$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/DLh317d13UWo5fd34N6-2Qm0P1Q.roa File: DLh317d13UWo5fd34N6-2Qm0P1Q.roa (raw, json) Hash identifier: npIp+JCP+LubbpwNdo0aDF8nf8uL3RjKYIP9e8mDjgU= Subject key identifier: 0C:B8:77:D7:B7:75:DD:45:A8:E5:F7:77:E0:DE:BE:D9:09:B4:3F:54 Certificate issuer: /CN=DC6892E3620DD0F1FD62982E118E29757DC8CB3D Certificate serial: 1654 Authority key identifier: DC:68:92:E3:62:0D:D0:F1:FD:62:98:2E:11:8E:29:75:7D:C8:CB:3D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3GiS42IN0PH9YpguEY4pdX3Iyz0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/DLh317d13UWo5fd34N6-2Qm0P1Q.roa Signing time: Mon 23 Jun 2025 02:16:14 +0000 ROA not before: Mon 23 Jun 2025 02:16:14 +0000 ROA not after: Thu 09 Apr 2026 06:41:24 +0000 asID: 174 IP address blocks: 59.83.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3GiS42IN0PH9YpguEY4pdX3Iyz0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 14:14:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5716 (0x1654) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC6892E3620DD0F1FD62982E118E29757DC8CB3D Validity Not Before: Jun 23 02:16:14 2025 GMT Not After : Apr 9 06:41:24 2026 GMT Subject: CN=0CB877D7B775DD45A8E5F777E0DEBED909B43F54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:43:f1:10:07:25:2e:3b:27:34:97:7b:86:22: 1e:ff:c1:de:d7:5d:74:1c:74:f6:35:65:f6:de:70: 78:55:26:ad:dc:91:05:89:dd:14:a2:b8:54:63:ce: ce:49:8b:23:66:66:a0:d7:9f:3d:26:a6:1a:a5:33: 84:ea:f9:38:72:18:07:f0:45:52:ca:dd:16:c4:39: 25:48:73:a3:25:6d:6e:c8:b7:81:f0:6a:d7:02:db: b8:1d:5b:20:b2:6c:a8:45:01:e3:68:ec:19:cc:ae: 12:72:79:2a:30:db:85:be:8a:a0:f9:42:40:0f:95: 2a:a5:ae:4f:35:ef:51:18:e9:a3:a9:b9:e9:ca:a0: f4:bf:d6:2a:09:3e:ed:4c:e1:7f:be:ec:15:be:e9: f1:65:df:07:29:31:11:1d:0d:64:a6:ea:b4:ed:8d: b2:ea:94:b3:6b:5d:ba:0a:47:74:fa:32:3c:b8:77: 97:46:eb:62:c5:11:6d:45:10:4b:55:db:93:12:9a: 20:b7:b6:ba:2e:e0:87:8e:20:a9:db:d7:61:2d:ce: 83:3f:e9:9f:9e:b2:c7:ce:1c:44:96:31:02:15:f6: 2f:20:ff:7c:d7:6f:e8:b8:55:1f:96:6c:94:73:ce: f9:04:b5:4e:10:8a:29:96:35:75:67:6e:0a:e4:6e: 85:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:B8:77:D7:B7:75:DD:45:A8:E5:F7:77:E0:DE:BE:D9:09:B4:3F:54 X509v3 Authority Key Identifier: keyid:DC:68:92:E3:62:0D:D0:F1:FD:62:98:2E:11:8E:29:75:7D:C8:CB:3D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3GiS42IN0PH9YpguEY4pdX3Iyz0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/DLh317d13UWo5fd34N6-2Qm0P1Q.