$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/104/nQe8cqEREUIsJzuFPvvw2A1_6e4.roa File: nQe8cqEREUIsJzuFPvvw2A1_6e4.roa (raw, json) Hash identifier: M7HEBLqrcF9Cc43K//Uhar4sJlCkmK82tTZ8yw7MBD8= Subject key identifier: 9D:07:BC:72:A1:11:11:42:2C:27:3B:85:3E:FB:F0:D8:0D:7F:E9:EE Certificate issuer: /CN=E0B5B36C487142AA0060FA5B54750B26C5CF5BDC Certificate serial: 4D Authority key identifier: E0:B5:B3:6C:48:71:42:AA:00:60:FA:5B:54:75:0B:26:C5:CF:5B:DC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4LWzbEhxQqoAYPpbVHULJsXPW9w.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/104/nQe8cqEREUIsJzuFPvvw2A1_6e4.roa Signing time: Thu 12 Jun 2025 03:08:42 +0000 ROA not before: Thu 12 Jun 2025 03:08:42 +0000 ROA not after: Thu 28 May 2026 08:22:56 +0000 asID: 9306 IP address blocks: 211.88.0.0/16 maxlen: 32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/104/4LWzbEhxQqoAYPpbVHULJsXPW9w.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/104/4LWzbEhxQqoAYPpbVHULJsXPW9w.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4LWzbEhxQqoAYPpbVHULJsXPW9w.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 18:41:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0B5B36C487142AA0060FA5B54750B26C5CF5BDC Validity Not Before: Jun 12 03:08:42 2025 GMT Not After : May 28 08:22:56 2026 GMT Subject: CN=9D07BC72A11111422C273B853EFBF0D80D7FE9EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1f:66:af:84:8f:ed:78:eb:0b:03:f0:3d:3c: a4:fd:94:c3:f5:92:38:a3:25:88:c5:91:1f:f1:c6: 9b:f6:f8:f6:a4:ed:63:4f:99:9a:5c:d2:f3:4c:e7: 6f:6e:96:cb:54:2f:75:32:ba:66:40:73:34:16:e2: a3:9e:25:cb:04:08:39:39:10:f4:45:a4:ed:61:d8: df:a5:fb:06:30:8f:62:f1:08:d1:a8:a5:06:b7:28: 73:9e:52:57:c9:2a:46:7f:d9:2b:4a:3f:a6:28:23: 46:0b:f5:99:17:c0:2b:fe:0a:6c:cf:49:00:71:0b: 9c:5e:45:81:54:bb:2a:1b:d1:cb:e3:20:2a:42:34: 83:59:9f:2c:da:ca:80:98:c3:72:55:29:5f:2d:a8: bd:3a:09:59:3d:ca:ac:6b:e8:6d:34:2a:dd:d4:72: 17:f7:db:bb:5e:aa:05:ba:a1:e9:ee:bb:81:71:90: 6b:e5:92:31:eb:32:5f:02:79:40:2f:4a:f6:b1:5c: d9:52:f9:e4:a1:f9:2b:c3:b0:21:d5:81:41:c3:c5: 80:05:a5:e4:46:2b:b4:96:e2:21:eb:53:21:68:c9: e6:6a:cf:81:76:a9:e8:c1:ea:68:8c:87:10:1c:51: cb:be:85:8f:56:84:11:f7:b4:92:b9:7d:bb:cb:10: a9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:07:BC:72:A1:11:11:42:2C:27:3B:85:3E:FB:F0:D8:0D:7F:E9:EE X509v3 Authority Key Identifier: keyid:E0:B5:B3:6C:48:71:42:AA:00:60:FA:5B:54:75:0B:26:C5:CF:5B:DC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/104/4LWzbEhxQqoAYPpbVHULJsXPW9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4LWzbEhxQqoAYPpbVHULJsXPW9w.