$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/890/Z5hAKvxguOsASJpgwUdi4NnpZOs.roa File: Z5hAKvxguOsASJpgwUdi4NnpZOs.roa (raw, json) Hash identifier: O/EzgyKNo6PYkpxalObOJROOjjHcKmOl0tEmOSOFhwk= Subject key identifier: 67:98:40:2A:FC:60:B8:EB:00:48:9A:60:C1:47:62:E0:D9:E9:64:EB Certificate issuer: /CN=DBB4C5FA96B8741BF68B48BF004DBD6FD9636FAD Certificate serial: 0C5D Authority key identifier: DB:B4:C5:FA:96:B8:74:1B:F6:8B:48:BF:00:4D:BD:6F:D9:63:6F:AD Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27TF-pa4dBv2i0i_AE29b9ljb60.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/Z5hAKvxguOsASJpgwUdi4NnpZOs.roa Signing time: Sat 31 May 2025 10:58:39 +0000 ROA not before: Sat 31 May 2025 10:58:39 +0000 ROA not after: Thu 09 Apr 2026 06:41:00 +0000 asID: 63567 IP address blocks: 43.248.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/27TF-pa4dBv2i0i_AE29b9ljb60.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/27TF-pa4dBv2i0i_AE29b9ljb60.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27TF-pa4dBv2i0i_AE29b9ljb60.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:12:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3165 (0xc5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBB4C5FA96B8741BF68B48BF004DBD6FD9636FAD Validity Not Before: May 31 10:58:39 2025 GMT Not After : Apr 9 06:41:00 2026 GMT Subject: CN=6798402AFC60B8EB00489A60C14762E0D9E964EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f0:0d:43:0d:58:07:2f:78:2c:f0:bf:ff:b3: e8:2b:82:5f:c7:46:17:a1:63:a6:fb:79:fd:44:49: 7b:f0:05:07:a9:54:3c:98:95:ec:dc:7e:cb:93:2e: 2f:fd:80:48:b6:f6:63:a6:fa:3e:7d:cf:78:51:a6: 88:a6:08:00:2e:b8:98:ed:7e:c8:7b:3a:e6:73:45: e1:a6:e6:59:e7:90:c9:02:91:0e:9f:05:e0:40:51: d4:ab:77:4e:7b:54:41:00:48:fa:a4:ae:eb:ea:9a: 56:f5:a6:87:12:8a:5c:e2:04:a8:a9:2c:9f:2d:3e: 1d:45:6a:2b:98:87:3b:1a:e3:a1:2a:ea:a9:ac:0a: 37:f1:69:43:04:96:b0:f6:37:12:fb:a3:f0:51:a1: 2c:ce:4f:e3:b1:4a:37:69:ab:95:6c:6e:a3:3d:21: b4:af:69:dd:3d:60:a5:c7:34:00:24:23:7a:b5:b9: 71:ac:68:d0:9e:fe:69:a9:e8:88:00:2d:2e:4d:d6: 98:1f:3b:1f:95:1a:e5:ab:56:ea:58:e8:38:b1:96: 3c:6f:b9:c3:8f:27:33:c1:3b:28:52:58:ce:67:ca: ef:b0:58:d0:1e:ab:3b:9f:37:c5:d1:a9:ed:0e:22: 74:ac:86:4b:eb:fc:af:b6:dc:50:8b:a1:e4:7f:84: cc:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:98:40:2A:FC:60:B8:EB:00:48:9A:60:C1:47:62:E0:D9:E9:64:EB X509v3 Authority Key Identifier: keyid:DB:B4:C5:FA:96:B8:74:1B:F6:8B:48:BF:00:4D:BD:6F:D9:63:6F:AD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/27TF-pa4dBv2i0i_AE29b9ljb60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27TF-pa4dBv2i0i_AE29b9ljb60.