$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/YMG8FMcf58p5E-MgE2YagPtL8i4.roa File: YMG8FMcf58p5E-MgE2YagPtL8i4.roa (raw, json) Hash identifier: A+vnDbISNONVCYDKKfy2MsLgNiCajHx4bRqCkfq54eY= Subject key identifier: 60:C1:BC:14:C7:1F:E7:CA:79:13:E3:20:13:66:1A:80:FB:4B:F2:2E Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Certificate serial: 305E Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/YMG8FMcf58p5E-MgE2YagPtL8i4.roa Signing time: Sun 30 Mar 2025 19:58:18 +0000 ROA not before: Sun 30 Mar 2025 19:58:18 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 134762 IP address blocks: 43.226.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 22:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12382 (0x305e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Validity Not Before: Mar 30 19:58:18 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=60C1BC14C71FE7CA7913E32013661A80FB4BF22E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:23:12:8a:c7:70:79:b1:e4:17:e9:0d:78:32: bc:00:14:e1:ca:aa:97:10:13:72:10:5f:99:c6:34: f5:5e:3f:1b:aa:89:82:59:0c:0a:84:b6:0d:3f:1c: 88:55:b6:28:e4:cc:c4:e3:95:d6:9f:07:64:69:68: 3d:0f:ba:b5:06:96:f2:b2:d1:14:63:97:62:fb:0d: 03:37:c2:22:5c:17:9a:5c:6e:38:dc:b8:57:02:ce: 1b:be:1e:11:00:7a:c9:2b:b3:b2:09:89:fd:38:87: ab:20:e5:a7:e7:ad:d4:61:8f:63:a0:03:98:42:6d: 97:91:76:c1:c3:0f:03:a1:b6:6b:32:46:2a:15:36: 4b:c2:b0:73:9a:78:72:14:61:24:a4:3a:27:ec:12: 0d:6c:c4:b2:4b:47:96:19:95:3c:f0:51:d6:65:b2: 44:67:64:a9:eb:91:37:41:e3:bf:ab:80:db:40:9d: 11:a5:b6:16:70:91:25:24:36:30:5f:cd:18:04:b7: 7c:94:65:0c:9f:72:bc:ba:cc:f5:c3:4e:3d:a1:55: 27:02:23:96:a3:b1:8f:c7:d6:91:6b:16:f4:41:bc: 9b:a3:dd:0d:8c:24:07:f8:4c:1c:ee:b7:76:57:40: 8f:a5:93:5c:66:46:b9:43:73:c5:e9:11:36:ad:c9: cf:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:C1:BC:14:C7:1F:E7:CA:79:13:E3:20:13:66:1A:80:FB:4B:F2:2E X509v3 Authority Key Identifier: keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/YMG8FMcf58p5E-MgE2YagPtL8i4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.226.53.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:6b:f9:05:c6:f5:46:66:ae:38:d9:b0:7d:8e:c7:91:87:62: 09:58:c4:1c:8c:96:f0:e2:bd:78:8c:42:72:46:c7:42:da:8a: 05:ed:81:9f:78:9b:59:c8:99:0a:5e:07:3b:93:88:e5:3f:fa: 5f:5b:94:c9:5a:15:05:9c:84:36:c4:5e:fe:2b:23:ab:d4:53: b0:51:e7:19:ee:c6:71:9c:c7:3e:cc:a2:49:9a:7f:15:40:1e: e2:07:cf:3d:be:6b:80:57:2a:b6:1f:74:0e:53:8f:a5:f0:ba: 1b:2a:2e:a3:c7:b2:b0:1a:d4:64:49:8a:d3:5d:a1:a9:c1:4c: 65:e3:d6:53:51:e8:2d:58:6a:fb:d0:1e:75:3e:5e:6c:a4:20: bf:ab:88:6c:e7:75:86:ac:cb:e7:e0:ed:40:b4:4f:c5:83:e1: 3f:93:2c:23:08:4a:ad:86:bf:3f:cf:b0:6f:48:c0:df:bb:45: 16:ba:f5:2a:fe:97:f6:37:25:f3:ee:ca:15:d1:7d:00:e2:62: 3e:bb:e1:e7:a4:7c:f5:fe:22:4c:d2:1f:31:73:18:fd:74:e9: 78:64:37:f0:bd:4f:0a:1a:c0:90:fc:94:56:e9:ce:6f:52:1b: ac:27:13:2f:a1:a3:27:ba:4f:c7:98:6a:8c:85:49:84:2c:a8: fd:a6:be:f5 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICMF4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEFF NENGNzhCNDlERjBCMkMxRDI5RDMyRTQ4QTk0M0FFNEY0MUFDQzAeFw0yNTAzMzAx OTU4MThaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDYwQzFCQzE0QzcxRkU3 Q0E3OTEzRTMyMDEzNjYxQTgwRkI0QkYyMkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRIxKKx3B5seQX6Q14MrwAFOHKqpcQE3IQX5nGNPVePxuqiYJZ DAqEtg0/HIhVtijkzMTjldafB2RpaD0PurUGlvKy0RRjl2L7DQM3wiJcF5pcbjjc uFcCzhu+HhEAeskrs7IJif04h6sg5afnrdRhj2OgA5hCbZeRdsHDDwOhtmsyRioV NkvCsHOaeHIUYSSkOifsEg1sxLJLR5YZlTzwUdZlskRnZKnrkTdB47+rgNtAnRGl thZwkSUkNjBfzRgEt3yUZQyfcry6zPXDTj2hVScCI5ajsY/H1pFrFvRBvJuj3Q2M JAf4TBzut3ZXQI+lk1xmRrlDc8XpETatyc/nAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUYMG8FMcf58p5E+MgE2YagPtL8i4wHwYDVR0jBBgwFoAUiuTPeLSd8LLB0p0y 5IqUOuT0GswwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTY2 My9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2l1VFBlTFNkOExMQjBwMHk1SXFVT3VUMEdzdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2NjMvWU1HOEZNY2Y1OHA1 RS1NZ0UyWWFnUHRMOGk0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEACviNTANBgkqhkiG9w0BAQsFAAOCAQEAHWv5Bcb1RmauONmwfY7HkYdiCVjE HIyW8OK9eIxCckbHQtqKBe2Bn3ibWciZCl4HO5OI5T/6X1uUyVoVBZyENsRe/isj q9RTsFHnGe7GcZzHPsyiSZp/FUAe4gfPPb5rgFcqth90DlOPpfC6Gyouo8eysBrU ZEmK012hqcFMZePWU1HoLVhq+9AedT5ebKQgv6uIbOd1hqzL5+DtQLRPxYPhP5Ms IwhKrYa/P8+wb0jA37tFFrr1Kv6X9jcl8+7KFdF9AOJiPrvh56R89f4iTNIfMXMY /XTpeGQ38L1PChrAkPyUVunOb1IbrCcTL6GjJ7pPx5hqjIVJhCyo/aa+9Q== -----END CERTIFICATE-----Generated at Fri Jul 4 18:41:49 2025 by rpki-client