$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/620/a1xzLnP9yHS4ZxTx8lT6fiJzvKQ.roa File: a1xzLnP9yHS4ZxTx8lT6fiJzvKQ.roa (raw, json) Hash identifier: pnrh09jjMVQxgCPwAjENTCHzECt6FgHZipi1Md1meAw= Subject key identifier: 6B:5C:73:2E:73:FD:C8:74:B8:67:14:F1:F2:54:FA:7E:22:73:BC:A4 Certificate issuer: /CN=309C2A943B28DC0858C39B9208A1609C0973E49A Certificate serial: 0237 Authority key identifier: 30:9C:2A:94:3B:28:DC:08:58:C3:9B:92:08:A1:60:9C:09:73:E4:9A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/a1xzLnP9yHS4ZxTx8lT6fiJzvKQ.roa Signing time: Thu 24 Apr 2025 08:49:07 +0000 ROA not before: Thu 24 Apr 2025 08:49:07 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 24413 IP address blocks: 114.28.228.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 00:08:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 567 (0x237) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=309C2A943B28DC0858C39B9208A1609C0973E49A Validity Not Before: Apr 24 08:49:07 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=6B5C732E73FDC874B86714F1F254FA7E2273BCA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:68:38:99:b7:9c:fd:51:4f:da:d3:d0:23:d7: 9f:82:d3:6b:56:27:b5:29:d2:38:3c:85:cd:6e:d8: 51:aa:4b:4c:e7:63:92:fd:d1:d2:ec:20:9d:7a:27: a1:d3:0e:88:75:d0:f2:ed:f9:05:84:00:0e:f1:77: 9d:bc:20:8e:1d:a0:37:73:ac:f2:e9:8d:3c:bb:74: 76:4f:2e:23:38:0a:da:18:f0:b6:cf:c5:d3:ad:0d: df:2a:2f:bb:05:86:58:ad:88:f3:c0:3c:03:1a:98: 36:03:24:d6:5c:b3:b4:c3:92:db:10:88:40:d8:36: 77:30:27:d0:72:09:42:13:0f:65:f7:6e:be:bd:b2: 0b:3e:a7:2e:c1:e0:10:a5:a8:53:63:38:bc:55:4e: 43:60:78:98:cc:ea:03:67:32:9f:cb:20:0e:ef:aa: f3:93:14:fa:fd:27:f7:12:9b:7e:87:af:44:74:e1: 26:93:ea:14:36:a8:a5:8e:bc:8e:04:40:06:7c:a3: 8e:a5:fe:e6:97:47:75:f7:81:b3:47:52:53:24:f3: 8c:af:87:65:aa:3b:0b:bc:66:b7:70:65:65:11:2e: 06:75:41:0b:83:01:85:4e:2f:cf:76:c8:ad:06:4c: f3:0a:5f:be:bb:7e:5e:e6:c1:14:1a:e4:83:cd:e0: 37:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:5C:73:2E:73:FD:C8:74:B8:67:14:F1:F2:54:FA:7E:22:73:BC:A4 X509v3 Authority Key Identifier: keyid:30:9C:2A:94:3B:28:DC:08:58:C3:9B:92:08:A1:60:9C:09:73:E4:9A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/a1xzLnP9yHS4ZxTx8lT6fiJzvKQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.28.228.0/24 Signature Algorithm: sha256WithRSAEncryption ca:0d:68:d4:11:fb:ad:0d:4f:5e:bb:a2:cd:ed:92:1e:29:80: e7:7e:a2:e0:4f:05:47:35:28:54:09:00:45:65:23:9c:20:8a: c5:e1:cd:c9:cb:36:3b:bf:22:f6:b7:55:fb:a4:3f:dc:e9:e8: 8d:d3:fa:62:f0:93:1a:c3:65:bc:a2:51:74:fb:cb:04:49:0a: 1f:b6:6c:de:3b:c2:4f:cd:68:bf:5e:82:ad:b1:b1:9a:92:f5: 71:ec:10:70:41:d7:6d:95:7c:f2:04:f6:1e:f8:54:f1:ea:b8: 6f:b7:4b:10:ad:0d:3d:c8:04:2e:ca:4f:e4:43:c3:8d:6f:b5: d3:37:ce:0c:61:62:2e:2d:04:bb:9b:48:8d:78:e2:9c:50:10: 60:d3:5c:6b:2b:6d:a6:de:3a:fc:68:d8:59:b9:21:cf:0e:5c: 62:57:45:9f:15:01:ac:a1:a9:4f:65:3e:27:a2:5d:a6:06:3d: 39:f3:e7:91:b7:95:18:9b:24:b9:83:76:94:6d:95:6f:1f:a6: ce:a9:f8:80:e5:23:72:a2:5f:0d:61:9e:81:54:b9:12:8a:15: 41:94:16:4f:ef:fb:b0:10:bb:3e:f1:37:44:8a:8e:b0:fb:00: 8d:83:15:ad:62:4d:25:d0:e6:11:e7:a2:18:9f:df:ae:fd:13: 5a:7c:06:e4 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICAjcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzA5 QzJBOTQzQjI4REMwODU4QzM5QjkyMDhBMTYwOUMwOTczRTQ5QTAeFw0yNTA0MjQw ODQ5MDdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDZCNUM3MzJFNzNGREM4 NzRCODY3MTRGMUYyNTRGQTdFMjI3M0JDQTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpaDiZt5z9UU/a09Aj15+C02tWJ7Up0jg8hc1u2FGqS0znY5L9 0dLsIJ16J6HTDoh10PLt+QWEAA7xd528II4doDdzrPLpjTy7dHZPLiM4CtoY8LbP xdOtDd8qL7sFhlitiPPAPAMamDYDJNZcs7TDktsQiEDYNncwJ9ByCUITD2X3br69 sgs+py7B4BClqFNjOLxVTkNgeJjM6gNnMp/LIA7vqvOTFPr9J/cSm36Hr0R04SaT 6hQ2qKWOvI4EQAZ8o46l/uaXR3X3gbNHUlMk84yvh2WqOwu8ZrdwZWURLgZ1QQuD AYVOL892yK0GTPMKX767fl7mwRQa5IPN4DcbAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUa1xzLnP9yHS4ZxTx8lT6fiJzvKQwHwYDVR0jBBgwFoAUMJwqlDso3AhYw5uS CKFgnAlz5JowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIw L01Kd3FsRHNvM0FoWXc1dVNDS0ZnbkFsejVKby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvTUp3cWxEc28zQWhZdzV1U0NLRmduQWx6NUpvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIwL2ExeHpMblA5eUhTNFp4 VHg4bFQ2ZmlKenZLUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAByHOQwDQYJKoZIhvcNAQELBQADggEBAMoNaNQR+60NT167os3tkh4pgOd+ouBP BUc1KFQJAEVlI5wgisXhzcnLNju/Iva3VfukP9zp6I3T+mLwkxrDZbyiUXT7ywRJ Ch+2bN47wk/NaL9egq2xsZqS9XHsEHBB122VfPIE9h74VPHquG+3SxCtDT3IBC7K T+RDw41vtdM3zgxhYi4tBLubSI144pxQEGDTXGsrbabeOvxo2Fm5Ic8OXGJXRZ8V AayhqU9lPieiXaYGPTnz55G3lRibJLmDdpRtlW8fps6p+IDlI3KiXw1hnoFUuRKK FUGUFk/v+7AQuz7xN0SKjrD7AI2DFa1iTSXQ5hHnohif3679E1p8BuQ= -----END CERTIFICATE-----Generated at Sun May 18 20:31:12 2025 by rpki-client