$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3078/MR_Jh0H0K-yG8L3NSslgvAQGzHk.roa File: MR_Jh0H0K-yG8L3NSslgvAQGzHk.roa (raw, json) Hash identifier: wRMrWvIsPaUSA6+/W/favb7ZoameBVvcj7FBgC1WPi4= Subject key identifier: 31:1F:C9:87:41:F4:2B:EC:86:F0:BD:CD:4A:C9:60:BC:04:06:CC:79 Certificate issuer: /CN=F702935F02FC1B81297D1FFB4C78CE0BA1D43785 Certificate serial: 46 Authority key identifier: F7:02:93:5F:02:FC:1B:81:29:7D:1F:FB:4C:78:CE:0B:A1:D4:37:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/MR_Jh0H0K-yG8L3NSslgvAQGzHk.roa Signing time: Sat 17 May 2025 03:42:33 +0000 ROA not before: Sat 17 May 2025 03:42:33 +0000 ROA not after: Sun 10 May 2026 04:51:55 +0000 asID: 151270 IP address blocks: 110.40.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 03:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F702935F02FC1B81297D1FFB4C78CE0BA1D43785 Validity Not Before: May 17 03:42:33 2025 GMT Not After : May 10 04:51:55 2026 GMT Subject: CN=311FC98741F42BEC86F0BDCD4AC960BC0406CC79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:30:b2:73:c4:6b:d1:10:9b:82:c2:cb:2f:95: da:42:eb:48:0c:e5:90:38:43:bb:0e:bb:40:02:a5: d6:0b:55:75:64:19:e1:06:52:e4:39:47:00:b9:ae: 2d:b4:04:dd:de:4d:01:0f:be:9d:5f:e3:89:65:d7: 90:56:e5:24:23:0a:f9:35:33:4b:df:d9:f0:a1:4b: 13:73:96:71:41:5c:35:f3:f0:50:05:70:26:49:d9: 62:47:fa:d6:59:2d:71:25:70:fd:bc:45:3d:84:ce: f1:0b:34:61:ea:47:98:da:c7:e1:ba:43:18:27:98: c9:34:f7:e6:5f:79:ef:15:d4:da:87:e0:24:e2:ea: dc:78:3a:af:b9:1c:5d:41:62:17:33:4e:53:54:29: 68:cc:fb:2b:c3:35:78:e9:4c:c0:28:b4:f3:34:4e: 2c:c0:7e:5a:f4:7c:3c:77:47:79:80:2d:40:32:93: 52:b8:6a:17:04:33:ee:c5:40:ce:ef:49:88:60:43: 6e:43:77:91:b8:87:b9:d5:3d:b7:cc:85:31:f3:66: 01:ee:a4:6f:bc:0a:c2:90:14:c9:11:bb:eb:4c:c4: 80:c0:b3:c9:4c:63:fe:4f:61:cf:a5:1f:5b:11:ba: 0c:5c:7e:50:c4:70:a0:81:6e:76:8c:35:b8:5e:c8: 71:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:1F:C9:87:41:F4:2B:EC:86:F0:BD:CD:4A:C9:60:BC:04:06:CC:79 X509v3 Authority Key Identifier: keyid:F7:02:93:5F:02:FC:1B:81:29:7D:1F:FB:4C:78:CE:0B:A1:D4:37:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/MR_Jh0H0K-yG8L3NSslgvAQGzHk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 110.40.78.