$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3214/HZbV5_idzW8zluywrYrShHPXxVA.roa File: HZbV5_idzW8zluywrYrShHPXxVA.roa (raw, json) Hash identifier: XBZyRHAGnQ5oHbIqpKoDY4o0I/2IuuNdAcinHawxczU= Subject key identifier: 1D:96:D5:E7:F8:9D:CD:6F:33:96:EC:B0:AD:8A:D2:84:73:D7:C5:50 Certificate issuer: /CN=4A3495FD0B5353975677490665F031C4692CADBA Certificate serial: 0E78 Authority key identifier: 4A:34:95:FD:0B:53:53:97:56:77:49:06:65:F0:31:C4:69:2C:AD:BA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SjSV_QtTU5dWd0kGZfAxxGksrbo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3214/HZbV5_idzW8zluywrYrShHPXxVA.roa Signing time: Tue 13 May 2025 08:42:58 +0000 ROA not before: Tue 13 May 2025 08:42:58 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 146788 IP address blocks: 2400:f860::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3214/SjSV_QtTU5dWd0kGZfAxxGksrbo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3214/SjSV_QtTU5dWd0kGZfAxxGksrbo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SjSV_QtTU5dWd0kGZfAxxGksrbo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:39:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3704 (0xe78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A3495FD0B5353975677490665F031C4692CADBA Validity Not Before: May 13 08:42:58 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=1D96D5E7F89DCD6F3396ECB0AD8AD28473D7C550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c3:a7:af:42:1c:9d:3d:06:83:51:81:9e:ec: ce:4a:4b:37:68:d0:25:9b:a1:47:25:70:5b:b9:ec: 88:cc:ea:5b:2c:3a:b1:47:5f:02:7e:6b:09:d5:c8: 94:09:0e:98:e2:1b:cf:54:05:ff:70:82:60:40:92: d3:4d:a5:61:28:87:d9:66:39:f5:26:55:55:63:62: 63:a5:7b:45:5b:d7:7e:63:a6:d2:79:44:00:a4:6e: c2:35:d8:87:d3:12:35:a2:e4:34:7b:25:6a:e8:a6: 86:86:79:3e:0a:8b:aa:6f:1b:f8:87:e7:f6:4c:c5: a7:ec:e2:c6:8e:32:a9:e9:e7:7e:1e:94:ea:45:2c: 06:06:b1:22:23:bd:bd:bc:00:0a:c9:c1:a3:72:1e: e9:81:16:ee:a0:af:00:c6:27:c0:3c:63:6a:4f:15: e4:1a:2c:9d:42:29:d5:b1:1c:ff:d3:c3:22:1f:01: 9e:3f:47:fa:67:11:d4:5e:b6:db:db:f9:13:db:16: 90:27:c5:86:84:e6:1d:11:9b:0e:80:2f:37:eb:e3: 0b:8c:b8:b3:57:13:87:1c:81:23:0e:b9:f6:64:cc: 5c:eb:c6:29:62:5e:07:83:3c:01:a4:2e:e2:d1:7a: 05:72:c7:fb:23:ab:60:c2:90:b4:03:40:41:6a:b1: 1d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:96:D5:E7:F8:9D:CD:6F:33:96:EC:B0:AD:8A:D2:84:73:D7:C5:50 X509v3 Authority Key Identifier: keyid:4A:34:95:FD:0B:53:53:97:56:77:49:06:65:F0:31:C4:69:2C:AD:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3214/SjSV_QtTU5dWd0kGZfAxxGksrbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SjSV_QtTU5dWd0kGZfAxxGksrbo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3214/HZbV5_idzW8zluywrYrShHPXxVA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2400:f860::/32 