$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/R3Vu3XinmXwSescKzqv8RYF1rJQ.roa File: R3Vu3XinmXwSescKzqv8RYF1rJQ.roa (raw, json) Hash identifier: vFRvZlBYVhhj/pgfljWNRAwZN8ox28pyp8rqq+EfJSc= Subject key identifier: 47:75:6E:DD:78:A7:99:7C:12:7A:C7:0A:CE:AB:FC:45:81:75:AC:94 Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA Certificate serial: 0F9D Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/R3Vu3XinmXwSescKzqv8RYF1rJQ.roa Signing time: Tue 14 Jan 2025 07:08:10 +0000 ROA not before: Tue 14 Jan 2025 07:08:10 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 62387 IP address blocks: 101.232.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3997 (0xf9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA Validity Not Before: Jan 14 07:08:10 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=47756EDD78A7997C127AC70ACEABFC458175AC94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d6:46:66:8d:58:dc:11:93:90:c2:b0:61:d9: 17:3e:3d:78:53:ff:e6:d7:72:8f:27:04:05:5f:cc: b0:51:a9:a8:59:f5:a7:e7:87:0e:11:eb:30:99:59: f7:bf:6e:cd:34:0c:62:b2:3f:3c:4e:8f:65:1a:59: 41:70:50:12:24:53:1f:e2:d4:2b:7a:3f:f0:43:81: 00:c4:5f:21:ab:b2:04:94:5e:2e:3f:23:c3:99:e4: ae:8a:3e:1e:97:93:2c:11:e7:d8:fb:a2:fb:e4:fc: a9:6d:81:14:34:61:9e:13:1d:44:c6:38:69:fb:03: f4:6d:38:d0:92:df:c2:d2:b8:4f:bc:9c:f8:e0:61: dc:40:86:21:a3:bd:14:a5:26:d8:0a:41:5b:90:93: 26:ff:15:9b:d4:5d:0c:8a:f2:f6:f4:4c:d0:6f:4f: d0:39:cc:c2:a5:2d:57:07:14:bf:d9:ae:01:aa:a9: f5:cb:05:48:5f:7e:5e:44:12:ba:b1:1a:6c:9b:c0: ed:d0:3f:34:1f:88:9b:57:d7:b0:dc:63:40:d5:bd: cd:a1:a4:1a:c9:e3:e7:85:8c:41:05:6c:32:5a:b9: b3:a5:a4:40:f9:1a:62:4e:70:be:46:7f:1d:37:3f: 17:15:26:52:dd:ce:47:37:21:d2:5a:b5:f8:84:d6: 3a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:75:6E:DD:78:A7:99:7C:12:7A:C7:0A:CE:AB:FC:45:81:75:AC:94 X509v3 Authority Key Identifier: keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/R3Vu3XinmXwSescKzqv8RYF1rJQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 101.232.64.0/19 Signature Algorithm: sha256WithRSAEncryption 79:7c:37:26:be:bf:58:b1:fd:3e:8a:87:c0:9c:9e:3c:43:c3: 3c:d3:f0:f7:84:f0:c2:3a:8f:a4:48:14:b2:9e:d0:fd:df:a7: ab:ce:4b:68:ee:df:8a:c1:da:da:bd:66:d5:16:09:8d:e0:99: f6:e7:47:2a:01:a4:94:e8:36:61:27:49:6c:d7:3b:ef:90:64: f5:e5:a4:8b:61:6b:fd:ea:7e:2a:33:1e:e4:ff:f8:4a:aa:52: 64:24:ec:f0:ae:1c:93:fe:bb:9a:43:ea:15:7e:50:d6:7a:69: 68:b7:40:0f:87:b2:5f:85:1e:19:50:2c:6f:46:7f:f4:93:07: bb:57:00:73:16:29:29:8c:12:d6:ca:a1:40:f5:59:d6:ca:03: fc:25:82:98:ba:11:a2:1d:bf:44:05:fd:7a:8f:15:55:1c:70: 39:0e:0e:99:48:7a:c9:d8:51:69:b1:4f:39:25:5f:00:9d:0a: 59:b0:81:09:f4:8b:ab:ec:af:6c:ed:69:56:be:03:71:a3:47: 10:b1:10:ac:a2:df:7b:c8:ef:92:e8:6f:17:67:1b:00:da:8f: aa:b8:e2:f8:57:05:e5:e2:d2:31:5d:8c:ed:24:4a:30:d8:3a: 15:e8:8a:c3:2e:9c:a1:5a:84:7b:45:18:cf:f6:c9:40:9f:43: 22:5f:3c:9c -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICD50wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzY1 QkY1N0JEQzlCNUJFN0Q5N0UwRDY1QUE0MjIyQjFFRkFBQkVBQTAeFw0yNTAxMTQw NzA4MTBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDQ3NzU2RURENzhBNzk5 N0MxMjdBQzcwQUNFQUJGQzQ1ODE3NUFDOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDC1kZmjVjcEZOQwrBh2Rc+PXhT/+bXco8nBAVfzLBRqahZ9afn hw4R6zCZWfe/bs00DGKyPzxOj2UaWUFwUBIkUx/i1Ct6P/BDgQDEXyGrsgSUXi4/ I8OZ5K6KPh6XkywR59j7ovvk/KltgRQ0YZ4THUTGOGn7A/RtONCS38LSuE+8nPjg YdxAhiGjvRSlJtgKQVuQkyb/FZvUXQyK8vb0TNBvT9A5zMKlLVcHFL/ZrgGqqfXL BUhffl5EErqxGmybwO3QPzQfiJtX17DcY0DVvc2hpBrJ4+eFjEEFbDJaubOlpED5 GmJOcL5Gfx03PxcVJlLdzkc3IdJatfiE1jonAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUR3Vu3XinmXwSescKzqv8RYF1rJQwHwYDVR0jBBgwFoAUxlv1e9ybW+fZfg1l qkIise+qvqowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEz L3hsdjFlOXliVy1mWmZnMWxxa0lpc2UtcXZxby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAveGx2MWU5eWJXLWZaZmcxbHFrSWlzZS1xdnFvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEzL1IzVnUzWGlubVh3U2Vz Y0t6cXY4UllGMXJKUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAVl6EAwDQYJKoZIhvcNAQELBQADggEBAHl8Nya+v1ix/T6Kh8CcnjxDwzzT8PeE 8MI6j6RIFLKe0P3fp6vOS2ju34rB2tq9ZtUWCY3gmfbnRyoBpJToNmEnSWzXO++Q ZPXlpItha/3qfiozHuT/+EqqUmQk7PCuHJP+u5pD6hV+UNZ6aWi3QA+Hsl+FHhlQ LG9Gf/STB7tXAHMWKSmMEtbKoUD1WdbKA/wlgpi6EaIdv0QF/XqPFVUccDkODplI esnYUWmxTzklXwCdClmwgQn0i6vsr2ztaVa+A3GjRxCxEKyi33vI75LobxdnGwDa j6q44vhXBeXi0jFdjO0kSjDYOhXoisMunKFahHtFGM/2yUCfQyJfPJw= -----END CERTIFICATE-----Generated at Fri Apr 4 18:40:04 2025 by rpki-client