$ rpki-client -vvf rpki.cernet.edu.cn/repo/cernet/1/323430613a613830313a313a3a2f34382d3438203d3e20313434363939.roa File: 323430613a613830313a313a3a2f34382d3438203d3e20313434363939.roa (raw, json) Hash identifier: /DmvYOpjXH2N9dZePw3mQshQPjheMTYnYMJ86aIM6ac= Subject key identifier: 83:63:F1:D5:D2:04:08:28:D2:82:4A:4E:3C:D5:C7:1B:71:F4:09:5B Certificate issuer: /CN=A91E5D610000/serialNumber=D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139 Certificate serial: 054BFC596DBB58B02828BBB3BEB36ABCD558A34E Authority key identifier: D1:24:86:07:B0:DD:D0:A2:16:E8:D7:FA:C5:E2:C2:E7:77:0A:11:39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0SSGB7Dd0KIW6Nf6xeLC53cKETk.cer Subject info access: rsync://rpki.cernet.edu.cn/repo/cernet/1/323430613a613830313a313a3a2f34382d3438203d3e20313434363939.roa Signing time: Thu 05 Jun 2025 02:19:16 +0000 ROA not before: Thu 05 Jun 2025 02:14:16 +0000 ROA not after: Thu 04 Jun 2026 02:19:16 +0000 asID: 144699 IP address blocks: 240a:a801:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cernet.edu.cn/repo/cernet/1/D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139.crl rsync://rpki.cernet.edu.cn/repo/cernet/1/D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0SSGB7Dd0KIW6Nf6xeLC53cKETk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:4b:fc:59:6d:bb:58:b0:28:28:bb:b3:be:b3:6a:bc:d5:58:a3:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610000, serialNumber=D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139 Validity Not Before: Jun 5 02:14:16 2025 GMT Not After : Jun 4 02:19:16 2026 GMT Subject: CN=8363F1D5D2040828D2824A4E3CD5C71B71F4095B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:36:09:c4:46:ea:dc:d2:ad:c5:52:a4:d2:bf: 35:92:2e:03:cf:27:af:cc:79:0e:13:0d:de:fd:94: 78:0f:b0:1d:b1:99:45:60:81:5a:84:d2:b9:f8:04: a1:27:4d:a4:2e:72:63:fa:ac:4c:16:15:9b:e0:58: 81:b3:e5:42:89:fa:8c:c3:01:1a:cd:29:c8:a7:41: 42:17:f4:f0:70:13:2d:71:91:b8:72:1b:db:23:8c: ee:3d:60:bf:4c:42:ad:e3:f2:78:9d:ad:01:12:25: 67:0c:e7:8c:b3:ac:88:bd:c7:75:6a:43:da:4a:9e: 72:86:d3:4f:d9:81:e3:f8:fa:b9:f1:ef:c0:62:3a: 1c:fa:19:0f:93:f8:53:57:24:0c:8b:27:bc:9c:64: 09:27:63:d2:34:0c:8a:61:5c:e6:c2:58:59:de:cc: 11:44:a3:05:97:33:8c:23:db:88:5d:5c:6e:9a:65: 46:7c:26:e2:0d:c5:b0:9d:7e:2e:c7:82:d5:95:1f: 4f:91:cf:af:0e:e9:c6:25:2e:5c:1d:50:2a:93:6b: da:97:03:0f:56:d9:0b:5f:2e:07:f6:84:9e:68:45: e4:77:47:7b:cd:10:06:d4:b1:09:d4:69:d6:29:05: bd:5b:ea:c6:56:d6:dc:26:00:67:f8:d1:24:6d:3c: 0d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:63:F1:D5:D2:04:08:28:D2:82:4A:4E:3C:D5:C7:1B:71:F4:09:5B X509v3 Authority Key Identifier: keyid:D1:24:86:07:B0:DD:D0:A2:16:E8:D7:FA:C5:E2:C2:E7:77:0A:11:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.edu.cn/repo/cernet/1/D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0SSGB7Dd0KIW6Nf6xeLC53cKETk.