$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/hu7fPe6J5JUaliyOtZpOr3Jio1Y.roa File: hu7fPe6J5JUaliyOtZpOr3Jio1Y.roa (raw, json) Hash identifier: zz8Yn1YAtZN8RT0omllVKHwfw+qxYpOJrOYEpGrFDX4= Subject key identifier: 86:EE:DF:3D:EE:89:E4:95:1A:96:2C:8E:B5:9A:4E:AF:72:62:A3:56 Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708 Certificate serial: 1CB0 Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/hu7fPe6J5JUaliyOtZpOr3Jio1Y.roa Signing time: Thu 02 Jan 2025 13:58:20 +0000 ROA not before: Thu 02 Jan 2025 13:58:20 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 138421 IP address blocks: 180.184.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:39:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7344 (0x1cb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708 Validity Not Before: Jan 2 13:58:20 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=86EEDF3DEE89E4951A962C8EB59A4EAF7262A356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2f:33:93:af:88:2f:40:74:4f:c9:cf:02:2e: de:c8:da:4b:8d:db:d6:f9:b7:a9:2b:52:da:6f:43: ef:c2:87:14:d5:07:78:20:74:cf:17:5f:a6:61:5d: 6c:f4:3d:16:1a:5b:ab:53:60:6f:56:38:82:b2:4c: 84:af:9e:1e:09:dd:0b:6c:2f:ec:39:89:c0:3c:e9: a1:5e:12:e6:89:9c:22:09:1d:aa:3c:c6:9d:46:aa: 7f:e3:da:2a:5d:09:4b:83:b1:0d:be:f4:9a:79:81: 25:3b:1d:34:d7:de:69:63:39:62:cb:67:3f:e5:e5: 30:83:24:dc:60:2f:c3:20:fb:b1:39:9b:a8:b9:64: bc:d3:3c:87:6f:9a:4b:c9:dc:b0:fe:8b:0a:15:72: fe:70:22:31:34:3d:ae:3f:7e:d0:78:5f:d5:da:13: d6:a5:06:e9:4f:d1:0a:2b:8a:f9:fe:e0:a7:7a:9f: eb:82:54:28:49:67:6c:b9:8d:5e:51:fe:9e:4c:7a: b3:1d:e0:18:2d:bd:9d:ac:50:f4:55:cc:f2:f7:1d: ad:75:10:19:71:a2:17:83:66:28:2e:d0:be:4e:4b: 38:73:b1:91:98:71:cb:d7:f9:a4:7f:ef:5b:69:30: b3:4a:5c:cd:a8:1f:a7:0a:c6:d6:08:dd:6e:4c:59: 5e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:EE:DF:3D:EE:89:E4:95:1A:96:2C:8E:B5:9A:4E:AF:72:62:A3:56 X509v3 Authority Key Identifier: keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/hu7fPe6J5JUaliyOtZpOr3Jio1Y.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.184.152.0/22 Signature Algorithm: sha256WithRSAEncryption 85:77:18:44:d6:77:00:e8:b9:a8:c9:06:51:77:85:1d:f1:b6: 86:b0:42:6d:bd:a5:1e:90:50:67:7b:ba:af:69:1b:49:a2:6a: d7:7d:a1:c4:c9:54:bb:ee:6c:1c:66:4d:d1:50:19:f8:1c:b9: a9:88:c5:2d:f5:7d:5f:69:42:76:4d:53:85:aa:d1:06:26:51: a1:ef:01:81:93:7c:be:e2:46:2b:86:f2:fe:81:99:c6:34:19: 50:5b:a3:dd:0c:1b:66:fc:24:d3:5c:22:dd:25:c7:e5:41:b0: 7b:c7:c0:be:1a:5b:fb:ee:9c:4b:c5:aa:6b:59:28:db:68:1e: 65:07:0c:fc:3c:d5:eb:89:62:68:1c:0d:51:43:dd:94:5e:13: eb:29:23:82:db:cc:9a:72:50:b0:3a:81:f9:3a:46:94:92:cd: 07:df:14:49:b7:b7:6d:22:e2:c9:1a:7d:35:c8:5c:31:f3:e4: 9b:fb:2d:7d:f1:20:94:15:6e:95:90:5f:2e:f1:49:47:13:40: 67:74:15:c2:ad:f7:8e:af:05:38:c7:ed:ee:63:a0:ae:6b:16: ea:b0:16:12:ef:f0:24:23:09:dd:58:18:f4:fa:50:8c:b2:38: 1b:89:eb:6a:2c:93:13:65:db:73:7f:96:f5:4a:5a:0d:00:d8: 1c:02:70:9d -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICHLAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4 QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTAxMDIx MzU4MjBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDg2RUVERjNERUU4OUU0 OTUxQTk2MkM4RUI1OUE0RUFGNzI2MkEzNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDELzOTr4gvQHRPyc8CLt7I2kuN29b5t6krUtpvQ+/ChxTVB3gg dM8XX6ZhXWz0PRYaW6tTYG9WOIKyTISvnh4J3QtsL+w5icA86aFeEuaJnCIJHao8 xp1Gqn/j2ipdCUuDsQ2+9Jp5gSU7HTTX3mljOWLLZz/l5TCDJNxgL8Mg+7E5m6i5 ZLzTPIdvmkvJ3LD+iwoVcv5wIjE0Pa4/ftB4X9XaE9alBulP0Qorivn+4Kd6n+uC VChJZ2y5jV5R/p5MerMd4BgtvZ2sUPRVzPL3Ha11EBlxoheDZigu0L5OSzhzsZGY ccvX+aR/71tpMLNKXM2oH6cKxtYI3W5MWV6XAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUhu7fPe6J5JUaliyOtZpOr3Jio1YwHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvaHU3ZlBlNko1SlVh bGl5T3RacE9yM0ppbzFZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEArS4mDANBgkqhkiG9w0BAQsFAAOCAQEAhXcYRNZ3AOi5qMkGUXeFHfG2hrBC bb2lHpBQZ3u6r2kbSaJq132hxMlUu+5sHGZN0VAZ+By5qYjFLfV9X2lCdk1TharR BiZRoe8BgZN8vuJGK4by/oGZxjQZUFuj3QwbZvwk01wi3SXH5UGwe8fAvhpb++6c S8Wqa1ko22geZQcM/DzV64liaBwNUUPdlF4T6ykjgtvMmnJQsDqB+TpGlJLNB98U Sbe3bSLiyRp9NchcMfPkm/stffEglBVulZBfLvFJRxNAZ3QVwq33jq8FOMft7mOg rmsW6rAWEu/wJCMJ3VgY9PpQjLI4G4nraiyTE2Xbc3+W9UpaDQDYHAJwnQ== -----END CERTIFICATE-----Generated at Sat May 17 14:48:05 2025 by rpki-client