$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/ORuSJlIaI3Yq__3eDzpf8xIBknM.roa File: ORuSJlIaI3Yq__3eDzpf8xIBknM.roa (raw, json) Hash identifier: PfyFQDi9AFMqhwRWj28kfHfiw0oxgt1ATSOoqx1y1LQ= Subject key identifier: 39:1B:92:26:52:1A:23:76:2A:FF:FD:DE:0F:3A:5F:F3:12:01:92:73 Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Certificate serial: 3056 Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/ORuSJlIaI3Yq__3eDzpf8xIBknM.roa Signing time: Sun 30 Mar 2025 19:58:17 +0000 ROA not before: Sun 30 Mar 2025 19:58:17 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 134762 IP address blocks: 43.226.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:09:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12374 (0x3056) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Validity Not Before: Mar 30 19:58:17 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=391B9226521A23762AFFFDDE0F3A5FF312019273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e3:cc:78:5b:82:6c:fe:2f:3e:ad:11:d2:40: 2b:02:7e:2b:cf:a2:a7:8f:e6:d0:03:9f:fa:e8:35: ae:5b:c9:86:b2:d0:db:af:50:2e:4f:ab:ad:0a:ae: a4:a4:02:b2:1c:95:42:b3:30:57:a5:79:c2:e2:92: 7e:d6:dc:a9:78:bf:ac:e1:38:18:eb:c1:3d:88:34: 80:5c:7b:9a:c7:29:9e:bf:5f:37:e1:b8:bf:7e:cf: 46:ba:43:d7:6e:a3:8f:1b:9a:6c:a7:35:76:89:ea: 79:17:3d:4c:02:aa:85:cf:f2:26:5e:3a:2b:ae:ab: 1e:88:8f:24:3d:01:ab:f5:7b:7c:d4:41:fe:39:ba: 5b:32:36:04:15:f2:0c:54:b5:67:73:e4:da:c8:4f: 16:fc:6b:f1:f5:ce:1a:00:7d:b2:05:80:d0:4f:89: 00:70:e0:6d:28:17:e6:c5:1d:b0:75:48:a5:02:da: ad:85:09:3c:83:41:54:63:eb:c8:8f:03:94:d6:87: 34:d8:55:69:1a:9d:17:2a:78:f1:be:ca:59:42:4c: ca:c4:af:7a:76:b3:2b:e2:39:77:6f:17:f0:22:09: 61:2b:28:dd:6a:95:68:87:00:10:6c:c2:6f:44:c8: 2a:a9:f8:6f:91:0b:df:10:b1:8c:24:c5:e4:38:30: 15:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:1B:92:26:52:1A:23:76:2A:FF:FD:DE:0F:3A:5F:F3:12:01:92:73 X509v3 Authority Key Identifier: keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/ORuSJlIaI3Yq__3eDzpf8xIBknM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.226.49.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:0d:9d:d3:06:d4:63:7b:85:c2:9b:a2:6f:e4:1a:62:0b:9d: 93:99:29:32:4b:6e:45:f8:05:5c:14:6b:09:f1:e7:63:49:ee: 1f:b7:73:b1:22:73:d9:4b:31:01:cc:e3:34:9e:c4:6b:54:4f: cf:0c:87:85:43:86:54:3b:8c:2e:24:70:6e:aa:c7:c7:ec:4f: cb:ef:0b:e4:b4:92:7f:50:81:98:97:4a:95:50:e3:ac:bf:ce: 3b:f1:82:2c:35:62:21:64:83:4a:2a:bd:00:b1:31:d6:91:fa: 85:39:23:9c:88:0e:65:b4:09:70:8d:8a:73:6a:6b:e1:27:d3: 3a:24:c4:62:55:e2:46:ab:d5:28:b1:60:80:a3:0b:3d:9b:28: dc:83:2a:43:fe:ad:c6:cc:75:39:b6:e4:ca:ce:57:d0:7c:d6: a2:7d:51:d4:07:b2:5b:9e:4c:ad:6c:5b:b7:03:19:64:27:86: 99:c3:88:2c:09:7b:91:ce:21:e7:d3:f0:99:6e:8e:03:e8:3a: 41:e4:32:23:cd:e5:c3:13:a7:c2:82:a8:65:8d:78:95:53:48: 95:1c:22:f3:7c:7c:ec:77:36:88:62:b0:2b:60:b6:e0:26:33: cd:94:aa:26:fc:ab:61:d8:b8:66:80:0b:db:c1:f2:2e:ce:8b: a2:c0:35:9a -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICMFYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEFF NENGNzhCNDlERjBCMkMxRDI5RDMyRTQ4QTk0M0FFNEY0MUFDQzAeFw0yNTAzMzAx OTU4MTdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDM5MUI5MjI2NTIxQTIz NzYyQUZGRkRERTBGM0E1RkYzMTIwMTkyNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCc48x4W4Js/i8+rRHSQCsCfivPoqeP5tADn/roNa5byYay0Nuv UC5Pq60KrqSkArIclUKzMFelecLikn7W3Kl4v6zhOBjrwT2INIBce5rHKZ6/Xzfh uL9+z0a6Q9duo48bmmynNXaJ6nkXPUwCqoXP8iZeOiuuqx6IjyQ9Aav1e3zUQf45 ulsyNgQV8gxUtWdz5NrITxb8a/H1zhoAfbIFgNBPiQBw4G0oF+bFHbB1SKUC2q2F CTyDQVRj68iPA5TWhzTYVWkanRcqePG+yllCTMrEr3p2syviOXdvF/AiCWErKN1q lWiHABBswm9EyCqp+G+RC98QsYwkxeQ4MBVJAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUORuSJlIaI3Yq//3eDzpf8xIBknMwHwYDVR0jBBgwFoAUiuTPeLSd8LLB0p0y 5IqUOuT0GswwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTY2 My9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2l1VFBlTFNkOExMQjBwMHk1SXFVT3VUMEdzdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2NjMvT1J1U0psSWFJM1lx X18zZUR6cGY4eElCa25NLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEACviMTANBgkqhkiG9w0BAQsFAAOCAQEAjg2d0wbUY3uFwpuib+QaYgudk5kp MktuRfgFXBRrCfHnY0nuH7dzsSJz2UsxAczjNJ7Ea1RPzwyHhUOGVDuMLiRwbqrH x+xPy+8L5LSSf1CBmJdKlVDjrL/OO/GCLDViIWSDSiq9ALEx1pH6hTkjnIgOZbQJ cI2Kc2pr4SfTOiTEYlXiRqvVKLFggKMLPZso3IMqQ/6txsx1Obbkys5X0HzWon1R 1AeyW55MrWxbtwMZZCeGmcOILAl7kc4h59PwmW6OA+g6QeQyI83lwxOnwoKoZY14 lVNIlRwi83x87Hc2iGKwK2C24CYzzZSqJvyrYdi4ZoAL28HyLs6LosA1mg== -----END CERTIFICATE-----Generated at Sat May 17 19:51:30 2025 by rpki-client