$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/313/nyeWjKVDTSSFf1sRupBws5XxaKc.roa File: nyeWjKVDTSSFf1sRupBws5XxaKc.roa (raw, json) Hash identifier: XDjBfHQ5TvvNdiunDS43jrCg5hXszJoM4jpYtb56c/Y= Subject key identifier: 9F:27:96:8C:A5:43:4D:24:85:7F:5B:11:BA:90:70:B3:95:F1:68:A7 Certificate issuer: /CN=F5EB8FCA98FE5332275BA94D85E69397956CBE47 Certificate serial: 1DAD Authority key identifier: F5:EB:8F:CA:98:FE:53:32:27:5B:A9:4D:85:E6:93:97:95:6C:BE:47 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9euPypj-UzInW6lNheaTl5Vsvkc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/313/nyeWjKVDTSSFf1sRupBws5XxaKc.roa Signing time: Sat 26 Apr 2025 02:46:10 +0000 ROA not before: Sat 26 Apr 2025 02:46:10 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 38365 IP address blocks: 42.199.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/313/9euPypj-UzInW6lNheaTl5Vsvkc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/313/9euPypj-UzInW6lNheaTl5Vsvkc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9euPypj-UzInW6lNheaTl5Vsvkc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:10:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7597 (0x1dad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5EB8FCA98FE5332275BA94D85E69397956CBE47 Validity Not Before: Apr 26 02:46:10 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=9F27968CA5434D24857F5B11BA9070B395F168A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:80:c8:a6:83:93:ac:76:45:eb:7f:3d:13:31: ae:e4:af:e6:3f:35:6f:68:ab:e1:ad:7d:a8:d7:5a: 80:35:74:b9:23:ca:3b:9e:93:41:f1:b4:96:86:76: 0a:d0:e5:11:26:f5:84:eb:62:91:b3:33:c1:ae:fc: b2:20:39:a7:20:dc:96:1f:19:60:90:74:23:23:73: a8:15:a6:e0:76:97:03:0e:5b:25:75:30:8b:a5:e1: 3b:6d:b6:24:49:3a:73:77:a7:5b:96:a9:6f:ae:87: c4:62:65:3a:ad:25:eb:ef:11:49:37:3d:fe:93:3c: 75:ac:83:6f:a2:6e:14:d5:55:50:4d:3f:da:ef:e6: 8d:37:e9:b6:99:f9:10:06:38:38:7b:14:40:b7:fe: c1:c5:9e:a9:70:41:61:2b:dd:35:39:37:63:83:b2: 98:85:ef:f4:8e:16:80:95:1d:78:a3:8e:4c:f5:b6: 34:fb:64:23:8d:4c:9a:6e:c2:2a:89:1b:ab:04:25: ee:b2:19:7f:34:8b:e3:7c:fa:f0:10:1d:c9:95:fe: 14:d7:00:76:79:04:8f:84:41:52:16:fc:7b:95:c7: 16:42:12:c9:fd:0f:b9:74:e2:b6:5c:b4:d7:dc:a1: 1a:d9:d8:30:2c:13:df:c7:ec:c6:c4:83:79:69:7c: 52:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:27:96:8C:A5:43:4D:24:85:7F:5B:11:BA:90:70:B3:95:F1:68:A7 X509v3 Authority Key Identifier: keyid:F5:EB:8F:CA:98:FE:53:32:27:5B:A9:4D:85:E6:93:97:95:6C:BE:47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/313/9euPypj-UzInW6lNheaTl5Vsvkc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9euPypj-UzInW6lNheaTl5Vsvkc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/313/nyeWjKVDTSSFf1sRupBws5XxaKc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 