$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3078/7KjtMRiXHyejdwC4m_l3xxME7YA.roa File: 7KjtMRiXHyejdwC4m_l3xxME7YA.roa (raw, json) Hash identifier: J4G53iQxuWCQ1sz4afVxQcjY8m/C9rCP/3J2H5H87hc= Subject key identifier: EC:A8:ED:31:18:97:1F:27:A3:77:00:B8:9B:F9:77:C7:13:04:ED:80 Certificate issuer: /CN=F702935F02FC1B81297D1FFB4C78CE0BA1D43785 Certificate serial: 31 Authority key identifier: F7:02:93:5F:02:FC:1B:81:29:7D:1F:FB:4C:78:CE:0B:A1:D4:37:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/7KjtMRiXHyejdwC4m_l3xxME7YA.roa Signing time: Sat 17 May 2025 03:40:37 +0000 ROA not before: Sat 17 May 2025 03:40:37 +0000 ROA not after: Sun 10 May 2026 04:51:55 +0000 asID: 151270 IP address blocks: 110.40.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:09:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F702935F02FC1B81297D1FFB4C78CE0BA1D43785 Validity Not Before: May 17 03:40:37 2025 GMT Not After : May 10 04:51:55 2026 GMT Subject: CN=ECA8ED3118971F27A37700B89BF977C71304ED80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b2:27:14:4b:8a:7c:a8:1b:d2:50:62:4d:3c: ae:24:cb:62:b7:74:27:e9:1c:28:82:d8:d7:9f:4f: 73:88:2e:f1:e8:67:9b:6e:79:de:94:19:81:66:c9: f5:5f:40:ac:07:49:7c:2d:10:8f:f4:41:11:06:a6: cd:03:4f:81:4d:bf:3f:ea:04:4c:c6:53:f7:9a:84: ee:0b:2d:b4:06:a1:b6:3a:5f:65:7f:98:46:bd:3c: 91:a8:ac:21:38:d4:6c:74:84:3a:28:fb:7c:ad:42: 7e:69:5d:16:c9:64:62:29:47:1a:ad:97:82:33:cb: 21:0a:db:e2:68:43:f9:5e:26:21:da:81:25:5d:65: 8d:d8:20:0d:28:75:8d:36:1a:eb:fa:fe:9e:ef:5f: 23:f5:77:76:23:64:18:9b:a6:3b:1b:93:c1:bc:20: 2c:50:a5:86:79:02:ba:d6:97:b3:ae:b1:1c:02:ba: 6d:88:44:37:34:12:fc:b1:68:99:a9:aa:a2:cc:eb: e6:01:6e:be:95:a6:74:c0:4e:65:93:49:d8:a0:0d: a6:75:b7:c9:84:02:48:80:3b:9d:5f:5d:01:77:bc: 35:fd:78:de:8f:06:4a:24:fe:3a:12:cb:9a:cb:29: d8:67:17:00:5a:29:c4:2e:bd:b3:54:90:29:bc:b0: 68:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:A8:ED:31:18:97:1F:27:A3:77:00:B8:9B:F9:77:C7:13:04:ED:80 X509v3 Authority Key Identifier: keyid:F7:02:93:5F:02:FC:1B:81:29:7D:1F:FB:4C:78:CE:0B:A1:D4:37:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/7KjtMRiXHyejdwC4m_l3xxME7YA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 110.40.52.0/24 Signature Algorithm: sha256WithRSAEncryption 88:86:74:0c:48:f5:6d:07:9e:f6:37:ce:9b:ae:ff:7b:ae:a2: 