$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3078/gSInxPdPPJw474VKM-XveAvkaDc.roa File: gSInxPdPPJw474VKM-XveAvkaDc.roa (raw, json) Hash identifier: qKVuqJXZ2JHCjMCo18SoE7DYt1Seu56peAwNzRqRZzs= Subject key identifier: 81:22:27:C4:F7:4F:3C:9C:38:EF:85:4A:33:E5:EF:78:0B:E4:68:37 Certificate issuer: /CN=F702935F02FC1B81297D1FFB4C78CE0BA1D43785 Certificate serial: 3D Authority key identifier: F7:02:93:5F:02:FC:1B:81:29:7D:1F:FB:4C:78:CE:0B:A1:D4:37:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/gSInxPdPPJw474VKM-XveAvkaDc.roa Signing time: Sat 17 May 2025 03:40:40 +0000 ROA not before: Sat 17 May 2025 03:40:40 +0000 ROA not after: Sun 10 May 2026 04:51:55 +0000 asID: 151270 IP address blocks: 110.40.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:09:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F702935F02FC1B81297D1FFB4C78CE0BA1D43785 Validity Not Before: May 17 03:40:40 2025 GMT Not After : May 10 04:51:55 2026 GMT Subject: CN=812227C4F74F3C9C38EF854A33E5EF780BE46837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:76:1c:f7:a1:73:bd:d6:8a:40:aa:f3:37:7b: 4c:8a:dd:a7:2e:b7:6b:bf:eb:7b:b6:36:5c:59:e3: 49:05:64:8a:d5:8e:07:4a:73:0e:32:89:f0:2e:00: 4d:63:c9:fc:07:fd:19:28:ba:f0:a0:1c:5c:cd:bc: 61:9e:82:4f:0c:29:da:32:94:78:f8:e7:9b:7c:c5: a3:68:09:ae:36:48:b0:f1:10:18:e8:a4:23:ab:e4: 02:58:bf:f8:ea:b5:f0:8a:51:6b:19:03:6c:86:f5: f6:77:fa:27:ae:88:c4:37:30:ab:9a:ba:a8:7c:0e: 19:85:47:a1:f7:b9:63:6c:6a:f3:53:ab:21:9d:e3: 10:d2:28:f0:49:a7:57:3d:16:45:ec:64:aa:b9:29: 7c:f9:40:59:68:77:22:dc:b1:b3:c0:fd:23:3d:fb: fa:a1:ec:a1:6e:a9:d7:3f:6a:e2:bf:9c:8d:bf:4d: 46:28:4e:1b:a8:96:fd:56:c7:98:dc:33:36:af:ff: d0:03:54:24:63:3d:76:56:25:c8:17:af:58:ae:8e: 8f:6e:ac:7f:38:0a:6e:00:ed:a4:4a:88:d2:75:9f: e6:2b:0a:6c:f2:a1:30:88:21:26:33:f1:ee:7e:ab: c3:13:88:af:a6:43:79:ce:7d:5b:f0:4e:ee:c6:cc: 05:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:22:27:C4:F7:4F:3C:9C:38:EF:85:4A:33:E5:EF:78:0B:E4:68:37 X509v3 Authority Key Identifier: keyid:F7:02:93:5F:02:FC:1B:81:29:7D:1F:FB:4C:78:CE:0B:A1:D4:37:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/gSInxPdPPJw474VKM-XveAvkaDc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 110.40.49.