$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/561/ICSITvbxtzpmmwvqipIQvWfa5zU.roa File: ICSITvbxtzpmmwvqipIQvWfa5zU.roa (raw, json) Hash identifier: wy2LQSXW3nujhBpvbpTwf259qzYz22ZFmhLwVZFrrQY= Subject key identifier: 20:24:88:4E:F6:F1:B7:3A:66:9B:0B:EA:8A:92:10:BD:67:DA:E7:35 Certificate issuer: /CN=83E77F37B3B93850835BAA30EE8FC12D55F87054 Certificate serial: 1BCB Authority key identifier: 83:E7:7F:37:B3:B9:38:50:83:5B:AA:30:EE:8F:C1:2D:55:F8:70:54 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/ICSITvbxtzpmmwvqipIQvWfa5zU.roa Signing time: Fri 17 Jan 2025 01:30:09 +0000 ROA not before: Fri 17 Jan 2025 01:30:09 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 56282 IP address blocks: 211.155.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 14:13:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7115 (0x1bcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83E77F37B3B93850835BAA30EE8FC12D55F87054 Validity Not Before: Jan 17 01:30:09 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=2024884EF6F1B73A669B0BEA8A9210BD67DAE735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e7:21:8c:cc:f9:50:11:a0:6e:1e:21:77:29: 6a:ba:48:39:f6:72:b1:77:c0:61:6f:ea:68:65:e8: 23:80:a8:35:d4:db:35:71:af:cc:a6:0f:22:c1:9f: 0a:b8:84:4f:47:bf:36:d7:31:23:93:29:19:86:fa: 6c:01:28:a0:c9:53:29:41:f0:d8:a5:cd:fa:a4:2d: 03:1e:6e:ba:81:67:6b:70:6d:5d:3b:c2:c4:96:8a: 7f:3a:08:85:d3:fb:6d:80:f8:05:be:29:76:d6:f9: f4:59:c4:0b:7d:97:d2:1f:3d:8c:0b:aa:ce:fe:ca: ad:81:2a:30:df:3b:b7:63:0d:62:8f:68:00:6f:c6: 90:b1:af:73:11:3a:4f:8b:cf:94:d2:b1:e3:f8:55: b8:35:46:e0:ee:89:42:1c:30:b3:8e:b3:8b:d7:d8: 26:e3:59:e6:13:83:af:81:33:1e:f6:76:54:79:09: 3b:e4:f8:15:9d:09:a2:93:00:e6:89:ac:9b:f0:0d: 06:d5:c9:d7:46:53:b5:f0:94:0e:79:75:c6:54:22: 20:c4:9e:c7:90:7f:b0:c8:c6:bd:35:29:44:4e:76: 3d:f9:85:c5:45:42:c2:0d:d3:72:48:c8:65:05:08: bf:49:9d:8e:a3:01:70:e1:3f:50:7e:42:b9:89:49: ae:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:24:88:4E:F6:F1:B7:3A:66:9B:0B:EA:8A:92:10:BD:67:DA:E7:35 X509v3 Authority Key Identifier: keyid:83:E7:7F:37:B3:B9:38:50:83:5B:AA:30:EE:8F:C1:2D:55:F8:70:54 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/ICSITvbxtzpmmwvqipIQvWfa5zU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.155.88.0/21 Signature Algorithm: sha256WithRSAEncryption 3e:76:aa:50:4b:61:95:51:c9:97:de:94:21:0d:31:51:82:55: f2:ae:57:5e:70:e2:78:8f:3e:08:41:49:12:19:33:69:6a:ae: 67:c8:76:a8:dd:4a:c0:6d:5d:9b:98:8a:90:68:30:9d:fb:e0: 0e:bd:d0:05:62:7f:9a:e9:92:b1:94:8b:99:a0:30:fa:30:ac: 01:5f:f9:f2:61:fa:df:51:05:ae:4b:b5:f0:b7:fb:12:63:e4: e9:31:a7:cd:08:c9:de:18:3b:7f:3b:92:4d:7e:87:37:cb:69: 62:ae:8f:af:e7:fb:04:8b:3e:c7:96:94:9b:77:e8:dc:cd:a5: ed:3e:aa:ab:03:31:b9:76:8d:01:46:5e:fc:14:1b:59:f6:db: 6f:89:9d:60:1a:5b:09:fd:3c:b0:0f:2d:4b:e5:02:bd:93:9d: 91:62:fe:a8:4c:cb:c3:a4:65:23:8e:7f:51:94:e5:52:e5:66: 5b:f9:b9:ec:75:68:2c:b3:54:69:46:b1:66:e5:f0:16:96:95: c0:24:59:5b:92:ff:05:d1:d8:57:c2:79:f4:c3:b3:d4:16:41: bc:25:66:bc:6d:b8:41:e0:07:5c:a7:53:52:c5:0f:5b:3f:7c: 7f:28:86:a7:e8:37:cd:d0:59:c0:f5:40:b2:75:4f:ab:45:86: 9e:fc:01:fc -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICG8swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODNF NzdGMzdCM0I5Mzg1MDgzNUJBQTMwRUU4RkMxMkQ1NUY4NzA1NDAeFw0yNTAxMTcw MTMwMDlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDIwMjQ4ODRFRjZGMUI3 M0E2NjlCMEJFQThBOTIxMEJENjdEQUU3MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZ5yGMzPlQEaBuHiF3KWq6SDn2crF3wGFv6mhl6COAqDXU2zVx r8ymDyLBnwq4hE9HvzbXMSOTKRmG+mwBKKDJUylB8NilzfqkLQMebrqBZ2twbV07 wsSWin86CIXT+22A+AW+KXbW+fRZxAt9l9IfPYwLqs7+yq2BKjDfO7djDWKPaABv xpCxr3MROk+Lz5TSseP4Vbg1RuDuiUIcMLOOs4vX2CbjWeYTg6+BMx72dlR5CTvk +BWdCaKTAOaJrJvwDQbVyddGU7XwlA55dcZUIiDEnseQf7DIxr01KUROdj35hcVF QsIN03JIyGUFCL9JnY6jAXDhP1B+QrmJSa4RAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUICSITvbxtzpmmwvqipIQvWfa5zUwHwYDVR0jBBgwFoAUg+d/N7O5OFCDW6ow 7o/BLVX4cFQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTYx L2ctZF9ON081T0ZDRFc2b3c3b19CTFZYNGNGUS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZy1kX043TzVPRkNEVzZvdzdvX0JMVlg0Y0ZRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTYxL0lDU0lUdmJ4dHpwbW13 dnFpcElRdldmYTV6VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAPTm1gwDQYJKoZIhvcNAQELBQADggEBAD52qlBLYZVRyZfelCENMVGCVfKuV15w 4niPPghBSRIZM2lqrmfIdqjdSsBtXZuYipBoMJ374A690AVif5rpkrGUi5mgMPow rAFf+fJh+t9RBa5LtfC3+xJj5Okxp80Iyd4YO387kk1+hzfLaWKuj6/n+wSLPseW lJt36NzNpe0+qqsDMbl2jQFGXvwUG1n222+JnWAaWwn9PLAPLUvlAr2TnZFi/qhM y8OkZSOOf1GU5VLlZlv5uex1aCyzVGlGsWbl8BaWlcAkWVuS/wXR2FfCefTDs9QW QbwlZrxtuEHgB1ynU1LFD1s/fH8ohqfoN83QWcD1QLJ1T6tFhp78Afw= -----END CERTIFICATE-----Generated at Sat May 17 11:04:50 2025 by rpki-client