$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/FUjmoblRSrpuSS49mPXkS-sv7To.roa File: FUjmoblRSrpuSS49mPXkS-sv7To.roa (raw, json) Hash identifier: NnhSZfzRoZIR5ypL2YH1WCxEfPC0ozXgzCfEa8RAels= Subject key identifier: 15:48:E6:A1:B9:51:4A:BA:6E:49:2E:3D:98:F5:E4:4B:EB:2F:ED:3A Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 1345 Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/FUjmoblRSrpuSS49mPXkS-sv7To.roa Signing time: Thu 22 May 2025 09:04:44 +0000 ROA not before: Thu 22 May 2025 09:04:44 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 55990 IP address blocks: 101.245.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:10:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4933 (0x1345) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: May 22 09:04:44 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=1548E6A1B9514ABA6E492E3D98F5E44BEB2FED3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d2:2f:4b:7c:7e:ba:32:dd:76:0c:12:60:c6: b9:5e:fa:f4:39:6d:53:dc:55:56:8c:29:7a:f9:bf: 15:58:8f:b1:a8:36:b5:15:db:57:e3:3f:b8:a6:55: c9:a6:86:b2:0f:3a:08:53:2c:b9:3b:2e:fe:f2:5a: 92:46:0d:86:61:fd:ad:15:65:bd:fe:e1:e9:ec:59: d6:6e:fe:ba:24:a8:dc:1e:5d:31:e6:47:10:f9:66: 2e:42:8f:9a:5d:49:32:e4:7e:f6:1f:55:13:87:26: 44:2f:66:9e:dd:58:7c:ce:ea:08:1d:70:d6:84:43: c9:11:3a:e9:59:15:0d:eb:26:e1:e2:65:c0:40:d7: 6d:39:07:9a:b6:8c:58:3e:01:16:be:30:c1:ea:d3: 43:3f:4c:30:7c:e3:a6:30:fa:0e:64:1b:d5:64:33: bc:cf:74:1c:c1:cf:b6:43:7f:fe:a8:9b:15:1a:0f: d8:ff:7d:97:c8:b9:7b:d7:4e:ca:0c:0d:0a:0a:24: 62:c3:30:80:4f:da:e3:7f:01:2f:41:eb:7e:7f:4d: bb:f5:df:08:86:56:42:2b:2f:14:cd:b7:57:ab:ff: 76:5c:f5:21:8d:5f:c0:f1:55:64:c6:20:12:6e:27: 56:65:3b:89:49:e4:85:c5:9e:62:1a:41:b8:b8:f5: f8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:48:E6:A1:B9:51:4A:BA:6E:49:2E:3D:98:F5:E4:4B:EB:2F:ED:3A X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/FUjmoblRSrpuSS49mPXkS-sv7To.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 101.245.96.0/19 Signature Algorithm: sha256WithRSAEncryption 6e:e0:5b:3d:a0:eb:b1:64:39:bc:f1:ad:57:5c:a2:48:8b:74: e6:ae:fd:6c:95:93:b2:a9:83:2f:06:1a:af:e6:c5:07:a8:30: ec:79:cd:5b:7e:7a:71:4a:a9:31:3a:9a:0e:63:22:33:c1:af: 43:b2:bf:b6:92:b0:43:32:c0:c0:fe:0f:9e:9c:7c:89:f3:25: 76:19:91:75:7a:e3:96:0a:ea:fc:65:90:17:7d:b6:2f:f1:5f: 0e:86:1f:18:d8:e4:0d:a2:2f:e5:2a:3b:6f:65:60:7a:29:c2: f1:8b:cf:99:a3:eb:c2:4e:09:a3:fb:72:bc:d5:62:a6:be:f5: fc:95:be:59:72:07:a3:6e:fd:72:8d:24:b8:98:d6:ab:e4:20: bb:33:c4:b5:65:95:2d:32:ef:68:b9:5f:27:f5:5c:02:07:58: ab:40:2e:bc:7a:4d:78:b6:16:72:7a:23:eb:cb:20:94:0e:4f: 4a:ce:7e:84:bc:25:a9:e4:03:39:e1:5b:08:82:de:49:71:d9: 85:55:c3:42:b8:a4:bc:77:6c:74:de:ce:45:b5:4b:34:81:69: 5b:57:01:03:a8:3e:1c:0d:f8:de:07:79:22:28:50:03:9e:95: 6d:fe:e4:37:e4:a3:ee:50:96:ef:da:84:63:e6:9f:ac:ac:35: b6:5b:c5:93 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICE0UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNTA1MjIw OTA0NDRaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDE1NDhFNkExQjk1MTRB QkE2RTQ5MkUzRDk4RjVFNDRCRUIyRkVEM0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC40i9LfH66Mt12DBJgxrle+vQ5bVPcVVaMKXr5vxVYj7GoNrUV 21fjP7imVcmmhrIPOghTLLk7Lv7yWpJGDYZh/a0VZb3+4ensWdZu/rokqNweXTHm RxD5Zi5Cj5pdSTLkfvYfVROHJkQvZp7dWHzO6ggdcNaEQ8kROulZFQ3rJuHiZcBA 1205B5q2jFg+ARa+MMHq00M/TDB846Yw+g5kG9VkM7zPdBzBz7ZDf/6omxUaD9j/ fZfIuXvXTsoMDQoKJGLDMIBP2uN/AS9B635/Tbv13wiGVkIrLxTNt1er/3Zc9SGN X8DxVWTGIBJuJ1ZlO4lJ5IXFnmIaQbi49fiTAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUFUjmoblRSrpuSS49mPXkS+sv7TowHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvRlVqbW9ibFJTcnB1 U1M0OW1QWGtTLXN2N1RvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBWX1YDANBgkqhkiG9w0BAQsFAAOCAQEAbuBbPaDrsWQ5vPGtV1yiSIt05q79 bJWTsqmDLwYar+bFB6gw7HnNW356cUqpMTqaDmMiM8GvQ7K/tpKwQzLAwP4Pnpx8 ifMldhmRdXrjlgrq/GWQF322L/FfDoYfGNjkDaIv5So7b2VgeinC8YvPmaPrwk4J o/tyvNVipr71/JW+WXIHo279co0kuJjWq+QguzPEtWWVLTLvaLlfJ/VcAgdYq0Au vHpNeLYWcnoj68sglA5PSs5+hLwlqeQDOeFbCILeSXHZhVXDQrikvHdsdN7ORbVL NIFpW1cBA6g+HA343gd5IihQA56Vbf7kN+Sj7lCW79qEY+afrKw1tlvFkw== -----END CERTIFICATE-----Generated at Wed Jun 4 01:00:20 2025 by rpki-client