42.199.0.0/16 Signature Algorithm: sha256WithRSAEncryption 45:98:6b:f2:fe:87:84:d5:53:b3:b5:b8:6f:02:b0:c3:ad:06: 48:15:e4:df:2f:e5:69:7a:0e:2f:42:a8:de:7c:b2:1e:a6:7d: 0d:2f:20:1f:88:80:33:20:a5:6b:b0:67:4f:89:c0:a7:db:00: 9a:e2:d6:30:a3:6f:aa:15:f4:8a:1d:46:a8:2f:05:d4:4f:17: d9:8b:a8:19:44:a1:56:86:af:bf:e8:7d:5d:c3:50:71:87:fb: 4d:42:cb:db:86:d8:24:79:25:0c:e4:83:83:d3:77:0f:aa:4b: 9e:71:38:30:94:ff:a8:34:72:6d:f4:2a:91:86:0d:d1:85:b7: a4:e5:69:6f:9d:7d:df:4c:f4:07:6f:10:52:ad:90:cf:a2:43: 3e:de:85:b3:74:5f:e3:51:ad:56:a4:6e:47:6a:7a:d3:bd:5a: 6e:6d:34:8c:2a:22:c3:b7:a8:ae:5d:80:0a:b0:70:04:e8:12: ab:1c:74:8a:7f:08:9d:fc:54:2c:85:a9:9d:3f:7d:7a:03:a8: a4:3a:97:88:3a:32:a6:2b:20:98:bb:01:d4:93:c9:20:33:f5: ad:8b:be:f0:29:af:47:be:ac:f4:ca:b4:3e:f3:07:df:22:b2: 4c:36:9e:ab:52:c4:f8:bf:02:19:1c:33:39:4b:f9:9a:c5:55: 54:96:8a:65 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICHa0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjVF QjhGQ0E5OEZFNTMzMjI3NUJBOTREODVFNjkzOTc5NTZDQkU0NzAeFw0yNTA0MjYw MjQ2MTBaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDlGMjc5NjhDQTU0MzRE MjQ4NTdGNUIxMUJBOTA3MEIzOTVGMTY4QTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNgMimg5OsdkXrfz0TMa7kr+Y/NW9oq+GtfajXWoA1dLkjyjue k0HxtJaGdgrQ5REm9YTrYpGzM8Gu/LIgOacg3JYfGWCQdCMjc6gVpuB2lwMOWyV1 MIul4TtttiRJOnN3p1uWqW+uh8RiZTqtJevvEUk3Pf6TPHWsg2+ibhTVVVBNP9rv 5o036baZ+RAGODh7FEC3/sHFnqlwQWEr3TU5N2ODspiF7/SOFoCVHXijjkz1tjT7 ZCONTJpuwiqJG6sEJe6yGX80i+N8+vAQHcmV/hTXAHZ5BI+EQVIW/HuVxxZCEsn9 D7l04rZctNfcoRrZ2DAsE9/H7MbEg3lpfFKjAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUnyeWjKVDTSSFf1sRupBws5XxaKcwHwYDVR0jBBgwFoAU9euPypj+UzInW6lN heaTl5VsvkcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz LzlldVB5cGotVXpJblc2bE5oZWFUbDVWc3ZrYy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOWV1UHlwai1VekluVzZsTmhlYVRsNVZzdmtjLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEzL255ZVdqS1ZEVFNTRmYx c1J1cEJ3czVYeGFLYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwAqxzANBgkqhkiG9w0BAQsFAAOCAQEARZhr8v6HhNVTs7W4bwKww60GSBXk3y/l aXoOL0Ko3nyyHqZ9DS8gH4iAMyCla7BnT4nAp9sAmuLWMKNvqhX0ih1GqC8F1E8X 2YuoGUShVoavv+h9XcNQcYf7TULL24bYJHklDOSDg9N3D6pLnnE4MJT/qDRybfQq kYYN0YW3pOVpb51930z0B28QUq2Qz6JDPt6Fs3Rf41GtVqRuR2p6071abm00jCoi w7eorl2ACrBwBOgSqxx0in8InfxULIWpnT99egOopDqXiDoypisgmLsB1JPJIDP1 rYu+8CmvR76s9Mq0PvMH3yKyTDaeq1LE+L8CGRwzOUv5msVVVJaKZQ== -----END CERTIFICATE-----Generated at Wed Jun 4 01:14:10 2025 by rpki-client