$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/709/QwvD7ilHysLGynnkEaRLtZ8S6Us.roa File: QwvD7ilHysLGynnkEaRLtZ8S6Us.roa (raw, json) Hash identifier: YP5VY/+ASkz1LfhocyuQ44niccX27uswh8o+HNY2T1o= Subject key identifier: 43:0B:C3:EE:29:47:CA:C2:C6:CA:79:E4:11:A4:4B:B5:9F:12:E9:4B Certificate issuer: /CN=E6982953DF0777AEDB88EE3FF20A152640571785 Certificate serial: 1BF1 Authority key identifier: E6:98:29:53:DF:07:77:AE:DB:88:EE:3F:F2:0A:15:26:40:57:17:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5pgpU98Hd67biO4_8goVJkBXF4U.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/709/QwvD7ilHysLGynnkEaRLtZ8S6Us.roa Signing time: Fri 17 Jan 2025 01:23:31 +0000 ROA not before: Fri 17 Jan 2025 01:23:31 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 45079 IP address blocks: 101.52.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/709/5pgpU98Hd67biO4_8goVJkBXF4U.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/709/5pgpU98Hd67biO4_8goVJkBXF4U.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5pgpU98Hd67biO4_8goVJkBXF4U.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 09:39:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7153 (0x1bf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E6982953DF0777AEDB88EE3FF20A152640571785 Validity Not Before: Jan 17 01:23:31 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=430BC3EE2947CAC2C6CA79E411A44BB59F12E94B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e3:a9:62:eb:f6:04:f9:03:44:5b:57:0d:79: 0d:00:10:c5:74:72:6f:fb:d8:50:89:09:30:c7:fd: 4e:61:8d:1f:f2:e5:2d:12:cc:55:6a:96:1b:82:62: 6a:a4:bb:8c:66:ec:63:fb:10:d7:a4:63:2c:b4:f7: 2f:df:6b:9c:ab:32:d2:b5:27:11:6b:7d:40:c1:5b: e9:c5:89:83:4e:bb:fc:96:4b:a1:23:c3:bb:8b:a2: fe:2a:13:3d:df:6b:58:f0:21:49:b7:05:18:e3:e8: 76:6c:fd:92:59:11:1f:f6:56:57:2d:b0:ed:84:9c: a8:86:b3:15:e5:05:60:21:70:e8:c9:ba:bc:71:df: 68:8a:a7:27:0a:5d:ee:cf:35:be:e9:b3:59:ae:14: ec:57:5c:66:23:76:a2:f8:44:20:e5:05:72:d7:89: fe:6f:bf:9b:c1:64:64:9f:fa:e1:2f:ce:a3:fa:4c: db:0d:a1:e7:d5:e7:1b:ed:ed:21:2e:62:55:e0:15: ff:91:82:ff:10:fa:78:09:d7:10:18:59:86:73:3f: c0:5c:94:ba:4b:a2:b5:93:52:b3:69:d2:fc:bc:a3: 5d:da:c1:17:22:51:7a:bf:3e:1b:e3:ee:97:63:eb: 6c:bd:9b:1d:c5:34:f7:d1:25:02:2c:3b:3e:96:58: b1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:0B:C3:EE:29:47:CA:C2:C6:CA:79:E4:11:A4:4B:B5:9F:12:E9:4B X509v3 Authority Key Identifier: keyid:E6:98:29:53:DF:07:77:AE:DB:88:EE:3F:F2:0A:15:26:40:57:17:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/709/5pgpU98Hd67biO4_8goVJkBXF4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5pgpU98Hd67biO4_8goVJkBXF4U.