$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/anp-YyII1qP02KSzjExf8JMBP14.roa File: anp-YyII1qP02KSzjExf8JMBP14.roa (raw, json) Hash identifier: LDrEAUpxfrXplmlZHdPW73KOeztvkoPpvrHPja1rErk= Subject key identifier: 6A:7A:7E:63:22:08:D6:A3:F4:D8:A4:B3:8C:4C:5F:F0:93:01:3F:5E Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Certificate serial: 3065 Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/anp-YyII1qP02KSzjExf8JMBP14.roa Signing time: Sun 30 Mar 2025 19:58:21 +0000 ROA not before: Sun 30 Mar 2025 19:58:21 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 134762 IP address blocks: 43.227.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:40:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12389 (0x3065) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Validity Not Before: Mar 30 19:58:21 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=6A7A7E632208D6A3F4D8A4B38C4C5FF093013F5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d7:69:d3:c8:9e:2a:e4:cc:70:47:e2:01:5e: 82:5f:c1:64:66:cc:23:d1:02:92:56:2c:77:23:bd: 5d:cf:c9:94:bf:8c:a7:c2:ea:f5:28:a3:af:fe:66: af:fa:fd:a1:76:18:54:e8:fc:ef:4c:fa:8f:f6:f7: a1:61:4f:b5:80:ca:5e:44:21:21:c1:3c:be:58:b4: 66:e8:c1:51:d4:cb:43:cd:2b:c7:00:08:70:92:b3: 7b:4f:f5:0e:30:6c:57:81:b8:69:9e:e9:4c:7f:cf: 79:b2:57:4c:69:e9:fc:99:b6:35:13:50:8d:41:ae: ea:23:31:85:d6:c7:39:08:41:20:69:fe:61:43:5f: f6:fa:5c:f3:4b:9d:45:91:d0:e0:5d:40:ff:67:24: 3b:cf:94:4a:47:e3:ed:fb:22:0a:1f:15:8e:96:da: 3f:44:dc:ba:de:f9:58:04:87:3b:31:3a:49:29:b0: ef:13:9f:d8:5e:ca:40:68:c6:45:14:f6:2c:29:0a: d2:18:7a:8e:4b:bc:0f:47:d9:56:6c:6d:7c:91:07: a3:3f:8b:8d:b1:f3:cb:6a:0d:0f:5e:e5:55:5d:77: 47:cf:6d:e6:d7:02:9c:ba:fd:83:52:70:34:01:08: 94:84:af:33:d5:3c:99:ac:8a:28:f6:cf:b2:a0:28: 40:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:7A:7E:63:22:08:D6:A3:F4:D8:A4:B3:8C:4C:5F:F0:93:01:3F:5E X509v3 Authority Key Identifier: keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/anp-YyII1qP02KSzjExf8JMBP14.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.227.68.0/24 Signature Algorithm: sha256WithRSAEncryption a4:35:14:d4:e5:72:e3:8e:0b:a8:eb:9b:06:c9:41:c1:ea:b7: 00:7a:10:cd:15:3c:3f:ce:5f:e6:95:8d:c9:17:15:d2:92:75: 10:ba:fb:e3:41:14:91:20:77:2f:f2:8a:35:b1:d1:0d:f0:52: 31:13:b8:f0:45:ec:36:eb:44:09:7b:7a:2c:9b:c0:d8:81:03: ef:c0:14:05:ef:06:c8:fc:97:7f:03:33:28:5b:8c:f9:37:e8: 36:e4:76:d4:d4:fa:36:16:54:2d:4a:85:99:1b:4d:d6:0f:1e: 8f:29:34:70:63:56:3b:bc:f8:32:2a:53:d4:34:70:2f:43:cd: 48:7e:f9:2c:8a:eb:b8:c3:84:86:59:22:e5:d4:d7:df:2c:b3: c0:fa:4f:4f:9a:5a:63:3a:b5:4a:e5:0a:ca:aa:9a:35:7e:ca: 49:8f:9c:2c:36:ce:cc:77:f8:76:bc:d2:4b:43:44:14:ca:88: 34:b6:85:7a:32:f5:ad:54:38:db:3c:13:46:f5:6c:61:12:70: 58:55:ac:2b:84:52:a2:24:14:8d:55:6c:f0:0d:bc:d0:d6:c5: 0b:52:e0:78:e2:1e:29:de:26:05:fd:12:fe:f4:6d:cf:37:dd: 20:ed:cb:08:47:b2:68:d6:14:0d:56:22:1e:9a:69:09:ec:a0: 66:b6:45:b0 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICMGUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEFF NENGNzhCNDlERjBCMkMxRDI5RDMyRTQ4QTk0M0FFNEY0MUFDQzAeFw0yNTAzMzAx OTU4MjFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDZBN0E3RTYzMjIwOEQ2 QTNGNEQ4QTRCMzhDNEM1RkYwOTMwMTNGNUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDb12nTyJ4q5MxwR+IBXoJfwWRmzCPRApJWLHcjvV3PyZS/jKfC 6vUoo6/+Zq/6/aF2GFTo/O9M+o/296FhT7WAyl5EISHBPL5YtGbowVHUy0PNK8cA CHCSs3tP9Q4wbFeBuGme6Ux/z3myV0xp6fyZtjUTUI1BruojMYXWxzkIQSBp/mFD X/b6XPNLnUWR0OBdQP9nJDvPlEpH4+37IgofFY6W2j9E3Lre+VgEhzsxOkkpsO8T n9heykBoxkUU9iwpCtIYeo5LvA9H2VZsbXyRB6M/i42x88tqDQ9e5VVdd0fPbebX Apy6/YNScDQBCJSErzPVPJmsiij2z7KgKED9AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUanp+YyII1qP02KSzjExf8JMBP14wHwYDVR0jBBgwFoAUiuTPeLSd8LLB0p0y 5IqUOuT0GswwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTY2 My9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2l1VFBlTFNkOExMQjBwMHk1SXFVT3VUMEdzdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2NjMvYW5wLVl5SUkxcVAw MktTempFeGY4Sk1CUDE0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEACvjRDANBgkqhkiG9w0BAQsFAAOCAQEApDUU1OVy444LqOubBslBweq3AHoQ zRU8P85f5pWNyRcV0pJ1ELr740EUkSB3L/KKNbHRDfBSMRO48EXsNutECXt6LJvA 2IED78AUBe8GyPyXfwMzKFuM+TfoNuR21NT6NhZULUqFmRtN1g8ejyk0cGNWO7z4 MipT1DRwL0PNSH75LIrruMOEhlki5dTX3yyzwPpPT5paYzq1SuUKyqqaNX7KSY+c LDbOzHf4drzSS0NEFMqINLaFejL1rVQ42zwTRvVsYRJwWFWsK4RSoiQUjVVs8A28 0NbFC1LgeOIeKd4mBf0S/vRtzzfdIO3LCEeyaNYUDVYiHpppCeygZrZFsA== -----END CERTIFICATE-----Generated at Sat May 17 22:39:14 2025 by rpki-client