$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3078/5xDCXiVt6_ynCqk_0AO2H6XguZ8.roa File: 5xDCXiVt6_ynCqk_0AO2H6XguZ8.roa (raw, json) Hash identifier: Bw6paMLUGTTV4wIozFR3e8HZ0/940ntVMZSO2KpjdQ8= Subject key identifier: E7:10:C2:5E:25:6D:EB:FC:A7:0A:A9:3F:D0:03:B6:1F:A5:E0:B9:9F Certificate issuer: /CN=F702935F02FC1B81297D1FFB4C78CE0BA1D43785 Certificate serial: 49 Authority key identifier: F7:02:93:5F:02:FC:1B:81:29:7D:1F:FB:4C:78:CE:0B:A1:D4:37:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/5xDCXiVt6_ynCqk_0AO2H6XguZ8.roa Signing time: Sat 17 May 2025 03:42:34 +0000 ROA not before: Sat 17 May 2025 03:42:34 +0000 ROA not after: Sun 10 May 2026 04:51:55 +0000 asID: 151270 IP address blocks: 110.40.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 03:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F702935F02FC1B81297D1FFB4C78CE0BA1D43785 Validity Not Before: May 17 03:42:34 2025 GMT Not After : May 10 04:51:55 2026 GMT Subject: CN=E710C25E256DEBFCA70AA93FD003B61FA5E0B99F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:df:99:39:eb:d3:f2:6d:2d:c4:0b:1b:b3:1d: de:37:31:be:ad:1d:90:26:24:28:90:5b:93:05:f2: 51:9a:41:07:0e:60:57:83:61:4a:ae:e1:f6:24:4a: c3:16:b0:20:d6:a7:69:88:b4:50:ee:f5:89:9f:65: bf:55:d3:67:10:23:35:4d:a2:4c:02:99:68:bf:ca: 5e:fa:fc:9b:1b:6a:2e:79:e1:3f:79:c5:16:76:dd: 87:9e:6e:47:21:42:86:b7:cb:7e:21:9d:39:b2:9c: cc:59:fe:f9:ec:dc:5f:fe:54:fc:0b:5b:2b:26:11: ef:ca:67:e6:92:15:fe:a8:0a:1f:7a:73:d4:da:7b: c6:c5:28:d1:75:b9:91:d8:2f:c3:4e:5f:93:c3:42: 04:72:11:a4:6c:23:e0:e1:da:4c:9c:52:46:9a:4c: 0b:94:45:be:61:2d:69:6c:71:b5:44:cd:01:f7:cc: 27:c7:54:d3:bf:a1:2e:b8:10:15:b5:e5:e0:fc:26: 4e:28:a1:85:d8:fa:9a:3d:58:09:26:dc:cf:46:90: b6:de:ae:92:cb:f4:44:bb:d2:c7:41:cd:19:17:92: a2:17:66:6c:9b:55:f4:17:31:ad:8c:b1:5b:fb:90: 76:e6:9b:bf:37:70:b2:b7:57:d7:5a:57:98:0d:c6: 8a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:10:C2:5E:25:6D:EB:FC:A7:0A:A9:3F:D0:03:B6:1F:A5:E0:B9:9F X509v3 Authority Key Identifier: keyid:F7:02:93:5F:02:FC:1B:81:29:7D:1F:FB:4C:78:CE:0B:A1:D4:37:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/5xDCXiVt6_ynCqk_0AO2H6XguZ8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 110.40.80.