$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/247/ssHneZR2tutGoYiDaFJkMHkw5h4.roa File: ssHneZR2tutGoYiDaFJkMHkw5h4.roa (raw, json) Hash identifier: NHf6oPDk6In6hvk17izBm3FLhO7pRX7U6ADygpi2VBU= Subject key identifier: B2:C1:E7:79:94:76:B6:EB:46:A1:88:83:68:52:64:30:79:30:E6:1E Certificate issuer: /CN=FD27EB32A94DA8CBCB9D7D343FE471DF35C85003 Certificate serial: 207F Authority key identifier: FD:27:EB:32:A9:4D:A8:CB:CB:9D:7D:34:3F:E4:71:DF:35:C8:50:03 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_SfrMqlNqMvLnX00P-Rx3zXIUAM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/247/ssHneZR2tutGoYiDaFJkMHkw5h4.roa Signing time: Wed 09 Apr 2025 07:08:30 +0000 ROA not before: Wed 09 Apr 2025 07:08:30 +0000 ROA not after: Thu 09 Apr 2026 06:40:07 +0000 asID: 54994 IP address blocks: 203.130.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/247/_SfrMqlNqMvLnX00P-Rx3zXIUAM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/247/_SfrMqlNqMvLnX00P-Rx3zXIUAM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_SfrMqlNqMvLnX00P-Rx3zXIUAM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 08:37:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8319 (0x207f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD27EB32A94DA8CBCB9D7D343FE471DF35C85003 Validity Not Before: Apr 9 07:08:30 2025 GMT Not After : Apr 9 06:40:07 2026 GMT Subject: CN=B2C1E7799476B6EB46A18883685264307930E61E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1c:f6:ac:8d:c7:46:54:4f:d3:b7:7c:38:ff: 2a:7f:3e:2c:72:27:58:8b:d2:28:36:4d:02:61:7b: aa:db:d4:22:e4:3f:d5:19:31:d7:0d:81:56:8e:db: 9c:e2:fb:15:be:a8:d4:97:e1:09:59:58:4c:43:a5: 07:e4:16:4f:8a:ec:01:86:33:c6:91:76:4d:37:14: 06:2e:7d:c0:9a:5b:43:a7:b8:61:ab:13:55:af:cc: f3:03:4a:fa:0b:fe:9a:ec:07:80:2f:bc:98:18:25: 48:e1:a1:83:ab:12:c4:f4:ff:06:24:c2:d3:fc:9c: 8b:24:c4:a8:66:d7:31:fe:03:3e:82:ac:23:ee:15: 6a:94:4c:4e:0e:74:84:1e:0a:75:90:55:26:43:a7: ec:35:53:74:6b:c4:71:3a:99:6c:3a:23:6f:76:3c: fd:44:20:08:7c:76:9e:4d:ff:4b:82:65:e9:e5:8a: 85:5c:6d:8f:c1:f3:f9:15:82:50:13:77:d7:01:9b: 89:6b:cc:12:17:19:92:49:c9:9d:db:04:bf:75:24: d1:1b:81:ac:d2:39:92:37:1b:4f:16:86:71:b4:fa: 56:9e:88:1a:4a:7f:59:95:de:53:25:e6:f5:a3:b0: 5a:82:98:ed:6a:07:f8:cb:bc:cf:5d:8c:0f:e9:4e: 5f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:C1:E7:79:94:76:B6:EB:46:A1:88:83:68:52:64:30:79:30:E6:1E X509v3 Authority Key Identifier: keyid:FD:27:EB:32:A9:4D:A8:CB:CB:9D:7D:34:3F:E4:71:DF:35:C8:50:03 