$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/6ZUrfKdHyIyjAytkp3ArgmxCXkw.roa File: 6ZUrfKdHyIyjAytkp3ArgmxCXkw.roa (raw, json) Hash identifier: qDlgEKXGxO3Pi9CpL3SeUU5CoiVhJ+D1iDznOwVf3wQ= Subject key identifier: E9:95:2B:7C:A7:47:C8:8C:A3:03:2B:64:A7:70:2B:82:6C:42:5E:4C Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA Certificate serial: 121B Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/6ZUrfKdHyIyjAytkp3ArgmxCXkw.roa Signing time: Mon 05 May 2025 12:13:13 +0000 ROA not before: Mon 05 May 2025 12:13:13 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 62387 IP address blocks: 101.232.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:11:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4635 (0x121b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA Validity Not Before: May 5 12:13:13 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=E9952B7CA747C88CA3032B64A7702B826C425E4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:db:b3:38:aa:6d:5b:e3:07:10:78:36:34:f5: 37:2a:19:7d:42:d6:93:e1:69:e9:5b:11:6f:1a:98: 0d:53:3d:ca:07:11:ad:ca:67:38:31:61:ba:1c:7f: 48:a9:04:a8:db:55:eb:3c:3c:06:41:be:33:c6:4d: 7d:bd:dc:ee:bf:b4:b5:32:f5:55:74:63:4c:ba:ba: 56:da:d5:99:9a:c2:1b:b3:6b:74:38:0a:1f:f2:12: 08:ba:78:90:c6:4b:c2:c7:4e:45:60:80:01:4b:3b: 5d:b2:e2:88:14:0b:e4:b6:5b:5f:94:e6:02:d1:67: 88:35:59:bf:f3:51:a8:a7:ce:d1:98:a8:39:3d:42: 5d:b9:18:0f:2b:14:56:6f:c1:42:8e:cd:5b:53:38: 7c:fa:7c:d9:62:74:4f:89:0c:73:8f:d1:5f:00:28: 3f:4b:40:75:ee:ab:07:8f:25:c9:90:a9:3a:90:49: 1d:12:52:87:e6:df:90:b2:bb:69:b3:61:ce:5f:e6: d8:88:ff:61:12:07:b6:83:f4:4b:96:ac:5b:cb:94: 20:08:2f:2b:50:2f:57:d9:85:1b:33:43:9a:2f:46: ec:b9:b5:a5:5c:02:81:e2:1a:a8:8a:db:fd:de:f6: cc:e4:28:95:83:b3:e2:c0:62:58:48:df:0c:6a:67: ce:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:95:2B:7C:A7:47:C8:8C:A3:03:2B:64:A7:70:2B:82:6C:42:5E:4C X509v3 Authority Key Identifier: keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/6ZUrfKdHyIyjAytkp3ArgmxCXkw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 101.232.124.0/22 Signature Algorithm: sha256WithRSAEncryption 1e:24:8b:64:06:2a:1f:85:ac:6a:68:63:6f:c3:e7:c4:46:a3: 8a:43:08:d9:b5:2c:08:a6:f4:03:c7:06:8a:cc:9a:de:37:73: e3:60:f5:15:89:39:32:52:0a:ef:dc:89:a7:a8:08:2a:93:e3: b1:d4:ec:1a:10:21:0a:68:d2:25:c8:66:2e:f3:a3:0a:2a:2e: 93:38:16:3d:48:8b:ec:80:e8:ea:de:61:f9:95:bd:96:3a:1e: 52:b1:d5:3f:4d:5d:f6:f0:9b:21:74:47:51:5f:8f:14:3f:bd: b5:13:43:f4:3e:30:7f:dc:dd:bb:1a:a8:27:a6:c3:39:d1:60: d3:4d:1c:43:ef:14:a3:0c:c1:b8:16:ad:1a:8d:43:ae:23:a4: 84:c8:cb:f8:2b:10:2a:1c:83:fe:85:29:09:42:80:38:7a:4c: 01:77:0e:3d:8f:bd:cf:24:1d:78:a4:08:f0:4e:f4:bd:fa:3a: ba:44:d1:b5:d8:5d:ef:a0:53:14:28:00:57:f4:1c:7b:43:bb: 4d:cb:77:13:1c:e3:80:46:dd:6a:84:b1:74:8e:f0:c8:e5:c0: 85:ca:84:11:de:55:a4:0a:bb:d6:34:ba:b7:67:d6:53:41:30: e9:63:ed:85:2a:7d:db:39:6d:92:fd:8d:5c:e0:cc:0b:6f:97: c2:c1:b7:aa -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICEhswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzY1 QkY1N0JEQzlCNUJFN0Q5N0UwRDY1QUE0MjIyQjFFRkFBQkVBQTAeFw0yNTA1MDUx MjEzMTNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEU5OTUyQjdDQTc0N0M4 OENBMzAzMkI2NEE3NzAyQjgyNkM0MjVFNEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC727M4qm1b4wcQeDY09TcqGX1C1pPhaelbEW8amA1TPcoHEa3K ZzgxYbocf0ipBKjbVes8PAZBvjPGTX293O6/tLUy9VV0Y0y6ulba1Zmawhuza3Q4 Ch/yEgi6eJDGS8LHTkVggAFLO12y4ogUC+S2W1+U5gLRZ4g1Wb/zUainztGYqDk9 Ql25GA8rFFZvwUKOzVtTOHz6fNlidE+JDHOP0V8AKD9LQHXuqwePJcmQqTqQSR0S Uofm35Cyu2mzYc5f5tiI/2ESB7aD9EuWrFvLlCAILytQL1fZhRszQ5ovRuy5taVc AoHiGqiK2/3e9szkKJWDs+LAYlhI3wxqZ87XAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU6ZUrfKdHyIyjAytkp3ArgmxCXkwwHwYDVR0jBBgwFoAUxlv1e9ybW+fZfg1l qkIise+qvqowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEz L3hsdjFlOXliVy1mWmZnMWxxa0lpc2UtcXZxby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAveGx2MWU5eWJXLWZaZmcxbHFrSWlzZS1xdnFvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEzLzZaVXJmS2RIeUl5akF5 dGtwM0FyZ214Q1hrdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJl6HwwDQYJKoZIhvcNAQELBQADggEBAB4ki2QGKh+FrGpoY2/D58RGo4pDCNm1 LAim9APHBorMmt43c+Ng9RWJOTJSCu/ciaeoCCqT47HU7BoQIQpo0iXIZi7zowoq LpM4Fj1Ii+yA6OreYfmVvZY6HlKx1T9NXfbwmyF0R1FfjxQ/vbUTQ/Q+MH/c3bsa qCemwznRYNNNHEPvFKMMwbgWrRqNQ64jpITIy/grECocg/6FKQlCgDh6TAF3Dj2P vc8kHXikCPBO9L36OrpE0bXYXe+gUxQoAFf0HHtDu03LdxMc44BG3WqEsXSO8Mjl wIXKhBHeVaQKu9Y0urdn1lNBMOlj7YUqfds5bZL9jVzgzAtvl8LBt6o= -----END CERTIFICATE-----Generated at Fri Jun 6 17:37:34 2025 by rpki-client