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:38:3d:a0:54:b8:e8:73:d7:7a:c3:ba:28:47:de:3b:86:f9: 73:1c:db:e6:6c:4d:e8:26:fa:9d:52:bf:64:2b:49:12:96:75: 60:84:ef:b6:91:7c:c0:77:bc:6f:6b:34:88:9f:53:c4:21:ac: f4:e9:f3:e7:36:67:22:b8:9b:ba:20:01:c1:d8:c2:e8:f0:64: e4:a1:47:eb:3d:b1:bb:71:2f:78:c0:e9:85:97:e2:e3:00:16: a2:7e:c0:81:dc:f8:40:dc:1a:bd:30:45:ae:2e:97:36:e3:51: 67:33:a9:ce:b2:36:3e:2e:36:6f:0a:9e:6b:9a:39:37:34:0f: 95:57:3c:68:0d:cc:0e:8c:ef:8c:81:41:6b:c0:b7:da:ef:79: bf:9c:4a:69:7b:b7:7c:e8:02:84:fc:7e:5d:c2:f0:77:1d:71: cb:8d:67:90:12:01:da:48:d6:84:cc:5d:ca:13:78:5a:9e:30: 55:3a:3e:57:a8:1b:01:00:58:93:cc:a5:7f:f2:b1:bf:5b:f3: 5e:9c:63:35:c4:04:38:b3:4b:c0:e7:74:b5:7a:02:dd:67:04: a4:66:9a:71:bd:10:5a:71:ac:89:6b:d1:af:7e:83:00:23:72: c5:05:c0:0a:78:b0:eb:da:fb:93:35:85:c8:d4:59:2a:99:79: a0:b4:5e:ab -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBSTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGNzAy OTM1RjAyRkMxQjgxMjk3RDFGRkI0Qzc4Q0UwQkExRDQzNzg1MB4XDTI1MDUxNzAz NDIzNFoXDTI2MDUxMDA0NTE1NVowMzExMC8GA1UEAxMoRTcxMEMyNUUyNTZERUJG Q0E3MEFBOTNGRDAwM0I2MUZBNUUwQjk5RjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKrfmTnr0/JtLcQLG7Md3jcxvq0dkCYkKJBbkwXyUZpBBw5gV4Nh Sq7h9iRKwxawINanaYi0UO71iZ9lv1XTZxAjNU2iTAKZaL/KXvr8mxtqLnnhP3nF Fnbdh55uRyFChrfLfiGdObKczFn++ezcX/5U/AtbKyYR78pn5pIV/qgKH3pz1Np7 xsUo0XW5kdgvw05fk8NCBHIRpGwj4OHaTJxSRppMC5RFvmEtaWxxtUTNAffMJ8dU 07+hLrgQFbXl4PwmTiihhdj6mj1YCSbcz0aQtt6uksv0RLvSx0HNGReSohdmbJtV 9BcxrYyxW/uQduabvzdwsrdX11pXmA3GivUCAwEAAaOCAfMwggHvMB0GA1UdDgQW BBTnEMJeJW3r/KcKqT/QA7YfpeC5nzAfBgNVHSMEGDAWgBT3ApNfAvwbgSl9H/tM eM4LodQ3hTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMDc4 Lzl3S1RYd0w4RzRFcGZSXzdUSGpPQzZIVU40VS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOXdLVFh3TDhHNEVwZlJfN1RIak9DNkhVTjRVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA3OC81eERDWGlWdDZfeW5D cWtfMEFPMkg2WGd1Wjgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAbihQMA0GCSqGSIb3DQEBCwUAA4IBAQAdOD2gVLjoc9d6w7ooR947hvlzHNvm bE3oJvqdUr9kK0kSlnVghO+2kXzAd7xvazSIn1PEIaz06fPnNmciuJu6IAHB2MLo 8GTkoUfrPbG7cS94wOmFl+LjABaifsCB3PhA3Bq9MEWuLpc241FnM6nOsjY+LjZv Cp5rmjk3NA+VVzxoDcwOjO+MgUFrwLfa73m/nEppe7d86AKE/H5dwvB3HXHLjWeQ EgHaSNaEzF3KE3hanjBVOj5XqBsBAFiTzKV/8rG/W/NenGM1xAQ4s0vA53S1egLd ZwSkZppxvRBacayJa9GvfoMAI3LFBcAKeLDr2vuTNYXI1FkqmXmgtF6r -----END CERTIFICATE-----Generated at Sun Jul 6 01:47:00 2025 by rpki-client