$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/64/-kvC1odFCKGfYwuP6kDSWCxa5cs.roa File: -kvC1odFCKGfYwuP6kDSWCxa5cs.roa (raw, json) Hash identifier: tnU1N852eOToaS3ilm0JWRHgYOaWT3bJAfStolGhwEI= Subject key identifier: FA:4B:C2:D6:87:45:08:A1:9F:63:0B:8F:EA:40:D2:58:2C:5A:E5:CB Certificate issuer: /CN=5EB8C57D72F7946DD7B2420599288ECA153CB709 Certificate serial: 06 Authority key identifier: 5E:B8:C5:7D:72:F7:94:6D:D7:B2:42:05:99:28:8E:CA:15:3C:B7:09 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XrjFfXL3lG3XskIFmSiOyhU8twk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/64/-kvC1odFCKGfYwuP6kDSWCxa5cs.roa Signing time: Mon 26 May 2025 00:46:37 +0000 ROA not before: Mon 26 May 2025 00:46:37 +0000 ROA not after: Tue 26 May 2026 00:40:26 +0000 asID: 23724 IP address blocks: 211.150.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/64/XrjFfXL3lG3XskIFmSiOyhU8twk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/64/XrjFfXL3lG3XskIFmSiOyhU8twk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XrjFfXL3lG3XskIFmSiOyhU8twk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 01:38:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EB8C57D72F7946DD7B2420599288ECA153CB709 Validity Not Before: May 26 00:46:37 2025 GMT Not After : May 26 00:40:26 2026 GMT Subject: CN=FA4BC2D6874508A19F630B8FEA40D2582C5AE5CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2a:be:fe:02:7b:4f:4e:ac:f9:be:a3:a2:c7: db:75:9a:3b:79:4b:6f:cd:d4:1d:f2:ca:0b:a9:f2: bd:1f:f3:cb:f7:5f:bf:60:23:b4:b6:34:4f:d2:16: bd:f1:05:71:9f:87:f6:3f:7a:cf:10:24:1c:9b:70: c0:86:2d:b4:93:bb:c8:39:95:da:00:de:ae:24:d3: 16:90:93:93:94:5e:11:f7:d3:35:b1:48:a3:20:c3: 4a:2e:85:95:a3:8a:31:e7:1c:15:dc:c8:6e:7b:32: d6:9e:ca:00:8f:7b:57:db:79:65:59:4b:1b:7d:04: a5:d3:40:1d:e2:0d:5f:28:e8:cd:39:d5:73:4c:83: 98:d9:18:1e:3f:11:cf:d1:50:8c:7d:f6:9c:30:ed: b8:22:d4:98:67:02:32:38:84:41:1c:98:af:84:29: 48:ed:f9:73:ea:5f:79:7d:06:97:2f:2a:9a:c3:d8: 7d:e1:b0:8b:71:b1:c6:13:6a:47:0b:ad:0a:78:c7: a2:ba:07:cf:21:50:5a:c6:6a:8c:d7:33:47:e1:ef: a5:44:ce:db:d3:d9:fd:c5:82:66:e3:e5:c4:a8:3f: 7c:60:53:82:39:cb:f0:0c:42:c0:ce:51:e1:ae:a1: fa:a5:0d:cd:0d:ef:74:c2:24:d0:1e:26:49:98:c4: 08:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:4B:C2:D6:87:45:08:A1:9F:63:0B:8F:EA:40:D2:58:2C:5A:E5:CB X509v3 Authority Key Identifier: keyid:5E:B8:C5:7D:72:F7:94:6D:D7:B2:42:05:99:28:8E:CA:15:3C:B7:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/64/XrjFfXL3lG3XskIFmSiOyhU8twk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XrjFfXL3lG3XskIFmSiOyhU8twk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/64/-kvC1odFCKGfYwuP6kDSWCxa5cs.