$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/8SmGRlTlCy-GVDJpaOrk6aoXFik.roa File: 8SmGRlTlCy-GVDJpaOrk6aoXFik.roa (raw, json) Hash identifier: d1fKrULhXVx/Z/wCgerizdbxLkRHVzGhmQc90ooiOG0= Subject key identifier: F1:29:86:46:54:E5:0B:2F:86:54:32:69:68:EA:E4:E9:AA:17:16:29 Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708 Certificate serial: 1CC9 Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/8SmGRlTlCy-GVDJpaOrk6aoXFik.roa Signing time: Thu 02 Jan 2025 13:58:27 +0000 ROA not before: Thu 02 Jan 2025 13:58:27 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 58542 IP address blocks: 180.184.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 14:42:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7369 (0x1cc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708 Validity Not Before: Jan 2 13:58:27 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=F129864654E50B2F8654326968EAE4E9AA171629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fe:e9:0a:05:53:01:5e:84:92:86:a9:c8:b4: dc:4f:97:7c:cb:9e:63:dd:d8:fe:73:a1:26:75:82: 2b:70:87:25:70:6c:4a:8f:53:b8:5d:4d:cd:ee:bb: 01:fa:e2:fb:91:10:10:f7:6c:76:c9:68:be:b4:b1: 0a:18:83:1b:31:d2:66:8e:2b:a8:77:61:79:ab:0d: 72:dd:04:db:10:18:55:33:f0:5f:a2:45:af:c3:00: a2:25:2d:15:ef:08:21:8f:e9:93:9d:21:29:c0:c4: ae:4e:71:58:dd:5e:97:64:d1:0a:6d:67:b4:36:65: 84:9a:ba:da:70:40:e7:3f:ce:4a:5a:c3:32:40:ec: 3c:c8:d8:d4:d5:eb:1a:3c:88:2d:cf:91:2b:e8:90: 6d:90:60:0e:cd:b4:be:d4:d9:5c:6e:79:61:1e:f0: 01:cd:10:1c:93:ce:d6:4c:ea:85:30:98:38:f5:bc: 58:cd:f0:64:66:11:4e:0c:03:d5:82:36:05:fe:dc: 3f:24:02:88:60:50:cd:87:69:79:ac:dd:2b:29:e6: e1:54:b9:31:aa:dc:f3:30:56:00:11:0a:2a:28:df: 1d:d4:c8:26:00:93:7e:0b:c7:63:f5:e2:53:54:a6: 83:b1:cd:72:2f:ec:51:c2:03:76:c9:81:3c:16:0d: 17:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:29:86:46:54:E5:0B:2F:86:54:32:69:68:EA:E4:E9:AA:17:16:29 X509v3 Authority Key Identifier: keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/8SmGRlTlCy-GVDJpaOrk6aoXFik.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.184.24.0/21 Signature Algorithm: sha256WithRSAEncryption ad:08:b3:05:60:7f:ce:32:a8:bc:90:ad:b2:27:05:3b:d3:72: 30:59:3e:87:4e:ff:4c:cf:65:99:ae:40:a6:77:f9:13:27:ad: 18:19:71:cc:17:5a:ce:bb:d9:eb:5d:ab:e7:b8:09:fe:2a:1f: ca:36:8d:c7:4d:3b:91:a6:eb:71:0c:95:97:e2:85:72:48:e4: e7:8e:ab:b5:5b:80:73:84:3e:43:3c:2c:97:4f:7d:2a:59:49: c2:b0:c5:35:68:aa:21:38:58:6f:9c:b0:45:43:dd:8f:29:89: 4c:ad:9e:9a:6a:e2:a5:9e:6d:fe:1c:bc:b8:e9:5f:be:08:d6: 78:92:75:ef:1f:34:93:1f:e1:0e:60:b3:4f:51:b6:79:4f:58: 53:46:80:74:b8:84:a5:0e:d7:e4:ea:6d:c3:a7:53:5d:02:68: e6:3f:f4:e3:b8:cc:67:12:85:1e:39:e3:8a:39:71:20:a0:8e: a2:3c:ed:d8:a4:84:fd:aa:60:59:22:31:42:42:d1:48:b9:ed: c0:80:88:7d:dd:44:31:64:de:87:f8:44:8f:c8:48:b1:02:1d: d8:28:8f:04:1c:ea:28:4a:6d:9d:ce:70:6b:e2:21:5b:ef:0a: d7:42:c8:cf:2c:c6:e2:db:2d:e6:b4:3a:67:db:fe:61:d2:1a: 29:e3:49:d2 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICHMkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4 QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTAxMDIx MzU4MjdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEYxMjk4NjQ2NTRFNTBC MkY4NjU0MzI2OTY4RUFFNEU5QUExNzE2MjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDO/ukKBVMBXoSShqnItNxPl3zLnmPd2P5zoSZ1gitwhyVwbEqP U7hdTc3uuwH64vuREBD3bHbJaL60sQoYgxsx0maOK6h3YXmrDXLdBNsQGFUz8F+i Ra/DAKIlLRXvCCGP6ZOdISnAxK5OcVjdXpdk0QptZ7Q2ZYSautpwQOc/zkpawzJA 7DzI2NTV6xo8iC3PkSvokG2QYA7NtL7U2VxueWEe8AHNEByTztZM6oUwmDj1vFjN 8GRmEU4MA9WCNgX+3D8kAohgUM2HaXms3Ssp5uFUuTGq3PMwVgARCioo3x3UyCYA k34Lx2P14lNUpoOxzXIv7FHCA3bJgTwWDRe1AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU8SmGRlTlCy+GVDJpaOrk6aoXFikwHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvOFNtR1JsVGxDeS1H VkRKcGFPcms2YW9YRmlrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA7S4GDANBgkqhkiG9w0BAQsFAAOCAQEArQizBWB/zjKovJCtsicFO9NyMFk+ h07/TM9lma5Apnf5EyetGBlxzBdazrvZ612r57gJ/iofyjaNx007kabrcQyVl+KF ckjk546rtVuAc4Q+Qzwsl099KllJwrDFNWiqIThYb5ywRUPdjymJTK2emmripZ5t /hy8uOlfvgjWeJJ17x80kx/hDmCzT1G2eU9YU0aAdLiEpQ7X5Optw6dTXQJo5j/0 47jMZxKFHjnjijlxIKCOojzt2KSE/apgWSIxQkLRSLntwICIfd1EMWTeh/hEj8hI sQId2CiPBBzqKEptnc5wa+IhW+8K10LIzyzG4tst5rQ6Z9v+YdIaKeNJ0g== -----END CERTIFICATE-----Generated at Sun May 18 12:53:01 2025 by rpki-client