$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/wY2RYAxGcvrFhY30LJwko1J2vj0.roa File: wY2RYAxGcvrFhY30LJwko1J2vj0.roa (raw, json) Hash identifier: 8M987sDbwTOLGxJDZHrGkNJT+889l03r1aDiddeJKcs= Subject key identifier: C1:8D:91:60:0C:46:72:FA:C5:85:8D:F4:2C:9C:24:A3:52:76:BE:3D Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0 Certificate serial: 0CB3 Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/wY2RYAxGcvrFhY30LJwko1J2vj0.roa Signing time: Fri 27 Jun 2025 14:08:50 +0000 ROA not before: Fri 27 Jun 2025 14:08:50 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 2914 IP address blocks: 124.173.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 01:43:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3251 (0xcb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0 Validity Not Before: Jun 27 14:08:50 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=C18D91600C4672FAC5858DF42C9C24A35276BE3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e6:da:62:5e:fe:37:0a:f5:ae:c4:2c:fd:e8: 00:0f:45:55:2b:4a:f2:16:e6:20:cf:db:f4:c6:90: 95:7a:29:33:4c:2b:86:c8:31:52:96:4e:b8:0b:5a: 76:c0:0b:66:c2:ba:99:80:e4:54:da:ac:39:7f:e8: 36:c0:2c:c5:3c:9e:05:91:76:6e:99:19:b9:4d:9a: 36:59:e5:8a:77:6e:1f:3b:7b:4e:97:d1:4c:fd:8d: 74:e6:6e:96:e9:65:aa:52:fe:30:3c:0c:ad:45:3b: b2:66:4e:7a:17:1b:2e:c4:96:9e:92:7f:62:72:60: f1:03:6f:25:44:6b:51:58:0e:49:ad:d8:d9:1f:92: 21:76:04:bb:b4:80:96:ca:f9:ef:67:53:d7:49:a2: 9b:a5:d8:cf:0b:8c:cc:63:4a:6e:d0:07:8b:d2:da: f9:ae:81:81:19:2e:30:7d:e2:41:ea:d0:73:40:47: 82:e5:f8:23:89:df:b8:e4:f5:ee:cb:1b:b6:14:a6: 8f:0e:7a:37:d7:28:5f:76:d2:33:2e:47:72:04:fb: 92:d1:cc:f8:ef:42:1b:fb:b7:89:c1:1c:12:7f:80: 4d:67:3a:9a:59:ec:26:0b:97:c5:0f:61:63:c9:f7: 04:93:90:87:6d:79:4c:5d:b6:4c:af:a6:19:94:e8: 30:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:8D:91:60:0C:46:72:FA:C5:85:8D:F4:2C:9C:24:A3:52:76:BE:3D X509v3 Authority Key Identifier: keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/wY2RYAxGcvrFhY30LJwko1J2vj0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.173.192.0/18 Signature Algorithm: sha256WithRSAEncryption 1d:e4:c6:e7:62:15:bd:90:ee:04:4b:c9:70:6a:91:2c:35:a6: df:e2:8e:b3:9e:51:03:f1:ae:86:4c:2d:9b:9e:68:13:5c:64: 13:0f:12:3a:41:60:51:91:e5:9f:50:91:48:c3:1a:09:05:35: af:c7:8b:27:06:c1:06:f5:ac:61:b6:b2:10:70:c6:85:f2:ea: 28:0b:5d:0e:a2:5e:86:1e:f2:a8:6c:7d:b2:e5:d3:01:58:a4: 95:13:84:ce:be:83:df:a3:c9:ce:3f:94:fc:a0:2a:33:9a:66: 9e:b5:3b:13:10:6e:c6:14:d6:42:99:1c:f2:56:12:7e:17:1b: bf:22:ee:7c:ab:7d:d2:22:75:78:f7:12:c0:d4:61:af:04:11: 9a:50:5f:0f:2f:bc:28:22:d9:00:9f:d9:5b:34:9e:17:6c:9b: b0:47:4b:36:da:66:37:aa:bc:79:4c:29:20:0d:c9:7a:09:1d: ce:8d:4a:37:19:6e:76:eb:c3:82:91:a3:ff:bc:10:a0:a0:a8: 53:ed:3e:7d:fe:66:ed:00:f9:65:1b:52:98:03:b4:83:ce:e0: b3:bb:c9:b4:0e:97:9c:6e:d7:e1:56:a6:ab:cf:c1:7f:81:0e: 47:b3:d2:53:9c:0c:72:22:b6:72:fa:4a:d8:ab:03:93:1d:fe: be:91:fb:d8 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICDLMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTQ4 MUI0RTQwOTAxNUQ4RUI3RDAzRjM2MDM4ODMwRUMxMDk4QUJDMDAeFw0yNTA2Mjcx NDA4NTBaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEMxOEQ5MTYwMEM0Njcy RkFDNTg1OERGNDJDOUMyNEEzNTI3NkJFM0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCf5tpiXv43CvWuxCz96AAPRVUrSvIW5iDP2/TGkJV6KTNMK4bI MVKWTrgLWnbAC2bCupmA5FTarDl/6DbALMU8ngWRdm6ZGblNmjZZ5Yp3bh87e06X 0Uz9jXTmbpbpZapS/jA8DK1FO7JmTnoXGy7Elp6Sf2JyYPEDbyVEa1FYDkmt2Nkf kiF2BLu0gJbK+e9nU9dJopul2M8LjMxjSm7QB4vS2vmugYEZLjB94kHq0HNAR4Ll +COJ37jk9e7LG7YUpo8OejfXKF920jMuR3IE+5LRzPjvQhv7t4nBHBJ/gE1nOppZ 7CYLl8UPYWPJ9wSTkIdteUxdtkyvphmU6DDnAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUwY2RYAxGcvrFhY30LJwko1J2vj0wHwYDVR0jBBgwFoAUlIG05AkBXY630D82 A4gw7BCYq8AwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNi9s SUcwNUFrQlhZNjMwRDgyQTRndzdCQ1lxOEEuY3JsMGMGCCsGAQUFBwEBBFcwVTBT BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw MDAwL2xJRzA1QWtCWFk2MzBEODJBNGd3N0JDWXE4QS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtp LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzYvd1kyUllBeEdjdnJGaFkzMExK d2tvMUoydmowLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNu L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBnyt wDANBgkqhkiG9w0BAQsFAAOCAQEAHeTG52IVvZDuBEvJcGqRLDWm3+KOs55RA/Gu hkwtm55oE1xkEw8SOkFgUZHln1CRSMMaCQU1r8eLJwbBBvWsYbayEHDGhfLqKAtd DqJehh7yqGx9suXTAViklROEzr6D36PJzj+U/KAqM5pmnrU7ExBuxhTWQpkc8lYS fhcbvyLufKt90iJ1ePcSwNRhrwQRmlBfDy+8KCLZAJ/ZWzSeF2ybsEdLNtpmN6q8 eUwpIA3Jegkdzo1KNxluduvDgpGj/7wQoKCoU+0+ff5m7QD5ZRtSmAO0g87gs7vJ tA6XnG7X4Vamq8/Bf4EOR7PSU5wMciK2cvpK2KsDkx3+vpH72A== -----END CERTIFICATE-----Generated at Tue Jul 1 01:24:07 2025 by rpki-client