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.150.0.0/18 Signature Algorithm: sha256WithRSAEncryption 3f:31:f9:8c:51:cb:16:c2:ad:6e:85:ff:cd:03:c6:d7:31:3e: bb:aa:90:ce:04:96:08:21:ab:99:0b:6a:8f:8c:df:8a:4c:82: 4d:bf:23:7a:e9:05:13:c7:65:22:68:41:bb:e0:48:c1:9a:15: b6:3e:53:0c:6d:fa:6d:3d:0e:e4:d5:32:1c:d1:9b:4d:42:34: 24:2a:22:16:83:7a:9f:ea:88:51:8b:30:21:d2:70:cd:fd:7f: 1e:18:ea:bb:62:99:da:6a:d0:41:9e:07:31:0d:87:ab:6b:ec: 6e:bd:72:39:3c:15:b7:b4:7b:c3:0f:4b:ad:d3:f2:b2:ee:15: 28:68:60:7f:dc:76:cc:78:5e:71:8a:8c:ec:20:1f:5c:cf:9f: c5:1a:af:df:bd:50:d7:75:43:cf:68:38:9b:20:e0:3e:47:e8: d5:69:83:fc:2a:ee:05:a9:97:c4:63:c8:96:47:1d:f0:1e:e4: 84:f0:f8:28:7b:42:bf:d4:6e:76:fb:62:c4:0a:b4:56:56:06: 5e:63:fa:38:eb:f1:ca:51:9c:ea:45:06:61:2d:bf:f0:0c:66: f5:7f:62:19:0e:95:f2:64:d2:82:b0:29:0f:26:21:27:b1:98: 17:b9:8c:47:fa:85:86:93:b6:02:20:ca:56:da:a6:63:7b:f9: 53:9c:df:c4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIBBjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1RUI4 QzU3RDcyRjc5NDZERDdCMjQyMDU5OTI4OEVDQTE1M0NCNzA5MB4XDTI1MDUyNjAw NDYzN1oXDTI2MDUyNjAwNDAyNlowMzExMC8GA1UEAxMoRkE0QkMyRDY4NzQ1MDhB MTlGNjMwQjhGRUE0MEQyNTgyQzVBRTVDQjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALUqvv4Ce09OrPm+o6LH23WaO3lLb83UHfLKC6nyvR/zy/dfv2Aj tLY0T9IWvfEFcZ+H9j96zxAkHJtwwIYttJO7yDmV2gDeriTTFpCTk5ReEffTNbFI oyDDSi6FlaOKMeccFdzIbnsy1p7KAI97V9t5ZVlLG30EpdNAHeINXyjozTnVc0yD mNkYHj8Rz9FQjH32nDDtuCLUmGcCMjiEQRyYr4QpSO35c+pfeX0Gly8qmsPYfeGw i3GxxhNqRwutCnjHoroHzyFQWsZqjNczR+HvpUTO29PZ/cWCZuPlxKg/fGBTgjnL 8AxCwM5R4a6h+qUNzQ3vdMIk0B4mSZjECFECAwEAAaOCAe8wggHrMB0GA1UdDgQW BBT6S8LWh0UIoZ9jC4/qQNJYLFrlyzAfBgNVHSMEGDAWgBReuMV9cveUbdeyQgWZ KI7KFTy3CTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsGA1UdHwRUMFIwUKBO oEyGSnJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC82NC9Y cmpGZlhMM2xHM1hza0lGbVNpT3loVTh0d2suY3JsMGMGCCsGAQUFBwEBBFcwVTBT BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw MDAwL1hyakZmWEwzbEczWHNrSUZtU2lPeWhVOHR3ay5jZXIwDgYDVR0PAQH/BAQD AgeAMIGbBggrBgEFBQcBCwSBjjCBizBWBggrBgEFBQcwC4ZKcnN5bmM6Ly9ycGtp LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzY0Ly1rdkMxb2RGQ0tHZll3dVA2 a0RTV0N4YTVjcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5j bi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbT lgAwDQYJKoZIhvcNAQELBQADggEBAD8x+YxRyxbCrW6F/80DxtcxPruqkM4Elggh q5kLao+M34pMgk2/I3rpBRPHZSJoQbvgSMGaFbY+Uwxt+m09DuTVMhzRm01CNCQq IhaDep/qiFGLMCHScM39fx4Y6rtimdpq0EGeBzENh6tr7G69cjk8Fbe0e8MPS63T 8rLuFShoYH/cdsx4XnGKjOwgH1zPn8Uar9+9UNd1Q89oOJsg4D5H6NVpg/wq7gWp l8RjyJZHHfAe5ITw+Ch7Qr/Ubnb7YsQKtFZWBl5j+jjr8cpRnOpFBmEtv/AMZvV/ YhkOlfJk0oKwKQ8mISexmBe5jEf6hYaTtgIgylbapmN7+VOc38Q= -----END CERTIFICATE-----Generated at Wed Jun 4 01:21:23 2025 by rpki-client