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/Z5hAKvxguOsASJpgwUdi4NnpZOs.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.248.176.0/20 Signature Algorithm: sha256WithRSAEncryption 68:ec:7e:0e:4e:1e:02:e5:9b:ac:f0:6b:df:51:4e:a4:0e:39: d6:8f:54:a6:9c:2f:28:61:37:19:2b:e9:a1:5d:45:a9:dd:e8: a8:e3:b6:ff:42:6d:e3:46:a7:5b:a0:8a:87:5d:19:91:7b:b6: ba:1d:07:63:d1:6f:c9:df:52:84:f8:f7:09:41:73:ac:d9:ba: 68:cc:11:08:d1:62:23:a7:12:ec:c3:c6:a3:04:00:f1:c8:32: 64:b2:78:de:44:83:60:52:fc:d4:c8:d9:69:96:ec:c6:b7:a0: 12:0f:b1:23:cd:1a:1f:ee:16:a2:e8:7c:b2:ea:69:ff:66:ad: e7:35:bc:2b:bc:6a:ee:2d:b2:0c:a0:8f:81:58:97:b7:5e:46: 1a:27:1e:91:41:ca:78:93:37:25:f2:ca:73:80:c3:b7:63:93: c6:c8:74:1f:16:a3:ae:a4:a5:bc:71:50:3d:f7:ed:e2:87:a2: ad:4c:6d:fa:67:cc:e1:13:cb:48:95:03:29:16:37:7b:a7:d4: ab:3c:cc:39:43:52:c6:4e:ea:c3:dc:5a:9e:5b:8d:20:a5:85: 41:4e:df:48:be:08:a4:ea:98:e7:0e:51:f0:79:53:7b:d7:40: eb:27:58:0b:d9:56:4f:f3:ff:f9:d0:7b:3f:aa:f7:1f:e5:7c: 00:11:49:a5 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICDF0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREJC NEM1RkE5NkI4NzQxQkY2OEI0OEJGMDA0REJENkZEOTYzNkZBRDAeFw0yNTA1MzEx MDU4MzlaFw0yNjA0MDkwNjQxMDBaMDMxMTAvBgNVBAMTKDY3OTg0MDJBRkM2MEI4 RUIwMDQ4OUE2MEMxNDc2MkUwRDlFOTY0RUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC18A1DDVgHL3gs8L//s+grgl/HRhehY6b7ef1ESXvwBQepVDyY lezcfsuTLi/9gEi29mOm+j59z3hRpoimCAAuuJjtfsh7OuZzReGm5lnnkMkCkQ6f BeBAUdSrd057VEEASPqkruvqmlb1pocSilziBKipLJ8tPh1FaiuYhzsa46Eq6qms CjfxaUMElrD2NxL7o/BRoSzOT+OxSjdpq5VsbqM9IbSvad09YKXHNAAkI3q1uXGs aNCe/mmp6IgALS5N1pgfOx+VGuWrVupY6DixljxvucOPJzPBOyhSWM5nyu+wWNAe qzufN8XRqe0OInSshkvr/K+23FCLoeR/hMzFAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUZ5hAKvxguOsASJpgwUdi4NnpZOswHwYDVR0jBBgwFoAU27TF+pa4dBv2i0i/ AE29b9ljb60wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODkw LzI3VEYtcGE0ZEJ2MmkwaV9BRTI5YjlsamI2MC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvMjdURi1wYTRkQnYyaTBpX0FFMjliOWxqYjYwLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODkwL1o1aEFLdnhndU9zQVNK cGd3VWRpNE5ucFpPcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAQr+LAwDQYJKoZIhvcNAQELBQADggEBAGjsfg5OHgLlm6zwa99RTqQOOdaPVKac LyhhNxkr6aFdRand6Kjjtv9CbeNGp1ugioddGZF7trodB2PRb8nfUoT49wlBc6zZ umjMEQjRYiOnEuzDxqMEAPHIMmSyeN5Eg2BS/NTI2WmW7Ma3oBIPsSPNGh/uFqLo fLLqaf9mrec1vCu8au4tsgygj4FYl7deRhonHpFByniTNyXyynOAw7djk8bIdB8W o66kpbxxUD337eKHoq1MbfpnzOETy0iVAykWN3un1Ks8zDlDUsZO6sPcWp5bjSCl hUFO30i+CKTqmOcOUfB5U3vXQOsnWAvZVk/z//nQez+q9x/lfAARSaU= -----END CERTIFICATE-----Generated at Wed Jun 4 01:19:13 2025 by rpki-client