$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3078/JLvVqKyhKiQwA2sIkm4lyJi5K1I.roa File: JLvVqKyhKiQwA2sIkm4lyJi5K1I.roa (raw, json) Hash identifier: 31DDEya2UgXoHm0thBRJl5lsRqu0mK0Bqhcl5ZpC8ZE= Subject key identifier: 24:BB:D5:A8:AC:A1:2A:24:30:03:6B:08:92:6E:25:C8:98:B9:2B:52 Certificate issuer: /CN=F702935F02FC1B81297D1FFB4C78CE0BA1D43785 Certificate serial: 35 Authority key identifier: F7:02:93:5F:02:FC:1B:81:29:7D:1F:FB:4C:78:CE:0B:A1:D4:37:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/JLvVqKyhKiQwA2sIkm4lyJi5K1I.roa Signing time: Sat 17 May 2025 03:40:38 +0000 ROA not before: Sat 17 May 2025 03:40:38 +0000 ROA not after: Sun 10 May 2026 04:51:55 +0000 asID: 151270 IP address blocks: 110.40.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:09:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F702935F02FC1B81297D1FFB4C78CE0BA1D43785 Validity Not Before: May 17 03:40:38 2025 GMT Not After : May 10 04:51:55 2026 GMT Subject: CN=24BBD5A8ACA12A2430036B08926E25C898B92B52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:76:07:b8:a7:22:a5:83:a8:8c:5e:26:cf:6f: 91:6f:cc:a9:b6:74:8d:30:7e:de:a8:64:70:c6:4d: 75:b9:d2:94:00:31:15:30:db:40:0f:d7:34:b6:ad: 2b:36:4a:af:26:6b:96:01:2e:66:30:0a:fa:18:36: a6:29:fd:0d:75:f1:3a:15:f0:cc:b4:f5:92:96:82: 86:9a:84:81:cc:fd:27:61:0f:37:41:9f:f3:0e:fd: 61:0e:6b:8b:fe:1a:0d:27:d2:09:f2:cf:6d:01:4e: cd:ff:4e:c4:48:dc:58:6a:f1:c5:cf:fa:1b:c0:13: 51:c9:ff:44:d0:45:ed:de:60:98:b9:7a:b2:8f:92: 41:f5:8e:b1:48:29:e8:4b:6e:a8:14:da:e8:9c:e9: a9:90:7f:2e:b7:b1:33:50:80:ba:f3:c0:f1:75:f9: 08:90:8e:ea:34:c2:00:aa:a7:81:1f:6e:c4:a9:29: 04:e6:8e:50:60:33:a7:28:45:b0:bf:c3:81:5a:1d: 9b:1a:8f:8b:bd:13:8b:81:2c:d3:8c:b6:94:96:c2: eb:ab:59:d9:b3:38:74:69:1a:7d:fa:c8:e8:3e:1e: 78:a7:42:a0:1b:7f:ad:fa:6a:e3:1c:63:9a:0b:97: f5:4f:e1:42:70:b4:3f:3f:9b:3d:1f:c9:37:df:bf: 08:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:BB:D5:A8:AC:A1:2A:24:30:03:6B:08:92:6E:25:C8:98:B9:2B:52 X509v3 Authority Key Identifier: keyid:F7:02:93:5F:02:FC:1B:81:29:7D:1F:FB:4C:78:CE:0B:A1:D4:37:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/JLvVqKyhKiQwA2sIkm4lyJi5K1I.