$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/PAZ0llh8p6EuiK2qQClbgtHTfak.roa File: PAZ0llh8p6EuiK2qQClbgtHTfak.roa (raw, json) Hash identifier: gqp0BgZsLEsKDpR2lDA0Qdjcah+9uqAtQR8mtb2ZaeQ= Subject key identifier: 3C:06:74:96:58:7C:A7:A1:2E:88:AD:AA:40:29:5B:82:D1:D3:7D:A9 Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708 Certificate serial: 1CD4 Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/PAZ0llh8p6EuiK2qQClbgtHTfak.roa Signing time: Thu 02 Jan 2025 14:51:15 +0000 ROA not before: Thu 02 Jan 2025 14:51:15 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 4811 IP address blocks: 118.145.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 06:09:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7380 (0x1cd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708 Validity Not Before: Jan 2 14:51:15 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=3C067496587CA7A12E88ADAA40295B82D1D37DA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:eb:e6:38:82:b7:8f:bb:74:61:a7:5c:c9:3d: 20:6a:be:c9:13:e7:01:a7:ff:44:f3:35:70:cf:eb: ae:7d:2f:7e:8e:43:6a:aa:1e:38:42:9e:19:1f:82: e1:b2:70:c3:b6:64:43:42:df:aa:ef:0b:03:63:2b: 0e:49:e0:bb:69:cc:c6:e0:73:59:4c:9e:d2:61:81: 47:5f:37:b6:b4:93:31:c9:44:d3:c6:25:44:e4:7b: 54:52:e7:12:de:ba:1e:60:10:a6:80:55:e2:81:b3: 78:82:e6:fe:90:2e:4b:61:60:02:e5:2d:40:85:d8: c2:cd:e2:19:1b:7c:83:8a:91:be:2e:b3:f4:cb:35: f6:0d:61:18:3a:6c:7b:57:b7:16:42:00:63:a1:7b: 1c:3b:0f:30:15:95:83:56:7a:0d:85:24:33:30:a6: 7f:7d:d9:88:51:ec:f5:57:1d:14:33:8c:ca:cd:9e: 57:2d:2d:14:07:ad:c6:61:2c:59:f8:99:55:f5:6f: d2:b0:a1:68:b9:c6:bc:45:ab:46:2e:bc:d4:f8:44: e7:74:92:1a:c4:eb:25:84:cf:17:c6:4d:36:39:99: 3f:27:a5:62:ee:ab:63:b4:20:66:fc:d2:b9:17:56: 4c:56:a8:4f:b0:49:8a:ce:90:e4:7a:c3:48:dc:41: 61:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:06:74:96:58:7C:A7:A1:2E:88:AD:AA:40:29:5B:82:D1:D3:7D:A9 X509v3 Authority Key Identifier: keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/PAZ0llh8p6EuiK2qQClbgtHTfak.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.145.128.0/17 Signature Algorithm: sha256WithRSAEncryption 1f:ca:bb:8f:90:70:f0:e7:c3:c3:31:87:8f:5c:d3:93:3c:f7: 19:34:7d:cf:82:3c:d7:07:75:8c:ef:8c:ee:32:68:cf:18:d8: 27:81:9b:b6:9f:96:6e:ba:ed:30:fb:58:05:d6:37:25:37:36: 5f:e8:ee:4c:26:20:c7:0c:aa:b4:1e:45:8b:83:4e:4b:a1:f9: 72:b6:5b:ea:4c:9e:fe:71:85:5c:68:37:99:a2:24:a8:91:f4: 5d:bb:aa:cd:49:4a:5b:56:a8:9f:65:7a:6e:ec:19:49:16:cb: 81:23:70:45:fe:dd:26:ba:2f:b3:9d:46:b4:8b:fe:0b:b6:33: f6:70:44:f6:ad:ed:7f:ae:42:8b:dd:27:0c:d7:06:f9:6f:10: bd:79:5d:1c:d8:85:0f:3d:df:a7:51:11:5f:b3:33:d2:f6:b8: 3b:1f:df:96:38:68:66:4a:d5:3c:ca:5d:36:89:89:0f:a8:78: 06:89:85:12:4b:cd:eb:b8:c7:fc:53:d8:d6:7a:be:9f:3d:d7: 22:12:4f:25:65:3e:fd:1f:1a:4f:bd:5e:4a:ce:aa:50:20:8a: 76:c1:93:e0:d9:d8:20:c2:49:84:2a:db:d2:8f:47:26:b2:78: 77:fd:e7:7c:55:58:da:cc:7b:b4:52:c7:3c:b3:3b:9a:af:73: 6f:17:6d:02 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICHNQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4 QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTAxMDIx NDUxMTVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDNDMDY3NDk2NTg3Q0E3 QTEyRTg4QURBQTQwMjk1QjgyRDFEMzdEQTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJ6+Y4grePu3Rhp1zJPSBqvskT5wGn/0TzNXDP6659L36OQ2qq HjhCnhkfguGycMO2ZENC36rvCwNjKw5J4LtpzMbgc1lMntJhgUdfN7a0kzHJRNPG JUTke1RS5xLeuh5gEKaAVeKBs3iC5v6QLkthYALlLUCF2MLN4hkbfIOKkb4us/TL NfYNYRg6bHtXtxZCAGOhexw7DzAVlYNWeg2FJDMwpn992YhR7PVXHRQzjMrNnlct LRQHrcZhLFn4mVX1b9KwoWi5xrxFq0YuvNT4ROd0khrE6yWEzxfGTTY5mT8npWLu q2O0IGb80rkXVkxWqE+wSYrOkOR6w0jcQWHjAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUPAZ0llh8p6EuiK2qQClbgtHTfakwHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvUEFaMGxsaDhwNkV1 aUsycVFDbGJndEhUZmFrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEB3aRgDANBgkqhkiG9w0BAQsFAAOCAQEAH8q7j5Bw8OfDwzGHj1zTkzz3GTR9 z4I81wd1jO+M7jJozxjYJ4Gbtp+WbrrtMPtYBdY3JTc2X+juTCYgxwyqtB5Fi4NO S6H5crZb6kye/nGFXGg3maIkqJH0XbuqzUlKW1aon2V6buwZSRbLgSNwRf7dJrov s51GtIv+C7Yz9nBE9q3tf65Ci90nDNcG+W8QvXldHNiFDz3fp1ERX7Mz0va4Ox/f ljhoZkrVPMpdNomJD6h4BomFEkvN67jH/FPY1nq+nz3XIhJPJWU+/R8aT71eSs6q UCCKdsGT4NnYIMJJhCrb0o9HJrJ4d/3nfFVY2sx7tFLHPLM7mq9zbxdtAg== -----END CERTIFICATE-----Generated at Sat May 17 05:35:53 2025 by rpki-client