Signature Algorithm: sha256WithRSAEncryption 80:2d:31:28:bc:d9:e6:1c:1f:78:41:c1:6b:30:8b:66:5a:8f: dc:04:fd:5c:11:6f:f1:40:db:2f:46:0c:59:1c:5b:38:09:02: ad:0e:9a:90:f5:40:02:3a:46:6c:99:b7:2b:67:c6:e7:bc:b0: 73:5b:37:59:92:03:2e:2e:37:c3:0c:05:34:62:bd:fc:fb:b8: 75:01:de:b4:7d:83:1c:29:0f:be:f9:a0:7e:67:10:33:a8:a4: 58:5a:68:6b:6d:04:57:24:78:d8:88:58:dc:fd:75:23:df:74: d7:2a:c9:7a:76:7a:22:61:34:84:02:8b:5e:e0:61:b8:4d:b2: f8:96:bf:32:81:87:98:bc:e2:54:f6:8f:dc:f6:8f:44:f7:54: 51:bc:2b:10:81:12:13:92:3e:29:3b:5e:c3:b3:27:4c:be:a7: 97:5d:a4:d0:73:27:3f:65:06:41:0b:68:5e:00:4f:45:09:02: c9:48:4f:8a:e0:ea:4c:d0:b9:73:4c:c2:75:a0:29:4e:56:9d: 83:2d:65:5c:a9:1f:21:34:b6:4c:f3:a7:96:8d:fd:a7:64:7a: f7:37:b0:ce:a0:1e:d5:9b:e3:1c:24:82:83:bd:80:76:40:18: e7:39:d7:18:02:aa:c9:63:53:a8:83:31:e9:88:a5:7f:15:4a: 91:ef:b7:5f -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICDngwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEEz NDk1RkQwQjUzNTM5NzU2Nzc0OTA2NjVGMDMxQzQ2OTJDQURCQTAeFw0yNTA1MTMw ODQyNThaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDFEOTZENUU3Rjg5RENE NkYzMzk2RUNCMEFEOEFEMjg0NzNEN0M1NTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNw6evQhydPQaDUYGe7M5KSzdo0CWboUclcFu57IjM6lssOrFH XwJ+awnVyJQJDpjiG89UBf9wgmBAktNNpWEoh9lmOfUmVVVjYmOle0Vb135jptJ5 RACkbsI12IfTEjWi5DR7JWropoaGeT4Ki6pvG/iH5/ZMxafs4saOMqnp534elOpF LAYGsSIjvb28AArJwaNyHumBFu6grwDGJ8A8Y2pPFeQaLJ1CKdWxHP/TwyIfAZ4/ R/pnEdRettvb+RPbFpAnxYaE5h0Rmw6ALzfr4wuMuLNXE4ccgSMOufZkzFzrxili XgeDPAGkLuLRegVyx/sjq2DCkLQDQEFqsR0xAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUHZbV5/idzW8zluywrYrShHPXxVAwHwYDVR0jBBgwFoAUSjSV/QtTU5dWd0kG ZfAxxGksrbowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIx NC9TalNWX1F0VFU1ZFdkMGtHWmZBeHhHa3NyYm8uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NqU1ZfUXRUVTVkV2Qwa0daZkF4eEdrc3Jiby5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMTQvSFpiVjVfaWR6Vzh6 bHV5d3JZclNoSFBYeFZBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQA+GAwDQYJKoZIhvcNAQELBQADggEBAIAtMSi82eYcH3hBwWswi2Zaj9wE /VwRb/FA2y9GDFkcWzgJAq0OmpD1QAI6RmyZtytnxue8sHNbN1mSAy4uN8MMBTRi vfz7uHUB3rR9gxwpD775oH5nEDOopFhaaGttBFckeNiIWNz9dSPfdNcqyXp2eiJh NIQCi17gYbhNsviWvzKBh5i84lT2j9z2j0T3VFG8KxCBEhOSPik7XsOzJ0y+p5dd pNBzJz9lBkELaF4AT0UJAslIT4rg6kzQuXNMwnWgKU5WnYMtZVypHyE0tkzzp5aN /adkevc3sM6gHtWb4xwkgoO9gHZAGOc51xgCqsljU6iDMemIpX8VSpHvt18= -----END CERTIFICATE-----Generated at Sat May 17 14:08:17 2025 by rpki-client