$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/jonKSRi2B2pKZ1vWmB_KvHSDOOc.roa File: jonKSRi2B2pKZ1vWmB_KvHSDOOc.roa (raw, json) Hash identifier: fGEmIUDAcQ95eQzOPJy76h34EwzcWsgERw+DUwdzIEk= Subject key identifier: 8E:89:CA:49:18:B6:07:6A:4A:67:5B:D6:98:1F:CA:BC:74:83:38:E7 Certificate issuer: /CN=DEB86EAADEE1C17ECE2A7FF6388526F7A9260D47 Certificate serial: 0EE3 Authority key identifier: DE:B8:6E:AA:DE:E1:C1:7E:CE:2A:7F:F6:38:85:26:F7:A9:26:0D:47 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3rhuqt7hwX7OKn_2OIUm96kmDUc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/jonKSRi2B2pKZ1vWmB_KvHSDOOc.roa Signing time: Fri 21 Mar 2025 03:28:56 +0000 ROA not before: Fri 21 Mar 2025 03:28:56 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 4134 IP address blocks: 113.31.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/3rhuqt7hwX7OKn_2OIUm96kmDUc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/3rhuqt7hwX7OKn_2OIUm96kmDUc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3rhuqt7hwX7OKn_2OIUm96kmDUc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 22:07:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3811 (0xee3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEB86EAADEE1C17ECE2A7FF6388526F7A9260D47 Validity Not Before: Mar 21 03:28:56 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=8E89CA4918B6076A4A675BD6981FCABC748338E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:48:35:30:49:ea:47:70:47:99:bb:8b:7e:74: cd:7a:6b:e5:36:73:03:e3:a1:12:54:f8:c3:a8:e6: 17:93:4b:db:c5:d6:28:ee:74:11:eb:ca:9c:bd:c3: 86:87:c8:f1:be:d4:63:14:b0:01:b1:97:e0:a7:4d: aa:a7:8d:97:e7:5a:53:fa:43:70:85:f9:1e:91:0b: 37:a1:d5:2b:19:95:35:a1:f1:f6:67:2f:c6:cc:5f: 4e:b7:23:29:3c:8c:b2:0f:af:7c:e6:5e:32:1e:15: 46:eb:a4:f0:7a:45:ad:48:c8:2e:a5:98:e6:c0:7c: ca:d1:b2:3f:01:2d:e7:a7:b0:24:2f:3d:7a:3e:05: 75:b2:55:19:1c:c9:87:8f:b6:fe:0b:3b:8a:46:da: 79:a9:03:6b:67:3c:8e:ea:41:83:45:51:b2:82:e3: ab:f6:b6:8e:16:4c:d5:8b:b1:92:d6:aa:e6:ee:f9: 56:df:b4:ca:26:13:00:1b:35:8d:20:3a:f7:3b:3e: d5:aa:26:55:6c:1f:29:c5:be:e1:9f:6a:c8:58:8b: 77:7c:98:b8:08:a9:5c:a8:62:27:1f:e1:9c:ea:29: 35:9e:db:79:84:04:58:f0:a7:d5:b1:b3:d3:bb:ce: 2d:3a:bf:b1:39:65:58:5d:6c:57:42:4d:ca:9c:ac: ce:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:89:CA:49:18:B6:07:6A:4A:67:5B:D6:98:1F:CA:BC:74:83:38:E7 X509v3 Authority Key Identifier: keyid:DE:B8:6E:AA:DE:E1:C1:7E:CE:2A:7F:F6:38:85:26:F7:A9:26:0D:47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/3rhuqt7hwX7OKn_2OIUm96kmDUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3rhuqt7hwX7OKn_2OIUm96kmDUc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/jonKSRi2B2pKZ1vWmB_KvHSDOOc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.31.92.0/22 