$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3078/o_xepNmijsdAK38MCi72lykQTLw.roa File: o_xepNmijsdAK38MCi72lykQTLw.roa (raw, json) Hash identifier: jJMnJ2JsZLtj1cBY+MTQrOlLOD/DIWgAuulArXltvJY= Subject key identifier: A3:FC:5E:A4:D9:A2:8E:C7:40:2B:7F:0C:0A:2E:F6:97:29:10:4C:BC Certificate issuer: /CN=F702935F02FC1B81297D1FFB4C78CE0BA1D43785 Certificate serial: 30 Authority key identifier: F7:02:93:5F:02:FC:1B:81:29:7D:1F:FB:4C:78:CE:0B:A1:D4:37:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/o_xepNmijsdAK38MCi72lykQTLw.roa Signing time: Sat 17 May 2025 03:40:37 +0000 ROA not before: Sat 17 May 2025 03:40:37 +0000 ROA not after: Sun 10 May 2026 04:51:55 +0000 asID: 151270 IP address blocks: 110.40.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:09:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F702935F02FC1B81297D1FFB4C78CE0BA1D43785 Validity Not Before: May 17 03:40:37 2025 GMT Not After : May 10 04:51:55 2026 GMT Subject: CN=A3FC5EA4D9A28EC7402B7F0C0A2EF69729104CBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:30:b2:67:64:f5:69:9f:12:19:b0:0b:1f:2b: df:96:1e:f9:51:f5:fd:c1:d6:d4:90:ab:1b:26:24: fd:52:78:ff:a6:a3:87:05:fa:74:8f:bb:a2:22:5b: e7:be:21:8c:b8:ab:f9:60:96:53:11:55:0c:48:c8: 98:80:77:65:62:f4:71:ae:fa:73:8f:0a:28:1e:ab: 82:52:ad:a0:1f:3d:32:47:40:16:9b:c4:d7:41:a0: 6b:79:b6:f0:41:c9:08:f6:07:be:9c:df:ab:02:4c: c5:7b:b3:6a:44:9c:d8:2c:90:75:fc:ed:13:ab:c4: 44:6a:46:53:84:c2:b6:6e:13:95:f3:e1:fe:f9:98: 6e:ff:f2:2b:3d:11:bd:c4:25:a0:04:3c:19:82:9c: 0f:d4:85:3b:4c:5d:93:52:49:06:c8:20:8f:32:c8: 85:d9:4c:75:82:16:8f:0a:12:7a:c0:65:bd:6d:9d: ea:47:a4:26:fb:3f:95:9f:ab:f0:95:9a:7f:b2:ca: 8c:0f:ea:5b:c5:dc:cb:6a:89:cc:de:7d:55:10:3a: ac:74:7f:7c:a2:49:f7:51:c8:11:f6:01:98:d4:82: 57:34:b8:cd:9e:ac:6b:6a:07:b6:3f:f1:0f:4b:1d: a3:76:f6:07:e3:d9:d8:ab:74:8b:9c:68:d1:29:69: 40:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:FC:5E:A4:D9:A2:8E:C7:40:2B:7F:0C:0A:2E:F6:97:29:10:4C:BC X509v3 Authority Key Identifier: keyid:F7:02:93:5F:02:FC:1B:81:29:7D:1F:FB:4C:78:CE:0B:A1:D4:37:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/o_xepNmijsdAK38MCi72lykQTLw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 110.40.20.0/24 Signature Algorithm: sha256WithRSAEncryption 25:75:58:ec:4a:ea:74:20:90:9f:00:ba:b8:95:2a:7b:01:b9: