$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/K2DI8AWS4h2Xor0pP8dUnI921v4.roa File: K2DI8AWS4h2Xor0pP8dUnI921v4.roa (raw, json) Hash identifier: jiR1NlU3L4wBKvgBnsV9v8uesIb3SdPMAF42w1v/P+0= Subject key identifier: 2B:60:C8:F0:05:92:E2:1D:97:A2:BD:29:3F:C7:54:9C:8F:76:D6:FE Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708 Certificate serial: 1D22 Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/K2DI8AWS4h2Xor0pP8dUnI921v4.roa Signing time: Fri 17 Jan 2025 01:29:54 +0000 ROA not before: Fri 17 Jan 2025 01:29:54 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 137718 IP address blocks: 2406:d440::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 14:12:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7458 (0x1d22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708 Validity Not Before: Jan 17 01:29:54 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=2B60C8F00592E21D97A2BD293FC7549C8F76D6FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:34:95:cd:a4:48:08:20:8c:48:6e:50:e2:16: 34:2c:22:4c:ae:30:20:0a:e0:4a:45:72:e7:f2:39: a4:82:77:52:f7:20:e3:70:11:11:84:3e:10:14:b5: f1:af:6d:1b:fc:1f:fd:5a:b5:59:38:f4:c5:90:14: a8:bc:ee:4c:2d:b5:6d:8a:0d:a2:cd:4b:d6:7b:c0: 11:82:e9:83:35:c8:1f:fa:a0:17:dd:b6:e2:13:5d: 21:be:2e:c8:69:e4:20:1c:a6:25:c5:6d:8a:a0:da: 1a:ee:25:09:b8:9b:0c:fe:e5:d4:e1:02:1d:eb:d7: a0:d8:ae:fe:60:8f:81:6e:ec:19:6e:3f:2c:34:ae: be:8f:e9:80:6e:50:d9:e0:fc:9d:66:fe:33:32:d9: be:af:9e:59:03:01:03:c6:d5:4a:ab:cb:e0:b2:6f: 63:fc:51:12:72:04:64:f5:c0:dc:89:f8:d5:da:e2: fe:26:a8:01:5d:48:05:2e:6e:73:ea:8b:ce:0a:90: e0:fc:70:ed:4f:8f:9c:25:d5:44:b6:bd:98:2a:48: 0e:db:c9:59:ee:fd:7f:4b:9e:4b:ad:42:e7:dc:60: 74:74:49:a9:fd:56:9b:e6:ba:f5:1d:a3:72:cd:dc: 89:43:70:9b:37:02:ad:c2:a1:1e:54:20:73:60:45: 32:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:60:C8:F0:05:92:E2:1D:97:A2:BD:29:3F:C7:54:9C:8F:76:D6:FE X509v3 Authority Key Identifier: keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/K2DI8AWS4h2Xor0pP8dUnI921v4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2406:d440::/32 Signature Algorithm: sha256WithRSAEncryption 2f:de:3f:06:40:34:da:d9:6f:69:28:72:07:42:1d:dd:09:c7: 4c:61:a8:c7:21:d0:0e:61:ec:cf:f8:12:39:57:d3:96:0b:81: ec:bb:02:b3:8f:d7:60:a0:5c:30:6a:e6:d3:27:d0:18:53:53: c1:09:26:6e:7c:9b:d9:ac:ca:17:7c:74:91:85:b9:ce:56:71: 94:e7:70:7f:2d:44:c8:02:08:ec:d3:e3:03:62:5b:b1:53:22: cc:3e:18:9f:44:77:d4:7c:3c:19:4c:c9:8e:be:03:72:dd:e0: ce:85:1e:62:3d:ad:07:cc:bf:5c:49:0a:05:ff:6a:77:db:b3: 07:c4:c8:d4:1b:88:36:18:25:67:6a:52:7f:8e:41:2e:2d:ce: 05:2f:5d:6e:6c:0b:9f:27:b8:14:5a:3e:bd:d7:ee:91:c6:48: 6b:f8:34:d2:31:4e:a5:22:89:ec:a0:07:ec:31:87:1d:e4:5b: a6:63:ca:c0:01:e1:7d:8d:7a:3f:ae:54:8d:30:fa:82:4f:ed: 7f:37:cb:5b:3b:bb:af:c2:97:95:c4:cd:ed:ed:83:d1:7b:bc: 2e:92:5d:82:a4:62:8e:40:e3:c8:e4:06:01:6f:47:41:74:d4: 81:79:df:44:59:56:9a:32:bd:4d:0f:d5:06:b6:c5:04:56:90: db:04:08:3b -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICHSIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4 QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTAxMTcw MTI5NTRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDJCNjBDOEYwMDU5MkUy MUQ5N0EyQkQyOTNGQzc1NDlDOEY3NkQ2RkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpNJXNpEgIIIxIblDiFjQsIkyuMCAK4EpFcufyOaSCd1L3IONw ERGEPhAUtfGvbRv8H/1atVk49MWQFKi87kwttW2KDaLNS9Z7wBGC6YM1yB/6oBfd tuITXSG+Lshp5CAcpiXFbYqg2hruJQm4mwz+5dThAh3r16DYrv5gj4Fu7BluPyw0 rr6P6YBuUNng/J1m/jMy2b6vnlkDAQPG1Uqry+Cyb2P8URJyBGT1wNyJ+NXa4v4m qAFdSAUubnPqi84KkOD8cO1Pj5wl1US2vZgqSA7byVnu/X9LnkutQufcYHR0San9 VpvmuvUdo3LN3IlDcJs3Aq3CoR5UIHNgRTIHAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUK2DI8AWS4h2Xor0pP8dUnI921v4wHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvSzJESThBV1M0aDJY b3IwcFA4ZFVuSTkyMXY0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQG1EAwDQYJKoZIhvcNAQELBQADggEBAC/ePwZANNrZb2kocgdCHd0Jx0xh qMch0A5h7M/4EjlX05YLgey7ArOP12CgXDBq5tMn0BhTU8EJJm58m9msyhd8dJGF uc5WcZTncH8tRMgCCOzT4wNiW7FTIsw+GJ9Ed9R8PBlMyY6+A3Ld4M6FHmI9rQfM v1xJCgX/anfbswfEyNQbiDYYJWdqUn+OQS4tzgUvXW5sC58nuBRaPr3X7pHGSGv4 NNIxTqUiieygB+wxhx3kW6ZjysAB4X2Nej+uVI0w+oJP7X83y1s7u6/Cl5XEze3t g9F7vC6SXYKkYo5A48jkBgFvR0F01IF530RZVpoyvU0P1Qa2xQRWkNsECDs= -----END CERTIFICATE-----Generated at Sat May 17 14:07:20 2025 by rpki-client