$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3282/gy2QzTsoXLsyXQvH8x5LW-xe-a0.roa File: gy2QzTsoXLsyXQvH8x5LW-xe-a0.roa (raw, json) Hash identifier: 6iucqtkG5JI+O+SZGI6Fgwi+D235R7BlFdxf3hZovpA= Subject key identifier: 83:2D:90:CD:3B:28:5C:BB:32:5D:0B:C7:F3:1E:4B:5B:EC:5E:F9:AD Certificate issuer: /CN=4CF09146DE604C0E442D56C68FC86CC50400AD21 Certificate serial: 070D Authority key identifier: 4C:F0:91:46:DE:60:4C:0E:44:2D:56:C6:8F:C8:6C:C5:04:00:AD:21 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TPCRRt5gTA5ELVbGj8hsxQQArSE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3282/gy2QzTsoXLsyXQvH8x5LW-xe-a0.roa Signing time: Wed 14 May 2025 13:10:34 +0000 ROA not before: Wed 14 May 2025 13:10:34 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 4134 IP address blocks: 160.19.82.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3282/TPCRRt5gTA5ELVbGj8hsxQQArSE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3282/TPCRRt5gTA5ELVbGj8hsxQQArSE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TPCRRt5gTA5ELVbGj8hsxQQArSE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1805 (0x70d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CF09146DE604C0E442D56C68FC86CC50400AD21 Validity Not Before: May 14 13:10:34 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=832D90CD3B285CBB325D0BC7F31E4B5BEC5EF9AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b8:2f:6c:9e:e9:cb:2e:f8:9a:5b:69:b7:89: 07:3d:04:9d:0e:ca:07:92:de:cd:07:3f:a8:03:60: 87:f8:24:24:72:86:fe:1e:27:5b:02:11:ee:7b:00: b2:cd:d8:49:1f:55:ec:55:1e:0d:26:aa:06:6c:6b: f5:16:d9:a1:bf:c3:41:8e:b6:4a:49:05:64:76:20: 2f:2c:dd:1d:8a:36:2d:aa:2e:26:07:9e:c1:9b:d7: e4:79:df:e2:bb:c7:68:5a:23:40:8e:55:04:63:cc: 46:0a:f1:f9:df:ae:01:f0:04:5b:27:fd:a5:2c:24: 08:75:b2:f0:bf:a2:40:da:24:af:96:4d:3b:1e:b6: 17:67:78:91:aa:83:9d:86:c5:7b:69:fd:be:06:24: d9:32:47:6e:6d:1c:63:fc:df:ee:ed:90:8e:c6:69: 17:a7:da:80:a3:3e:6d:61:ef:1b:94:c2:02:72:46: 6e:33:25:c8:d0:40:a5:3a:c7:13:d0:aa:44:99:32: ee:51:1f:00:17:19:5a:f0:56:ae:ea:23:fd:b4:49: 4d:90:78:a3:76:2e:38:b5:78:5a:5f:73:cc:aa:f0: a2:0c:fd:6f:7e:a8:a4:7a:c9:17:a8:52:f4:f0:f5: d2:8e:d7:d8:7e:7b:ca:91:bb:b7:fe:83:52:77:29: 47:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:2D:90:CD:3B:28:5C:BB:32:5D:0B:C7:F3:1E:4B:5B:EC:5E:F9:AD X509v3 Authority Key Identifier: keyid:4C:F0:91:46:DE:60:4C:0E:44:2D:56:C6:8F:C8:6C:C5:04:00:AD:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3282/TPCRRt5gTA5ELVbGj8hsxQQArSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TPCRRt5gTA5ELVbGj8hsxQQArSE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3282/gy2QzTsoXLsyXQvH8x5LW-xe-a0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.19.82.0/24 