$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3078/LBwQ983uDABKiVnLKbPpMnq0EQg.roa File: LBwQ983uDABKiVnLKbPpMnq0EQg.roa (raw, json) Hash identifier: q7Fu/qq9St0MFjHq1jhnV/IXNi5kFRjUEwXWDzRRfuU= Subject key identifier: 2C:1C:10:F7:CD:EE:0C:00:4A:89:59:CB:29:B3:E9:32:7A:B4:11:08 Certificate issuer: /CN=F702935F02FC1B81297D1FFB4C78CE0BA1D43785 Certificate serial: 43 Authority key identifier: F7:02:93:5F:02:FC:1B:81:29:7D:1F:FB:4C:78:CE:0B:A1:D4:37:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/LBwQ983uDABKiVnLKbPpMnq0EQg.roa Signing time: Sat 17 May 2025 03:42:32 +0000 ROA not before: Sat 17 May 2025 03:42:32 +0000 ROA not after: Sun 10 May 2026 04:51:55 +0000 asID: 151270 IP address blocks: 110.40.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 03:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F702935F02FC1B81297D1FFB4C78CE0BA1D43785 Validity Not Before: May 17 03:42:32 2025 GMT Not After : May 10 04:51:55 2026 GMT Subject: CN=2C1C10F7CDEE0C004A8959CB29B3E9327AB41108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:78:88:77:62:04:0e:66:fb:8a:71:7b:bc:fb: 91:0a:80:66:9f:c8:90:2a:9a:29:9c:2e:79:e1:9b: 27:46:d0:b7:42:69:4d:e3:95:e1:2f:9c:16:2a:9e: 57:18:98:c0:97:3b:0e:d3:77:fe:56:c3:7f:95:40: 83:80:af:ae:3c:64:1c:b4:a5:61:4d:da:a8:fd:db: a8:f3:9a:cc:8c:01:95:19:5f:6a:c7:50:7b:e9:e4: 07:4e:13:ae:5d:48:b7:90:29:85:92:9d:52:b0:1a: b6:0e:d5:7a:80:81:17:19:3f:07:c9:a1:73:47:ef: f3:76:95:65:9e:de:12:41:bc:1c:17:28:c6:82:bf: 15:2c:13:fe:d2:28:0d:26:b8:64:84:62:4b:5b:a0: 8e:6b:4c:47:7a:df:3a:16:d4:e0:88:6c:71:f0:59: e1:cf:5a:28:c0:05:7f:b3:a1:ce:13:75:cf:da:06: b4:f7:5a:4d:f1:24:6b:c2:99:99:a4:68:12:04:b2: 01:59:83:5c:fe:45:c4:b1:87:26:24:d0:6f:dc:5b: 5b:e6:8c:6c:8c:de:07:2b:fa:fe:7b:b4:b1:45:ff: 81:8c:6d:68:9e:51:c5:e4:f6:c0:3a:f5:d5:21:8b: e4:df:9d:03:fc:8d:54:06:34:59:e3:24:61:9d:56: 4e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:1C:10:F7:CD:EE:0C:00:4A:89:59:CB:29:B3:E9:32:7A:B4:11:08 X509v3 Authority Key Identifier: keyid:F7:02:93:5F:02:FC:1B:81:29:7D:1F:FB:4C:78:CE:0B:A1:D4:37:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/LBwQ983uDABKiVnLKbPpMnq0EQg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 110.40.66.