$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/szjcp8IwSRNqLE13YroyiF9DDYA.roa File: szjcp8IwSRNqLE13YroyiF9DDYA.roa (raw, json) Hash identifier: i2LNGDSUAj4anqNW7NsvflXyj7kSntKY3+StXIiuS2s= Subject key identifier: B3:38:DC:A7:C2:30:49:13:6A:2C:4D:77:62:BA:32:88:5F:43:0D:80 Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF Certificate serial: 0EA0 Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/szjcp8IwSRNqLE13YroyiF9DDYA.roa Signing time: Mon 10 Mar 2025 15:09:35 +0000 ROA not before: Mon 10 Mar 2025 15:09:35 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 4134 IP address blocks: 113.31.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Mar 2025 10:57:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3744 (0xea0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF Validity Not Before: Mar 10 15:09:35 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=B338DCA7C23049136A2C4D7762BA32885F430D80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4a:9e:e0:ac:af:39:1a:6e:4a:af:9e:05:83: ea:19:5c:ab:56:e1:ea:24:49:33:7e:02:57:45:03: 41:3a:67:eb:0a:01:4c:ff:f1:32:2c:39:25:96:ef: 6d:da:71:f9:d8:28:b3:65:44:16:3e:27:2a:8f:fc: d0:18:9d:3c:4a:c4:97:b9:73:04:ed:da:82:7d:cc: 12:7f:61:dd:a7:07:df:e4:f3:ca:6e:ed:7c:12:d2: dc:44:36:56:86:5b:79:da:7e:0e:5b:2d:2e:49:2e: 4b:9e:88:7b:38:8a:ea:f8:2a:de:6a:f2:5b:0e:05: fe:b9:cb:5f:b0:93:38:e4:f6:70:28:71:b5:4a:5b: c4:aa:ed:3e:a2:4c:9d:55:42:d7:ab:21:9d:06:86: 59:e7:77:c8:26:ac:71:e4:aa:6d:ef:8a:33:6f:7f: c2:20:54:d7:82:d8:00:24:7b:4b:cc:b3:50:e5:c3: e2:8a:76:66:71:39:a5:79:d4:b9:05:bf:92:74:d2: 9e:df:49:49:65:bc:e4:0b:50:e3:d3:39:5a:ad:c7: db:6a:1f:44:51:21:4c:01:d9:b6:3d:0a:23:0f:7e: 53:7c:5b:0f:17:07:ce:a5:32:8b:92:a7:84:be:41: dc:13:41:83:e9:02:c5:e7:0f:fa:85:fe:93:19:03: 57:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:38:DC:A7:C2:30:49:13:6A:2C:4D:77:62:BA:32:88:5F:43:0D:80 X509v3 Authority Key Identifier: keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/szjcp8IwSRNqLE13YroyiF9DDYA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.31.128.0/21 Signature Algorithm: sha256WithRSAEncryption 69:d8:1e:a5:1c:27:54:26:13:fe:8b:8e:bb:b7:bf:42:6c:cf: 48:1f:3c:36:1b:7a:f8:21:7d:3e:c7:67:c3:9a:e8:f0:ff:7e: d8:82:71:ac:10:74:bf:88:c3:7c:3b:99:1c:ff:81:63:a5:e8: 1a:8c:5d:ee:58:7c:48:94:31:49:36:c5:8b:36:42:a7:03:10: 9f:18:4a:0c:1c:47:97:ed:6a:91:f0:64:b0:78:35:d3:a9:83: 7e:7d:2b:2e:ef:4b:f2:7d:fc:a9:ac:a0:a3:2b:3c:25:21:ac: 00:18:25:e2:ab:5f:16:40:ca:78:22:8e:15:c5:44:37:0a:ad: 43:3c:de:d7:b6:11:85:41:a0:f7:af:b0:42:6b:e6:bc:d7:c0: 3a:73:1f:08:f9:77:f9:57:f0:76:75:05:82:48:db:35:be:8d: 98:8f:e9:4d:41:db:60:51:b6:8f:08:ca:03:fb:41:ee:c1:51: 03:9e:a8:8c:c4:c2:ad:98:a2:9b:ed:21:5e:fa:c6:f4:3a:25: d2:4f:c4:3e:11:18:15:da:1f:b8:66:74:96:10:f1:a9:d2:69: f6:ff:fa:a0:7d:0d:2a:d0:4e:78:f0:e9:99:4f:c6:84:51:7b: fc:c3:ee:e6:9f:34:77:90:a5:73:b9:36:1a:0b:7b:52:94:0e: 43:3d:b2:e3 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICDqAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3 MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAzMTAx NTA5MzVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEIzMzhEQ0E3QzIzMDQ5 MTM2QTJDNEQ3NzYyQkEzMjg4NUY0MzBEODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCeSp7grK85Gm5Kr54Fg+oZXKtW4eokSTN+AldFA0E6Z+sKAUz/ 8TIsOSWW723acfnYKLNlRBY+JyqP/NAYnTxKxJe5cwTt2oJ9zBJ/Yd2nB9/k88pu 7XwS0txENlaGW3nafg5bLS5JLkueiHs4iur4Kt5q8lsOBf65y1+wkzjk9nAocbVK W8Sq7T6iTJ1VQterIZ0Ghlnnd8gmrHHkqm3vijNvf8IgVNeC2AAke0vMs1Dlw+KK dmZxOaV51LkFv5J00p7fSUllvOQLUOPTOVqtx9tqH0RRIUwB2bY9CiMPflN8Ww8X B86lMouSp4S+QdwTQYPpAsXnD/qF/pMZA1fNAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUszjcp8IwSRNqLE13YroyiF9DDYAwHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL3N6amNwOEl3U1JOcUxF MTNZcm95aUY5RERZQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BANxH4AwDQYJKoZIhvcNAQELBQADggEBAGnYHqUcJ1QmE/6Ljru3v0Jsz0gfPDYb evghfT7HZ8Oa6PD/ftiCcawQdL+Iw3w7mRz/gWOl6BqMXe5YfEiUMUk2xYs2QqcD EJ8YSgwcR5ftapHwZLB4NdOpg359Ky7vS/J9/KmsoKMrPCUhrAAYJeKrXxZAyngi jhXFRDcKrUM83te2EYVBoPevsEJr5rzXwDpzHwj5d/lX8HZ1BYJI2zW+jZiP6U1B 22BRto8IygP7Qe7BUQOeqIzEwq2YopvtIV76xvQ6JdJPxD4RGBXaH7hmdJYQ8anS afb/+qB9DSrQTnjw6ZlPxoRRe/zD7uafNHeQpXO5NhoLe1KUDkM9suM= -----END CERTIFICATE-----Generated at Thu Mar 13 07:10:44 2025 by rpki-client