj QpXRCa1JJTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNzE2 L09lNkZMLUU0emUzRnRDMFJvMEtWMFFtdFNTVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvT2U2RkwtRTR6ZTNGdEMwUm8wS1YwUW10U1NVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcxNi9kZWhuWlQ3V3luVlN1 cVBnVlBUNjBOUG1ZZkkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQALfhYMA0GCSqGSIb3DQEBCwUAA4IBAQDQcnCDwc/T7Vd0mlf+wPg+ZSakwoNS YKvbzYIHp7Uip7cYRIWTe0YtWnQqLdUE5gZ2GFiWywUd4bIrCwpjF6CXUsYtAxug Ql/FIHKBNwMtSuIKpgrRrUjvn1Ny3mcE9aX7/i8Ts02tI/K1ew2d5BJ6Dhy3pM/V A0LEbcuvmkjuiZMFpYiUIBbOAtLt7mEoSRUzzZ67EhCSAu8eXSjDhH/A3xDD5n6a nb+riskpZgqrukfbuPucl7IFgNtroAyI33blw2ducbzn2pKs+BzSCE+zoapR9nfu th6pJqfNa5JE2MJBPGNQbQUyGyKENIQSxzTp5WhBk7zAQMT9YrtsE7jQ -----END CERTIFICATE-----Generated at Fri May 16 19:29:10 2025 by rpki-client