a5:8b:0a:89:e7:b6:8f:c1:ed:93:94:02:55:7d:81:bf:a3:83: ef:90:e7:9f:2e:e0:0f:a5:50:85:f1:c2:e6:8e:b2:d9:fa:6d: c4:93:0c:1a:c9:26:26:1b:9b:1e:50:61:34:d9:5a:cf:a1:fd: ee:a0:77:94:60:34:73:3d:b6:5d:5b:07:c7:50:b1:ef:aa:47: af:bf:33:2a:e2:d2:51:c4:aa:7f:26:b7:d2:02:1a:11:b0:e7: e8:f8:03:d3:88:d3:79:1b:b3:06:02:31:65:dd:54:d6:06:3f: 1f:9a:33:97:c3:b5:e2:7f:62:6c:e0:0c:4c:a9:12:22:f2:74: 02:f1:58:c6:b2:54:5c:cc:f5:1f:75:02:dc:c5:ca:a6:e5:48: 7d:d9:b4:2e:ab:0c:7c:36:7c:cf:71:3b:e3:5f:ba:85:62:25: 4a:25:c8:d2:b0:ae:f6:15:5e:64:f8:5b:83:07:c7:dc:0c:ef: 3d:a1:e5:ff:ec:a3:ec:c1:23:6d:65:67:4c:4b:4e:29:fb:b9: 3c:22:f3:ee:42:3b:e3:2d:4b:a7:6c:3c:b6:55:a0:ca:ec:b7: fa:53:50:f0:88:e7:9c:1c:f3:93:2a:4e:95:8f:e7:0a:94:29: ec:78:d7:24 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBMDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGNzAy OTM1RjAyRkMxQjgxMjk3RDFGRkI0Qzc4Q0UwQkExRDQzNzg1MB4XDTI1MDUxNzAz NDAzN1oXDTI2MDUxMDA0NTE1NVowMzExMC8GA1UEAxMoQTNGQzVFQTREOUEyOEVD NzQwMkI3RjBDMEEyRUY2OTcyOTEwNENCQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAPQwsmdk9WmfEhmwCx8r35Ye+VH1/cHW1JCrGyYk/VJ4/6ajhwX6 dI+7oiJb574hjLir+WCWUxFVDEjImIB3ZWL0ca76c48KKB6rglKtoB89MkdAFpvE 10Gga3m28EHJCPYHvpzfqwJMxXuzakSc2CyQdfztE6vERGpGU4TCtm4TlfPh/vmY bv/yKz0RvcQloAQ8GYKcD9SFO0xdk1JJBsggjzLIhdlMdYIWjwoSesBlvW2d6kek Jvs/lZ+r8JWaf7LKjA/qW8Xcy2qJzN59VRA6rHR/fKJJ91HIEfYBmNSCVzS4zZ6s a2oHtj/xD0sdo3b2B+PZ2Kt0i5xo0SlpQAMCAwEAAaOCAfMwggHvMB0GA1UdDgQW BBSj/F6k2aKOx0ArfwwKLvaXKRBMvDAfBgNVHSMEGDAWgBT3ApNfAvwbgSl9H/tM eM4LodQ3hTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMDc4 Lzl3S1RYd0w4RzRFcGZSXzdUSGpPQzZIVU40VS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOXdLVFh3TDhHNEVwZlJfN1RIak9DNkhVTjRVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA3OC9vX3hlcE5taWpzZEFL MzhNQ2k3Mmx5a1FUTHcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAbigUMA0GCSqGSIb3DQEBCwUAA4IBAQAldVjsSup0IJCfALq4lSp7AbmliwqJ 57aPwe2TlAJVfYG/o4PvkOefLuAPpVCF8cLmjrLZ+m3EkwwaySYmG5seUGE02VrP of3uoHeUYDRzPbZdWwfHULHvqkevvzMq4tJRxKp/JrfSAhoRsOfo+APTiNN5G7MG AjFl3VTWBj8fmjOXw7Xif2Js4AxMqRIi8nQC8VjGslRczPUfdQLcxcqm5Uh92bQu qwx8NnzPcTvjX7qFYiVKJcjSsK72FV5k+FuDB8fcDO89oeX/7KPswSNtZWdMS04p +7k8IvPuQjvjLUunbDy2VaDK7Lf6U1DwiOecHPOTKk6Vj+cKlCnseNck -----END CERTIFICATE-----Generated at Wed Jun 4 01:29:17 2025 by rpki-client