$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3078/JKHutdgWtZwyrNAD0C2H17GlJeE.roa File: JKHutdgWtZwyrNAD0C2H17GlJeE.roa (raw, json) Hash identifier: t4LS0jm4WzTaHianm5HBFpaSNV7SKuXZDOjEE34Fjr4= Subject key identifier: 24:A1:EE:B5:D8:16:B5:9C:32:AC:D0:03:D0:2D:87:D7:B1:A5:25:E1 Certificate issuer: /CN=F702935F02FC1B81297D1FFB4C78CE0BA1D43785 Certificate serial: 3F Authority key identifier: F7:02:93:5F:02:FC:1B:81:29:7D:1F:FB:4C:78:CE:0B:A1:D4:37:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/JKHutdgWtZwyrNAD0C2H17GlJeE.roa Signing time: Sat 17 May 2025 03:42:31 +0000 ROA not before: Sat 17 May 2025 03:42:31 +0000 ROA not after: Sun 10 May 2026 04:51:55 +0000 asID: 151270 IP address blocks: 110.40.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 08:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F702935F02FC1B81297D1FFB4C78CE0BA1D43785 Validity Not Before: May 17 03:42:31 2025 GMT Not After : May 10 04:51:55 2026 GMT Subject: CN=24A1EEB5D816B59C32ACD003D02D87D7B1A525E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c1:88:08:57:95:a0:e5:f2:98:9e:ee:0e:ce: 0e:0d:c1:a3:d2:e7:b6:d2:ff:06:95:32:13:27:bf: 7a:db:dc:24:75:96:79:8d:2c:13:ea:2b:72:23:7c: 2d:bc:3a:3f:48:da:3c:b3:85:7b:a5:46:d1:87:b0: df:06:9e:31:0d:bd:d9:2c:31:67:6c:e5:74:f5:8a: 2e:48:d9:70:83:28:4d:a6:ae:30:49:12:c9:c3:a7: b5:74:9f:8a:82:c1:01:a7:45:c6:fa:c5:bf:7d:95: 55:95:9d:45:8f:05:7a:68:3a:7c:c4:07:66:f3:34: 8d:fc:6a:71:98:3f:40:cc:cd:96:df:e9:e2:1d:a2: 60:ac:8c:3f:67:d9:fd:d7:f3:0b:07:48:74:98:18: c0:26:1a:7a:03:2a:6f:ef:f7:3e:24:63:49:a3:49: a3:03:39:f7:b6:67:17:7f:60:06:40:2a:1d:e3:82: ec:ef:cc:1e:5a:9d:ae:f6:9a:73:1f:ae:c6:b5:da: 58:6d:38:89:5f:b0:8d:d8:44:44:fd:e2:5b:5b:4b: 6c:c0:61:01:97:2d:f4:34:4b:a2:18:53:12:04:55: a8:13:26:cc:7d:12:90:17:bb:79:c7:5c:b0:96:9c: 88:fa:31:a9:5d:a2:2b:2e:56:87:e5:89:94:1d:88: 21:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A1:EE:B5:D8:16:B5:9C:32:AC:D0:03:D0:2D:87:D7:B1:A5:25:E1 X509v3 Authority Key Identifier: keyid:F7:02:93:5F:02:FC:1B:81:29:7D:1F:FB:4C:78:CE:0B:A1:D4:37:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/JKHutdgWtZwyrNAD0C2H17GlJeE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 110.40.63.0/24 Signature Algorithm: sha256WithRSAEncryption 08:2b:d4:a4:64:b8:94:ce:a2:a6:ee:0e:64:bf:7d:fd:5e:8f: 