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 110.40.42.0/24 Signature Algorithm: sha256WithRSAEncryption 55:52:ab:e4:0c:ca:ab:b2:21:c0:88:32:35:52:ad:6e:92:9a: 2a:21:ae:fc:49:b3:cd:73:ca:cb:9b:6c:80:15:8a:25:fa:7d: c4:57:b7:44:9e:47:20:ce:56:69:f5:aa:a7:0e:dd:39:d6:84: 0a:bf:7f:ba:32:d3:88:04:29:e9:14:26:49:df:a2:1d:bb:bb: 67:98:33:fc:d4:54:fc:99:9f:a4:58:fb:a2:64:a3:a1:d2:51: f1:04:01:20:54:f5:17:0f:b6:69:5b:a1:dc:af:3e:a2:77:a5: 9e:c8:3e:4b:91:61:8c:db:74:7e:5d:3e:22:ef:70:2a:6e:f8: b2:dd:b1:cd:11:85:f6:4b:3f:7a:82:91:67:bb:20:76:43:52: 43:0a:4e:6e:1d:9b:70:31:41:ad:fa:fa:a1:a6:6c:49:4b:0a: 1a:c6:40:c1:c5:c6:21:44:a7:23:ad:46:2b:54:aa:bf:f6:49: 8b:70:5c:68:17:7c:28:47:14:43:e6:ea:2d:ea:06:17:e2:45: 39:75:47:af:7a:87:42:bc:4e:1f:eb:64:21:4f:28:5e:13:47: 5f:15:4b:00:ed:cd:12:9d:30:eb:6c:1d:17:3e:fc:50:e4:33: 6c:2d:39:38:38:c1:b6:ef:b6:58:f3:37:54:fe:3d:81:8d:27: 2a:a1:a1:ce -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBNTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGNzAy OTM1RjAyRkMxQjgxMjk3RDFGRkI0Qzc4Q0UwQkExRDQzNzg1MB4XDTI1MDUxNzAz NDAzOFoXDTI2MDUxMDA0NTE1NVowMzExMC8GA1UEAxMoMjRCQkQ1QThBQ0ExMkEy NDMwMDM2QjA4OTI2RTI1Qzg5OEI5MkI1MjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAK12B7inIqWDqIxeJs9vkW/MqbZ0jTB+3qhkcMZNdbnSlAAxFTDb QA/XNLatKzZKryZrlgEuZjAK+hg2pin9DXXxOhXwzLT1kpaChpqEgcz9J2EPN0Gf 8w79YQ5ri/4aDSfSCfLPbQFOzf9OxEjcWGrxxc/6G8ATUcn/RNBF7d5gmLl6so+S QfWOsUgp6EtuqBTa6JzpqZB/LrexM1CAuvPA8XX5CJCO6jTCAKqngR9uxKkpBOaO UGAzpyhFsL/DgVodmxqPi70Ti4Es04y2lJbC66tZ2bM4dGkaffrI6D4eeKdCoBt/ rfpq4xxjmguX9U/hQnC0Pz+bPR/JN9+/CFkCAwEAAaOCAfMwggHvMB0GA1UdDgQW BBQku9WorKEqJDADawiSbiXImLkrUjAfBgNVHSMEGDAWgBT3ApNfAvwbgSl9H/tM eM4LodQ3hTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMDc4 Lzl3S1RYd0w4RzRFcGZSXzdUSGpPQzZIVU40VS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOXdLVFh3TDhHNEVwZlJfN1RIak9DNkhVTjRVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA3OC9KTHZWcUt5aEtpUXdB MnNJa200bHlKaTVLMUkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAbigqMA0GCSqGSIb3DQEBCwUAA4IBAQBVUqvkDMqrsiHAiDI1Uq1ukpoqIa78 SbPNc8rLm2yAFYol+n3EV7dEnkcgzlZp9aqnDt051oQKv3+6MtOIBCnpFCZJ36Id u7tnmDP81FT8mZ+kWPuiZKOh0lHxBAEgVPUXD7ZpW6Hcrz6id6WeyD5LkWGM23R+ XT4i73Aqbviy3bHNEYX2Sz96gpFnuyB2Q1JDCk5uHZtwMUGt+vqhpmxJSwoaxkDB xcYhRKcjrUYrVKq/9kmLcFxoF3woRxRD5uot6gYX4kU5dUeveodCvE4f62QhTyhe E0dfFUsA7c0SnTDrbB0XPvxQ5DNsLTk4OMG277ZY8zdU/j2BjScqoaHO -----END CERTIFICATE-----Generated at Wed Jun 4 01:06:20 2025 by rpki-client