$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1232/AyzRhScMACwFuVHUAO3-qxrlECU.roa File: AyzRhScMACwFuVHUAO3-qxrlECU.roa (raw, json) Hash identifier: U6GIOyoEyfazTP2/etmQKFGyacYKWaGNhoftZVH0YKg= Subject key identifier: 03:2C:D1:85:27:0C:00:2C:05:B9:51:D4:00:ED:FE:AB:1A:E5:10:25 Certificate issuer: /CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4 Certificate serial: 25 Authority key identifier: F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/AyzRhScMACwFuVHUAO3-qxrlECU.roa Signing time: Fri 22 Aug 2025 06:27:16 +0000 ROA not before: Fri 22 Aug 2025 06:27:16 +0000 ROA not after: Thu 20 Aug 2026 07:49:18 +0000 asID: 63582 IP address blocks: 45.120.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 10:05:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4 Validity Not Before: Aug 22 06:27:16 2025 GMT Not After : Aug 20 07:49:18 2026 GMT Subject: CN=032CD185270C002C05B951D400EDFEAB1AE51025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:28:f3:3a:18:a1:47:16:39:c4:2f:24:48:fa: 75:6d:72:01:da:23:cd:e0:35:bf:84:c9:e8:2d:9f: 60:14:17:49:93:fa:d2:38:2c:cd:a5:13:84:e2:b6: 05:55:35:24:f3:a8:f8:94:4c:16:dd:34:ec:cd:3d: 0e:a5:55:ed:6f:f3:1d:6c:40:09:c8:33:d1:33:54: 3a:63:41:1b:a4:c3:0f:a8:52:ff:b2:57:0e:2a:1a: 55:b5:33:84:66:e9:df:71:97:95:cd:4e:e3:36:6f: fc:57:da:a1:6c:c0:e5:e1:b4:07:63:5b:5e:1f:40: c3:a3:bd:38:95:3b:10:c3:08:c0:fc:61:fb:96:c1: bf:3f:7c:12:e2:47:aa:38:78:c9:e1:26:57:4f:4f: 43:a8:4c:28:7d:2f:37:22:7f:0a:3b:7f:43:b8:4d: 2f:37:66:00:c4:d3:db:1c:af:8a:ed:48:db:f0:3f: 70:5c:40:13:47:9c:04:00:b8:81:2d:92:66:b0:3e: 1d:ae:dc:9e:ff:a7:42:b0:23:46:1b:fe:f4:47:aa: 91:80:30:54:96:56:95:25:69:6a:97:07:51:b1:dd: b7:24:88:63:7b:cf:18:e3:21:47:d2:d6:ca:57:a4: 8f:a2:1a:3c:cb:10:aa:53:fa:c6:3e:d5:9e:74:fa: ca:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:2C:D1:85:27:0C:00:2C:05:B9:51:D4:00:ED:FE:AB:1A:E5:10:25 X509v3 Authority Key Identifier: keyid:F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/AyzRhScMACwFuVHUAO3-qxrlECU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.120.241.0/24 Signature Algorithm: sha256WithRSAEncryption 16:3d:5b:7c:45:67:7b:3e:83:c7:ee:e0:28:b0:92:94:6c:83: f2:51:f0:8a:9f:ce:e4:5e:71:47:ab:52:de:40:3c:d0:93:72: a6:02:7b:f5:f3:f5:cd:c7:8d:7c:1e:c2:c2:bd:04:07:2d:79: 32:67:43:ca:a1:c5:f9:17:ff:43:32:c9:ee:5b:2d:f6:46:40: 6b:f8:61:47:8e:79:ad:b7:4c:7d:05:a8:22:60:b9:b0:f7:29: f1:50:0f:a9:fe:08:f5:dd:34:61:44:a9:3c:db:98:57:ff:4c: fb:0c:ca:a6:de:96:2c:b4:fc:06:40:f7:49:35:c5:9e:07:11: 93:51:5e:ff:92:06:a3:41:ba:f2:e8:79:79:0b:6a:aa:dd:54: 08:a9:d0:ce:8c:35:af:c6:fc:85:13:57:7d:87:0d:32:58:a1: 03:6e:a2:df:6b:5a:62:b8:16:64:5f:56:fb:d1:45:ea:c8:3f: 6e:11:86:30:57:96:f5:f1:08:c8:98:cd:12:1b:34:45:20:36: c3:8e:b5:f9:92:5f:ac:81:c8:90:fe:8a:7c:b9:33:07:3e:92: 18:01:2f:cd:5e:34:c7:da:fd:cb:d2:c7:ee:6e:50:66:6a:d7: ce:32:da:0e:35:12:14:b9:74:0e:c0:a3:ed:d7:d2:8a:0c:8d: 52:36:54:ad -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBJTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGMTk4 OUI0MDY5MDFBREY4ODEwQjlEQ0RDNEUwRkM5RTdFODVFRUI0MB4XDTI1MDgyMjA2 MjcxNloXDTI2MDgyMDA3NDkxOFowMzExMC8GA1UEAxMoMDMyQ0QxODUyNzBDMDAy QzA1Qjk1MUQ0MDBFREZFQUIxQUU1MTAyNTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALUo8zoYoUcWOcQvJEj6dW1yAdojzeA1v4TJ6C2fYBQXSZP60jgs zaUThOK2BVU1JPOo+JRMFt007M09DqVV7W/zHWxACcgz0TNUOmNBG6TDD6hS/7JX DioaVbUzhGbp33GXlc1O4zZv/FfaoWzA5eG0B2NbXh9Aw6O9OJU7EMMIwPxh+5bB vz98EuJHqjh4yeEmV09PQ6hMKH0vNyJ/Cjt/Q7hNLzdmAMTT2xyviu1I2/A/cFxA E0ecBAC4gS2SZrA+Ha7cnv+nQrAjRhv+9EeqkYAwVJZWlSVpapcHUbHdtySIY3vP GOMhR9LWylekj6IaPMsQqlP6xj7VnnT6yscCAwEAAaOCAfMwggHvMB0GA1UdDgQW BBQDLNGFJwwALAW5UdQA7f6rGuUQJTAfBgNVHSMEGDAWgBTxmJtAaQGt+IELnc3E 4PyefoXutDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xMjMy LzhaaWJRR2tCcmZpQkM1M054T0Q4bm42RjdyUS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOFppYlFHa0JyZmlCQzUzTnhPRDhubjZGN3JRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIzMi9BeXpSaFNjTUFDd0Z1 VkhVQU8zLXF4cmxFQ1Uucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQALXjxMA0GCSqGSIb3DQEBCwUAA4IBAQAWPVt8RWd7PoPH7uAosJKUbIPyUfCK n87kXnFHq1LeQDzQk3KmAnv18/XNx418HsLCvQQHLXkyZ0PKocX5F/9DMsnuWy32 RkBr+GFHjnmtt0x9BagiYLmw9ynxUA+p/gj13TRhRKk825hX/0z7DMqm3pYstPwG QPdJNcWeBxGTUV7/kgajQbry6Hl5C2qq3VQIqdDOjDWvxvyFE1d9hw0yWKEDbqLf a1piuBZkX1b70UXqyD9uEYYwV5b18QjImM0SGzRFIDbDjrX5kl+sgciQ/op8uTMH PpIYAS/NXjTH2v3L0sfublBmatfOMtoONRIUuXQOwKPt19KKDI1SNlSt -----END CERTIFICATE-----Generated at Mon Sep 8 09:09:20 2025 by rpki-client