$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/479/hZG7r3HAygm1NRT4c_UJqRF-vEY.roa File: hZG7r3HAygm1NRT4c_UJqRF-vEY.roa (raw, json) Hash identifier: HYAIxHGP/kNIGfrJxL1xZOFKvwxR5N+i6rPy/m2KqAo= Subject key identifier: 85:91:BB:AF:71:C0:CA:09:B5:35:14:F8:73:F5:09:A9:11:7E:BC:46 Certificate issuer: /CN=025E2D794E6FFAE295BACE491100E3D18B9C7141 Certificate serial: 1B9D Authority key identifier: 02:5E:2D:79:4E:6F:FA:E2:95:BA:CE:49:11:00:E3:D1:8B:9C:71:41 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Al4teU5v-uKVus5JEQDj0YuccUE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/479/hZG7r3HAygm1NRT4c_UJqRF-vEY.roa Signing time: Tue 18 Mar 2025 19:58:02 +0000 ROA not before: Tue 18 Mar 2025 19:58:02 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 38283 IP address blocks: 60.247.128.0/17 maxlen: 24 211.149.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/479/Al4teU5v-uKVus5JEQDj0YuccUE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/479/Al4teU5v-uKVus5JEQDj0YuccUE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Al4teU5v-uKVus5JEQDj0YuccUE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7069 (0x1b9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=025E2D794E6FFAE295BACE491100E3D18B9C7141 Validity Not Before: Mar 18 19:58:02 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=8591BBAF71C0CA09B53514F873F509A9117EBC46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:97:d5:93:58:a8:47:05:a2:09:fa:96:40:4b: 7f:b2:b5:54:ad:a3:23:48:4b:e0:7c:f6:77:de:09: b3:43:e6:88:cd:46:57:e7:dc:56:b6:1f:42:d4:56: 87:f7:b3:6b:2a:53:46:40:82:b4:69:0e:74:01:47: 9c:b9:1a:aa:c1:a8:d7:e4:4e:0b:9b:d5:af:cc:84: 52:96:bb:61:ca:50:88:b4:c8:38:7f:cc:d2:4d:65: d5:db:b7:c8:4b:fc:9e:97:bd:7a:3c:b2:95:49:92: e0:a1:69:99:2e:bf:91:4f:b6:2f:e5:4a:05:65:48: ac:2c:59:52:96:1f:67:1a:45:d0:35:2b:b3:f3:26: bb:d8:58:8a:f6:47:4c:67:a5:0a:8a:2d:90:f6:bc: d2:e4:77:76:8a:bd:ad:29:b3:45:1e:dd:8d:0e:8a: 3b:5d:3f:38:3e:3f:5e:05:42:c4:58:74:48:35:1a: 18:f3:53:8e:a9:5b:2c:18:14:e5:2f:63:4c:a8:a4: 92:a6:b3:0e:82:dd:66:84:58:63:a0:dd:61:72:e4: c4:58:f0:da:ab:e4:68:2f:17:84:aa:60:da:a0:c8: 8e:77:cd:b5:78:db:51:84:04:a8:3c:5e:96:40:68: df:0b:3c:80:c1:10:7f:e9:e1:fb:04:dc:f5:44:48: 6e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:91:BB:AF:71:C0:CA:09:B5:35:14:F8:73:F5:09:A9:11:7E:BC:46 X509v3 Authority Key Identifier: keyid:02:5E:2D:79:4E:6F:FA:E2:95:BA:CE:49:11:00:E3:D1:8B:9C:71:41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/479/Al4teU5v-uKVus5JEQDj0YuccUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Al4teU5v-uKVus5JEQDj0YuccUE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/479/hZG7r3HAygm1NRT4c_UJqRF-vEY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.247.128.0/17 