$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/22/CKqRUyCkQgDdCvb39FLl8nk3Gp8.roa File: CKqRUyCkQgDdCvb39FLl8nk3Gp8.roa (raw, json) Hash identifier: hdqcb05bFxknkcwIdqOcWs1KgdleQYiVPEkSdv5OTow= Subject key identifier: 08:AA:91:53:20:A4:42:00:DD:0A:F6:F7:F4:52:E5:F2:79:37:1A:9F Certificate issuer: /CN=ECB273B097997C02B4F52E5C1BB4FEFE66797850 Certificate serial: 08 Authority key identifier: EC:B2:73:B0:97:99:7C:02:B4:F5:2E:5C:1B:B4:FE:FE:66:79:78:50 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7LJzsJeZfAK09S5cG7T-_mZ5eFA.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/CKqRUyCkQgDdCvb39FLl8nk3Gp8.roa Signing time: Tue 14 Jan 2025 08:18:20 +0000 ROA not before: Tue 14 Jan 2025 08:18:20 +0000 ROA not after: Wed 14 Jan 2026 07:53:29 +0000 asID: 17969 IP address blocks: 125.62.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7LJzsJeZfAK09S5cG7T-_mZ5eFA.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ECB273B097997C02B4F52E5C1BB4FEFE66797850 Validity Not Before: Jan 14 08:18:20 2025 GMT Not After : Jan 14 07:53:29 2026 GMT Subject: CN=08AA915320A44200DD0AF6F7F452E5F279371A9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0b:e4:80:71:1e:17:b6:9d:b4:c6:8a:68:b3: d5:7a:16:1e:90:79:a4:56:ea:24:c6:85:21:d9:99: e7:8f:52:77:1f:51:49:09:e5:97:74:32:22:5e:bc: fb:14:c1:64:61:18:18:ad:55:3d:e6:c3:1e:8a:ba: e2:7e:45:8b:9b:8d:ef:a2:48:5a:2e:08:a4:28:2d: 02:1e:35:31:2b:7b:17:e2:6d:be:b0:f8:2d:1a:99: 52:d6:c5:bb:85:ac:4e:5f:9d:e4:ba:f6:ca:06:f8: 14:d4:a4:81:c0:3f:1d:cf:ee:88:36:3b:2b:26:96: 73:2d:a0:98:58:40:eb:d7:20:bb:de:65:2d:32:85: 9d:08:af:31:0a:46:0c:44:97:4b:cd:29:f7:b0:92: 88:80:5c:3c:0a:71:57:09:a7:3c:00:83:b4:bc:cf: 9e:18:23:b0:fd:d0:89:5b:f2:94:b9:b6:11:15:fd: 9c:f9:e0:16:a3:95:cf:25:01:ba:c1:e9:d2:aa:8a: ab:cc:53:db:57:44:fc:95:53:41:aa:57:ef:03:0b: 74:21:0d:b3:ca:d6:be:6f:4b:c5:ba:7e:08:d8:8e: 3f:8b:3c:56:84:0a:e0:45:6a:5b:23:e9:08:55:6c: bb:77:19:01:14:a6:8a:13:7a:f0:29:b0:55:2f:85: 19:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:AA:91:53:20:A4:42:00:DD:0A:F6:F7:F4:52:E5:F2:79:37:1A:9F X509v3 Authority Key Identifier: keyid:EC:B2:73:B0:97:99:7C:02:B4:F5:2E:5C:1B:B4:FE:FE:66:79:78:50 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7LJzsJeZfAK09S5cG7T-_mZ5eFA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/CKqRUyCkQgDdCvb39FLl8nk3Gp8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 125.62.0.0/18 Signature Algorithm: sha256WithRSAEncryption a0:a9:a0:4d:e1:72:e2:00:6d:95:94:c9:8a:c1:f3:fc:e3:2e: 7a:34:2a:f0:d5:4e:08:27:ee:7e:87:c6:9b:34:7f:bd:4d:1d: de:d9:54:49:e6:3c:03:9c:2c:2a:e3:22:d2:da:c9:4e:ec:f0: dd:e7:1c:5d:b3:8c:20:96:34:f5:e2:aa:ca:9a:17:2b:37:df: be:62:95:92:19:3e:c9:6d:bd:64:d0:b3:c7:0e:0f:ec:04:da: 47:d9:a9:e7:9c:51:1a:98:18:18:b2:4d:db:ce:a2:65:24:7e: e1:ad:c6:d0:45:e4:df:89:1a:c7:99:6b:e6:73:07:b1:88:c1: f2:62:ad:96:27:8e:1b:23:f6:7c:ed:6e:1c:9f:8e:1a:9f:50: 44:37:44:be:5a:b3:b2:e3:82:19:69:fb:98:be:36:d6:ef:86: cb:1a:8c:5c:be:a8:60:37:88:19:90:7b:5b:8f:f7:3b:5e:4e: e1:37:b9:fe:6f:b4:e2:48:ee:b4:ab:92:48:43:f8:b1:ae:78: 20:d7:62:80:f8:66:04:e7:40:94:a6:05:1b:85:00:a8:28:98: f9:00:a9:f2:87:8a:2b:f5:52:25:a5:ed:f0:70:fd:1f:fd:7c: 71:e8:e4:6c:4b:11:1a:97:04:fd:8d:ea:66:df:39:82:04:e6: 65:4e:09:5a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIBCDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFQ0Iy NzNCMDk3OTk3QzAyQjRGNTJFNUMxQkI0RkVGRTY2Nzk3ODUwMB4XDTI1MDExNDA4 MTgyMFoXDTI2MDExNDA3NTMyOVowMzExMC8GA1UEAxMoMDhBQTkxNTMyMEE0NDIw MEREMEFGNkY3RjQ1MkU1RjI3OTM3MUE5RjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALAL5IBxHhe2nbTGimiz1XoWHpB5pFbqJMaFIdmZ549Sdx9RSQnl l3QyIl68+xTBZGEYGK1VPebDHoq64n5Fi5uN76JIWi4IpCgtAh41MSt7F+JtvrD4 LRqZUtbFu4WsTl+d5Lr2ygb4FNSkgcA/Hc/uiDY7KyaWcy2gmFhA69cgu95lLTKF nQivMQpGDESXS80p97CSiIBcPApxVwmnPACDtLzPnhgjsP3QiVvylLm2ERX9nPng FqOVzyUBusHp0qqKq8xT21dE/JVTQapX7wMLdCENs8rWvm9Lxbp+CNiOP4s8VoQK 4EVqWyPpCFVsu3cZARSmihN68CmwVS+FGWECAwEAAaOCAe8wggHrMB0GA1UdDgQW BBQIqpFTIKRCAN0K9vf0UuXyeTcanzAfBgNVHSMEGDAWgBTssnOwl5l8ArT1Llwb tP7+Znl4UDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsGA1UdHwRUMFIwUKBO oEyGSnJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yMi83 TEp6c0plWmZBSzA5UzVjRzdULV9tWjVlRkEuY3JsMGMGCCsGAQUFBwEBBFcwVTBT BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw MDAwLzdMSnpzSmVaZkFLMDlTNWNHN1QtX21aNWVGQS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGbBggrBgEFBQcBCwSBjjCBizBWBggrBgEFBQcwC4ZKcnN5bmM6Ly9ycGtp LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIyL0NLcVJVeUNrUWdEZEN2YjM5 RkxsOG5rM0dwOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5j bi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZ9 PgAwDQYJKoZIhvcNAQELBQADggEBAKCpoE3hcuIAbZWUyYrB8/zjLno0KvDVTggn 7n6Hxps0f71NHd7ZVEnmPAOcLCrjItLayU7s8N3nHF2zjCCWNPXiqsqaFys3375i lZIZPsltvWTQs8cOD+wE2kfZqeecURqYGBiyTdvOomUkfuGtxtBF5N+JGseZa+Zz B7GIwfJirZYnjhsj9nztbhyfjhqfUEQ3RL5as7Ljghlp+5i+NtbvhssajFy+qGA3 iBmQe1uP9zteTuE3uf5vtOJI7rSrkkhD+LGueCDXYoD4ZgTnQJSmBRuFAKgomPkA qfKHiiv1UiWl7fBw/R/9fHHo5GxLERqXBP2N6mbfOYIE5mVOCVo= -----END CERTIFICATE-----Generated at Wed Jun 4 01:15:31 2025 by rpki-client