$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3246/81XUE6ph-YfMqkp2MvnqNYH6XP8.roa File: 81XUE6ph-YfMqkp2MvnqNYH6XP8.roa (raw, json) Hash identifier: udMdA++dFCcVG2w6E/Jd7VL8jbt0XvwZh3yIc1S4UOg= Subject key identifier: F3:55:D4:13:AA:61:F9:87:CC:AA:4A:76:32:F9:EA:35:81:FA:5C:FF Certificate issuer: /CN=7FFE6EB152FAF96D18BFC69FD3E3BF99862AA9F1 Certificate serial: 09B7 Authority key identifier: 7F:FE:6E:B1:52:FA:F9:6D:18:BF:C6:9F:D3:E3:BF:99:86:2A:A9:F1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/f_5usVL6-W0Yv8af0-O_mYYqqfE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3246/81XUE6ph-YfMqkp2MvnqNYH6XP8.roa Signing time: Thu 17 Apr 2025 20:07:29 +0000 ROA not before: Thu 17 Apr 2025 20:07:29 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 211392 IP address blocks: 210.87.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3246/f_5usVL6-W0Yv8af0-O_mYYqqfE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3246/f_5usVL6-W0Yv8af0-O_mYYqqfE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/f_5usVL6-W0Yv8af0-O_mYYqqfE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 14:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2487 (0x9b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FFE6EB152FAF96D18BFC69FD3E3BF99862AA9F1 Validity Not Before: Apr 17 20:07:29 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=F355D413AA61F987CCAA4A7632F9EA3581FA5CFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:c8:cc:a4:79:3e:9e:82:f6:15:25:38:41:8d: f3:be:1a:5a:40:46:bd:46:b2:3c:ef:ee:70:d4:4d: f2:df:60:ed:b8:9c:90:92:cf:ab:52:f4:e3:23:10: c7:c7:ad:93:5b:d2:cd:77:bf:ff:7a:dc:2e:ec:a4: f6:70:71:eb:e4:ef:2b:fe:10:67:3b:a4:4c:9e:40: 5a:58:54:dd:72:c9:16:0c:a2:ad:59:d8:12:6b:85: e9:bd:f3:aa:2e:7d:dd:0e:54:43:7d:0c:c5:63:cc: 9c:29:dc:eb:37:11:7b:fa:02:11:0f:ac:d7:b5:65: 67:a8:36:db:91:9d:38:85:6b:09:55:31:9d:29:1e: 55:3e:99:be:7d:19:e4:f0:6d:3d:e0:60:54:34:9b: 59:0a:b4:42:1e:d1:04:0b:1d:1c:83:07:c6:8d:3f: f3:0a:66:8a:35:56:b4:93:a3:f1:46:db:c5:03:fa: ac:20:fc:c2:a6:b7:3c:13:86:42:58:72:29:ab:90: 37:c4:c1:47:5b:e9:7a:cb:eb:41:a5:25:1b:d0:09: 9a:4e:64:ee:fa:cd:9f:56:68:96:08:bb:b7:0d:e2: 65:57:6c:ff:3f:c5:99:54:ea:d9:6f:83:37:4d:14: 4b:f3:e0:cc:00:c1:1c:8e:27:f6:39:5f:bb:a3:61: aa:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:55:D4:13:AA:61:F9:87:CC:AA:4A:76:32:F9:EA:35:81:FA:5C:FF X509v3 Authority Key Identifier: keyid:7F:FE:6E:B1:52:FA:F9:6D:18:BF:C6:9F:D3:E3:BF:99:86:2A:A9:F1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3246/f_5usVL6-W0Yv8af0-O_mYYqqfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/f_5usVL6-W0Yv8af0-O_mYYqqfE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3246/81XUE6ph-YfMqkp2MvnqNYH6XP8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.87.72.0/23 