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/709/QwvD7ilHysLGynnkEaRLtZ8S6Us.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 101.52.52.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:12:4b:98:89:5c:c6:ab:ee:5f:13:4b:d9:02:99:e3:f8:e5: 94:5b:49:61:90:6b:eb:ab:56:68:82:4c:3c:07:62:b3:a3:48: 79:cd:e9:e7:9c:27:bd:14:39:81:3b:80:8d:1b:b6:fd:3b:70: 6f:f0:02:c2:5f:9e:df:15:ad:03:e7:84:50:cc:20:71:5b:77: 03:44:a5:ae:96:b3:82:e6:89:61:9e:e6:1c:78:be:c7:72:ef: fb:0e:1a:06:f4:f6:b6:54:c8:98:24:40:63:ef:ac:66:cc:37: 0b:ec:0a:ab:f4:77:0f:3e:76:3b:35:95:2a:6b:91:27:ae:8a: 0a:9d:2e:3f:54:22:12:73:d2:58:66:ad:20:a6:15:b4:b3:79: 9c:2b:51:ae:ee:fc:3f:90:57:40:d2:48:12:03:61:7e:76:d7: 76:11:ba:e9:4a:04:06:06:19:b0:0d:5e:55:a0:ee:0e:c3:b6: f1:59:32:4f:ff:d4:fd:a9:a2:0b:cc:d7:dd:1f:e8:5c:f3:f4: 48:14:03:16:50:31:ed:cb:57:77:ae:02:30:39:5e:4a:bc:7b: e8:cd:97:86:30:d5:f7:b0:b8:ac:f8:c3:04:91:65:b4:bf:33: 13:88:be:f2:d2:07:56:97:c4:69:e5:8f:f5:5b:c4:b6:51:a3: b7:af:f7:bb -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICG/EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTY5 ODI5NTNERjA3NzdBRURCODhFRTNGRjIwQTE1MjY0MDU3MTc4NTAeFw0yNTAxMTcw MTIzMzFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDQzMEJDM0VFMjk0N0NB QzJDNkNBNzlFNDExQTQ0QkI1OUYxMkU5NEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDd46li6/YE+QNEW1cNeQ0AEMV0cm/72FCJCTDH/U5hjR/y5S0S zFVqlhuCYmqku4xm7GP7ENekYyy09y/fa5yrMtK1JxFrfUDBW+nFiYNOu/yWS6Ej w7uLov4qEz3fa1jwIUm3BRjj6HZs/ZJZER/2VlctsO2EnKiGsxXlBWAhcOjJurxx 32iKpycKXe7PNb7ps1muFOxXXGYjdqL4RCDlBXLXif5vv5vBZGSf+uEvzqP6TNsN oefV5xvt7SEuYlXgFf+Rgv8Q+ngJ1xAYWYZzP8BclLpLorWTUrNp0vy8o13awRci UXq/Phvj7pdj62y9mx3FNPfRJQIsOz6WWLGbAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUQwvD7ilHysLGynnkEaRLtZ8S6UswHwYDVR0jBBgwFoAU5pgpU98Hd67biO4/ 8goVJkBXF4UwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzA5 LzVwZ3BVOThIZDY3YmlPNF84Z29WSmtCWEY0VS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvNXBncFU5OEhkNjdiaU80Xzhnb1ZKa0JYRjRVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzA5L1F3dkQ3aWxIeXNMR3lu bmtFYVJMdFo4UzZVcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABlNDQwDQYJKoZIhvcNAQELBQADggEBACwSS5iJXMar7l8TS9kCmeP45ZRbSWGQ a+urVmiCTDwHYrOjSHnN6eecJ70UOYE7gI0btv07cG/wAsJfnt8VrQPnhFDMIHFb dwNEpa6Ws4LmiWGe5hx4vsdy7/sOGgb09rZUyJgkQGPvrGbMNwvsCqv0dw8+djs1 lSprkSeuigqdLj9UIhJz0lhmrSCmFbSzeZwrUa7u/D+QV0DSSBIDYX5213YRuulK BAYGGbANXlWg7g7DtvFZMk//1P2pogvM190f6Fzz9EgUAxZQMe3LV3euAjA5Xkq8 e+jNl4Yw1fewuKz4wwSRZbS/MxOIvvLSB1aXxGnlj/VbxLZRo7ev97s= -----END CERTIFICATE-----Generated at Sun May 18 07:26:34 2025 by rpki-client