Signature Algorithm: sha256WithRSAEncryption 0a:06:8c:80:75:1d:d0:d9:be:26:fc:8e:c2:53:a9:d3:94:c8: cc:4e:fa:9d:9a:bc:de:3d:31:f1:b7:1a:30:81:a3:b8:4d:d8: e9:99:b4:64:7a:5a:e9:ee:5e:1c:f0:ab:92:f4:cd:86:9e:66: 63:85:b6:e3:f9:52:43:9b:76:c4:da:dc:54:b2:80:58:e4:9d: 85:d0:ff:43:2d:c5:b3:aa:d5:6f:2a:60:86:a1:ba:ed:c3:3f: 55:c3:1f:c4:7a:6f:6e:7f:2e:a6:a6:35:db:52:84:f2:05:df: 56:3d:b4:1e:fa:58:a4:51:9e:e2:c6:c6:37:71:af:55:9f:14: 4d:c4:a1:d0:8b:7a:6b:3d:1e:65:21:19:fb:60:71:7b:95:3c: 55:35:4f:1b:5d:7e:bd:40:1c:94:48:0a:62:f2:9d:ab:a0:5d: 3c:04:07:c9:ad:7c:e9:58:39:e0:97:de:e5:30:f3:ff:48:16: b1:16:05:bc:59:17:cb:ca:46:05:e2:f2:ff:47:9b:78:54:c3: 68:96:29:94:d4:09:1f:29:9c:64:48:28:0a:54:94:a9:31:12: 3a:6c:e4:f7:0d:6a:32:1c:06:6a:4e:bb:8f:7c:b4:41:41:1f: 7b:51:45:3d:9a:86:97:19:4c:e0:e2:55:92:16:23:72:66:39: 50:8f:fc:30 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICDuMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREVC ODZFQUFERUUxQzE3RUNFMkE3RkY2Mzg4NTI2RjdBOTI2MEQ0NzAeFw0yNTAzMjEw MzI4NTZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDhFODlDQTQ5MThCNjA3 NkE0QTY3NUJENjk4MUZDQUJDNzQ4MzM4RTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqSDUwSepHcEeZu4t+dM16a+U2cwPjoRJU+MOo5heTS9vF1iju dBHrypy9w4aHyPG+1GMUsAGxl+CnTaqnjZfnWlP6Q3CF+R6RCzeh1SsZlTWh8fZn L8bMX063Iyk8jLIPr3zmXjIeFUbrpPB6Ra1IyC6lmObAfMrRsj8BLeensCQvPXo+ BXWyVRkcyYePtv4LO4pG2nmpA2tnPI7qQYNFUbKC46v2to4WTNWLsZLWqubu+Vbf tMomEwAbNY0gOvc7PtWqJlVsHynFvuGfashYi3d8mLgIqVyoYicf4ZzqKTWe23mE BFjwp9Wxs9O7zi06v7E5ZVhdbFdCTcqcrM4nAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUjonKSRi2B2pKZ1vWmB/KvHSDOOcwHwYDVR0jBBgwFoAU3rhuqt7hwX7OKn/2 OIUm96kmDUcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw LzNyaHVxdDdod1g3T0tuXzJPSVVtOTZrbURVYy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvM3JodXF0N2h3WDdPS25fMk9JVW05NmttRFVjLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL2pvbktTUmkyQjJwS1ox dldtQl9LdkhTRE9PYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJxH1wwDQYJKoZIhvcNAQELBQADggEBAAoGjIB1HdDZvib8jsJTqdOUyMxO+p2a vN49MfG3GjCBo7hN2OmZtGR6WunuXhzwq5L0zYaeZmOFtuP5UkObdsTa3FSygFjk nYXQ/0MtxbOq1W8qYIahuu3DP1XDH8R6b25/LqamNdtShPIF31Y9tB76WKRRnuLG xjdxr1WfFE3EodCLems9HmUhGftgcXuVPFU1Txtdfr1AHJRICmLynaugXTwEB8mt fOlYOeCX3uUw8/9IFrEWBbxZF8vKRgXi8v9Hm3hUw2iWKZTUCR8pnGRIKApUlKkx Ejps5PcNajIcBmpOu498tEFBH3tRRT2ahpcZTODiVZIWI3JmOVCP/DA= -----END CERTIFICATE-----Generated at Fri Apr 4 21:25:28 2025 by rpki-client