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.edu.cn/repo/cernet/1/323430613a613830313a313a3a2f34382d3438203d3e20313434363939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a801:1::/48 Signature Algorithm: sha256WithRSAEncryption 5d:4e:55:fe:0e:f0:96:f3:69:9c:ef:95:26:87:35:0b:2f:77: 0e:45:a8:05:b9:0a:91:49:60:98:4a:ab:63:a8:fb:f3:37:b7: 1e:67:ca:a0:76:6d:05:4d:66:db:4b:79:3e:77:19:13:a2:39: 59:d4:dc:8f:1d:fa:a8:7d:5d:3a:99:6c:34:c3:4c:15:a7:d6: 5f:10:2d:f1:b4:6c:15:fa:82:17:24:ff:27:c8:e1:37:22:13: 3f:55:bc:fa:46:6d:bf:69:ec:30:ba:d2:fc:62:b6:9c:74:3f: fc:30:34:4d:d0:41:86:ce:52:40:e4:f8:50:b1:ab:3a:15:aa: 87:da:65:bd:b3:04:ec:1d:de:ae:ff:08:8b:c2:ea:9e:4b:42: db:05:11:cd:1e:20:1e:c8:5c:74:1d:18:8e:73:5d:df:39:9b: 46:a5:57:d7:fe:cd:ac:3b:73:d0:24:f7:f5:d1:b5:cd:fe:90: e6:9c:8c:c9:4f:5d:1e:59:b0:89:56:2f:52:49:3d:81:74:29: de:da:75:d0:53:97:fe:ff:6b:ea:6c:2a:5b:33:e7:5e:68:96: 88:d9:83:0f:98:13:5e:f0:81:87:74:a1:58:6f:81:13:31:e4: 40:4c:b6:a5:24:76:b2:e5:e2:67:71:d6:e7:ab:5c:4a:7c:96: cd:86:c8:e5 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUBUv8WW27WLAoKLuzvrNqvNVYo04wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAwMTEwLwYDVQQFEyhEMTI0ODYwN0Iw REREMEEyMTZFOEQ3RkFDNUUyQzJFNzc3MEExMTM5MB4XDTI1MDYwNTAyMTQxNloX DTI2MDYwNDAyMTkxNlowMzExMC8GA1UEAxMoODM2M0YxRDVEMjA0MDgyOEQyODI0 QTRFM0NENUM3MUI3MUY0MDk1QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMA2CcRG6tzSrcVSpNK/NZIuA88nr8x5DhMN3v2UeA+wHbGZRWCBWoTSufgE oSdNpC5yY/qsTBYVm+BYgbPlQon6jMMBGs0pyKdBQhf08HATLXGRuHIb2yOM7j1g v0xCrePyeJ2tARIlZwznjLOsiL3HdWpD2kqecobTT9mB4/j6ufHvwGI6HPoZD5P4 U1ckDIsnvJxkCSdj0jQMimFc5sJYWd7MEUSjBZczjCPbiF1cbpplRnwm4g3FsJ1+ LseC1ZUfT5HPrw7pxiUuXB1QKpNr2pcDD1bZC18uB/aEnmhF5HdHe80QBtSxCdRp 1ikFvVvqxlbW3CYAZ/jRJG08DXsCAwEAAaOCAgAwggH8MB0GA1UdDgQWBBSDY/HV 0gQIKNKCSk481ccbcfQJWzAfBgNVHSMEGDAWgBTRJIYHsN3Qohbo1/rF4sLndwoR OTAOBgNVHQ8BAf8EBAMCB4AwZgYDVR0fBF8wXTBboFmgV4ZVcnN5bmM6Ly9ycGtp LmNlcm5ldC5lZHUuY24vcmVwby9jZXJuZXQvMS9EMTI0ODYwN0IwREREMEEyMTZF OEQ3RkFDNUUyQzJFNzc3MEExMTM5LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8wU1NHQjdEZDBLSVc2TmY2eGVMQzUz Y0tFVGsuY2VyMIGDBggrBgEFBQcBCwR3MHUwcwYIKwYBBQUHMAuGZ3JzeW5jOi8v cnBraS5jZXJuZXQuZWR1LmNuL3JlcG8vY2VybmV0LzEvMzIzNDMwNjEzYTYxMzgz MDMxM2EzMTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzNDM2MzkzOS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQC AAIwCQMHACQKqAEAATANBgkqhkiG9w0BAQsFAAOCAQEAXU5V/g7wlvNpnO+VJoc1 Cy93DkWoBbkKkUlgmEqrY6j78ze3HmfKoHZtBU1m20t5PncZE6I5WdTcjx36qH1d OplsNMNMFafWXxAt8bRsFfqCFyT/J8jhNyITP1W8+kZtv2nsMLrS/GK2nHQ//DA0 TdBBhs5SQOT4ULGrOhWqh9plvbME7B3erv8Ii8LqnktC2wURzR4gHshcdB0YjnNd 3zmbRqVX1/7NrDtz0CT39dG1zf6Q5pyMyU9dHlmwiVYvUkk9gXQp3tp10FOX/v9r 6mwqWzPnXmiWiNmDD5gTXvCBh3ShWG+BEzHkQEy2pSR2suXiZ3HW56tcSnyWzYbI 5Q== -----END CERTIFICATE-----Generated at Sat Jun 7 09:05:50 2025 by rpki-client