$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/561/wWhaaAlj9JcGe_kybyrhqCBJARY.roa File: wWhaaAlj9JcGe_kybyrhqCBJARY.roa (raw, json) Hash identifier: 5Ql52JvZ+WWSkm9H+KXljVwbKX+AUegjoJOEWl6tCng= Subject key identifier: C1:68:5A:68:09:63:F4:97:06:7B:F9:32:6F:2A:E1:A8:20:49:01:16 Certificate issuer: /CN=83E77F37B3B93850835BAA30EE8FC12D55F87054 Certificate serial: 1BCC Authority key identifier: 83:E7:7F:37:B3:B9:38:50:83:5B:AA:30:EE:8F:C1:2D:55:F8:70:54 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/wWhaaAlj9JcGe_kybyrhqCBJARY.roa Signing time: Fri 17 Jan 2025 01:30:09 +0000 ROA not before: Fri 17 Jan 2025 01:30:09 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 4808 IP address blocks: 2406:4d00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 11:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7116 (0x1bcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83E77F37B3B93850835BAA30EE8FC12D55F87054 Validity Not Before: Jan 17 01:30:09 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=C1685A680963F497067BF9326F2AE1A820490116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d4:d6:6b:08:76:cb:01:d4:84:4e:a3:f9:d7: 3e:b9:7b:98:74:cd:fe:87:7b:45:93:95:5a:c5:19: f7:34:95:7e:fc:44:79:4a:41:bc:a4:c5:69:f1:2a: ac:a0:bf:c9:4f:a6:9e:ed:f1:c7:5b:51:84:53:64: 47:ff:11:fd:15:19:12:fc:60:b2:6b:c5:22:7d:67: 92:e2:5c:2b:fd:96:e9:a7:c2:85:7a:f0:3c:01:e2: 4f:b7:07:2d:50:23:3a:82:8b:ed:0a:2d:df:f9:6f: bb:e0:c6:91:a6:9b:b9:ea:5b:1d:9f:87:79:e6:12: c7:c2:66:b0:65:33:71:29:ad:7e:3b:0d:58:9d:92: 11:f2:aa:ba:a2:f7:5f:4c:1b:3a:09:b8:ae:46:49: ce:dc:02:8b:e1:de:51:e7:75:ee:02:25:69:46:c4: fc:37:c6:f4:97:4d:67:7b:cf:bc:cb:92:9d:04:5b: d7:48:e6:80:ef:61:ee:a7:3d:0f:c3:0c:7c:f6:57: a5:f7:34:13:e6:a5:b3:25:cc:f8:5f:b5:f9:ef:89: c1:38:cc:e7:01:6c:08:2f:c8:1b:af:f1:79:3f:6e: fb:e3:51:03:8e:09:a7:eb:e2:88:d0:fc:2a:aa:9d: c9:6b:c9:05:0f:f4:80:5a:e6:9e:b9:fd:c1:ac:6e: 23:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:68:5A:68:09:63:F4:97:06:7B:F9:32:6F:2A:E1:A8:20:49:01:16 X509v3 Authority Key Identifier: keyid:83:E7:7F:37:B3:B9:38:50:83:5B:AA:30:EE:8F:C1:2D:55:F8:70:54 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/wWhaaAlj9JcGe_kybyrhqCBJARY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2406:4d00::/48 Signature Algorithm: sha256WithRSAEncryption be:86:16:77:65:54:26:c3:58:3f:c2:48:06:a5:16:52:2c:21: ce:ab:b2:d8:23:87:f3:7a:f3:e8:cd:8b:c1:3e:b7:0f:b9:9c: af:33:40:04:3e:50:32:56:07:a3:60:7d:80:6a:e2:e9:a9:7c: 96:aa:b1:e7:4c:88:f5:11:0b:36:c3:7a:ac:ee:53:38:95:08: b2:49:d0:4c:99:cb:19:6c:4a:f5:00:b5:d0:87:ab:01:54:e2: e1:77:90:af:0d:38:68:81:23:47:86:34:2e:4f:a3:a5:35:ec: 62:ce:e1:60:6a:6d:f7:12:45:55:28:d2:d8:79:a4:fd:da:bc: a9:f0:62:06:ab:6b:0a:b0:ff:de:33:79:c6:e5:d5:fd:96:7c: 00:94:26:0c:c7:9b:b3:4f:7b:91:26:cd:2a:22:b1:28:d7:69: 12:4c:25:95:f5:1c:c8:ea:f4:28:5c:8f:e8:7c:02:c3:cf:fb: 04:6e:a6:4e:b8:43:9a:a3:24:64:39:90:04:7e:b2:75:dc:6b: 77:3e:c0:8b:90:6c:6a:b0:4c:96:5e:a5:79:f6:27:39:37:8c: b6:bf:52:2b:7a:07:9e:f0:30:4d:b9:61:fc:61:ff:ef:3f:19: a1:0e:91:7e:a4:fb:58:10:51:ef:d0:74:b4:65:d1:7e:eb:6e: 5f:c3:b3:3a -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICG8wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODNF NzdGMzdCM0I5Mzg1MDgzNUJBQTMwRUU4RkMxMkQ1NUY4NzA1NDAeFw0yNTAxMTcw MTMwMDlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEMxNjg1QTY4MDk2M0Y0 OTcwNjdCRjkzMjZGMkFFMUE4MjA0OTAxMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCx1NZrCHbLAdSETqP51z65e5h0zf6He0WTlVrFGfc0lX78RHlK QbykxWnxKqygv8lPpp7t8cdbUYRTZEf/Ef0VGRL8YLJrxSJ9Z5LiXCv9lumnwoV6 8DwB4k+3By1QIzqCi+0KLd/5b7vgxpGmm7nqWx2fh3nmEsfCZrBlM3EprX47DVid khHyqrqi919MGzoJuK5GSc7cAovh3lHnde4CJWlGxPw3xvSXTWd7z7zLkp0EW9dI 5oDvYe6nPQ/DDHz2V6X3NBPmpbMlzPhftfnvicE4zOcBbAgvyBuv8Xk/bvvjUQOO Cafr4ojQ/CqqnclryQUP9IBa5p65/cGsbiPrAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUwWhaaAlj9JcGe/kybyrhqCBJARYwHwYDVR0jBBgwFoAUg+d/N7O5OFCDW6ow 7o/BLVX4cFQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTYx L2ctZF9ON081T0ZDRFc2b3c3b19CTFZYNGNGUS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZy1kX043TzVPRkNEVzZvdzdvX0JMVlg0Y0ZRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTYxL3dXaGFhQWxqOUpjR2Vf a3lieXJocUNCSkFSWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAkBk0AAAAwDQYJKoZIhvcNAQELBQADggEBAL6GFndlVCbDWD/CSAalFlIsIc6r stgjh/N68+jNi8E+tw+5nK8zQAQ+UDJWB6NgfYBq4umpfJaqsedMiPURCzbDeqzu UziVCLJJ0EyZyxlsSvUAtdCHqwFU4uF3kK8NOGiBI0eGNC5Po6U17GLO4WBqbfcS RVUo0th5pP3avKnwYgarawqw/94zecbl1f2WfACUJgzHm7NPe5EmzSoisSjXaRJM JZX1HMjq9Chcj+h8AsPP+wRupk64Q5qjJGQ5kAR+snXca3c+wIuQbGqwTJZepXn2 Jzk3jLa/Uit6B57wME25Yfxh/+8/GaEOkX6k+1gQUe/QdLRl0X7rbl/Dszo= -----END CERTIFICATE-----Generated at Sat May 17 10:22:19 2025 by rpki-client