Signature Algorithm: sha256WithRSAEncryption 6b:3a:b8:5b:30:97:8e:80:18:e9:c0:61:ae:c7:5f:34:c6:6b: 6b:ad:6e:11:12:4e:9a:2c:86:7f:ce:74:a9:1a:09:6c:c4:29: 6f:e9:ac:c1:e0:01:08:ac:64:43:5c:37:12:83:ae:bc:a4:3e: 7b:2a:8d:3d:57:a3:f5:d4:c9:92:05:1a:ee:78:d8:a5:9c:b6: 8d:d3:bd:75:18:43:16:41:f0:e5:58:95:2f:ba:b3:16:31:7f: ba:87:07:97:5e:1b:3d:8b:81:87:bf:c9:46:0b:0e:35:c0:08: 90:cf:7d:08:cd:9c:ec:9e:c4:63:01:a1:5a:98:eb:a1:bd:0e: 07:54:cf:0f:e9:e6:34:7f:1c:13:ee:87:0d:48:36:76:6b:81: 12:df:a0:60:71:7b:0f:05:c1:a7:8e:92:1c:9a:52:9a:2a:cf: 87:ef:04:6b:4d:18:60:52:9d:c8:15:c4:1f:97:88:4f:1e:c2: d6:54:59:f0:c2:a9:a0:30:af:78:a7:a7:32:27:94:fe:ce:d0: ea:3e:72:ab:fc:29:8d:74:3f:32:e2:0e:ab:10:ae:7c:d1:53: 3e:5f:42:8d:fa:43:9a:e0:a8:67:fc:3e:30:21:d9:54:96:c6: 94:79:65:84:31:69:83:5a:74:18:50:ed:6f:2b:c2:38:7d:d3: 7b:63:43:92 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICCbcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0ZG RTZFQjE1MkZBRjk2RDE4QkZDNjlGRDNFM0JGOTk4NjJBQTlGMTAeFw0yNTA0MTcy MDA3MjlaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEYzNTVENDEzQUE2MUY5 ODdDQ0FBNEE3NjMyRjlFQTM1ODFGQTVDRkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDryMykeT6egvYVJThBjfO+GlpARr1Gsjzv7nDUTfLfYO24nJCS z6tS9OMjEMfHrZNb0s13v/963C7spPZwcevk7yv+EGc7pEyeQFpYVN1yyRYMoq1Z 2BJrhem986oufd0OVEN9DMVjzJwp3Os3EXv6AhEPrNe1ZWeoNtuRnTiFawlVMZ0p HlU+mb59GeTwbT3gYFQ0m1kKtEIe0QQLHRyDB8aNP/MKZoo1VrSTo/FG28UD+qwg /MKmtzwThkJYcimrkDfEwUdb6XrL60GlJRvQCZpOZO76zZ9WaJYIu7cN4mVXbP8/ xZlU6tlvgzdNFEvz4MwAwRyOJ/Y5X7ujYarRAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU81XUE6ph+YfMqkp2MvnqNYH6XP8wHwYDVR0jBBgwFoAUf/5usVL6+W0Yv8af 0+O/mYYqqfEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI0 Ni9mXzV1c1ZMNi1XMFl2OGFmMC1PX21ZWXFxZkUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2ZfNXVzVkw2LVcwWXY4YWYwLU9fbVlZcXFmRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNDYvODFYVUU2cGgtWWZN cWtwMk12bnFOWUg2WFA4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAdJXSDANBgkqhkiG9w0BAQsFAAOCAQEAazq4WzCXjoAY6cBhrsdfNMZra61u ERJOmiyGf850qRoJbMQpb+msweABCKxkQ1w3EoOuvKQ+eyqNPVej9dTJkgUa7njY pZy2jdO9dRhDFkHw5ViVL7qzFjF/uocHl14bPYuBh7/JRgsONcAIkM99CM2c7J7E YwGhWpjrob0OB1TPD+nmNH8cE+6HDUg2dmuBEt+gYHF7DwXBp46SHJpSmirPh+8E a00YYFKdyBXEH5eITx7C1lRZ8MKpoDCveKenMieU/s7Q6j5yq/wpjXQ/MuIOqxCu fNFTPl9CjfpDmuCoZ/w+MCHZVJbGlHllhDFpg1p0GFDtbyvCOH3Te2NDkg== -----END CERTIFICATE-----Generated at Sun May 18 11:18:03 2025 by rpki-client