$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/5I95XC_vjuDpnqrxTPnnaA2Ca7k.roa File: 5I95XC_vjuDpnqrxTPnnaA2Ca7k.roa (raw, json) Hash identifier: h2E0c9dPNtWFPmuifaZCglRGKX7yTUPLADFvH3HMS+U= Subject key identifier: E4:8F:79:5C:2F:EF:8E:E0:E9:9E:AA:F1:4C:F9:E7:68:0D:82:6B:B9 Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 134E Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/5I95XC_vjuDpnqrxTPnnaA2Ca7k.roa Signing time: Thu 22 May 2025 09:04:48 +0000 ROA not before: Thu 22 May 2025 09:04:48 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 55990 IP address blocks: 101.245.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:10:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4942 (0x134e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: May 22 09:04:48 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=E48F795C2FEF8EE0E99EAAF14CF9E7680D826BB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c2:7a:04:37:ad:c1:25:94:82:58:16:3c:85: 19:11:c5:c1:6c:65:06:09:e5:f9:07:5e:5a:b1:1b: 45:a0:cd:19:af:1c:2c:53:f3:dd:92:af:11:9f:ad: 84:af:ab:7f:91:6a:47:b9:97:04:0e:b4:f9:ba:84: 9a:0d:6b:8e:3d:0e:a2:00:ae:d1:e9:7e:18:b7:7c: 1f:80:2b:b6:1a:ff:38:0f:97:70:8a:c6:3e:c8:6c: a4:09:6c:59:a0:77:be:13:03:72:51:9e:b3:3e:ad: a3:22:3e:db:16:29:d3:ed:ab:fc:8c:77:5c:89:8a: 1e:00:42:d2:77:df:98:cd:61:c9:be:4b:c8:4a:44: 39:9d:19:d0:fd:0f:c9:56:8e:b5:3a:fb:63:b4:a1: 3e:0d:e7:a5:ac:53:5f:49:a0:c7:d4:35:d1:91:7d: 32:f5:4e:c3:ea:38:6e:ab:24:5d:ea:78:90:e2:b8: b4:22:85:7e:35:2b:da:9d:40:c1:cb:21:45:61:16: 08:6c:ad:e0:42:c5:48:81:26:ae:75:59:2f:7c:ad: ef:05:e1:61:50:b3:fd:81:eb:d5:01:3a:b4:cd:a5: 7c:39:68:83:69:41:33:04:e9:c7:c1:6d:82:43:9a: c0:cc:49:e0:9a:e8:f8:e4:3c:c3:50:a5:a4:d9:19: e0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:8F:79:5C:2F:EF:8E:E0:E9:9E:AA:F1:4C:F9:E7:68:0D:82:6B:B9 X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/5I95XC_vjuDpnqrxTPnnaA2Ca7k.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 101.245.18.0/23 Signature Algorithm: sha256WithRSAEncryption a4:51:ce:5a:86:6a:04:be:5d:5b:64:ba:d8:77:27:17:e8:d4: a7:a3:c0:7a:72:3b:8c:31:2f:ba:6a:48:8b:03:64:66:e1:ca: ef:9c:8a:df:57:9a:08:05:09:52:d0:86:24:de:a7:6e:2c:d1: 6a:b7:df:96:ca:22:90:ad:a0:ce:f8:de:7e:94:ce:2a:24:0c: 4c:05:33:d5:4a:ef:ab:63:75:43:f0:14:ea:d3:4d:13:aa:0a: a6:ad:9f:ae:64:66:9f:3f:c7:3b:15:3d:aa:d5:54:9c:33:96: 5a:29:0d:4e:5f:ff:3a:63:93:9f:36:6e:d0:df:1c:4a:58:53: b9:d9:25:c9:26:f3:48:07:fe:9a:4e:65:f8:7f:e5:56:d4:c0: 00:82:39:09:31:61:53:fd:67:aa:11:3e:d3:75:f0:ba:77:10: d0:51:5e:d8:25:35:70:da:77:93:25:86:d5:71:b3:f9:ff:57: b1:ea:6d:6e:18:a4:9e:3a:6a:03:62:17:b7:97:b5:89:79:fd: 4a:8a:56:38:c3:46:02:fa:51:29:8c:0d:30:24:50:68:ad:f0: 99:d4:c7:6c:60:a1:a7:78:8e:5c:a9:1d:58:64:38:3a:87:06: f5:89:b1:ba:d1:bb:ab:3a:65:65:e2:64:67:08:c9:74:a7:2e: bc:4a:31:c2 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICE04wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNTA1MjIw OTA0NDhaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEU0OEY3OTVDMkZFRjhF RTBFOTlFQUFGMTRDRjlFNzY4MEQ4MjZCQjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDiwnoEN63BJZSCWBY8hRkRxcFsZQYJ5fkHXlqxG0WgzRmvHCxT 892SrxGfrYSvq3+Rake5lwQOtPm6hJoNa449DqIArtHpfhi3fB+AK7Ya/zgPl3CK xj7IbKQJbFmgd74TA3JRnrM+raMiPtsWKdPtq/yMd1yJih4AQtJ335jNYcm+S8hK RDmdGdD9D8lWjrU6+2O0oT4N56WsU19JoMfUNdGRfTL1TsPqOG6rJF3qeJDiuLQi hX41K9qdQMHLIUVhFghsreBCxUiBJq51WS98re8F4WFQs/2B69UBOrTNpXw5aINp QTME6cfBbYJDmsDMSeCa6PjkPMNQpaTZGeCLAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU5I95XC/vjuDpnqrxTPnnaA2Ca7kwHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvNUk5NVhDX3ZqdURw bnFyeFRQbm5hQTJDYTdrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAWX1EjANBgkqhkiG9w0BAQsFAAOCAQEApFHOWoZqBL5dW2S62HcnF+jUp6PA enI7jDEvumpIiwNkZuHK75yK31eaCAUJUtCGJN6nbizRarfflsoikK2gzvjefpTO KiQMTAUz1Urvq2N1Q/AU6tNNE6oKpq2frmRmnz/HOxU9qtVUnDOWWikNTl//OmOT nzZu0N8cSlhTudklySbzSAf+mk5l+H/lVtTAAII5CTFhU/1nqhE+03XwuncQ0FFe 2CU1cNp3kyWG1XGz+f9XseptbhiknjpqA2IXt5e1iXn9SopWOMNGAvpRKYwNMCRQ aK3wmdTHbGChp3iOXKkdWGQ4OocG9YmxutG7qzplZeJkZwjJdKcuvEoxwg== -----END CERTIFICATE-----Generated at Wed Jun 4 01:02:29 2025 by rpki-client