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:b0:b5:f8:b2:b6:bf:18:b6:c8:77:3c:50:f3:12:19:ac:67: 51:bb:f9:46:7f:67:c2:d4:64:9f:a7:94:c9:c5:05:39:22:dc: 2f:65:5d:a8:71:7d:04:25:06:2d:8e:8d:3b:29:f1:59:6c:62: 60:36:86:d9:a3:f4:61:77:ad:66:88:91:5a:ac:e6:53:35:a6: bc:83:49:91:a2:85:99:b0:3e:ef:d6:bf:96:2c:d8:2b:db:d4: f3:ea:72:9f:ef:f8:25:2d:22:a9:8f:5f:47:8e:73:83:9a:b2: 33:5a:7e:69:50:93:7e:15:ec:f4:14:ae:f8:ec:f1:fe:e3:83: 87:32:c0:4c:a8:54:9f:4a:da:91:5b:d5:cb:3b:c0:7f:a7:43: 08:49:54:5c:24:b2:01:95:c6:3c:80:97:37:19:ea:4c:b4:ed: 55:ab:6f:d4:cf:de:fa:7e:1e:b7:61:1d:bd:8a:18:f1:a3:51: 24:12:bf:41:61:e2:4f:e3:78:98:45:7b:fe:08:7b:a6:58:77: c0:69:d4:23:62:9d:ce:f4:c2:30:c6:53:71:dd:b8:a0:7b:14: e1:83:31:02:19:01:d7:1e:b1:83:be:ec:ff:ab:b3:e3:c2:7d: 21:14:8d:03:6f:1c:cf:36:2f:23:ef:75:00:8f:2c:87:21:b6: a7:5d:81:44 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBRjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGNzAy OTM1RjAyRkMxQjgxMjk3RDFGRkI0Qzc4Q0UwQkExRDQzNzg1MB4XDTI1MDUxNzAz NDIzM1oXDTI2MDUxMDA0NTE1NVowMzExMC8GA1UEAxMoMzExRkM5ODc0MUY0MkJF Qzg2RjBCRENENEFDOTYwQkMwNDA2Q0M3OTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJswsnPEa9EQm4LCyy+V2kLrSAzlkDhDuw67QAKl1gtVdWQZ4QZS 5DlHALmuLbQE3d5NAQ++nV/jiWXXkFblJCMK+TUzS9/Z8KFLE3OWcUFcNfPwUAVw JknZYkf61lktcSVw/bxFPYTO8Qs0YepHmNrH4bpDGCeYyTT35l957xXU2ofgJOLq 3Hg6r7kcXUFiFzNOU1QpaMz7K8M1eOlMwCi08zROLMB+WvR8PHdHeYAtQDKTUrhq FwQz7sVAzu9JiGBDbkN3kbiHudU9t8yFMfNmAe6kb7wKwpAUyRG760zEgMCzyUxj /k9hz6UfWxG6DFx+UMRwoIFudow1uF7IcQ8CAwEAAaOCAfMwggHvMB0GA1UdDgQW BBQxH8mHQfQr7Ibwvc1KyWC8BAbMeTAfBgNVHSMEGDAWgBT3ApNfAvwbgSl9H/tM eM4LodQ3hTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMDc4 Lzl3S1RYd0w4RzRFcGZSXzdUSGpPQzZIVU40VS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOXdLVFh3TDhHNEVwZlJfN1RIak9DNkhVTjRVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA3OC9NUl9KaDBIMEsteUc4 TDNOU3NsZ3ZBUUd6SGsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAbihOMA0GCSqGSIb3DQEBCwUAA4IBAQBcsLX4sra/GLbIdzxQ8xIZrGdRu/lG f2fC1GSfp5TJxQU5ItwvZV2ocX0EJQYtjo07KfFZbGJgNobZo/Rhd61miJFarOZT Naa8g0mRooWZsD7v1r+WLNgr29Tz6nKf7/glLSKpj19HjnODmrIzWn5pUJN+Fez0 FK747PH+44OHMsBMqFSfStqRW9XLO8B/p0MISVRcJLIBlcY8gJc3GepMtO1Vq2/U z976fh63YR29ihjxo1EkEr9BYeJP43iYRXv+CHumWHfAadQjYp3O9MIwxlNx3big exThgzECGQHXHrGDvuz/q7Pjwn0hFI0DbxzPNi8j73UAjyyHIbanXYFE -----END CERTIFICATE-----Generated at Sun Jul 6 00:30:35 2025 by rpki-client