$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3168/cem23VMayzPVk_oygGN95UFNjHU.roa File: cem23VMayzPVk_oygGN95UFNjHU.roa (raw, json) Hash identifier: RvRmb3ElbI6rsB4sSekzArDgJBSB1WqpLErPkGqAqDI= Subject key identifier: 71:E9:B6:DD:53:1A:CB:33:D5:93:FA:32:80:63:7D:E5:41:4D:8C:75 Certificate issuer: /CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094 Certificate serial: 1445 Authority key identifier: 24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/cem23VMayzPVk_oygGN95UFNjHU.roa Signing time: Tue 27 May 2025 00:18:50 +0000 ROA not before: Tue 27 May 2025 00:18:50 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 211392 IP address blocks: 45.250.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:06:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5189 (0x1445) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094 Validity Not Before: May 27 00:18:50 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=71E9B6DD531ACB33D593FA3280637DE5414D8C75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0d:d0:46:c5:1e:f7:f9:c0:17:76:b4:cb:fa: 95:7d:03:9f:42:39:8d:76:37:51:c9:05:12:c8:ed: 3e:bc:e4:31:d0:d7:e6:7e:d9:a6:99:fb:fe:90:5d: ce:eb:45:a8:62:cb:23:e8:b0:0a:7a:2f:92:a0:79: c7:42:44:29:cf:ff:f4:8c:09:f6:55:3a:4e:cb:6b: 68:26:bb:fd:e0:d5:b5:34:09:a1:d1:29:4b:14:8a: 46:85:fb:8b:ca:83:d1:7e:3b:10:07:fb:69:15:76: 7a:d5:25:43:a1:2f:cc:61:64:6f:53:1c:70:b3:c6: ec:d4:9a:0a:ea:94:90:7f:6e:cf:89:85:32:dc:fa: 93:b5:76:62:e4:e9:86:99:cb:81:3a:bf:7b:28:3d: 23:d9:fe:ab:74:73:2e:78:22:15:fe:a3:69:ad:90: 60:f8:1f:04:1b:d5:5d:d2:68:9f:9f:97:d1:29:9c: 8f:ab:42:0b:de:2e:2d:9b:22:10:4c:c3:de:be:51: 0f:6c:9b:89:68:85:fb:44:12:f2:0b:56:47:74:3d: 2c:80:5d:2d:d7:50:b5:ec:e6:73:44:d5:7c:bd:ca: 4c:9c:66:58:87:1b:aa:62:27:61:b5:6d:25:a6:49: ae:7e:12:e6:1d:dc:0c:9e:45:22:46:58:73:a4:30: 04:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E9:B6:DD:53:1A:CB:33:D5:93:FA:32:80:63:7D:E5:41:4D:8C:75 X509v3 Authority Key Identifier: keyid:24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/cem23VMayzPVk_oygGN95UFNjHU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.250.154.0/24 Signature Algorithm: sha256WithRSAEncryption 55:dc:3d:12:11:33:ec:38:61:e0:66:7d:92:30:dd:34:08:57: f9:24:4d:b5:20:9a:80:26:07:e4:9f:70:82:e5:d5:a8:2d:af: 87:c9:9b:63:6e:71:f3:64:2b:e3:fe:b5:a5:25:f2:6a:13:bb: 0c:f9:44:bd:71:e9:e1:a6:6b:14:65:7f:8c:e2:86:ab:e4:1f: 3e:6a:72:f7:26:65:b9:04:81:09:7d:f1:f0:f2:05:c3:ad:fb: 5d:79:f8:c9:de:eb:92:3a:52:87:97:32:2f:25:47:4f:6f:25: df:b2:01:1e:62:05:db:ee:62:33:0f:f2:77:c0:25:0b:7f:1e: c4:93:b9:18:5d:b3:4a:f9:b5:13:56:7d:ac:76:23:01:3d:d2: e5:fd:c7:90:df:15:78:d9:4d:4b:b6:72:36:f2:de:58:de:40: 83:4f:29:99:45:bc:10:cd:59:db:8a:d5:47:a2:7b:9a:d7:ba: 8b:10:7f:3e:16:e6:0f:06:92:5c:d7:50:7a:15:df:ec:b9:c5: 71:c8:34:94:7a:3d:15:46:e8:01:02:92:60:4b:0c:a9:7f:73: 00:97:c9:43:4f:08:93:b6:8f:3d:62:09:ee:b5:ff:d7:bb:5f: 58:2d:5e:f6:72:5a:9a:88:38:74:d5:91:85:c7:f9:d7:ba:f9: bd:46:0f:68 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFEUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjQw OTg3RjQwQTYwMzBDREZBMzNERUQxRUVFN0NGNERDN0MzMDA5NDAeFw0yNTA1Mjcw MDE4NTBaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDcxRTlCNkRENTMxQUNC MzNENTkzRkEzMjgwNjM3REU1NDE0RDhDNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8DdBGxR73+cAXdrTL+pV9A59COY12N1HJBRLI7T685DHQ1+Z+ 2aaZ+/6QXc7rRahiyyPosAp6L5KgecdCRCnP//SMCfZVOk7La2gmu/3g1bU0CaHR KUsUikaF+4vKg9F+OxAH+2kVdnrVJUOhL8xhZG9THHCzxuzUmgrqlJB/bs+JhTLc +pO1dmLk6YaZy4E6v3soPSPZ/qt0cy54IhX+o2mtkGD4HwQb1V3SaJ+fl9EpnI+r QgveLi2bIhBMw96+UQ9sm4lohftEEvILVkd0PSyAXS3XULXs5nNE1Xy9ykycZliH G6piJ2G1bSWmSa5+EuYd3AyeRSJGWHOkMAT3AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUcem23VMayzPVk/oygGN95UFNjHUwHwYDVR0jBBgwFoAUJAmH9ApgMM36M97R 7ufPTcfDAJQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE2 OC9KQW1IOUFwZ01NMzZNOTdSN3VmUFRjZkRBSlEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0pBbUg5QXBnTU0zNk05N1I3dWZQVGNmREFKUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNjgvY2VtMjNWTWF5elBW a19veWdHTjk1VUZOakhVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAC36mjANBgkqhkiG9w0BAQsFAAOCAQEAVdw9EhEz7Dhh4GZ9kjDdNAhX+SRN tSCagCYH5J9wguXVqC2vh8mbY25x82Qr4/61pSXyahO7DPlEvXHp4aZrFGV/jOKG q+QfPmpy9yZluQSBCX3x8PIFw637XXn4yd7rkjpSh5cyLyVHT28l37IBHmIF2+5i Mw/yd8AlC38exJO5GF2zSvm1E1Z9rHYjAT3S5f3HkN8VeNlNS7ZyNvLeWN5Ag08p mUW8EM1Z24rVR6J7mte6ixB/PhbmDwaSXNdQehXf7LnFccg0lHo9FUboAQKSYEsM qX9zAJfJQ08Ik7aPPWIJ7rX/17tfWC1e9nJamog4dNWRhcf517r5vUYPaA== -----END CERTIFICATE-----Generated at Sun Oct 26 08:48:22 2025 by rpki-client