$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3134/n8YuFZf4rSptPvsF2O9DRVuwYSg.roa File: n8YuFZf4rSptPvsF2O9DRVuwYSg.roa (raw, json) Hash identifier: ORLak4ERZfWHNiZjYmvHDqkHKusLIGtx05mhZdEnk9k= Subject key identifier: 9F:C6:2E:15:97:F8:AD:2A:6D:3E:FB:05:D8:EF:43:45:5B:B0:61:28 Certificate issuer: /CN=1BC6D9A9F4A226A61F5FA1A9163941D4B35BA35B Certificate serial: 06DE Authority key identifier: 1B:C6:D9:A9:F4:A2:26:A6:1F:5F:A1:A9:16:39:41:D4:B3:5B:A3:5B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/n8YuFZf4rSptPvsF2O9DRVuwYSg.roa Signing time: Tue 10 Jun 2025 01:40:25 +0000 ROA not before: Tue 10 Jun 2025 01:40:25 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 146762 IP address blocks: 114.111.176.0/24 maxlen: 24 114.111.177.0/24 maxlen: 24 114.111.178.0/24 maxlen: 24 114.111.179.0/24 maxlen: 24 114.111.180.0/24 maxlen: 24 114.111.181.0/24 maxlen: 24 114.111.182.0/24 maxlen: 24 114.111.183.0/24 maxlen: 24 114.111.184.0/24 maxlen: 24 114.111.185.0/24 maxlen: 24 114.111.186.0/24 maxlen: 24 114.111.187.0/24 maxlen: 24 114.111.188.0/24 maxlen: 24 114.111.189.0/24 maxlen: 24 114.111.190.0/24 maxlen: 24 114.111.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 03:44:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1758 (0x6de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BC6D9A9F4A226A61F5FA1A9163941D4B35BA35B Validity Not Before: Jun 10 01:40:25 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=9FC62E1597F8AD2A6D3EFB05D8EF43455BB06128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d6:62:b6:46:2d:c8:d4:e1:11:98:85:20:60: f4:49:d3:4b:dc:2f:11:49:b6:f4:7a:1e:d5:7d:16: a3:25:05:43:58:69:e9:50:12:b6:99:06:bb:cd:e4: 64:94:f8:43:0e:2b:06:8b:0a:b0:b9:72:af:ae:f9: d2:9c:70:fd:d5:9e:0d:70:11:78:9a:73:54:9a:d9: ab:13:de:82:16:68:47:3e:44:4f:48:e6:8d:96:5a: 3a:0a:fa:80:8f:64:2c:70:eb:42:4d:9a:29:cb:ed: e5:d1:1b:b0:67:0c:c6:ce:1d:c5:a9:82:07:6d:18: 32:88:f7:5c:1d:78:e9:99:f3:90:3a:e2:40:80:c1: aa:a7:bd:cb:b9:c0:07:aa:71:10:06:9e:34:b8:11: 4f:21:b6:8d:59:5c:3e:3f:e2:4b:d2:6b:2f:e1:70: 54:b5:ed:8a:50:d8:7d:20:f1:db:0a:4d:84:1f:61: b4:f9:62:4b:ff:dc:4a:78:1c:aa:37:bd:81:e5:af: b2:40:16:a2:39:16:0d:83:df:96:5a:84:af:95:00: be:b0:85:9b:5a:65:23:e9:6c:3a:83:17:7b:4b:9c: 44:b8:59:69:0f:45:f6:04:7f:b8:87:88:b6:e8:1c: 3c:79:fc:f7:59:3c:46:5e:43:e6:f9:a5:8d:9b:f4: 2e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:C6:2E:15:97:F8:AD:2A:6D:3E:FB:05:D8:EF:43:45:5B:B0:61:28 X509v3 Authority Key Identifier: keyid:1B:C6:D9:A9:F4:A2:26:A6:1F:5F:A1:A9:16:39:41:D4:B3:5B:A3:5B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/n8YuFZf4rSptPvsF2O9DRVuwYSg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.111.176.0/20 Signature Algorithm: sha256WithRSAEncryption 58:d2:4d:d3:95:7f:63:48:ec:81:4c:86:e4:91:bd:1f:b0:11: 44:81:97:43:a0:3f:41:b4:de:e4:ce:63:5a:d8:68:c2:64:d8: e1:ce:21:d1:8a:7f:0b:e1:dd:ed:0a:f6:6a:75:44:35:f5:33: ea:4c:ce:23:72:bb:a4:bb:a9:78:e2:8a:bf:91:2a:a9:2a:f9: 6c:3a:ac:c1:bc:66:75:5b:5c:1a:4e:9f:06:5e:cf:16:25:62: 90:7a:12:58:58:7f:1c:19:9c:5c:08:54:36:e8:05:77:dc:22: d3:34:00:7f:9b:b2:1d:f7:2a:2e:09:15:0c:18:33:ba:94:32: 92:52:eb:dc:7e:7c:4d:7e:39:c6:ef:11:89:b7:38:2c:b9:0c: 5e:b0:62:46:38:b9:da:ea:89:ba:5b:c8:48:99:06:4e:27:04: 5c:7a:46:f3:3d:59:0e:ab:20:73:31:e3:46:e0:a0:25:c3:8b: 8f:12:3b:0b:60:e1:98:e4:d1:08:d2:b9:e6:fe:e2:49:06:32: 13:3a:fd:75:15:92:d9:80:54:52:9b:51:39:b1:06:39:b7:77: 75:c1:17:cd:38:e6:2f:8b:1d:c2:ea:34:b1:52:aa:d0:2b:a6: cc:16:15:e3:2b:ca:76:28:b8:1a:98:4a:c6:5e:a4:56:d7:6a: 54:91:7a:0a -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICBt4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUJD NkQ5QTlGNEEyMjZBNjFGNUZBMUE5MTYzOTQxRDRCMzVCQTM1QjAeFw0yNTA2MTAw MTQwMjVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDlGQzYyRTE1OTdGOEFE MkE2RDNFRkIwNUQ4RUY0MzQ1NUJCMDYxMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDm1mK2Ri3I1OERmIUgYPRJ00vcLxFJtvR6HtV9FqMlBUNYaelQ EraZBrvN5GSU+EMOKwaLCrC5cq+u+dKccP3Vng1wEXiac1Sa2asT3oIWaEc+RE9I 5o2WWjoK+oCPZCxw60JNminL7eXRG7BnDMbOHcWpggdtGDKI91wdeOmZ85A64kCA waqnvcu5wAeqcRAGnjS4EU8hto1ZXD4/4kvSay/hcFS17YpQ2H0g8dsKTYQfYbT5 Ykv/3Ep4HKo3vYHlr7JAFqI5Fg2D35ZahK+VAL6whZtaZSPpbDqDF3tLnES4WWkP RfYEf7iHiLboHDx5/PdZPEZeQ+b5pY2b9C6LAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUn8YuFZf4rSptPvsF2O9DRVuwYSgwHwYDVR0jBBgwFoAUG8bZqfSiJqYfX6Gp FjlB1LNbo1swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz NC9HOGJacWZTaUpxWWZYNkdwRmpsQjFMTmJvMXMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0c4YlpxZlNpSnFZZlg2R3BGamxCMUxOYm8xcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzQvbjhZdUZaZjRyU3B0 UHZzRjJPOURSVnV3WVNnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBHJvsDANBgkqhkiG9w0BAQsFAAOCAQEAWNJN05V/Y0jsgUyG5JG9H7ARRIGX Q6A/QbTe5M5jWthowmTY4c4h0Yp/C+Hd7Qr2anVENfUz6kzOI3K7pLupeOKKv5Eq qSr5bDqswbxmdVtcGk6fBl7PFiVikHoSWFh/HBmcXAhUNugFd9wi0zQAf5uyHfcq LgkVDBgzupQyklLr3H58TX45xu8Ribc4LLkMXrBiRji52uqJulvISJkGTicEXHpG 8z1ZDqsgczHjRuCgJcOLjxI7C2DhmOTRCNK55v7iSQYyEzr9dRWS2YBUUptRObEG Obd3dcEXzTjmL4sdwuo0sVKq0CumzBYV4yvKdii4GphKxl6kVtdqVJF6Cg== -----END CERTIFICATE-----Generated at Sat Jul 5 02:23:26 2025 by rpki-client