$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3078/S_MaBuVvXeEz8EUEzsZ2VLaSYeM.roa File: S_MaBuVvXeEz8EUEzsZ2VLaSYeM.roa (raw, json) Hash identifier: b9Pj/98DyH1i/9rmPav1GV/LK/101bgqHUXbqdTkwEw= Subject key identifier: 4B:F3:1A:06:E5:6F:5D:E1:33:F0:45:04:CE:C6:76:54:B6:92:61:E3 Certificate issuer: /CN=F702935F02FC1B81297D1FFB4C78CE0BA1D43785 Certificate serial: 37 Authority key identifier: F7:02:93:5F:02:FC:1B:81:29:7D:1F:FB:4C:78:CE:0B:A1:D4:37:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/S_MaBuVvXeEz8EUEzsZ2VLaSYeM.roa Signing time: Sat 17 May 2025 03:40:38 +0000 ROA not before: Sat 17 May 2025 03:40:38 +0000 ROA not after: Sun 10 May 2026 04:51:55 +0000 asID: 151270 IP address blocks: 110.40.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:09:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F702935F02FC1B81297D1FFB4C78CE0BA1D43785 Validity Not Before: May 17 03:40:38 2025 GMT Not After : May 10 04:51:55 2026 GMT Subject: CN=4BF31A06E56F5DE133F04504CEC67654B69261E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4f:78:43:80:24:39:2f:ac:5d:47:85:f3:9b: e7:3e:4d:ef:49:e9:c1:13:ef:6f:34:e9:a5:dd:bd: 67:c4:92:1d:62:2b:32:2e:97:63:26:c4:66:d6:10: c5:90:b7:40:b5:f1:92:4d:80:5c:0e:fb:d9:21:cf: f3:23:34:0d:30:3b:99:18:e6:c6:c4:47:24:8a:e2: 7f:c4:69:4a:b9:49:27:d1:b2:76:0e:df:df:e1:a4: 6a:93:59:ad:05:87:96:30:c9:44:17:c2:8d:93:22: 1d:1c:b1:08:7d:7f:ee:a6:58:86:d4:c0:8c:21:ee: 85:99:5b:91:fb:a7:0b:c4:10:de:32:00:b3:51:c9: 3c:44:d2:a8:6c:d5:90:c8:c1:3a:8c:df:a9:43:34: 5d:e3:01:d4:5f:63:d7:37:ac:12:79:5d:b2:ae:76: b2:a5:56:26:67:f9:5e:03:a9:5a:cc:64:3b:78:0e: dd:7c:e2:72:b3:c7:8b:35:33:b4:c1:dc:36:d4:03: a0:ff:0b:6b:f0:a8:c0:f8:a2:bf:9a:06:78:b8:72: cd:ff:66:26:fe:09:62:0a:50:11:2a:ef:e2:70:ef: 84:db:e8:e5:b2:fb:16:4b:c7:0f:e1:1f:4b:36:20: fc:48:5e:7f:c7:e6:57:c6:30:1d:ea:fb:5c:16:41: b3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:F3:1A:06:E5:6F:5D:E1:33:F0:45:04:CE:C6:76:54:B6:92:61:E3 X509v3 Authority Key Identifier: keyid:F7:02:93:5F:02:FC:1B:81:29:7D:1F:FB:4C:78:CE:0B:A1:D4:37:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/S_MaBuVvXeEz8EUEzsZ2VLaSYeM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 110.40.50.