$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3168/DWcUJsR3Dgg7KbjhwnrCjdTovuQ.roa File: DWcUJsR3Dgg7KbjhwnrCjdTovuQ.roa (raw, json) Hash identifier: jrKcbvvKtIHdsQ4RvaaTHYkPK4YTDnCkQq8CfnmnpEA= Subject key identifier: 0D:67:14:26:C4:77:0E:08:3B:29:B8:E1:C2:7A:C2:8D:D4:E8:BE:E4 Certificate issuer: /CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094 Certificate serial: 1363 Authority key identifier: 24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/DWcUJsR3Dgg7KbjhwnrCjdTovuQ.roa Signing time: Mon 21 Apr 2025 07:31:48 +0000 ROA not before: Mon 21 Apr 2025 07:31:48 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 146806 IP address blocks: 45.250.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 19:10:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4963 (0x1363) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094 Validity Not Before: Apr 21 07:31:48 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=0D671426C4770E083B29B8E1C27AC28DD4E8BEE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:cf:22:8d:e2:bd:7f:a7:09:78:81:84:93:90: df:bd:a4:89:56:e7:9a:0b:8c:02:a6:8d:22:2e:91: c3:5d:e5:78:c6:d5:70:9e:db:ab:6b:18:90:7a:ba: 47:29:ae:d7:78:a0:4e:a9:89:a9:43:6e:5a:b6:a0: 35:9f:98:e4:9e:f7:a5:d2:c4:3c:6d:dd:09:76:40: cf:4d:cb:97:51:88:35:d8:0a:43:17:12:a4:8d:37: 13:d4:9f:35:c0:c0:34:a2:73:ab:25:52:ca:ee:3a: 24:85:0b:96:d6:1a:63:ce:34:04:7b:4a:84:2a:13: 44:42:58:0a:1c:f4:03:60:db:b4:79:d8:33:ab:41: 90:21:8a:e4:36:3a:cd:65:96:b6:7c:d1:c5:32:50: 58:50:ce:5f:ff:f8:82:8d:7f:d6:a8:73:a3:27:a2: d5:b9:ff:cd:2f:4c:44:cd:ce:b0:fa:2e:fc:c8:4f: 7b:73:ea:3c:31:35:9a:fc:f7:54:93:77:1e:95:db: db:82:10:5e:78:00:1a:bb:3d:60:59:b5:e9:2a:7c: 06:86:a5:08:ef:df:36:1a:3c:66:24:77:ea:94:33: b0:e1:8b:4f:84:91:51:63:f1:d8:03:86:98:e9:c5: cf:65:52:ac:5b:c9:be:89:ef:fb:ce:16:a3:2c:b1: 8d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:67:14:26:C4:77:0E:08:3B:29:B8:E1:C2:7A:C2:8D:D4:E8:BE:E4 X509v3 Authority Key Identifier: keyid:24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/DWcUJsR3Dgg7KbjhwnrCjdTovuQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.250.152.0/23 Signature Algorithm: sha256WithRSAEncryption 56:54:f7:20:ed:44:eb:0a:f6:6d:ad:ec:60:0f:e9:19:f2:9e: 3f:45:f1:77:b7:6d:05:50:b7:a4:81:35:38:f9:d1:32:ad:19: bf:b3:3a:a5:56:d6:4d:3f:ce:e2:f3:51:0d:f9:e4:16:b8:dd: 38:5f:ad:7f:3f:50:dd:d5:1e:57:ea:b5:e0:b5:5d:de:14:18: 32:be:2e:fa:5d:39:c3:5f:2d:39:f9:e0:23:65:07:23:a2:c5: 6f:fa:8f:a7:17:b8:76:3a:7f:73:e7:02:e1:07:87:9a:4f:07: 3b:16:14:ac:94:fe:09:cf:e7:a7:22:6d:10:59:67:98:19:6b: 19:35:d4:50:1a:78:00:08:b8:a1:d7:04:5b:6d:a9:7f:bc:e7: 39:af:f2:e9:f3:b2:37:fb:ec:ad:0f:61:c4:72:02:54:54:1b: 0a:8d:c4:f8:07:b9:36:a8:17:67:eb:a4:1f:c5:6d:70:3e:a4: 37:e4:1e:2d:c7:88:58:97:1d:a2:f2:23:15:46:92:12:84:a1: 2d:50:d9:00:f6:5e:fb:7d:71:32:e5:f7:83:09:1d:ee:78:32: 46:83:5b:bc:3b:1f:9c:62:35:7b:da:c1:e4:aa:80:cb:3a:f1: 1f:69:62:27:ae:ef:cc:ee:49:cd:5e:3f:5c:cf:ff:43:38:4a: 7d:b3:e4:8e -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICE2MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjQw OTg3RjQwQTYwMzBDREZBMzNERUQxRUVFN0NGNERDN0MzMDA5NDAeFw0yNTA0MjEw NzMxNDhaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDBENjcxNDI2QzQ3NzBF MDgzQjI5QjhFMUMyN0FDMjhERDRFOEJFRTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCazyKN4r1/pwl4gYSTkN+9pIlW55oLjAKmjSIukcNd5XjG1XCe 26trGJB6ukcprtd4oE6pialDblq2oDWfmOSe96XSxDxt3Ql2QM9Ny5dRiDXYCkMX EqSNNxPUnzXAwDSic6slUsruOiSFC5bWGmPONAR7SoQqE0RCWAoc9ANg27R52DOr QZAhiuQ2Os1llrZ80cUyUFhQzl//+IKNf9aoc6MnotW5/80vTETNzrD6LvzIT3tz 6jwxNZr891STdx6V29uCEF54ABq7PWBZtekqfAaGpQjv3zYaPGYkd+qUM7Dhi0+E kVFj8dgDhpjpxc9lUqxbyb6J7/vOFqMssY1PAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUDWcUJsR3Dgg7KbjhwnrCjdTovuQwHwYDVR0jBBgwFoAUJAmH9ApgMM36M97R 7ufPTcfDAJQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE2 OC9KQW1IOUFwZ01NMzZNOTdSN3VmUFRjZkRBSlEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0pBbUg5QXBnTU0zNk05N1I3dWZQVGNmREFKUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNjgvRFdjVUpzUjNEZ2c3 S2JqaHduckNqZFRvdnVRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAS36mDANBgkqhkiG9w0BAQsFAAOCAQEAVlT3IO1E6wr2ba3sYA/pGfKeP0Xx d7dtBVC3pIE1OPnRMq0Zv7M6pVbWTT/O4vNRDfnkFrjdOF+tfz9Q3dUeV+q14LVd 3hQYMr4u+l05w18tOfngI2UHI6LFb/qPpxe4djp/c+cC4QeHmk8HOxYUrJT+Cc/n pyJtEFlnmBlrGTXUUBp4AAi4odcEW22pf7znOa/y6fOyN/vsrQ9hxHICVFQbCo3E +Ae5NqgXZ+ukH8VtcD6kN+QeLceIWJcdovIjFUaSEoShLVDZAPZe+31xMuX3gwkd 7ngyRoNbvDsfnGI1e9rB5KqAyzrxH2liJ67vzO5JzV4/XM//QzhKfbPkjg== -----END CERTIFICATE-----Generated at Sun May 18 16:26:54 2025 by rpki-client