$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3078/9oETNch_gAv-6wYdAez9jmFoFig.roa File: 9oETNch_gAv-6wYdAez9jmFoFig.roa (raw, json) Hash identifier: GgwdWkb0fGfgHm3tVJPTd6CmGXO7mmzdMa/kySWrGZ0= Subject key identifier: F6:81:13:35:C8:7F:80:0B:FE:EB:06:1D:01:EC:FD:8E:61:68:16:28 Certificate issuer: /CN=F702935F02FC1B81297D1FFB4C78CE0BA1D43785 Certificate serial: 34 Authority key identifier: F7:02:93:5F:02:FC:1B:81:29:7D:1F:FB:4C:78:CE:0B:A1:D4:37:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9oETNch_gAv-6wYdAez9jmFoFig.roa Signing time: Sat 17 May 2025 03:40:38 +0000 ROA not before: Sat 17 May 2025 03:40:38 +0000 ROA not after: Sun 10 May 2026 04:51:55 +0000 asID: 151270 IP address blocks: 110.40.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:09:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F702935F02FC1B81297D1FFB4C78CE0BA1D43785 Validity Not Before: May 17 03:40:38 2025 GMT Not After : May 10 04:51:55 2026 GMT Subject: CN=F6811335C87F800BFEEB061D01ECFD8E61681628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:68:ca:13:78:14:80:97:99:a7:ef:86:ec:9f: e3:e3:ea:5c:38:94:b6:7f:63:61:c2:cd:9e:80:57: 2c:86:0a:ca:d9:a5:61:fa:88:b1:a8:21:26:17:d1: 4e:26:cc:86:ca:bb:36:cc:63:cb:e3:a4:e9:71:b8: 11:3d:4d:41:9e:d9:ee:12:a5:ee:42:8d:fa:b1:ed: dc:7c:3b:d6:b1:c2:41:fd:26:76:a7:3c:79:42:8d: 02:65:88:e2:e5:84:2e:0a:44:a4:06:c4:7d:f0:54: 0a:3c:b6:61:e7:88:a8:8f:73:44:5b:0d:ca:c1:25: 6d:48:90:aa:98:9e:18:0b:a4:e2:bf:ca:08:27:70: 77:a8:bc:55:f3:34:0a:13:72:09:86:a6:7f:85:11: 2d:0e:88:a3:05:b0:37:6e:6f:2c:8c:d5:69:17:7c: e6:ea:8f:e0:c8:d1:c7:3a:72:87:f5:73:ad:1a:d0: b6:5f:59:de:86:84:7d:b3:05:d6:1e:ee:5d:00:53: eb:04:16:0b:c4:64:ee:ed:b5:af:3c:38:ab:24:1d: ca:e3:e3:89:f1:c2:81:45:f9:0a:ca:2c:29:01:e6: 07:8a:1a:0b:85:1f:a0:2e:32:15:07:35:3f:b0:f4: 4d:3b:db:81:d3:b1:f7:73:c3:5a:8d:e5:a3:5f:2e: 4d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:81:13:35:C8:7F:80:0B:FE:EB:06:1D:01:EC:FD:8E:61:68:16:28 X509v3 Authority Key Identifier: keyid:F7:02:93:5F:02:FC:1B:81:29:7D:1F:FB:4C:78:CE:0B:A1:D4:37:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9oETNch_gAv-6wYdAez9jmFoFig.