$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/FmiW4uE1vxV_L0JFyMCQCWgAhbo.roa File: FmiW4uE1vxV_L0JFyMCQCWgAhbo.roa (raw, json) Hash identifier: 9T4oxsW3Wr3oGXFq+Gg4fYxU+UfLClovzRvnXH7xPvM= Subject key identifier: 16:68:96:E2:E1:35:BF:15:7F:2F:42:45:C8:C0:90:09:68:00:85:BA Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Certificate serial: 3216 Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/FmiW4uE1vxV_L0JFyMCQCWgAhbo.roa Signing time: Wed 25 Jun 2025 01:04:23 +0000 ROA not before: Wed 25 Jun 2025 01:04:23 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 134762 IP address blocks: 43.227.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 22:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12822 (0x3216) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Validity Not Before: Jun 25 01:04:23 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=166896E2E135BF157F2F4245C8C09009680085BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:67:dc:38:99:28:bf:f8:e5:96:96:e3:a3:3a: 07:94:08:dc:28:af:12:23:69:c0:15:a8:98:a9:1b: b0:81:90:2d:27:e8:05:8f:b5:67:3e:b6:0f:29:a7: 83:ad:4a:ca:ec:12:7f:ab:1b:af:cc:c0:eb:ee:01: 35:86:e0:92:bc:c1:54:5d:4d:25:52:95:a3:06:c2: 29:71:1e:5b:2a:18:39:69:85:b9:be:1a:04:ee:8e: de:88:66:28:6f:ed:da:ce:49:ba:76:86:72:92:ae: c1:b6:56:b4:14:f7:32:ff:b5:bf:8d:85:73:6b:f0: a3:9c:de:da:f8:83:92:04:be:57:82:35:12:6d:6e: de:23:9d:eb:f6:90:28:33:48:7e:89:cd:4a:a2:7b: 91:71:e5:44:50:0a:fa:a0:5d:ca:5e:24:b3:2a:2f: b1:6f:f8:0f:5f:a7:35:e8:7b:1c:32:a8:9e:27:60: 68:2d:10:d9:02:7f:31:3b:40:20:65:88:af:df:60: a7:aa:40:7c:63:a0:c4:3e:b2:7d:87:92:95:1b:74: 5c:4a:48:e5:1f:ce:69:53:b1:94:f0:9f:c1:28:6a: 15:e2:d7:de:44:2a:9f:3c:f6:89:c6:eb:b7:ce:23: ae:f2:15:30:89:34:2f:69:55:5f:52:6c:50:64:a7: 8e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:68:96:E2:E1:35:BF:15:7F:2F:42:45:C8:C0:90:09:68:00:85:BA X509v3 Authority Key Identifier: keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/FmiW4uE1vxV_L0JFyMCQCWgAhbo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.227.68.0/24 Signature Algorithm: sha256WithRSAEncryption 63:6e:35:06:ea:7e:8e:91:92:eb:fb:2e:7c:ff:b0:98:96:7a: 28:c3:b3:16:52:85:7b:b6:19:78:51:e1:6f:65:3c:94:27:d1: 3d:75:76:dd:97:bb:43:6e:b5:61:26:19:80:bc:e5:de:bb:37: 6f:da:f1:6b:9d:74:e0:0d:04:48:39:2f:a2:ae:1b:34:77:de: 6c:4d:a1:73:6e:74:c4:19:b8:fb:ed:61:50:b2:77:c1:72:e2: f8:5d:fe:79:a8:88:cf:2f:14:e6:fc:fa:4b:11:63:61:c2:14: 6b:02:8a:b0:65:8d:e8:b9:c5:36:28:b3:57:06:9d:91:41:81: 82:74:a2:cb:56:85:5e:e1:c0:25:96:ba:85:2b:d4:77:0d:b2: 5f:e1:5c:1f:17:c4:67:b7:dc:77:b0:2c:ed:2d:af:ff:84:00: 93:5f:82:55:ef:4c:8e:96:c5:39:be:90:14:ea:ba:4c:bf:18: 78:12:1a:ff:f6:d7:10:ef:9b:fe:7a:e0:9e:ba:5c:ad:11:3e: 76:b3:b9:a7:65:c2:f3:4d:27:40:b7:ff:ee:ee:66:2c:09:7e: 4d:46:d0:43:7c:2a:74:1f:36:3e:7b:e7:82:72:e5:e0:4b:32: c5:61:77:ba:56:0a:f9:b5:97:43:8c:3d:42:44:7e:0d:73:a8: 57:36:bb:21 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICMhYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEFF NENGNzhCNDlERjBCMkMxRDI5RDMyRTQ4QTk0M0FFNEY0MUFDQzAeFw0yNTA2MjUw MTA0MjNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDE2Njg5NkUyRTEzNUJG MTU3RjJGNDI0NUM4QzA5MDA5NjgwMDg1QkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9Z9w4mSi/+OWWluOjOgeUCNworxIjacAVqJipG7CBkC0n6AWP tWc+tg8pp4OtSsrsEn+rG6/MwOvuATWG4JK8wVRdTSVSlaMGwilxHlsqGDlphbm+ GgTujt6IZihv7drOSbp2hnKSrsG2VrQU9zL/tb+NhXNr8KOc3tr4g5IEvleCNRJt bt4jnev2kCgzSH6JzUqie5Fx5URQCvqgXcpeJLMqL7Fv+A9fpzXoexwyqJ4nYGgt ENkCfzE7QCBliK/fYKeqQHxjoMQ+sn2HkpUbdFxKSOUfzmlTsZTwn8EoahXi195E Kp889onG67fOI67yFTCJNC9pVV9SbFBkp455AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUFmiW4uE1vxV/L0JFyMCQCWgAhbowHwYDVR0jBBgwFoAUiuTPeLSd8LLB0p0y 5IqUOuT0GswwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTY2 My9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2l1VFBlTFNkOExMQjBwMHk1SXFVT3VUMEdzdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2NjMvRm1pVzR1RTF2eFZf TDBKRnlNQ1FDV2dBaGJvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEACvjRDANBgkqhkiG9w0BAQsFAAOCAQEAY241Bup+jpGS6/sufP+wmJZ6KMOz FlKFe7YZeFHhb2U8lCfRPXV23Ze7Q261YSYZgLzl3rs3b9rxa5104A0ESDkvoq4b NHfebE2hc250xBm4++1hULJ3wXLi+F3+eaiIzy8U5vz6SxFjYcIUawKKsGWN6LnF NiizVwadkUGBgnSiy1aFXuHAJZa6hSvUdw2yX+FcHxfEZ7fcd7As7S2v/4QAk1+C Ve9MjpbFOb6QFOq6TL8YeBIa//bXEO+b/nrgnrpcrRE+drO5p2XC800nQLf/7u5m LAl+TUbQQ3wqdB82PnvngnLl4EsyxWF3ulYK+bWXQ4w9QkR+DXOoVza7IQ== -----END CERTIFICATE-----Generated at Fri Jul 4 19:18:38 2025 by rpki-client