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:5b:9f:36:2e:c5:92:1f:1d:ce:16:0d:d2:f9:e4:6e:be:eb: 82:ee:f9:be:55:68:cb:ec:c3:6f:ba:24:7a:5b:f6:b0:e5:d8: 9c:98:58:8e:67:52:22:f2:e8:aa:77:3b:d8:4f:c6:91:b2:a6: 78:42:46:28:c2:25:cb:a1:40:88:52:c2:96:d9:44:e7:aa:ce: 06:05:da:b6:65:cf:7d:89:9c:2c:a7:05:6b:97:db:61:01:d6: 6c:54:10:6c:2a:1a:ab:a7:8d:32:59:bf:ef:c7:1c:b5:10:c3: d2:ac:0a:e6:b2:b1:ca:c8:ba:1b:0a:0d:dc:83:35:a6:de:3f: f4:03:d1:94:7a:07:ca:c6:b6:19:51:d5:6a:37:fd:0f:d0:1d: eb:6e:d3:eb:36:1a:d1:ef:d0:85:f4:3f:b8:40:d9:67:82:48: f3:c5:1f:d8:91:7f:a6:5f:c2:dd:04:b4:4b:df:86:6f:18:d5: 79:9a:4f:05:c6:d1:75:33:5a:31:99:45:93:b9:4e:c2:dc:f4: 5b:26:da:0b:6e:4a:f2:8a:6b:95:9d:f2:3a:43:2a:bb:0d:ac: cd:4d:75:76:3b:f0:a2:de:f1:97:9c:9f:ff:f0:7d:15:9f:2f: 14:74:90:e4:b3:18:f1:dd:0e:1d:31:9a:d7:79:ef:50:a5:b8: dd:dc:51:3f -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBNzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGNzAy OTM1RjAyRkMxQjgxMjk3RDFGRkI0Qzc4Q0UwQkExRDQzNzg1MB4XDTI1MDUxNzAz NDAzOFoXDTI2MDUxMDA0NTE1NVowMzExMC8GA1UEAxMoNEJGMzFBMDZFNTZGNURF MTMzRjA0NTA0Q0VDNjc2NTRCNjkyNjFFMzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKlPeEOAJDkvrF1HhfOb5z5N70npwRPvbzTppd29Z8SSHWIrMi6X YybEZtYQxZC3QLXxkk2AXA772SHP8yM0DTA7mRjmxsRHJIrif8RpSrlJJ9Gydg7f 3+GkapNZrQWHljDJRBfCjZMiHRyxCH1/7qZYhtTAjCHuhZlbkfunC8QQ3jIAs1HJ PETSqGzVkMjBOozfqUM0XeMB1F9j1zesEnldsq52sqVWJmf5XgOpWsxkO3gO3Xzi crPHizUztMHcNtQDoP8La/CowPiiv5oGeLhyzf9mJv4JYgpQESrv4nDvhNvo5bL7 FkvHD+EfSzYg/Ehef8fmV8YwHer7XBZBs5sCAwEAAaOCAfMwggHvMB0GA1UdDgQW BBRL8xoG5W9d4TPwRQTOxnZUtpJh4zAfBgNVHSMEGDAWgBT3ApNfAvwbgSl9H/tM eM4LodQ3hTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMDc4 Lzl3S1RYd0w4RzRFcGZSXzdUSGpPQzZIVU40VS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOXdLVFh3TDhHNEVwZlJfN1RIak9DNkhVTjRVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA3OC9TX01hQnVWdlhlRXo4 RVVFenNaMlZMYVNZZU0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAbigyMA0GCSqGSIb3DQEBCwUAA4IBAQBKW582LsWSHx3OFg3S+eRuvuuC7vm+ VWjL7MNvuiR6W/aw5dicmFiOZ1Ii8uiqdzvYT8aRsqZ4QkYowiXLoUCIUsKW2UTn qs4GBdq2Zc99iZwspwVrl9thAdZsVBBsKhqrp40yWb/vxxy1EMPSrArmsrHKyLob Cg3cgzWm3j/0A9GUegfKxrYZUdVqN/0P0B3rbtPrNhrR79CF9D+4QNlngkjzxR/Y kX+mX8LdBLRL34ZvGNV5mk8FxtF1M1oxmUWTuU7C3PRbJtoLbkryimuVnfI6Qyq7 DazNTXV2O/Ci3vGXnJ//8H0Vny8UdJDksxjx3Q4dMZrXee9Qpbjd3FE/ -----END CERTIFICATE-----Generated at Wed Jun 4 02:14:07 2025 by rpki-client