Signature Algorithm: sha256WithRSAEncryption 81:03:5a:50:de:4a:ac:6b:ed:51:94:f4:07:98:41:1d:35:77: e8:88:92:c7:92:1c:ec:ce:f3:a5:7b:7a:24:ba:0d:40:e5:fd: d2:6d:56:ad:3e:a7:95:02:ae:cf:53:30:f6:b1:fb:70:e3:89: 48:be:f5:ed:35:c6:2e:b1:1f:f9:a4:f3:1b:64:4d:bb:04:46: bc:a6:e5:15:ee:ef:33:40:85:d8:a0:6e:83:f4:29:e2:35:fb: c9:28:db:62:f8:3d:3a:c9:a6:c0:1c:97:ec:b3:cd:e6:83:df: 07:41:d7:97:38:b4:16:d4:95:de:52:08:fa:f0:93:96:ea:81: 91:d5:72:ad:c0:c7:10:54:dc:ec:46:41:ec:18:5c:28:ce:96: dd:91:71:d7:e6:68:d0:25:72:3b:19:dc:42:13:03:c1:3e:09: 01:33:c9:9a:45:64:f8:a5:4d:77:28:62:72:20:11:f0:51:3f: 4f:1a:0b:2a:7a:a0:81:90:fd:bb:ed:1a:57:b8:63:2f:50:48: 1e:e6:36:01:0e:55:0b:b2:08:88:8c:df:26:b8:f6:5b:96:d2: 4b:39:74:22:0f:b0:46:cc:57:e2:c5:44:ca:c4:af:a8:f5:69: ab:2b:41:ec:05:6a:7f:35:30:65:75:76:e5:25:3f:f7:df:b2: 50:dd:96:0c -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICBw0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNENG MDkxNDZERTYwNEMwRTQ0MkQ1NkM2OEZDODZDQzUwNDAwQUQyMTAeFw0yNTA1MTQx MzEwMzRaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDgzMkQ5MENEM0IyODVD QkIzMjVEMEJDN0YzMUU0QjVCRUM1RUY5QUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBuC9snunLLviaW2m3iQc9BJ0OygeS3s0HP6gDYIf4JCRyhv4e J1sCEe57ALLN2EkfVexVHg0mqgZsa/UW2aG/w0GOtkpJBWR2IC8s3R2KNi2qLiYH nsGb1+R53+K7x2haI0COVQRjzEYK8fnfrgHwBFsn/aUsJAh1svC/okDaJK+WTTse thdneJGqg52GxXtp/b4GJNkyR25tHGP83+7tkI7GaRen2oCjPm1h7xuUwgJyRm4z JcjQQKU6xxPQqkSZMu5RHwAXGVrwVq7qI/20SU2QeKN2Lji1eFpfc8yq8KIM/W9+ qKR6yReoUvTw9dKO19h+e8qRu7f+g1J3KUfXAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUgy2QzTsoXLsyXQvH8x5LW+xe+a0wHwYDVR0jBBgwFoAUTPCRRt5gTA5ELVbG j8hsxQQArSEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI4 Mi9UUENSUnQ1Z1RBNUVMVmJHajhoc3hRUUFyU0UuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1RQQ1JSdDVnVEE1RUxWYkdqOGhzeFFRQXJTRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyODIvZ3kyUXpUc29YTHN5 WFF2SDh4NUxXLXhlLWEwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAKATUjANBgkqhkiG9w0BAQsFAAOCAQEAgQNaUN5KrGvtUZT0B5hBHTV36IiS x5Ic7M7zpXt6JLoNQOX90m1WrT6nlQKuz1Mw9rH7cOOJSL717TXGLrEf+aTzG2RN uwRGvKblFe7vM0CF2KBug/Qp4jX7ySjbYvg9OsmmwByX7LPN5oPfB0HXlzi0FtSV 3lII+vCTluqBkdVyrcDHEFTc7EZB7BhcKM6W3ZFx1+Zo0CVyOxncQhMDwT4JATPJ mkVk+KVNdyhiciAR8FE/TxoLKnqggZD9u+0aV7hjL1BIHuY2AQ5VC7IIiIzfJrj2 W5bSSzl0Ig+wRsxX4sVEysSvqPVpqytB7AVqfzUwZXV25SU/99+yUN2WDA== -----END CERTIFICATE-----Generated at Sun May 18 00:07:15 2025 by rpki-client