$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/tyTsNCjJ6joEWzmjN4gQ0yYfqPw.roa File: tyTsNCjJ6joEWzmjN4gQ0yYfqPw.roa (raw, json) Hash identifier: 8ltzrIdvfaaMYZOoowES5Noe9fLD7PkkmlH0dRb+mWU= Subject key identifier: B7:24:EC:34:28:C9:EA:3A:04:5B:39:A3:37:88:10:D3:26:1F:A8:FC Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA Certificate serial: 1265 Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/tyTsNCjJ6joEWzmjN4gQ0yYfqPw.roa Signing time: Fri 16 May 2025 11:04:05 +0000 ROA not before: Fri 16 May 2025 11:04:05 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 62387 IP address blocks: 101.232.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4709 (0x1265) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA Validity Not Before: May 16 11:04:05 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=B724EC3428C9EA3A045B39A3378810D3261FA8FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7c:4b:0e:88:78:1c:ca:25:70:91:83:54:92: 5d:79:26:2d:71:78:77:a7:3c:8d:ad:20:1a:50:75: bf:77:78:8c:32:fd:8f:da:3a:c1:24:08:ef:b0:1a: fe:3a:82:54:22:8c:ec:c9:44:4d:d5:3f:1b:ad:1d: 6d:09:67:ac:57:ac:f6:a7:96:c4:bf:3a:32:8e:57: a3:22:65:f5:7d:f3:71:64:c3:21:84:0a:6e:f5:42: 64:0c:a0:5f:41:19:44:d8:b2:ad:14:38:63:1a:14: a2:27:81:04:57:08:2a:7d:0e:96:c0:d5:56:9b:7a: 13:07:2b:d7:87:a6:4c:5f:2c:fe:ae:b0:f4:5d:14: 3d:51:80:c5:e6:4d:c6:1c:71:06:99:2f:16:a3:4b: f8:3f:91:1e:0a:4f:95:ff:aa:24:99:57:9a:97:40: 89:f9:d6:34:34:2a:3b:e0:57:2b:f8:9f:30:c0:78: 53:40:97:62:2a:80:35:76:ad:f0:0f:0b:72:9d:ef: 48:2e:a6:13:1f:fb:95:42:30:1c:f2:ef:c6:dc:c8: 73:25:f6:98:eb:d9:57:98:fe:5e:02:53:0c:81:01: 77:97:0a:1e:43:e0:08:f9:21:fb:da:22:37:85:ce: bb:dc:2a:83:4f:89:f5:46:8a:0f:79:2c:91:2e:60: 0a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:24:EC:34:28:C9:EA:3A:04:5B:39:A3:37:88:10:D3:26:1F:A8:FC X509v3 Authority Key Identifier: keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/tyTsNCjJ6joEWzmjN4gQ0yYfqPw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 101.232.92.0/22 Signature Algorithm: sha256WithRSAEncryption 47:e1:be:08:de:c1:11:de:d6:d9:4e:85:71:cf:99:2e:e2:cc: d3:17:e8:55:f7:96:18:2c:5a:08:7d:6e:2d:e6:75:97:29:fb: cf:7f:cb:4a:40:7f:a2:97:f9:54:31:e2:fa:c9:e0:4e:09:a2: f9:89:06:9d:86:c7:b8:9f:86:38:6c:53:2a:34:4d:f7:13:0d: bf:8d:92:06:81:f5:e2:fe:80:c0:c3:0a:bd:06:1c:99:90:e9: 1f:72:14:1e:a6:96:8b:c8:d4:7a:ae:bb:68:e4:9c:af:d7:44: 8b:8a:93:29:82:25:ff:2f:af:7c:3d:d2:d2:40:a3:64:f8:80: a6:64:6a:77:a4:b7:5f:77:25:45:50:11:e1:26:cd:93:c9:62: 4f:94:41:d3:d3:9e:35:d3:23:c5:72:8f:3f:58:49:76:dd:94: f2:53:ee:d7:8a:fc:9d:22:20:0b:08:df:00:0f:5d:3b:6d:98: 6b:46:03:15:46:f6:55:1d:54:91:c5:49:9b:47:65:53:7b:c8: ea:ab:4a:25:82:7d:0f:fa:af:ca:63:29:74:dc:1a:a2:ef:d2: 02:9a:4f:db:3c:95:e8:70:a0:f2:30:89:9d:8d:83:a0:c0:61: 19:0e:1e:d0:e3:d1:e5:28:3a:49:33:ba:43:ef:eb:af:6e:ce: 33:91:80:e5 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICEmUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzY1 QkY1N0JEQzlCNUJFN0Q5N0UwRDY1QUE0MjIyQjFFRkFBQkVBQTAeFw0yNTA1MTYx MTA0MDVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEI3MjRFQzM0MjhDOUVB M0EwNDVCMzlBMzM3ODgxMEQzMjYxRkE4RkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYfEsOiHgcyiVwkYNUkl15Ji1xeHenPI2tIBpQdb93eIwy/Y/a OsEkCO+wGv46glQijOzJRE3VPxutHW0JZ6xXrPanlsS/OjKOV6MiZfV983FkwyGE Cm71QmQMoF9BGUTYsq0UOGMaFKIngQRXCCp9DpbA1VabehMHK9eHpkxfLP6usPRd FD1RgMXmTcYccQaZLxajS/g/kR4KT5X/qiSZV5qXQIn51jQ0KjvgVyv4nzDAeFNA l2IqgDV2rfAPC3Kd70guphMf+5VCMBzy78bcyHMl9pjr2VeY/l4CUwyBAXeXCh5D 4Aj5IfvaIjeFzrvcKoNPifVGig95LJEuYAr/AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUtyTsNCjJ6joEWzmjN4gQ0yYfqPwwHwYDVR0jBBgwFoAUxlv1e9ybW+fZfg1l qkIise+qvqowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEz L3hsdjFlOXliVy1mWmZnMWxxa0lpc2UtcXZxby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAveGx2MWU5eWJXLWZaZmcxbHFrSWlzZS1xdnFvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEzL3R5VHNOQ2pKNmpvRVd6 bWpONGdRMHlZZnFQdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJl6FwwDQYJKoZIhvcNAQELBQADggEBAEfhvgjewRHe1tlOhXHPmS7izNMX6FX3 lhgsWgh9bi3mdZcp+89/y0pAf6KX+VQx4vrJ4E4JovmJBp2Gx7ifhjhsUyo0TfcT Db+NkgaB9eL+gMDDCr0GHJmQ6R9yFB6mlovI1Hquu2jknK/XRIuKkymCJf8vr3w9 0tJAo2T4gKZkanekt193JUVQEeEmzZPJYk+UQdPTnjXTI8Vyjz9YSXbdlPJT7teK /J0iIAsI3wAPXTttmGtGAxVG9lUdVJHFSZtHZVN7yOqrSiWCfQ/6r8pjKXTcGqLv 0gKaT9s8lehwoPIwiZ2Ng6DAYRkOHtDj0eUoOkkzukPv669uzjORgOU= -----END CERTIFICATE-----Generated at Wed Jun 4 02:04:37 2025 by rpki-client