$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/Y1E3Bp0LbmNIQF2VjHFO7xdWwE4.roa File: Y1E3Bp0LbmNIQF2VjHFO7xdWwE4.roa (raw, json) Hash identifier: Pyt8SO9nZCqKkU4e4PUUkcaWHd5TEeeSctmquYdUfzs= Subject key identifier: 63:51:37:06:9D:0B:6E:63:48:40:5D:95:8C:71:4E:EF:17:56:C0:4E Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA Certificate serial: 1219 Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/Y1E3Bp0LbmNIQF2VjHFO7xdWwE4.roa Signing time: Mon 05 May 2025 12:08:07 +0000 ROA not before: Mon 05 May 2025 12:08:07 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 62387 IP address blocks: 101.232.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4633 (0x1219) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA Validity Not Before: May 5 12:08:07 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=635137069D0B6E6348405D958C714EEF1756C04E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fd:d6:00:f3:1f:a7:a4:21:30:8a:ec:2f:f4: 7c:8e:9c:40:cc:2a:14:ba:25:e5:48:d6:d4:b5:52: a3:80:fd:0a:0d:76:49:67:43:73:b3:94:40:03:67: 16:4f:b5:21:fe:57:5a:74:00:99:df:0c:e2:d8:3b: 8f:fb:bd:44:9c:d6:cb:b6:b3:1f:e3:42:44:78:c1: fd:30:b7:cb:23:c0:b5:7a:5c:8e:bc:60:d1:c3:04: 3a:fd:0a:c4:1d:c7:f0:a5:ca:9d:9a:a2:a8:6a:98: 72:eb:ce:ef:5b:0a:ca:e3:28:9d:2b:8e:17:c5:ba: a6:39:6b:95:49:42:fa:e5:81:8d:32:e8:93:bd:8c: 99:1b:07:27:01:28:5f:2c:79:a6:2c:3e:72:35:1c: 38:c4:21:ad:e3:23:23:a2:ce:d1:40:79:95:23:a7: 1b:92:ef:5e:21:6e:07:06:69:3f:9d:b6:3e:c2:5a: 7c:df:2d:e3:0f:0b:2f:87:b4:d4:17:5b:98:6a:54: 09:c9:af:cc:3f:64:35:dc:8e:a9:45:91:b9:d9:b2: f8:9d:91:29:94:a3:d5:7d:5b:07:da:47:1b:aa:f9: 68:d5:3e:49:d5:0e:92:5c:17:32:3c:67:b8:f8:5d: 42:5b:2a:a0:1d:1f:84:ae:6d:f6:85:e1:c4:97:b4: 75:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:51:37:06:9D:0B:6E:63:48:40:5D:95:8C:71:4E:EF:17:56:C0:4E X509v3 Authority Key Identifier: keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/Y1E3Bp0LbmNIQF2VjHFO7xdWwE4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 101.232.120.0/22 Signature Algorithm: sha256WithRSAEncryption 46:1d:50:23:24:ee:25:96:52:16:da:0c:90:0e:3a:c0:32:0e: 11:71:75:25:a7:50:2f:f7:b7:0f:6a:8d:21:ef:07:99:04:cb: 79:ed:d4:31:56:96:38:81:49:01:ac:ad:4c:d3:9d:aa:bf:88: e9:aa:bf:d4:cc:59:f8:be:9e:bc:59:59:95:5b:64:cf:ec:19: c1:f0:7b:cd:a3:7c:40:32:5d:f0:9f:f2:99:ee:d6:65:7b:e8: b4:9b:e3:ab:e1:6e:fa:18:48:70:bd:ba:a8:48:1f:09:91:6a: 2a:20:63:8d:e5:09:0e:ee:fd:a7:6b:29:a5:14:6e:3b:f8:e6: fa:24:f1:c9:32:71:6d:85:7a:65:42:9b:26:97:44:d9:a6:69: 94:5e:de:a7:93:4f:3e:0a:d5:14:46:02:1d:1b:6d:78:06:88: f6:e8:aa:da:5d:52:13:83:62:70:f7:dc:47:b6:ce:f4:54:69: 23:ee:3d:60:64:f4:eb:23:4d:22:cb:16:55:32:cb:0c:95:45: 8f:c8:9a:63:f3:78:d2:23:aa:89:0c:04:c2:18:81:88:c2:59: 17:e3:98:c6:d3:89:d1:a5:a6:78:b1:7d:f4:d3:9d:88:0b:8a: 7e:aa:1d:84:f9:3e:96:fa:0d:5e:99:cc:92:9e:d3:c2:56:31: bc:11:be:dc -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICEhkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzY1 QkY1N0JEQzlCNUJFN0Q5N0UwRDY1QUE0MjIyQjFFRkFBQkVBQTAeFw0yNTA1MDUx MjA4MDdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDYzNTEzNzA2OUQwQjZF NjM0ODQwNUQ5NThDNzE0RUVGMTc1NkMwNEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDI/dYA8x+npCEwiuwv9HyOnEDMKhS6JeVI1tS1UqOA/QoNdkln Q3OzlEADZxZPtSH+V1p0AJnfDOLYO4/7vUSc1su2sx/jQkR4wf0wt8sjwLV6XI68 YNHDBDr9CsQdx/Clyp2aoqhqmHLrzu9bCsrjKJ0rjhfFuqY5a5VJQvrlgY0y6JO9 jJkbBycBKF8seaYsPnI1HDjEIa3jIyOiztFAeZUjpxuS714hbgcGaT+dtj7CWnzf LeMPCy+HtNQXW5hqVAnJr8w/ZDXcjqlFkbnZsvidkSmUo9V9WwfaRxuq+WjVPknV DpJcFzI8Z7j4XUJbKqAdH4SubfaF4cSXtHVxAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUY1E3Bp0LbmNIQF2VjHFO7xdWwE4wHwYDVR0jBBgwFoAUxlv1e9ybW+fZfg1l qkIise+qvqowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEz L3hsdjFlOXliVy1mWmZnMWxxa0lpc2UtcXZxby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAveGx2MWU5eWJXLWZaZmcxbHFrSWlzZS1xdnFvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEzL1kxRTNCcDBMYm1OSVFG MlZqSEZPN3hkV3dFNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJl6HgwDQYJKoZIhvcNAQELBQADggEBAEYdUCMk7iWWUhbaDJAOOsAyDhFxdSWn UC/3tw9qjSHvB5kEy3nt1DFWljiBSQGsrUzTnaq/iOmqv9TMWfi+nrxZWZVbZM/s GcHwe82jfEAyXfCf8pnu1mV76LSb46vhbvoYSHC9uqhIHwmRaiogY43lCQ7u/adr KaUUbjv45vok8ckycW2FemVCmyaXRNmmaZRe3qeTTz4K1RRGAh0bbXgGiPboqtpd UhODYnD33Ee2zvRUaSPuPWBk9OsjTSLLFlUyywyVRY/ImmPzeNIjqokMBMIYgYjC WRfjmMbTidGlpnixffTTnYgLin6qHYT5Ppb6DV6ZzJKe08JWMbwRvtw= -----END CERTIFICATE-----Generated at Wed Jun 4 01:33:42 2025 by rpki-client