$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/WneONO0O7GGwhq9Afh3SBg8IUYg.roa File: WneONO0O7GGwhq9Afh3SBg8IUYg.roa (raw, json) Hash identifier: +wxDNGRfjn3afC6oMUXkzF9ilA2XuzdqvNX6BUCOYWs= Subject key identifier: 5A:77:8E:34:ED:0E:EC:61:B0:86:AF:40:7E:1D:D2:06:0F:08:51:88 Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA Certificate serial: 125F Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/WneONO0O7GGwhq9Afh3SBg8IUYg.roa Signing time: Fri 16 May 2025 10:59:45 +0000 ROA not before: Fri 16 May 2025 10:59:45 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 62387 IP address blocks: 101.232.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4703 (0x125f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA Validity Not Before: May 16 10:59:45 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=5A778E34ED0EEC61B086AF407E1DD2060F085188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:30:e5:e1:ad:65:22:d2:f5:f8:d8:c2:cb:24: 54:86:a2:e1:33:f1:b5:db:18:82:ae:66:a5:19:2c: 77:48:c9:99:57:7b:d0:ca:f4:32:4c:38:e6:69:28: 7f:77:dd:bf:20:40:34:62:cf:cd:8f:46:f9:61:60: 12:10:89:c5:f8:48:c6:9f:64:aa:eb:5a:7e:97:1b: e2:50:95:e8:df:0e:59:51:93:b0:62:80:b5:be:0a: 15:11:ba:50:f3:21:0b:a5:9a:c7:72:dc:62:43:67: 97:29:55:f0:51:f7:8e:ba:78:f7:9c:28:bb:57:81: 9b:b9:af:f9:00:e2:3a:1e:b6:2b:ca:df:b8:94:67: 86:a7:6e:90:08:58:33:81:91:ed:cc:1d:b2:c9:8e: 4e:8c:05:38:bc:84:40:67:e2:8c:fb:be:eb:83:3d: 7e:1e:f0:1e:d5:7d:15:48:8a:c4:c8:d2:c2:00:28: 67:9d:6a:a9:c5:cc:3f:8e:3e:b1:12:46:3a:62:21: 96:8e:1c:ce:16:f7:a2:bd:8d:2f:c2:a4:21:95:ac: a5:cc:eb:c0:4f:48:f8:2a:14:0c:08:df:82:51:90: d4:13:9b:31:05:19:71:5c:06:9f:eb:3d:de:70:2e: 2c:a3:5e:be:92:fc:b2:f2:65:47:62:ca:73:f6:08: 88:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:77:8E:34:ED:0E:EC:61:B0:86:AF:40:7E:1D:D2:06:0F:08:51:88 X509v3 Authority Key Identifier: keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/WneONO0O7GGwhq9Afh3SBg8IUYg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 101.232.76.0/22 Signature Algorithm: sha256WithRSAEncryption 1f:73:79:cf:bb:da:66:9a:26:0e:ae:09:28:e5:d5:74:eb:fd: a8:cf:ee:61:9b:fe:2c:16:3e:ee:54:22:8b:0d:9c:e8:79:b4: 8a:bb:f4:a9:62:c9:ab:f0:7f:c6:6b:36:c4:4d:1f:80:a4:81: 5b:96:dc:e2:2c:cd:fa:4e:ac:73:3f:8b:04:d3:a4:e2:43:57: 91:ad:6f:b2:69:a7:77:41:df:71:bf:ac:77:a2:2c:b0:ca:66: 8f:75:8a:1d:b9:68:1f:28:5b:a6:3f:82:30:58:71:02:ac:a7: 36:f3:5f:24:08:16:f5:64:13:6b:44:89:a3:ea:a4:15:a0:67: cd:fc:51:9f:5e:a2:3a:30:31:71:2a:c2:63:ff:8e:8a:7d:8e: 5c:e0:21:9c:15:45:33:8d:e4:bc:d8:0d:42:77:35:d8:ee:2a: 9d:db:91:da:fd:56:21:60:aa:3a:8d:c4:89:7a:c3:89:82:97: 60:83:ac:5c:b7:cb:c6:6f:7c:3c:85:3f:00:4b:40:92:47:13: 01:65:1b:b5:03:58:63:fe:03:bb:8c:82:4b:08:78:72:14:de: 7d:6f:4b:ce:8d:aa:13:29:de:9b:b1:d4:b3:25:6a:61:dd:02: 60:4b:79:40:6a:0a:b7:4f:b6:5b:4e:7d:b0:4b:3b:e8:1d:f2: eb:1a:76:dc -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICEl8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzY1 QkY1N0JEQzlCNUJFN0Q5N0UwRDY1QUE0MjIyQjFFRkFBQkVBQTAeFw0yNTA1MTYx MDU5NDVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDVBNzc4RTM0RUQwRUVD NjFCMDg2QUY0MDdFMUREMjA2MEYwODUxODgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjMOXhrWUi0vX42MLLJFSGouEz8bXbGIKuZqUZLHdIyZlXe9DK 9DJMOOZpKH933b8gQDRiz82PRvlhYBIQicX4SMafZKrrWn6XG+JQlejfDllRk7Bi gLW+ChURulDzIQulmsdy3GJDZ5cpVfBR9466ePecKLtXgZu5r/kA4joetivK37iU Z4anbpAIWDOBke3MHbLJjk6MBTi8hEBn4oz7vuuDPX4e8B7VfRVIisTI0sIAKGed aqnFzD+OPrESRjpiIZaOHM4W96K9jS/CpCGVrKXM68BPSPgqFAwI34JRkNQTmzEF GXFcBp/rPd5wLiyjXr6S/LLyZUdiynP2CIjhAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUWneONO0O7GGwhq9Afh3SBg8IUYgwHwYDVR0jBBgwFoAUxlv1e9ybW+fZfg1l qkIise+qvqowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEz L3hsdjFlOXliVy1mWmZnMWxxa0lpc2UtcXZxby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAveGx2MWU5eWJXLWZaZmcxbHFrSWlzZS1xdnFvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEzL1duZU9OTzBPN0dHd2hx OUFmaDNTQmc4SVVZZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJl6EwwDQYJKoZIhvcNAQELBQADggEBAB9zec+72maaJg6uCSjl1XTr/ajP7mGb /iwWPu5UIosNnOh5tIq79Kliyavwf8ZrNsRNH4CkgVuW3OIszfpOrHM/iwTTpOJD V5Gtb7Jpp3dB33G/rHeiLLDKZo91ih25aB8oW6Y/gjBYcQKspzbzXyQIFvVkE2tE iaPqpBWgZ838UZ9eojowMXEqwmP/jop9jlzgIZwVRTON5LzYDUJ3NdjuKp3bkdr9 ViFgqjqNxIl6w4mCl2CDrFy3y8ZvfDyFPwBLQJJHEwFlG7UDWGP+A7uMgksIeHIU 3n1vS86NqhMp3pux1LMlamHdAmBLeUBqCrdPtltOfbBLO+gd8usadtw= -----END CERTIFICATE-----Generated at Wed Jun 4 02:14:33 2025 by rpki-client