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/104/nQe8cqEREUIsJzuFPvvw2A1_6e4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.88.0.0/16 Signature Algorithm: sha256WithRSAEncryption 62:7c:fa:6c:dc:77:77:e1:00:a8:d0:7a:97:d3:21:fb:72:a1: 0d:b2:c6:f3:7f:22:0d:29:b1:cf:c9:12:b4:b7:a0:82:aa:25: 33:f4:3d:be:80:d8:f9:d4:99:e5:b3:9c:12:aa:7e:f8:13:53: 4a:60:e9:27:15:eb:0d:67:e0:3a:eb:16:d6:63:92:e6:0b:f6: 01:5f:04:08:5a:17:c9:41:7e:f5:fc:f5:c7:3c:59:50:7b:fd: 3c:e1:bb:c2:f3:0a:6c:60:0a:93:08:48:4c:3d:9f:85:08:e0: 96:fb:74:e3:a0:81:2a:42:a4:66:80:11:c3:f7:5a:40:75:a6: 13:8c:41:13:c6:1e:df:f0:e0:59:cf:c2:db:bb:ed:7a:18:77: ed:04:bc:38:0b:18:20:77:f0:f5:77:fd:93:09:a6:8d:6c:4b: b8:10:68:5a:30:93:21:86:b9:f1:a7:3a:3c:ab:aa:7f:2e:9c: 28:a3:1a:98:ce:f1:3e:3f:d1:df:2c:07:84:e9:18:f1:d9:d3: e0:8c:a8:bd:fe:10:e4:3d:b3:44:bc:3a:a2:e3:f0:2e:e0:be: e7:28:be:ad:cc:d7:3d:9a:9b:aa:ce:e6:7a:da:3b:c4:c0:7a: ab:47:ff:b2:50:bc:ef:1d:ae:01:fd:5e:6a:0e:26:89:fa:a3: 24:34:42:ba -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgIBTTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFMEI1 QjM2QzQ4NzE0MkFBMDA2MEZBNUI1NDc1MEIyNkM1Q0Y1QkRDMB4XDTI1MDYxMjAz MDg0MloXDTI2MDUyODA4MjI1NlowMzExMC8GA1UEAxMoOUQwN0JDNzJBMTExMTE0 MjJDMjczQjg1M0VGQkYwRDgwRDdGRTlFRTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANkfZq+Ej+146wsD8D08pP2Uw/WSOKMliMWRH/HGm/b49qTtY0+Z mlzS80znb26Wy1QvdTK6ZkBzNBbio54lywQIOTkQ9EWk7WHY36X7BjCPYvEI0ail Brcoc55SV8kqRn/ZK0o/pigjRgv1mRfAK/4KbM9JAHELnF5FgVS7KhvRy+MgKkI0 g1mfLNrKgJjDclUpXy2ovToJWT3KrGvobTQq3dRyF/fbu16qBbqh6e67gXGQa+WS MesyXwJ5QC9K9rFc2VL55KH5K8OwIdWBQcPFgAWl5EYrtJbiIetTIWjJ5mrPgXap 6MHqaIyHEBxRy76Fj1aEEfe0krl9u8sQqR0CAwEAAaOCAfAwggHsMB0GA1UdDgQW BBSdB7xyoRERQiwnO4U++/DYDX/p7jAfBgNVHSMEGDAWgBTgtbNsSHFCqgBg+ltU dQsmxc9b3DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFwGA1UdHwRVMFMwUaBP oE2GS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xMDQv NExXemJFaHhRcW9BWVBwYlZIVUxKc1hQVzl3LmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC80TFd6YkVoeFFxb0FZUHBiVkhVTEpzWFBXOXcuY2VyMA4GA1UdDwEB/wQE AwIHgDCBnAYIKwYBBQUHAQsEgY8wgYwwVwYIKwYBBQUHMAuGS3JzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xMDQvblFlOGNxRVJFVUlzSnp1 RlB2dncyQTFfNmU0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmlj LmNuL3JyZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMD ANNYMA0GCSqGSIb3DQEBCwUAA4IBAQBifPps3Hd34QCo0HqX0yH7cqENssbzfyIN KbHPyRK0t6CCqiUz9D2+gNj51Jnls5wSqn74E1NKYOknFesNZ+A66xbWY5LmC/YB XwQIWhfJQX71/PXHPFlQe/084bvC8wpsYAqTCEhMPZ+FCOCW+3TjoIEqQqRmgBHD 91pAdaYTjEETxh7f8OBZz8Lbu+16GHftBLw4Cxggd/D1d/2TCaaNbEu4EGhaMJMh hrnxpzo8q6p/LpwooxqYzvE+P9HfLAeE6Rjx2dPgjKi9/hDkPbNEvDqi4/Au4L7n KL6tzNc9mpuqzuZ62jvEwHqrR/+yULzvHa4B/V5qDiaJ+qMkNEK6 -----END CERTIFICATE-----Generated at Fri Jul 4 18:36:01 2025 by rpki-client