$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/vQ0ZK1kQpl5SzCyveSQSZ9vqmDc.roa File: vQ0ZK1kQpl5SzCyveSQSZ9vqmDc.roa (raw, json) Hash identifier: qeph6TaWsxJrjSvtHO865ouZdWx6dEi/4utM437idZ0= Subject key identifier: BD:0D:19:2B:59:10:A6:5E:52:CC:2C:AF:79:24:12:67:DB:EA:98:37 Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708 Certificate serial: 1CA9 Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/vQ0ZK1kQpl5SzCyveSQSZ9vqmDc.roa Signing time: Thu 02 Jan 2025 13:58:18 +0000 ROA not before: Thu 02 Jan 2025 13:58:18 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 137718 IP address blocks: 118.196.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 19:11:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7337 (0x1ca9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708 Validity Not Before: Jan 2 13:58:18 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=BD0D192B5910A65E52CC2CAF79241267DBEA9837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d3:34:ec:83:b4:1e:1a:78:8b:52:1e:3e:0d: f7:f0:ce:97:94:9e:d1:73:39:3c:2f:e7:bc:d0:7e: c6:53:33:77:25:85:3b:92:88:32:5b:90:2a:f0:c7: ae:4f:6a:e3:13:51:10:85:14:ea:db:87:ca:84:63: c4:7d:f8:ed:e9:b7:d4:b2:4f:3f:d0:a4:4e:eb:e5: 25:01:99:79:d0:b8:76:8d:87:c0:aa:b1:86:e1:f5: a3:9b:cc:74:20:4d:ff:c1:de:d5:91:d7:00:c5:cd: 32:51:a7:d0:3b:18:b8:b1:62:68:1e:54:ca:7f:f2: 23:cd:53:34:0f:7e:c7:67:ea:2a:f4:75:80:20:76: b8:5f:21:3e:b9:9f:91:15:6b:5c:0d:a4:c4:e5:f7: b3:e9:54:71:7c:14:e8:d9:4f:3e:57:7f:a1:8e:4d: b9:c3:06:f2:53:c1:e0:6d:17:a5:cb:a6:8d:31:d1: 7c:01:37:c2:ba:fd:5e:81:39:99:3e:45:45:28:f6: 49:ad:12:48:1c:5d:ee:aa:9c:9e:ab:9d:dd:14:d7: 97:36:f3:77:2e:89:e3:dc:32:c4:33:f4:a9:e2:f2: 92:fc:56:e2:84:6a:8d:8c:c6:51:53:3d:28:e0:a4: 41:2c:c8:ba:23:3e:65:ee:18:0f:83:3f:96:21:60: de:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:0D:19:2B:59:10:A6:5E:52:CC:2C:AF:79:24:12:67:DB:EA:98:37 X509v3 Authority Key Identifier: keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/vQ0ZK1kQpl5SzCyveSQSZ9vqmDc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.196.0.0/15 Signature Algorithm: sha256WithRSAEncryption 4e:e4:83:99:52:01:9f:9f:01:d2:23:b4:91:0e:ef:b4:63:50: a6:5a:22:c0:97:88:41:7b:af:d8:75:77:50:8b:ec:9c:6d:e2: 56:5d:4f:52:9c:47:92:7d:a3:8e:ed:66:b0:2e:28:52:a8:e8: 6c:63:66:dd:11:31:ed:95:9a:01:8d:4b:34:29:64:05:d0:64: 85:41:10:e3:e3:6a:ad:bb:06:fc:18:4d:d5:51:2b:34:e5:0f: 60:e4:60:77:d1:fe:1a:24:26:22:5a:9b:0a:72:88:e7:3d:a4: 55:ce:3c:dd:33:ef:ae:b5:7b:19:6c:cb:35:02:0f:36:23:9a: 20:98:b7:4b:c8:81:67:c5:06:60:de:db:65:05:fb:f8:74:b7: ad:b9:d1:e2:c8:63:d2:6c:22:a6:72:81:6f:5e:38:f9:cf:e6: e0:e1:14:18:6e:4f:fc:3a:5b:01:3a:95:72:61:96:d1:49:f2: f3:09:75:b2:a1:ea:ba:0d:11:5c:fa:35:18:08:e1:74:f6:7f: 9c:f0:8d:08:e7:27:db:3c:72:55:34:ff:4e:24:d1:d8:e9:79: f2:aa:dc:a9:54:32:d1:bb:ad:21:c0:07:06:e3:f8:77:db:94: 47:cd:07:12:87:44:4b:1e:1b:52:76:b8:a4:01:4b:e0:fc:ee: f7:05:d4:89 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICHKkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4 QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTAxMDIx MzU4MThaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEJEMEQxOTJCNTkxMEE2 NUU1MkNDMkNBRjc5MjQxMjY3REJFQTk4MzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDE0zTsg7QeGniLUh4+DffwzpeUntFzOTwv57zQfsZTM3clhTuS iDJbkCrwx65PauMTURCFFOrbh8qEY8R9+O3pt9SyTz/QpE7r5SUBmXnQuHaNh8Cq sYbh9aObzHQgTf/B3tWR1wDFzTJRp9A7GLixYmgeVMp/8iPNUzQPfsdn6ir0dYAg drhfIT65n5EVa1wNpMTl97PpVHF8FOjZTz5Xf6GOTbnDBvJTweBtF6XLpo0x0XwB N8K6/V6BOZk+RUUo9kmtEkgcXe6qnJ6rnd0U15c283cuiePcMsQz9Kni8pL8VuKE ao2MxlFTPSjgpEEsyLojPmXuGA+DP5YhYN5JAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUvQ0ZK1kQpl5SzCyveSQSZ9vqmDcwHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvdlEwWksxa1FwbDVT ekN5dmVTUVNaOXZxbURjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw BQMDAXbEMA0GCSqGSIb3DQEBCwUAA4IBAQBO5IOZUgGfnwHSI7SRDu+0Y1CmWiLA l4hBe6/YdXdQi+ycbeJWXU9SnEeSfaOO7WawLihSqOhsY2bdETHtlZoBjUs0KWQF 0GSFQRDj42qtuwb8GE3VUSs05Q9g5GB30f4aJCYiWpsKcojnPaRVzjzdM++utXsZ bMs1Ag82I5ogmLdLyIFnxQZg3ttlBfv4dLetudHiyGPSbCKmcoFvXjj5z+bg4RQY bk/8OlsBOpVyYZbRSfLzCXWyoeq6DRFc+jUYCOF09n+c8I0I5yfbPHJVNP9OJNHY 6XnyqtypVDLRu60hwAcG4/h325RHzQcSh0RLHhtSdrikAUvg/O73BdSJ -----END CERTIFICATE-----Generated at Sat May 17 16:48:31 2025 by rpki-client