$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1228/XbaoOg8zUwxbAtIJYEsulRYoCyg.roa File: XbaoOg8zUwxbAtIJYEsulRYoCyg.roa (raw, json) Hash identifier: +tgZ3/HhZH1r9MUZ1g5RzjfAQn95KlQSySRyE0P2sNs= Subject key identifier: 5D:B6:A8:3A:0F:33:53:0C:5B:02:D2:09:60:4B:2E:95:16:28:0B:28 Certificate issuer: /CN=ADD2726DD6FF9F5A459AE5B0A9EE8E7DDFC7F07C Certificate serial: 0A Authority key identifier: AD:D2:72:6D:D6:FF:9F:5A:45:9A:E5:B0:A9:EE:8E:7D:DF:C7:F0:7C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/XbaoOg8zUwxbAtIJYEsulRYoCyg.roa Signing time: Sat 17 May 2025 03:22:22 +0000 ROA not before: Sat 17 May 2025 03:22:22 +0000 ROA not after: Sat 16 May 2026 10:06:17 +0000 asID: 16509 IP address blocks: 43.254.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:37:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADD2726DD6FF9F5A459AE5B0A9EE8E7DDFC7F07C Validity Not Before: May 17 03:22:22 2025 GMT Not After : May 16 10:06:17 2026 GMT Subject: CN=5DB6A83A0F33530C5B02D209604B2E9516280B28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:91:65:5b:21:5c:95:ce:f7:2f:49:05:ff:16: ba:0e:89:0e:3d:2a:74:ff:b6:33:3c:be:7c:7f:3e: 1a:f5:f3:01:81:11:bf:af:10:04:76:6a:bc:85:51: 95:93:16:d6:17:c6:85:cf:3b:64:92:af:ce:7c:b3: f7:95:8d:68:80:39:9e:31:47:b8:1f:9c:f6:c5:49: 76:1b:0c:85:ba:6b:b9:45:ba:7f:2a:c5:b5:0d:8e: 06:3d:43:e7:25:24:14:73:90:4b:cc:18:0b:6d:2b: 0a:37:44:0f:db:fb:fd:9e:8b:ca:36:be:9d:d3:c8: 10:4b:c3:ab:f8:19:c9:c6:cb:bb:3d:bd:cf:09:82: 70:0a:57:0f:44:bd:89:61:54:57:a9:10:a0:fd:c3: f9:2c:df:9a:b7:bf:72:64:94:d8:c8:6a:17:a8:6b: ba:8f:24:ff:42:ef:97:3f:62:42:de:ba:34:eb:6f: a7:89:10:64:5e:58:f8:7d:8a:79:5e:07:b1:36:0e: ed:fb:a4:0d:fe:ea:06:3c:e4:3d:98:f6:02:69:06: b1:03:04:3c:15:3a:f5:71:81:f1:60:49:34:1f:d9: 40:93:ea:1c:8a:39:c9:89:e5:2d:45:39:2f:65:80: f3:38:17:29:7a:94:de:9a:f2:6b:36:3c:41:17:f2: 6e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:B6:A8:3A:0F:33:53:0C:5B:02:D2:09:60:4B:2E:95:16:28:0B:28 X509v3 Authority Key Identifier: keyid:AD:D2:72:6D:D6:FF:9F:5A:45:9A:E5:B0:A9:EE:8E:7D:DF:C7:F0:7C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/XbaoOg8zUwxbAtIJYEsulRYoCyg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.254.192.