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/247/_SfrMqlNqMvLnX00P-Rx3zXIUAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_SfrMqlNqMvLnX00P-Rx3zXIUAM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/247/ssHneZR2tutGoYiDaFJkMHkw5h4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.130.50.0/24 Signature Algorithm: sha256WithRSAEncryption 93:cc:51:0a:a1:da:9c:65:95:91:63:09:8e:90:06:6a:1c:10: 07:f3:2a:7f:e4:aa:cf:bd:4a:51:5d:ca:1a:4b:a9:e6:c4:e7: e7:af:c3:3d:c7:66:ad:a0:53:f9:7d:24:12:a4:9f:65:6d:53: 17:67:75:32:f3:e3:6b:e6:ad:23:18:6c:1f:bb:cc:eb:57:f7: f4:ca:92:e7:88:6e:96:af:fa:c7:d3:23:b5:02:48:00:cc:fb: d9:f2:37:ff:81:be:47:24:39:74:f0:8e:a7:10:93:ac:99:4b: 33:42:8c:54:15:26:bc:a3:9c:8b:c2:6f:ad:d3:dd:56:08:e5: 76:16:4d:c8:96:88:25:cc:80:96:4c:b8:06:0a:bb:e0:d4:10: 90:28:13:fe:fe:eb:3e:e7:91:f7:f8:99:39:09:e7:70:4b:c6: 41:95:fa:7d:f4:41:7a:71:a6:14:d0:8c:7a:77:69:0c:4f:3d: 48:8f:2c:96:e6:e7:15:5a:27:b7:98:1b:e6:69:91:e0:90:9c: 4c:1b:d5:3d:94:69:45:f0:df:c3:d8:0b:44:5c:96:c1:d3:a5: 22:6c:14:52:a4:07:b0:d6:ae:ec:dc:2b:5d:41:fc:55:93:32: 89:3d:b7:89:c8:dc:db:a8:b7:20:88:b3:f1:a1:9b:5f:a0:91: 5b:d6:fc:d4 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICIH8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkQy N0VCMzJBOTREQThDQkNCOUQ3RDM0M0ZFNDcxREYzNUM4NTAwMzAeFw0yNTA0MDkw NzA4MzBaFw0yNjA0MDkwNjQwMDdaMDMxMTAvBgNVBAMTKEIyQzFFNzc5OTQ3NkI2 RUI0NkExODg4MzY4NTI2NDMwNzkzMEU2MUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdHPasjcdGVE/Tt3w4/yp/PixyJ1iL0ig2TQJhe6rb1CLkP9UZ MdcNgVaO25zi+xW+qNSX4QlZWExDpQfkFk+K7AGGM8aRdk03FAYufcCaW0OnuGGr E1WvzPMDSvoL/prsB4AvvJgYJUjhoYOrEsT0/wYkwtP8nIskxKhm1zH+Az6CrCPu FWqUTE4OdIQeCnWQVSZDp+w1U3RrxHE6mWw6I292PP1EIAh8dp5N/0uCZenlioVc bY/B8/kVglATd9cBm4lrzBIXGZJJyZ3bBL91JNEbgazSOZI3G08WhnG0+laeiBpK f1mV3lMl5vWjsFqCmO1qB/jLvM9djA/pTl9NAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUssHneZR2tutGoYiDaFJkMHkw5h4wHwYDVR0jBBgwFoAU/SfrMqlNqMvLnX00 P+Rx3zXIUAMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjQ3 L19TZnJNcWxOcU12TG5YMDBQLVJ4M3pYSVVBTS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvX1Nmck1xbE5xTXZMblgwMFAtUngzelhJVUFNLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjQ3L3NzSG5lWlIydHV0R29Z aURhRkprTUhrdzVoNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADLgjIwDQYJKoZIhvcNAQELBQADggEBAJPMUQqh2pxllZFjCY6QBmocEAfzKn/k qs+9SlFdyhpLqebE5+evwz3HZq2gU/l9JBKkn2VtUxdndTLz42vmrSMYbB+7zOtX 9/TKkueIbpav+sfTI7UCSADM+9nyN/+BvkckOXTwjqcQk6yZSzNCjFQVJryjnIvC b63T3VYI5XYWTciWiCXMgJZMuAYKu+DUEJAoE/7+6z7nkff4mTkJ53BLxkGV+n30 QXpxphTQjHp3aQxPPUiPLJbm5xVaJ7eYG+ZpkeCQnEwb1T2UaUXw38PYC0RclsHT pSJsFFKkB7DWruzcK11B/FWTMok9t4nI3NuotyCIs/Ghm1+gkVvW/NQ= -----END CERTIFICATE-----Generated at Fri May 16 07:19:11 2025 by rpki-client