211.149.128.0/17 Signature Algorithm: sha256WithRSAEncryption 95:0a:63:68:ba:9a:0e:14:77:51:dd:5f:12:63:6b:4a:b4:1d: 05:b5:cf:4e:45:69:39:f2:ee:97:98:77:16:ab:00:1e:de:2e: cd:0a:4d:c8:c8:1a:91:ef:f8:bc:0e:2b:8c:75:5f:82:d0:df: 4e:19:6c:ff:c9:cb:6c:79:4d:52:af:d7:0f:35:62:b0:f7:8c: 3d:0a:5f:ed:3a:19:5c:65:98:94:38:7f:f9:a4:be:07:cc:7d: b5:6f:be:63:d2:64:d4:a5:d1:90:0f:f8:e6:c6:2d:e0:fa:a4: 17:fc:f4:e8:a8:57:91:14:57:ad:c1:01:e9:6b:c9:4e:5b:38: a3:1e:66:40:c6:c3:4c:0d:1c:81:35:72:24:8c:c1:50:9c:54: 0d:41:05:64:0c:a2:86:64:36:69:46:c4:be:0a:14:85:ab:a4: 88:f7:46:1f:10:64:92:d6:88:3f:4d:e7:35:a3:81:cb:9c:81: 2c:fd:94:97:08:e6:55:55:4e:fd:ff:1d:f7:94:09:e6:2c:37: e8:55:a5:3c:97:d2:fe:64:81:0d:29:b5:64:e3:45:85:a1:b6: 6e:1e:cd:36:3f:90:28:6a:0e:56:41:27:ee:9f:0c:81:02:91: c4:fa:48:b9:a2:c0:bf:09:46:ed:3c:d9:c7:c8:ad:9a:77:95: 2e:00:f6:45 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgICG50wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDI1 RTJENzk0RTZGRkFFMjk1QkFDRTQ5MTEwMEUzRDE4QjlDNzE0MTAeFw0yNTAzMTgx OTU4MDJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDg1OTFCQkFGNzFDMENB MDlCNTM1MTRGODczRjUwOUE5MTE3RUJDNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9l9WTWKhHBaIJ+pZAS3+ytVStoyNIS+B89nfeCbND5ojNRlfn 3Fa2H0LUVof3s2sqU0ZAgrRpDnQBR5y5GqrBqNfkTgub1a/MhFKWu2HKUIi0yDh/ zNJNZdXbt8hL/J6XvXo8spVJkuChaZkuv5FPti/lSgVlSKwsWVKWH2caRdA1K7Pz JrvYWIr2R0xnpQqKLZD2vNLkd3aKva0ps0Ue3Y0OijtdPzg+P14FQsRYdEg1Ghjz U46pWywYFOUvY0yopJKmsw6C3WaEWGOg3WFy5MRY8Nqr5GgvF4SqYNqgyI53zbV4 21GEBKg8XpZAaN8LPIDBEH/p4fsE3PVESG5LAgMBAAGjggH3MIIB8zAdBgNVHQ4E FgQUhZG7r3HAygm1NRT4c/UJqRF+vEYwHwYDVR0jBBgwFoAUAl4teU5v+uKVus5J EQDj0YuccUEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDc5 L0FsNHRlVTV2LXVLVnVzNUpFUURqMFl1Y2NVRS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvQWw0dGVVNXYtdUtWdXM1SkVRRGowWXVjY1VFLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDc5L2haRzdyM0hBeWdtMU5S VDRjX1VKcVJGLXZFWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD BAc894ADBAfTlYAwDQYJKoZIhvcNAQELBQADggEBAJUKY2i6mg4Ud1HdXxJja0q0 HQW1z05FaTny7peYdxarAB7eLs0KTcjIGpHv+LwOK4x1X4LQ304ZbP/Jy2x5TVKv 1w81YrD3jD0KX+06GVxlmJQ4f/mkvgfMfbVvvmPSZNSl0ZAP+ObGLeD6pBf89Oio V5EUV63BAelryU5bOKMeZkDGw0wNHIE1ciSMwVCcVA1BBWQMooZkNmlGxL4KFIWr pIj3Rh8QZJLWiD9N5zWjgcucgSz9lJcI5lVVTv3/HfeUCeYsN+hVpTyX0v5kgQ0p tWTjRYWhtm4ezTY/kChqDlZBJ+6fDIECkcT6SLmiwL8JRu082cfIrZp3lS4A9kU= -----END CERTIFICATE-----Generated at Sat May 17 22:35:10 2025 by rpki-client