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 59.83.240.0/20 Signature Algorithm: sha256WithRSAEncryption 72:f4:6e:21:33:24:1a:2c:2f:aa:a5:d4:ef:3f:f1:64:5d:85: b0:b4:0e:74:c4:a1:34:ca:0e:4f:69:f2:49:4e:6d:38:09:3c: 89:49:35:f0:8d:47:d2:8b:19:ff:e9:a0:6d:02:59:4d:06:53: 26:6f:03:9b:76:11:10:7e:3c:e0:14:ac:a2:db:9d:ff:04:a6: 41:e0:5f:20:e5:61:7e:30:12:30:83:9b:d6:dc:b1:a3:9f:f5: 70:eb:2a:8a:6e:f1:57:23:6d:1c:b7:0f:35:a4:36:eb:15:71: 67:f0:20:60:60:dc:91:cd:66:43:97:17:9e:27:a7:95:31:7e: fe:26:70:73:9c:82:96:14:2b:c2:bc:0a:df:f6:56:a3:9b:5a: 9c:de:59:0e:c2:7c:e1:a5:39:8c:87:00:cb:a7:30:77:2b:f2: a2:24:b8:88:f6:e8:17:6e:f5:7a:58:8a:13:55:8f:bb:a1:ad: 52:e8:16:91:ac:c1:1b:40:5c:f4:f1:b1:a7:0d:7d:01:0f:ec: c1:dd:c5:5e:22:b9:6a:db:f7:3f:7b:8c:8e:ad:7c:0b:b4:48: 34:1e:0a:50:b0:3d:4e:1f:9c:1e:f0:09:3b:77:3b:49:e7:c8: 8e:d0:22:d8:38:6a:2b:25:f9:5b:2e:2c:35:89:de:65:cd:ad: 19:74:ed:3f -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFlQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREM2 ODkyRTM2MjBERDBGMUZENjI5ODJFMTE4RTI5NzU3REM4Q0IzRDAeFw0yNTA2MjMw MjE2MTRaFw0yNjA0MDkwNjQxMjRaMDMxMTAvBgNVBAMTKDBDQjg3N0Q3Qjc3NURE NDVBOEU1Rjc3N0UwREVCRUQ5MDlCNDNGNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKQ/EQByUuOyc0l3uGIh7/wd7XXXQcdPY1ZfbecHhVJq3ckQWJ 3RSiuFRjzs5JiyNmZqDXnz0mphqlM4Tq+ThyGAfwRVLK3RbEOSVIc6MlbW7It4Hw atcC27gdWyCybKhFAeNo7BnMrhJyeSow24W+iqD5QkAPlSqlrk8171EY6aOpuenK oPS/1ioJPu1M4X++7BW+6fFl3wcpMREdDWSm6rTtjbLqlLNrXboKR3T6Mjy4d5dG 62LFEW1FEEtV25MSmiC3trou4IeOIKnb12EtzoM/6Z+essfOHESWMQIV9i8g/3zX b+i4VR+WbJRzzvkEtU4QiimWNXVnbgrkboUlAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUDLh317d13UWo5fd34N6+2Qm0P1QwHwYDVR0jBBgwFoAU3GiS42IN0PH9Ypgu EY4pdX3Iyz0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjMw OS8zR2lTNDJJTjBQSDlZcGd1RVk0cGRYM0l5ejAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzNHaVM0MklOMFBIOVlwZ3VFWTRwZFgzSXl6MC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzMDkvRExoMzE3ZDEzVVdv NWZkMzRONi0yUW0wUDFRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBDtT8DANBgkqhkiG9w0BAQsFAAOCAQEAcvRuITMkGiwvqqXU7z/xZF2FsLQO dMShNMoOT2nySU5tOAk8iUk18I1H0osZ/+mgbQJZTQZTJm8Dm3YREH484BSsotud /wSmQeBfIOVhfjASMIOb1tyxo5/1cOsqim7xVyNtHLcPNaQ26xVxZ/AgYGDckc1m Q5cXnienlTF+/iZwc5yClhQrwrwK3/ZWo5tanN5ZDsJ84aU5jIcAy6cwdyvyoiS4 iPboF271eliKE1WPu6GtUugWkazBG0Bc9PGxpw19AQ/swd3FXiK5atv3P3uMjq18 C7RINB4KULA9Th+cHvAJO3c7SefIjtAi2DhqKyX5Wy4sNYneZc2tGXTtPw== -----END CERTIFICATE-----Generated at Tue Jul 1 13:45:47 2025 by rpki-client