$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3078/-RT9_s7XipnAEtc_PGENVNWLhag.roa File: -RT9_s7XipnAEtc_PGENVNWLhag.roa (raw, json) Hash identifier: xThuu6PLWTZLgKv+YloFBDddIoNRfNrmrpAXxGUcj0E= Subject key identifier: F9:14:FD:FE:CE:D7:8A:99:C0:12:D7:3F:3C:61:0D:54:D5:8B:85:A8 Certificate issuer: /CN=F702935F02FC1B81297D1FFB4C78CE0BA1D43785 Certificate serial: 3B Authority key identifier: F7:02:93:5F:02:FC:1B:81:29:7D:1F:FB:4C:78:CE:0B:A1:D4:37:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/-RT9_s7XipnAEtc_PGENVNWLhag.roa Signing time: Sat 17 May 2025 03:40:40 +0000 ROA not before: Sat 17 May 2025 03:40:40 +0000 ROA not after: Sun 10 May 2026 04:51:55 +0000 asID: 151270 IP address blocks: 110.40.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 03:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F702935F02FC1B81297D1FFB4C78CE0BA1D43785 Validity Not Before: May 17 03:40:40 2025 GMT Not After : May 10 04:51:55 2026 GMT Subject: CN=F914FDFECED78A99C012D73F3C610D54D58B85A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e3:a7:cc:0f:2d:6f:c1:93:a2:93:82:34:60: 8d:8e:c6:b5:af:08:5b:eb:72:17:f1:cc:99:ac:10: bb:13:23:4d:2b:33:aa:31:63:50:3b:b4:4b:66:1d: d2:e8:ed:81:56:58:07:0a:2a:64:4f:c2:d1:20:5c: 57:e5:db:ab:0c:98:c6:a6:28:3e:89:b1:0b:09:16: f1:90:cb:5c:d8:0b:2c:d6:e1:5e:a3:bb:3a:49:e5: e9:e3:a1:3b:13:1b:84:41:ab:28:e1:1c:b2:99:6b: 97:f4:af:be:c4:7b:e7:5f:63:03:07:fa:bb:76:56: ab:3b:5a:75:1d:0a:2a:f3:99:d1:50:4c:5e:50:79: 97:5f:9a:3c:f7:57:8f:e2:db:65:15:f6:e6:d9:c9: 79:0e:90:14:7d:30:cf:93:33:08:8d:9a:a0:51:2d: 1d:0f:3f:38:14:55:4c:62:28:b8:93:89:68:5d:69: c3:78:e0:57:62:6a:9e:ad:b5:46:94:0c:04:1b:c1: 3b:c7:d3:61:5a:bb:81:6d:b4:b4:90:23:41:ae:47: 94:a5:76:53:52:c9:52:eb:17:00:6f:9b:6c:31:b4: c4:0e:bc:1a:ac:54:f8:5c:ba:94:6d:36:21:ff:31: d3:17:41:b9:a0:be:4c:e3:d7:c4:00:16:67:a4:5f: d9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:14:FD:FE:CE:D7:8A:99:C0:12:D7:3F:3C:61:0D:54:D5:8B:85:A8 X509v3 Authority Key Identifier: keyid:F7:02:93:5F:02:FC:1B:81:29:7D:1F:FB:4C:78:CE:0B:A1:D4:37:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/-RT9_s7XipnAEtc_PGENVNWLhag.