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:fb:ec:df:15:e2:a1:42:c2:bd:d3:fa:59:61:56:50:f0:af: 9b:61:3d:45:6d:a8:7d:53:e6:c5:93:0a:31:23:01:be:b6:1f: 4f:5e:de:a8:70:e6:de:43:2c:79:73:27:80:7b:9b:0f:b2:b9: 0b:94:61:3e:2a:e9:2d:1f:ae:ea:68:68:6a:74:7d:96:44:8d: f7:2f:89:40:d8:d8:32:88:c3:7e:2a:88:e1:3e:4d:86:9c:6c: 60:d2:d0:f7:bc:c7:76:7c:ab:36:44:35:2e:95:1d:86:dc:8f: 1b:4d:67:40:dc:70:d7:2d:02:15:4c:1d:3d:4a:30:74:fe:02: bc:46:5f:de:d1:27:5d:9b:fd:90:b6:73:8f:16:ac:1a:2c:65: 5e:43:8d:8e:cd:9a:e5:6c:1b:7d:5c:4f:b7:ae:6d:12:ef:85: 6f:36:f6:3f:e6:69:fa:e4:dc:4f:b1:5a:84:d5:ca:5c:43:fe: f7:3a:0c:ff:c1:53:79:03:2e:9e:2f:11:1b:22:83:cd:a8:24: 03:35:fb:b8:d3:dc:7b:98:b9:9f:17:d6:d3:be:20:9e:8f:73: e1:d0:ab:5e:7e:93:65:7c:1c:32:c1:1e:67:cf:b6:aa:d8:a2: 7e:87:22:88:fe:26:ba:0d:12:9c:0c:67:f7:36:b1:b4:51:c4: f0:86:e8:1c -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBQzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGNzAy OTM1RjAyRkMxQjgxMjk3RDFGRkI0Qzc4Q0UwQkExRDQzNzg1MB4XDTI1MDUxNzAz NDIzMloXDTI2MDUxMDA0NTE1NVowMzExMC8GA1UEAxMoMkMxQzEwRjdDREVFMEMw MDRBODk1OUNCMjlCM0U5MzI3QUI0MTEwODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANN4iHdiBA5m+4pxe7z7kQqAZp/IkCqaKZwueeGbJ0bQt0JpTeOV 4S+cFiqeVxiYwJc7DtN3/lbDf5VAg4CvrjxkHLSlYU3aqP3bqPOazIwBlRlfasdQ e+nkB04Trl1It5AphZKdUrAatg7VeoCBFxk/B8mhc0fv83aVZZ7eEkG8HBcoxoK/ FSwT/tIoDSa4ZIRiS1ugjmtMR3rfOhbU4IhscfBZ4c9aKMAFf7OhzhN1z9oGtPda TfEka8KZmaRoEgSyAVmDXP5FxLGHJiTQb9xbW+aMbIzeByv6/nu0sUX/gYxtaJ5R xeT2wDr11SGL5N+dA/yNVAY0WeMkYZ1WTjECAwEAAaOCAfMwggHvMB0GA1UdDgQW BBQsHBD3ze4MAEqJWcsps+kyerQRCDAfBgNVHSMEGDAWgBT3ApNfAvwbgSl9H/tM eM4LodQ3hTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMDc4 Lzl3S1RYd0w4RzRFcGZSXzdUSGpPQzZIVU40VS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOXdLVFh3TDhHNEVwZlJfN1RIak9DNkhVTjRVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA3OC9MQndROTgzdURBQktp Vm5MS2JQcE1ucTBFUWcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAbihCMA0GCSqGSIb3DQEBCwUAA4IBAQAr++zfFeKhQsK90/pZYVZQ8K+bYT1F bah9U+bFkwoxIwG+th9PXt6ocObeQyx5cyeAe5sPsrkLlGE+KuktH67qaGhqdH2W RI33L4lA2NgyiMN+KojhPk2GnGxg0tD3vMd2fKs2RDUulR2G3I8bTWdA3HDXLQIV TB09SjB0/gK8Rl/e0Sddm/2QtnOPFqwaLGVeQ42OzZrlbBt9XE+3rm0S74VvNvY/ 5mn65NxPsVqE1cpcQ/73Ogz/wVN5Ay6eLxEbIoPNqCQDNfu409x7mLmfF9bTviCe j3Ph0KtefpNlfBwywR5nz7aq2KJ+hyKI/ia6DRKcDGf3NrG0UcTwhugc -----END CERTIFICATE-----Generated at Sun Jul 6 01:00:43 2025 by rpki-client