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:59:eb:25:fd:68:e9:ab:7a:02:b0:4e:9c:e3:cd:2a:dc:af: 49:75:5d:bf:93:c9:37:41:32:d0:28:42:b7:ca:3b:a5:40:3c: f8:b6:57:b5:bd:98:6c:98:32:59:b6:fe:36:95:8b:4f:c8:c7: 06:f9:2d:2a:11:f3:a4:fd:e6:6f:5c:30:24:07:67:5d:9f:7b: f7:76:5b:9b:97:5c:1b:cb:26:4a:40:e0:a4:c7:9a:c4:77:b3: ba:93:fd:87:f4:b5:97:94:e7:0a:33:3f:0c:23:30:95:80:0b: ff:d0:4a:86:5e:0c:76:c1:5d:db:e4:ad:59:a7:0d:21:ad:2b: ae:df:f0:4c:0d:2a:15:19:f6:45:c9:7e:a4:9b:c2:48:cd:e0: 79:b9:c0:df:46:9b:f8:c6:68:ec:05:65:17:93:77:64:51:25: c8:a0:ba:d8:ca:f5:84:e3:73:cf:92:68:76:b9:9b:2d:5a:26: b1:55:4b:de:f7:b2:0d:b0:7d:c1:fc:08:13:2d:33:0b:08:3e: 20:8b:d9:14:3a:17:c2:0e:95:c9:7b:58:da:92:1a:22:cc:69: 0a:d2:04:39:ed:e6:12:dc:48:46:a9:52:1b:54:54:7d:a9:46: 6f:40:fa:80:6f:1e:30:63:bc:21:7b:c9:8f:66:86:7e:74:1a: 7b:0e:bc:8e -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBCjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBREQy NzI2REQ2RkY5RjVBNDU5QUU1QjBBOUVFOEU3RERGQzdGMDdDMB4XDTI1MDUxNzAz MjIyMloXDTI2MDUxNjEwMDYxN1owMzExMC8GA1UEAxMoNURCNkE4M0EwRjMzNTMw QzVCMDJEMjA5NjA0QjJFOTUxNjI4MEIyODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALuRZVshXJXO9y9JBf8Wug6JDj0qdP+2Mzy+fH8+GvXzAYERv68Q BHZqvIVRlZMW1hfGhc87ZJKvznyz95WNaIA5njFHuB+c9sVJdhsMhbpruUW6fyrF tQ2OBj1D5yUkFHOQS8wYC20rCjdED9v7/Z6Lyja+ndPIEEvDq/gZycbLuz29zwmC cApXD0S9iWFUV6kQoP3D+Szfmre/cmSU2MhqF6hruo8k/0Lvlz9iQt66NOtvp4kQ ZF5Y+H2KeV4HsTYO7fukDf7qBjzkPZj2AmkGsQMEPBU69XGB8WBJNB/ZQJPqHIo5 yYnlLUU5L2WA8zgXKXqU3pryazY8QRfyblcCAwEAAaOCAfMwggHvMB0GA1UdDgQW BBRdtqg6DzNTDFsC0glgSy6VFigLKDAfBgNVHSMEGDAWgBSt0nJt1v+fWkWa5bCp 7o5938fwfDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xMjI4 L3JkSnliZGJfbjFwRm11V3dxZTZPZmRfSDhIdy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvcmRKeWJkYl9uMXBGbXVXd3FlNk9mZF9IOEh3LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIyOC9YYmFvT2c4elV3eGJB dElKWUVzdWxSWW9DeWcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAK/7AMA0GCSqGSIb3DQEBCwUAA4IBAQCfWesl/Wjpq3oCsE6c480q3K9JdV2/ k8k3QTLQKEK3yjulQDz4tle1vZhsmDJZtv42lYtPyMcG+S0qEfOk/eZvXDAkB2dd n3v3dlubl1wbyyZKQOCkx5rEd7O6k/2H9LWXlOcKMz8MIzCVgAv/0EqGXgx2wV3b 5K1Zpw0hrSuu3/BMDSoVGfZFyX6km8JIzeB5ucDfRpv4xmjsBWUXk3dkUSXIoLrY yvWE43PPkmh2uZstWiaxVUve97INsH3B/AgTLTMLCD4gi9kUOhfCDpXJe1jakhoi zGkK0gQ57eYS3EhGqVIbVFR9qUZvQPqAbx4wY7whe8mPZoZ+dBp7DryO -----END CERTIFICATE-----Generated at Sat May 17 21:29:12 2025 by rpki-client