9f:a2:6d:5e:84:50:a4:c7:0b:87:62:7b:72:98:19:e4:21:86: 44:a6:0a:dd:1e:99:a5:f2:a2:d2:aa:9c:c7:5e:80:70:4c:92: 48:6e:47:d0:2e:e2:65:81:f8:19:40:cb:2b:08:24:9a:98:a7: 3d:7b:2f:56:31:bc:cc:12:2a:dc:94:db:01:ac:da:29:dc:ad: 6e:c6:d2:11:59:54:4f:1e:d0:2e:1b:a8:d2:af:55:8a:d7:87: 3c:86:6b:a9:a9:65:da:3f:0b:3c:30:d1:38:5d:2a:e3:1f:c2: a6:7c:5c:98:d8:c0:2f:f9:9d:3e:ff:ca:0e:a7:7a:d6:44:27: 96:a8:2c:8a:02:50:59:61:a6:4a:3f:7b:34:03:d3:c8:69:ca: 97:a0:cf:2e:88:35:26:0f:4c:4c:21:9a:69:1f:3a:b5:7b:12: e5:c6:b5:00:69:1f:58:15:99:30:e8:47:56:b3:27:7c:b0:b5: 5a:63:c9:eb:03:41:e9:4b:ef:62:32:fb:ea:ab:ac:c7:75:7b: 6e:7b:32:1e:6f:37:17:7c:e5:1d:16:c8:72:a4:7d:84:fa:42: 52:03:75:7f:e5:4e:36:78:1f:66:dc:10:94:01:13:d6:9d:65: d9:74:83:f0 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBMTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGNzAy OTM1RjAyRkMxQjgxMjk3RDFGRkI0Qzc4Q0UwQkExRDQzNzg1MB4XDTI1MDUxNzAz NDAzN1oXDTI2MDUxMDA0NTE1NVowMzExMC8GA1UEAxMoRUNBOEVEMzExODk3MUYy N0EzNzcwMEI4OUJGOTc3QzcxMzA0RUQ4MDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMOyJxRLinyoG9JQYk08riTLYrd0J+kcKILY159Pc4gu8ehnm255 3pQZgWbJ9V9ArAdJfC0Qj/RBEQamzQNPgU2/P+oETMZT95qE7gsttAahtjpfZX+Y Rr08kaisITjUbHSEOij7fK1CfmldFslkYilHGq2XgjPLIQrb4mhD+V4mIdqBJV1l jdggDSh1jTYa6/r+nu9fI/V3diNkGJumOxuTwbwgLFClhnkCutaXs66xHAK6bYhE NzQS/LFomamqoszr5gFuvpWmdMBOZZNJ2KANpnW3yYQCSIA7nV9dAXe8Nf143o8G SiT+OhLLmssp2GcXAFopxC69s1SQKbywaPMCAwEAAaOCAfMwggHvMB0GA1UdDgQW BBTsqO0xGJcfJ6N3ALib+XfHEwTtgDAfBgNVHSMEGDAWgBT3ApNfAvwbgSl9H/tM eM4LodQ3hTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMDc4 Lzl3S1RYd0w4RzRFcGZSXzdUSGpPQzZIVU40VS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOXdLVFh3TDhHNEVwZlJfN1RIak9DNkhVTjRVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA3OC83S2p0TVJpWEh5ZWpk d0M0bV9sM3h4TUU3WUEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAbig0MA0GCSqGSIb3DQEBCwUAA4IBAQCIhnQMSPVtB572N86brv97rqKfom1e hFCkxwuHYntymBnkIYZEpgrdHpml8qLSqpzHXoBwTJJIbkfQLuJlgfgZQMsrCCSa mKc9ey9WMbzMEirclNsBrNop3K1uxtIRWVRPHtAuG6jSr1WK14c8hmupqWXaPws8 MNE4XSrjH8KmfFyY2MAv+Z0+/8oOp3rWRCeWqCyKAlBZYaZKP3s0A9PIacqXoM8u iDUmD0xMIZppHzq1exLlxrUAaR9YFZkw6EdWsyd8sLVaY8nrA0HpS+9iMvvqq6zH dXtuezIebzcXfOUdFshypH2E+kJSA3V/5U42eB9m3BCUARPWnWXZdIPw -----END CERTIFICATE-----Generated at Wed Jun 4 01:03:47 2025 by rpki-client