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 110.40.36.0/24 Signature Algorithm: sha256WithRSAEncryption 53:d4:dd:33:c6:d9:46:ff:41:97:3f:23:fd:30:c1:14:b5:04: 99:98:96:77:5c:6c:30:b6:ef:39:5e:98:b6:ca:ed:a7:b3:d1: 10:63:48:a2:4d:65:a8:d5:f0:05:86:26:b2:84:95:78:05:07: 55:94:cc:69:79:72:4a:10:b3:d1:fb:b9:07:33:e5:67:b2:02: 15:f0:79:57:cb:c1:87:11:e4:1b:0d:2c:84:63:69:42:24:9c: 74:98:bb:d2:14:de:f3:9f:56:4b:b7:83:eb:0c:af:a4:be:88: 96:9b:3f:8c:bb:68:83:56:d6:a2:91:92:a1:41:5b:0d:be:ef: 9e:88:7e:39:c8:7b:8b:d5:ed:3b:49:87:57:3f:bb:19:e1:b0: 16:78:3c:7e:41:af:63:45:93:ff:82:8a:7b:6e:08:48:b6:33: ee:fe:75:df:80:ea:33:47:b8:a6:8f:58:8c:de:ec:07:dc:9f: 1a:71:69:63:47:b9:b4:f8:e7:a6:29:b8:bb:cc:6f:5f:7f:69: 06:bb:9c:6b:e0:52:0e:a7:28:1c:91:b9:ff:da:7e:35:11:26: a5:98:3c:56:03:74:79:7f:1b:77:33:99:30:38:f8:22:74:0d: b4:b6:4b:95:2f:c2:d3:f5:b1:68:ea:66:df:06:74:09:e8:03: 4c:b0:e3:58 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBOzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGNzAy OTM1RjAyRkMxQjgxMjk3RDFGRkI0Qzc4Q0UwQkExRDQzNzg1MB4XDTI1MDUxNzAz NDA0MFoXDTI2MDUxMDA0NTE1NVowMzExMC8GA1UEAxMoRjkxNEZERkVDRUQ3OEE5 OUMwMTJENzNGM0M2MTBENTRENThCODVBODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKDjp8wPLW/Bk6KTgjRgjY7Gta8IW+tyF/HMmawQuxMjTSszqjFj UDu0S2Yd0ujtgVZYBwoqZE/C0SBcV+XbqwyYxqYoPomxCwkW8ZDLXNgLLNbhXqO7 Oknl6eOhOxMbhEGrKOEcsplrl/SvvsR7519jAwf6u3ZWqztadR0KKvOZ0VBMXlB5 l1+aPPdXj+LbZRX25tnJeQ6QFH0wz5MzCI2aoFEtHQ8/OBRVTGIouJOJaF1pw3jg V2Jqnq21RpQMBBvBO8fTYVq7gW20tJAjQa5HlKV2U1LJUusXAG+bbDG0xA68GqxU +Fy6lG02If8x0xdBuaC+TOPXxAAWZ6Rf2b8CAwEAAaOCAfMwggHvMB0GA1UdDgQW BBT5FP3+zteKmcAS1z88YQ1U1YuFqDAfBgNVHSMEGDAWgBT3ApNfAvwbgSl9H/tM eM4LodQ3hTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMDc4 Lzl3S1RYd0w4RzRFcGZSXzdUSGpPQzZIVU40VS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOXdLVFh3TDhHNEVwZlJfN1RIak9DNkhVTjRVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA3OC8tUlQ5X3M3WGlwbkFF dGNfUEdFTlZOV0xoYWcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAbigkMA0GCSqGSIb3DQEBCwUAA4IBAQBT1N0zxtlG/0GXPyP9MMEUtQSZmJZ3 XGwwtu85Xpi2yu2ns9EQY0iiTWWo1fAFhiayhJV4BQdVlMxpeXJKELPR+7kHM+Vn sgIV8HlXy8GHEeQbDSyEY2lCJJx0mLvSFN7zn1ZLt4PrDK+kvoiWmz+Mu2iDVtai kZKhQVsNvu+eiH45yHuL1e07SYdXP7sZ4bAWeDx+Qa9jRZP/gop7bghItjPu/nXf gOozR7imj1iM3uwH3J8acWljR7m0+OemKbi7zG9ff2kGu5xr4FIOpygckbn/2n41 ESalmDxWA3R5fxt3M5kwOPgidA20tkuVL8LT9bFo6mbfBnQJ6ANMsONY -----END CERTIFICATE-----Generated at Sun Jul 6 01:46:29 2025 by rpki-client