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 110.40.37.0/24 Signature Algorithm: sha256WithRSAEncryption 91:b8:5f:81:94:8a:43:08:6c:60:c2:76:90:85:06:68:a9:c7: 41:06:e9:af:2d:fe:a8:69:db:ce:cd:cf:e6:18:52:14:5e:a1: 08:de:c5:b0:61:57:ec:33:50:86:4c:74:87:0e:e6:d2:ca:ab: 9b:86:a9:6b:8b:dc:61:2a:40:b3:23:b6:90:0d:11:b2:e0:8a: 5e:ef:82:41:45:63:cd:cd:d5:d6:12:4d:be:68:1d:d3:54:92: 38:23:a1:09:61:0f:4f:ca:1a:f7:dd:33:57:74:90:7f:8a:8a: fc:07:fa:80:6c:03:02:11:d6:4d:07:25:02:bf:cf:a9:26:c0: 6e:ae:46:ee:ea:77:18:e8:f9:6a:fe:9d:9c:87:22:e3:7a:a6: a8:0a:fc:d5:c5:ff:da:01:9f:a4:e3:bd:1f:51:c7:77:a3:5e: 1d:17:30:4f:e8:6a:78:f7:a6:85:f4:a5:09:0f:f4:23:39:88: d4:77:09:04:5e:c6:9a:64:41:ca:73:7a:ea:32:bf:3f:5c:45: 6f:1a:62:21:74:76:09:2f:35:24:93:a2:dc:c8:5b:70:cc:22: 32:c2:1a:c9:61:af:04:98:9e:f9:b9:3c:46:16:15:02:21:88: ef:e8:d3:22:d6:97:ba:d8:4b:23:f0:66:cf:77:93:d0:44:e3: b0:c5:53:a9 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBNDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGNzAy OTM1RjAyRkMxQjgxMjk3RDFGRkI0Qzc4Q0UwQkExRDQzNzg1MB4XDTI1MDUxNzAz NDAzOFoXDTI2MDUxMDA0NTE1NVowMzExMC8GA1UEAxMoRjY4MTEzMzVDODdGODAw QkZFRUIwNjFEMDFFQ0ZEOEU2MTY4MTYyODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANBoyhN4FICXmafvhuyf4+PqXDiUtn9jYcLNnoBXLIYKytmlYfqI saghJhfRTibMhsq7Nsxjy+Ok6XG4ET1NQZ7Z7hKl7kKN+rHt3Hw71rHCQf0mdqc8 eUKNAmWI4uWELgpEpAbEffBUCjy2YeeIqI9zRFsNysElbUiQqpieGAuk4r/KCCdw d6i8VfM0ChNyCYamf4URLQ6IowWwN25vLIzVaRd85uqP4MjRxzpyh/VzrRrQtl9Z 3oaEfbMF1h7uXQBT6wQWC8Rk7u21rzw4qyQdyuPjifHCgUX5CsosKQHmB4oaC4Uf oC4yFQc1P7D0TTvbgdOx93PDWo3lo18uTWsCAwEAAaOCAfMwggHvMB0GA1UdDgQW BBT2gRM1yH+AC/7rBh0B7P2OYWgWKDAfBgNVHSMEGDAWgBT3ApNfAvwbgSl9H/tM eM4LodQ3hTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMDc4 Lzl3S1RYd0w4RzRFcGZSXzdUSGpPQzZIVU40VS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOXdLVFh3TDhHNEVwZlJfN1RIak9DNkhVTjRVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA3OC85b0VUTmNoX2dBdi02 d1lkQWV6OWptRm9GaWcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAbiglMA0GCSqGSIb3DQEBCwUAA4IBAQCRuF+BlIpDCGxgwnaQhQZoqcdBBumv Lf6oadvOzc/mGFIUXqEI3sWwYVfsM1CGTHSHDubSyqubhqlri9xhKkCzI7aQDRGy 4Ipe74JBRWPNzdXWEk2+aB3TVJI4I6EJYQ9Pyhr33TNXdJB/ior8B/qAbAMCEdZN ByUCv8+pJsBurkbu6ncY6Plq/p2chyLjeqaoCvzVxf/aAZ+k470fUcd3o14dFzBP 6Gp496aF9KUJD/QjOYjUdwkEXsaaZEHKc3rqMr8/XEVvGmIhdHYJLzUkk6LcyFtw zCIywhrJYa8EmJ75uTxGFhUCIYjv6NMi1pe62Esj8GbPd5PQROOwxVOp -----END CERTIFICATE-----Generated at Wed Jun 4 02:00:02 2025 by rpki-client