9c:e2:54:25:57:d2:ca:37:2b:79:4b:67:8a:09:aa:3f:9c:b4: e9:82:83:ae:04:3c:e7:15:b4:9e:71:2f:09:61:9a:fb:61:86: aa:20:3c:45:7f:7d:47:ea:ff:87:9b:b2:8c:0e:9c:65:57:b5: b3:7c:ff:cc:4a:e4:b7:c0:55:64:33:be:b6:d2:eb:3a:1c:4e: 61:9e:5e:87:68:5c:53:c5:db:5d:9e:79:92:5e:7d:34:80:7a: 17:07:64:e9:47:aa:5a:d6:1a:5d:12:92:57:b0:62:c7:8e:94: a6:34:8e:b6:5d:a0:d5:1f:3c:9c:ce:a0:70:8e:34:7b:91:ce: d8:18:45:4e:53:f3:b6:c8:d2:70:27:d1:30:f3:cb:69:90:59: ca:e6:ec:20:83:5d:b6:91:28:89:87:22:87:5e:17:85:53:44: bb:6e:b3:44:2a:65:4f:c7:ac:2f:fe:63:29:f6:9b:42:c2:b2: 3e:a0:50:6f:19:f7:09:81:5e:1b:a5:39:2a:62:1a:29:9a:33: d5:37:52:62:41:4f:46:d5:ff:b4:e5:35:b9:7a:4e:af:1c:f1: 92:38:25:4f:7e:d0:52:c6:93:7e:84:e4:08:3e:90:03:74:a6: dc:47:dc:50 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBPzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGNzAy OTM1RjAyRkMxQjgxMjk3RDFGRkI0Qzc4Q0UwQkExRDQzNzg1MB4XDTI1MDUxNzAz NDIzMVoXDTI2MDUxMDA0NTE1NVowMzExMC8GA1UEAxMoMjRBMUVFQjVEODE2QjU5 QzMyQUNEMDAzRDAyRDg3RDdCMUE1MjVFMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMXBiAhXlaDl8pie7g7ODg3Bo9LnttL/BpUyEye/etvcJHWWeY0s E+orciN8Lbw6P0jaPLOFe6VG0Yew3waeMQ292SwxZ2zldPWKLkjZcIMoTaauMEkS ycOntXSfioLBAadFxvrFv32VVZWdRY8Femg6fMQHZvM0jfxqcZg/QMzNlt/p4h2i YKyMP2fZ/dfzCwdIdJgYwCYaegMqb+/3PiRjSaNJowM597ZnF39gBkAqHeOC7O/M Hlqdrvaacx+uxrXaWG04iV+wjdhERP3iW1tLbMBhAZct9DRLohhTEgRVqBMmzH0S kBe7ecdcsJaciPoxqV2iKy5Wh+WJlB2IIdMCAwEAAaOCAfMwggHvMB0GA1UdDgQW BBQkoe612Ba1nDKs0APQLYfXsaUl4TAfBgNVHSMEGDAWgBT3ApNfAvwbgSl9H/tM eM4LodQ3hTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMDc4 Lzl3S1RYd0w4RzRFcGZSXzdUSGpPQzZIVU40VS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOXdLVFh3TDhHNEVwZlJfN1RIak9DNkhVTjRVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA3OC9KS0h1dGRnV3Rad3ly TkFEMEMySDE3R2xKZUUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAbig/MA0GCSqGSIb3DQEBCwUAA4IBAQAIK9SkZLiUzqKm7g5kv339Xo+c4lQl V9LKNyt5S2eKCao/nLTpgoOuBDznFbSecS8JYZr7YYaqIDxFf31H6v+Hm7KMDpxl V7WzfP/MSuS3wFVkM7620us6HE5hnl6HaFxTxdtdnnmSXn00gHoXB2TpR6pa1hpd EpJXsGLHjpSmNI62XaDVHzyczqBwjjR7kc7YGEVOU/O2yNJwJ9Ew88tpkFnK5uwg g122kSiJhyKHXheFU0S7brNEKmVPx6wv/mMp9ptCwrI+oFBvGfcJgV4bpTkqYhop mjPVN1JiQU9G1f+05TW5ek6vHPGSOCVPftBSxpN+hOQIPpADdKbcR9xQ -----END CERTIFICATE-----Generated at Wed Jun 4 04:02:10 2025 by rpki-client