$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1228/-8aUEH0vhq9u6QiOx6jnn7G_sdA.roa File: -8aUEH0vhq9u6QiOx6jnn7G_sdA.roa (raw, json) Hash identifier: VXlM9/7epgqetzNxis2Oa1geLZqhGqAt4ohU5/UsDIw= Subject key identifier: FB:C6:94:10:7D:2F:86:AF:6E:E9:08:8E:C7:A8:E7:9F:B1:BF:B1:D0 Certificate issuer: /CN=ADD2726DD6FF9F5A459AE5B0A9EE8E7DDFC7F07C Certificate serial: 13 Authority key identifier: AD:D2:72:6D:D6:FF:9F:5A:45:9A:E5:B0:A9:EE:8E:7D:DF:C7:F0:7C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/-8aUEH0vhq9u6QiOx6jnn7G_sdA.roa Signing time: Sat 17 May 2025 07:52:52 +0000 ROA not before: Sat 17 May 2025 07:52:52 +0000 ROA not after: Sat 16 May 2026 10:06:17 +0000 asID: 14618 IP address blocks: 43.254.192.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Jun 2025 18:40:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADD2726DD6FF9F5A459AE5B0A9EE8E7DDFC7F07C Validity Not Before: May 17 07:52:52 2025 GMT Not After : May 16 10:06:17 2026 GMT Subject: CN=FBC694107D2F86AF6EE9088EC7A8E79FB1BFB1D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d5:1f:4f:49:80:26:a2:c3:38:4f:0f:87:18: 77:2f:f1:21:ba:4d:75:b3:94:f5:7f:fe:da:74:65: 4d:d1:22:1b:36:63:ca:c4:c3:fd:a0:bf:0e:37:34: 6b:6d:ff:8b:4a:20:c4:51:f4:63:5e:99:29:6d:de: 42:ec:a4:f2:ed:d2:a3:34:45:37:4f:b2:3c:eb:7a: 3c:92:c0:80:53:92:1d:88:55:5e:f9:70:d7:59:0d: fe:bf:97:11:3c:5a:9f:09:c3:12:b4:d6:48:e3:1f: f5:d9:da:85:ba:b1:b1:25:2e:0b:a3:84:a7:06:70: 96:86:26:c1:23:16:7d:c3:d1:39:d6:19:6e:54:c4: b2:3f:f7:05:8f:7c:4a:39:76:0a:43:f5:17:27:b1: 8d:f6:51:66:92:75:20:d4:cb:c2:d2:b9:5c:0c:ea: 64:d9:f4:f0:61:a2:ed:40:e9:c6:52:07:ec:e7:96: e1:4d:36:be:39:d2:21:c7:27:7d:73:8f:76:76:7c: f4:07:c8:df:18:04:13:2d:b2:60:e3:31:b8:7d:ef: bf:63:7a:ad:a6:2a:e5:bc:38:2b:55:53:d2:68:ee: e8:fd:ff:42:df:a0:e7:37:98:10:f3:5a:26:9e:6a: bf:f5:2f:78:cd:ee:97:71:9e:47:b9:d9:07:4a:13: ef:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:C6:94:10:7D:2F:86:AF:6E:E9:08:8E:C7:A8:E7:9F:B1:BF:B1:D0 X509v3 Authority Key Identifier: keyid:AD:D2:72:6D:D6:FF:9F:5A:45:9A:E5:B0:A9:EE:8E:7D:DF:C7:F0:7C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/-8aUEH0vhq9u6QiOx6jnn7G_sdA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.254.192.0/22 Signature Algorithm: sha256WithRSAEncryption 5c:22:6c:70:10:61:54:9b:0e:6f:e0:fe:7e:88:a2:c9:65:b7: cb:49:4c:93:a7:52:d5:a6:01:f2:6c:1d:af:6d:cf:03:ba:d1: c5:2e:b0:53:b6:9a:3e:c6:5a:48:2a:8a:06:a3:4d:c9:68:56: c8:e2:cd:88:72:09:b6:63:c1:d6:12:b9:ca:86:e8:8d:bd:cb: 4e:5f:40:d5:db:0d:e3:45:d1:9e:70:c3:91:2c:f0:2e:53:a0: af:95:af:6d:ab:8b:41:b6:3b:13:bc:b9:01:0c:8c:1d:ab:69: 19:cb:63:ed:3d:2d:22:68:5c:a9:1b:6e:70:b1:20:6b:f9:a5: af:3d:ce:f4:3e:a0:a7:d7:49:83:93:36:13:d7:74:1f:48:19: 4b:13:6a:e8:94:2a:6e:79:13:50:83:e0:f7:a2:1f:db:70:3f: bf:c1:af:62:76:11:9a:c8:a9:00:ae:7f:9b:99:b3:8a:e0:c0: a1:a3:f9:19:30:8f:79:6c:b3:70:69:33:7c:5b:50:c0:41:3a: f3:a1:6e:32:1b:cc:09:8a:12:6f:45:6a:e4:87:fe:71:76:4d: 33:80:51:47:f8:19:ec:2c:dc:ab:07:1f:bf:37:c3:a6:e1:33: ea:33:28:44:76:a8:ac:48:c8:8a:44:3a:42:31:49:0e:4a:d0: b7:18:5c:3c -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBEzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBREQy NzI2REQ2RkY5RjVBNDU5QUU1QjBBOUVFOEU3RERGQzdGMDdDMB4XDTI1MDUxNzA3 NTI1MloXDTI2MDUxNjEwMDYxN1owMzExMC8GA1UEAxMoRkJDNjk0MTA3RDJGODZB RjZFRTkwODhFQzdBOEU3OUZCMUJGQjFEMDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMXVH09JgCaiwzhPD4cYdy/xIbpNdbOU9X/+2nRlTdEiGzZjysTD /aC/Djc0a23/i0ogxFH0Y16ZKW3eQuyk8u3SozRFN0+yPOt6PJLAgFOSHYhVXvlw 11kN/r+XETxanwnDErTWSOMf9dnahbqxsSUuC6OEpwZwloYmwSMWfcPROdYZblTE sj/3BY98Sjl2CkP1FyexjfZRZpJ1INTLwtK5XAzqZNn08GGi7UDpxlIH7OeW4U02 vjnSIccnfXOPdnZ89AfI3xgEEy2yYOMxuH3vv2N6raYq5bw4K1VT0mju6P3/Qt+g 5zeYEPNaJp5qv/UveM3ul3GeR7nZB0oT72kCAwEAAaOCAfMwggHvMB0GA1UdDgQW BBT7xpQQfS+Gr27pCI7HqOefsb+x0DAfBgNVHSMEGDAWgBSt0nJt1v+fWkWa5bCp 7o5938fwfDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xMjI4 L3JkSnliZGJfbjFwRm11V3dxZTZPZmRfSDhIdy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvcmRKeWJkYl9uMXBGbXVXd3FlNk9mZF9IOEh3LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIyOC8tOGFVRUgwdmhxOXU2 UWlPeDZqbm43R19zZEEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCK/7AMA0GCSqGSIb3DQEBCwUAA4IBAQBcImxwEGFUmw5v4P5+iKLJZbfLSUyT p1LVpgHybB2vbc8DutHFLrBTtpo+xlpIKooGo03JaFbI4s2Icgm2Y8HWErnKhuiN vctOX0DV2w3jRdGecMORLPAuU6Cvla9tq4tBtjsTvLkBDIwdq2kZy2PtPS0iaFyp G25wsSBr+aWvPc70PqCn10mDkzYT13QfSBlLE2rolCpueRNQg+D3oh/bcD+/wa9i dhGayKkArn+bmbOK4MCho/kZMI95bLNwaTN8W1DAQTrzoW4yG8wJihJvRWrkh/5x dk0zgFFH+BnsLNyrBx+/N8Om4TPqMyhEdqisSMiKRDpCMUkOStC3GFw8 -----END CERTIFICATE-----Generated at Mon Jun 2 17:14:37 2025 by rpki-client