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:21:56:51:d4:a1:41:9f:68:28:0e:7b:8d:6e:87:f1:84:72: b6:8d:a4:44:ee:e8:a2:bd:fc:de:9c:7e:f6:ba:49:b0:19:13: 86:32:f6:a5:65:19:81:b6:a1:6d:aa:d5:33:72:12:62:7d:1c: a5:53:0c:da:ec:fc:e4:aa:2a:99:93:2b:5a:2d:45:00:c7:44: 17:92:ba:4a:b0:cc:f5:86:2e:31:ae:bf:18:e2:50:b9:28:d7: 19:df:9b:26:88:0a:a6:5e:b2:f4:29:f5:18:71:f4:94:6b:cd: b6:e5:b2:ba:b9:60:6b:8e:a0:53:9c:ea:f8:78:25:5f:f5:a9: 6b:00:4d:ba:4e:44:c6:a6:e0:0f:5f:c0:7f:0a:2d:6c:3e:fe: 4d:d0:e1:b5:74:f1:24:02:3e:77:4c:a5:f4:b2:ef:6f:c5:5a: 3c:6c:bb:b0:80:bc:dc:96:8b:1a:5b:26:e6:9d:dd:34:3b:70: bc:92:ec:86:5b:82:ab:2a:30:bf:2e:1a:95:bb:66:d4:03:4f: 53:8f:d1:d2:7f:38:9b:69:09:47:7c:a7:52:8d:25:bc:37:e0: 9a:5a:15:f8:5f:e1:2b:ff:ed:67:88:d8:93:a0:33:c9:9f:46: b9:9b:45:43:73:c7:f4:60:41:be:fa:46:2f:13:11:e3:5b:45: 1b:44:13:73 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBPTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGNzAy OTM1RjAyRkMxQjgxMjk3RDFGRkI0Qzc4Q0UwQkExRDQzNzg1MB4XDTI1MDUxNzAz NDA0MFoXDTI2MDUxMDA0NTE1NVowMzExMC8GA1UEAxMoODEyMjI3QzRGNzRGM0M5 QzM4RUY4NTRBMzNFNUVGNzgwQkU0NjgzNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKN2HPehc73WikCq8zd7TIrdpy63a7/re7Y2XFnjSQVkitWOB0pz DjKJ8C4ATWPJ/Af9GSi68KAcXM28YZ6CTwwp2jKUePjnm3zFo2gJrjZIsPEQGOik I6vkAli/+Oq18IpRaxkDbIb19nf6J66IxDcwq5q6qHwOGYVHofe5Y2xq81OrIZ3j ENIo8EmnVz0WRexkqrkpfPlAWWh3Ityxs8D9Iz37+qHsoW6p1z9q4r+cjb9NRihO G6iW/VbHmNwzNq//0ANUJGM9dlYlyBevWK6Oj26sfzgKbgDtpEqI0nWf5isKbPKh MIghJjPx7n6rwxOIr6ZDec59W/BO7sbMBV8CAwEAAaOCAfMwggHvMB0GA1UdDgQW BBSBIifE9088nDjvhUoz5e94C+RoNzAfBgNVHSMEGDAWgBT3ApNfAvwbgSl9H/tM eM4LodQ3hTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMDc4 Lzl3S1RYd0w4RzRFcGZSXzdUSGpPQzZIVU40VS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOXdLVFh3TDhHNEVwZlJfN1RIak9DNkhVTjRVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA3OC9nU0lueFBkUFBKdzQ3 NFZLTS1YdmVBdmthRGMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAbigxMA0GCSqGSIb3DQEBCwUAA4IBAQAcIVZR1KFBn2goDnuNbofxhHK2jaRE 7uiivfzenH72ukmwGROGMvalZRmBtqFtqtUzchJifRylUwza7PzkqiqZkytaLUUA x0QXkrpKsMz1hi4xrr8Y4lC5KNcZ35smiAqmXrL0KfUYcfSUa8225bK6uWBrjqBT nOr4eCVf9alrAE26TkTGpuAPX8B/Ci1sPv5N0OG1dPEkAj53TKX0su9vxVo8bLuw gLzclosaWybmnd00O3C8kuyGW4KrKjC/LhqVu2bUA09Tj9HSfzibaQlHfKdSjSW8 N+CaWhX4X+Er/+1niNiToDPJn0a5m0VDc8f0YEG++kYvExHjW0UbRBNz -----END CERTIFICATE-----Generated at Wed Jun 4 01:12:24 2025 by rpki-client