$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/Mg8iIOmLk6MFpw0vhIZyWIqsGWU.roa File: Mg8iIOmLk6MFpw0vhIZyWIqsGWU.roa (raw, json) Hash identifier: tJBlTI0FHEVJGGn5KtlWP2xFuUz6Ap90BJDFUZLrSiM= Subject key identifier: 32:0F:22:20:E9:8B:93:A3:05:A7:0D:2F:84:86:72:58:8A:AC:19:65 Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 1351 Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Mg8iIOmLk6MFpw0vhIZyWIqsGWU.roa Signing time: Thu 22 May 2025 09:04:49 +0000 ROA not before: Thu 22 May 2025 09:04:49 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 55990 IP address blocks: 115.175.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:10:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4945 (0x1351) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: May 22 09:04:49 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=320F2220E98B93A305A70D2F848672588AAC1965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:1b:dc:ee:58:2c:6c:5d:f3:36:db:f6:bf:a8: 3c:90:71:b0:14:b6:82:a8:5b:06:a8:c8:f0:c7:1b: 91:bd:9b:13:5f:13:44:6c:dd:53:59:6b:f0:26:31: 51:8b:62:66:7d:94:47:30:48:fd:f4:08:2c:2b:04: e4:c1:01:70:5c:c2:36:0e:8d:da:e2:5e:a3:3b:03: ea:8f:3a:2b:f5:3a:2b:46:32:c7:05:0c:60:61:08: 2e:d9:94:dd:e1:01:aa:97:4a:5f:c8:d5:79:8a:2b: 99:b3:8a:08:7b:85:71:65:69:13:f4:e0:08:b1:f3: 09:00:8d:86:59:47:2b:de:ee:9c:b0:05:62:ae:10: aa:77:e1:7d:f9:86:51:83:13:a7:4d:79:01:89:e2: e6:a5:73:fe:7c:c4:d0:04:8a:67:97:df:cd:70:b8: 16:6b:8d:40:4e:d3:6c:1f:d8:d5:d0:0e:08:aa:11: ff:7d:30:12:75:32:fe:d0:ae:22:ec:f0:8f:08:a0: 00:4f:5a:ae:19:04:cf:fb:bd:3b:41:73:9a:8a:da: 5d:d3:b6:8b:2f:ba:3b:1f:0a:d9:df:3a:0b:24:ac: 88:0f:11:89:ea:a5:bc:45:b0:2b:20:6f:ca:d9:98: 4a:65:c8:9f:17:86:f8:cd:1e:98:d1:ce:34:9e:03: 34:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:0F:22:20:E9:8B:93:A3:05:A7:0D:2F:84:86:72:58:8A:AC:19:65 X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Mg8iIOmLk6MFpw0vhIZyWIqsGWU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 115.175.224.0/20 Signature Algorithm: sha256WithRSAEncryption 49:4a:95:ee:b9:40:34:cd:6e:05:ab:54:8c:c7:78:8f:b5:95: d4:f3:0a:41:be:88:10:9c:d5:8c:7f:bc:b2:64:15:85:c7:4b: 83:6e:06:f6:bc:72:f4:c3:1a:69:a0:53:6d:8c:a1:2b:cc:96: b6:4e:03:9e:77:07:19:00:3f:1d:67:1a:26:3e:c9:be:f1:87: a6:07:c9:e1:40:3a:a2:78:23:f0:73:e3:04:26:60:5d:6c:4f: ea:ca:1a:af:7c:fb:bb:fe:3b:3f:8a:66:3d:20:ce:21:a6:d7: 0d:9d:fb:96:9e:d6:5a:c6:e3:8e:cb:56:14:68:14:7d:26:a1: 05:ff:ab:c9:98:6f:2d:26:16:f4:12:62:b1:ca:41:70:8e:59: 80:ad:e8:4f:ce:ac:ca:b0:29:a8:11:77:b9:23:df:47:a3:fb: 05:5a:5b:69:98:ec:b0:8a:0e:5f:a1:77:29:32:db:81:87:18: 55:09:10:23:1e:d2:9c:2f:bb:e1:7d:14:e1:91:d5:fa:3f:72: 33:87:f8:f8:97:43:22:c2:45:55:cf:84:6f:6b:e5:8e:af:50: 89:7b:e4:cb:87:a0:af:40:85:02:7b:7e:e7:7a:df:15:60:82: 4c:9f:47:d2:51:5d:ec:2e:ee:b2:20:38:0f:ed:70:b4:b4:88: 80:f9:76:ed -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICE1EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNTA1MjIw OTA0NDlaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDMyMEYyMjIwRTk4Qjkz QTMwNUE3MEQyRjg0ODY3MjU4OEFBQzE5NjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDvG9zuWCxsXfM22/a/qDyQcbAUtoKoWwaoyPDHG5G9mxNfE0Rs 3VNZa/AmMVGLYmZ9lEcwSP30CCwrBOTBAXBcwjYOjdriXqM7A+qPOiv1OitGMscF DGBhCC7ZlN3hAaqXSl/I1XmKK5mzigh7hXFlaRP04Aix8wkAjYZZRyve7pywBWKu EKp34X35hlGDE6dNeQGJ4ualc/58xNAEimeX381wuBZrjUBO02wf2NXQDgiqEf99 MBJ1Mv7QriLs8I8IoABPWq4ZBM/7vTtBc5qK2l3TtosvujsfCtnfOgskrIgPEYnq pbxFsCsgb8rZmEplyJ8XhvjNHpjRzjSeAzSZAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUMg8iIOmLk6MFpw0vhIZyWIqsGWUwHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvTWc4aUlPbUxrNk1G cHcwdmhJWnlXSXFzR1dVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBHOv4DANBgkqhkiG9w0BAQsFAAOCAQEASUqV7rlANM1uBatUjMd4j7WV1PMK Qb6IEJzVjH+8smQVhcdLg24G9rxy9MMaaaBTbYyhK8yWtk4DnncHGQA/HWcaJj7J vvGHpgfJ4UA6ongj8HPjBCZgXWxP6soar3z7u/47P4pmPSDOIabXDZ37lp7WWsbj jstWFGgUfSahBf+ryZhvLSYW9BJiscpBcI5ZgK3oT86syrApqBF3uSPfR6P7BVpb aZjssIoOX6F3KTLbgYcYVQkQIx7SnC+74X0U4ZHV+j9yM4f4+JdDIsJFVc+Eb2vl jq9QiXvky4egr0CFAnt+53rfFWCCTJ9H0lFd7C7usiA4D+1wtLSIgPl27Q== -----END CERTIFICATE-----Generated at Wed Jun 4 01:00:14 2025 by rpki-client