$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/ufKRIfT0jHvFFrGG74xV7dyupQg.roa File: ufKRIfT0jHvFFrGG74xV7dyupQg.roa (raw, json) Hash identifier: JTt1tjuu+NEVMQEjzah5F0Bun+ZLmNhE+dVmOmw05M0= Subject key identifier: B9:F2:91:21:F4:F4:8C:7B:C5:16:B1:86:EF:8C:55:ED:DC:AE:A5:08 Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 1342 Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/ufKRIfT0jHvFFrGG74xV7dyupQg.roa Signing time: Thu 22 May 2025 09:04:43 +0000 ROA not before: Thu 22 May 2025 09:04:43 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 55990 IP address blocks: 115.175.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 16:13:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4930 (0x1342) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: May 22 09:04:43 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=B9F29121F4F48C7BC516B186EF8C55EDDCAEA508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:04:b1:4b:4a:ec:61:ee:cf:b9:88:bf:01:cb: c9:c3:90:1d:37:94:95:51:f9:26:b7:48:ad:58:22: 1b:d4:9f:cd:e6:2e:89:4d:bf:59:92:7c:63:8e:ce: f6:1b:79:24:cb:20:4c:2a:4d:12:37:0c:9c:52:6e: 8c:27:6c:4e:0c:9b:ca:79:b5:7d:11:b9:67:15:76: 34:1f:88:c2:17:65:e4:69:2d:33:14:8c:21:6b:9b: 28:6f:bc:e5:a0:92:1b:d3:93:58:ab:78:c6:b1:8f: e9:4e:79:f0:33:bc:c9:68:db:96:89:a4:20:a9:98: 6e:41:0a:e7:f6:bf:d9:0c:cd:2c:eb:7b:77:f0:2c: cb:01:49:cd:9f:bd:67:ce:34:42:56:1c:7b:bc:e1: d1:ac:47:20:18:89:b2:8a:b6:23:56:94:31:8f:a5: c1:02:4b:ff:18:3a:58:7a:f6:0b:7c:c3:f3:6c:40: 3e:cc:31:77:f7:e3:f3:c0:b0:06:be:90:42:8d:62: 34:6b:94:29:9f:50:fd:e9:18:92:e6:71:1e:73:0c: ab:c1:17:e3:9d:9d:58:12:14:e3:cc:07:c9:6d:24: b2:4e:6a:d3:52:01:c8:63:d1:5f:dc:48:fb:f6:61: 48:96:54:b8:ed:cf:bc:13:16:d8:03:d9:d8:67:0d: fe:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F2:91:21:F4:F4:8C:7B:C5:16:B1:86:EF:8C:55:ED:DC:AE:A5:08 X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/ufKRIfT0jHvFFrGG74xV7dyupQg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 115.175.128.0/19 Signature Algorithm: sha256WithRSAEncryption 1c:e6:8d:fc:87:10:9d:da:65:1c:dc:48:41:20:5a:9d:73:b5: 43:df:a7:29:ad:cf:95:ac:1f:b7:ff:e9:3d:db:cb:2d:81:33: a6:9e:11:f3:0b:49:1f:5f:f3:38:2c:7f:b7:35:9c:9e:45:9f: f5:ad:0a:63:66:7f:45:a5:c5:5c:33:04:a9:e8:89:82:76:67: 5b:02:7b:c5:43:86:bb:95:af:0b:9f:a1:9a:2f:91:4c:90:bd: 93:ea:2b:71:04:61:b1:24:1c:ca:8a:5f:76:14:50:e1:df:c0: 01:e2:40:68:0f:ba:d3:af:00:45:87:63:e0:49:7c:06:45:cd: 27:a2:4c:c5:7a:c0:50:3a:ca:6e:76:ac:3d:0b:ff:06:f5:c8: 58:86:e0:c5:e8:f1:be:03:69:4e:d3:ed:93:ff:d3:79:ae:13: 40:42:ca:e8:71:e3:ff:30:b8:26:23:bc:94:ca:33:99:82:06: a5:5b:13:fa:73:6a:b5:c0:62:70:62:53:73:3a:7c:00:6d:0c: 34:5d:13:b2:8c:e7:73:ff:ee:b3:fa:05:85:04:41:9c:ac:74: 6a:9d:10:dd:e8:dd:ee:f3:c3:74:9d:7a:73:de:c8:35:0c:46: f8:df:4d:48:0c:43:50:46:db:f3:94:a8:ca:80:ef:17:f9:4a: 94:c2:9e:d1 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICE0IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNTA1MjIw OTA0NDNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEI5RjI5MTIxRjRGNDhD N0JDNTE2QjE4NkVGOEM1NUVERENBRUE1MDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5BLFLSuxh7s+5iL8By8nDkB03lJVR+Sa3SK1YIhvUn83mLolN v1mSfGOOzvYbeSTLIEwqTRI3DJxSbownbE4Mm8p5tX0RuWcVdjQfiMIXZeRpLTMU jCFrmyhvvOWgkhvTk1ireMaxj+lOefAzvMlo25aJpCCpmG5BCuf2v9kMzSzre3fw LMsBSc2fvWfONEJWHHu84dGsRyAYibKKtiNWlDGPpcECS/8YOlh69gt8w/NsQD7M MXf34/PAsAa+kEKNYjRrlCmfUP3pGJLmcR5zDKvBF+OdnVgSFOPMB8ltJLJOatNS Achj0V/cSPv2YUiWVLjtz7wTFtgD2dhnDf6hAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUufKRIfT0jHvFFrGG74xV7dyupQgwHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvdWZLUklmVDBqSHZG RnJHRzc0eFY3ZHl1cFFnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBXOvgDANBgkqhkiG9w0BAQsFAAOCAQEAHOaN/IcQndplHNxIQSBanXO1Q9+n Ka3Plawft//pPdvLLYEzpp4R8wtJH1/zOCx/tzWcnkWf9a0KY2Z/RaXFXDMEqeiJ gnZnWwJ7xUOGu5WvC5+hmi+RTJC9k+orcQRhsSQcyopfdhRQ4d/AAeJAaA+6068A RYdj4El8BkXNJ6JMxXrAUDrKbnasPQv/BvXIWIbgxejxvgNpTtPtk//Tea4TQELK 6HHj/zC4JiO8lMozmYIGpVsT+nNqtcBicGJTczp8AG0MNF0Tsoznc//us/oFhQRB nKx0ap0Q3ejd7vPDdJ16c97INQxG+N9NSAxDUEbb85SoyoDvF/lKlMKe0Q== -----END CERTIFICATE-----Generated at Fri Jul 4 13:06:47 2025 by rpki-client