$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3317/8pET--HPS_iwNgKvdvhO6hUpYY8.roa File: 8pET--HPS_iwNgKvdvhO6hUpYY8.roa (raw, json) Hash identifier: 6SAZbRDpK1sENuyYvdYIHX9ysDsnTxmubEeumEfPXKI= Subject key identifier: F2:91:13:FB:E1:CF:4B:F8:B0:36:02:AF:76:F8:4E:EA:15:29:61:8F Certificate issuer: /CN=ABCC2EEAFAEAAF0D44E3CD20040999ED3E8B6E56 Certificate serial: 07 Authority key identifier: AB:CC:2E:EA:FA:EA:AF:0D:44:E3:CD:20:04:09:99:ED:3E:8B:6E:56 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/q8wu6vrqrw1E480gBAmZ7T6LblY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/8pET--HPS_iwNgKvdvhO6hUpYY8.roa Signing time: Wed 28 May 2025 06:50:34 +0000 ROA not before: Wed 28 May 2025 06:50:34 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 134765 IP address blocks: 150.242.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/q8wu6vrqrw1E480gBAmZ7T6LblY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/q8wu6vrqrw1E480gBAmZ7T6LblY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/q8wu6vrqrw1E480gBAmZ7T6LblY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 21:13:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ABCC2EEAFAEAAF0D44E3CD20040999ED3E8B6E56 Validity Not Before: May 28 06:50:34 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=F29113FBE1CF4BF8B03602AF76F84EEA1529618F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:12:13:30:76:2f:a3:71:98:01:d1:ee:b8:40: 73:ef:28:fd:16:82:f5:36:d5:22:cf:ae:12:23:6e: 8d:e2:30:88:3e:14:68:43:52:c5:3d:c4:9b:a3:14: cb:5b:74:33:90:34:19:28:5a:32:99:75:4e:cd:29: 0c:b9:57:31:35:6c:ea:f7:98:46:84:3d:3b:cf:46: f5:7e:02:fe:de:1a:5b:85:e6:8c:df:8b:ac:ec:30: 4d:dc:ce:1e:b9:00:f2:a9:e3:68:f1:5c:76:d3:75: db:b4:04:7a:db:83:fa:c5:12:98:13:c8:54:cc:a9: be:5b:6a:ea:66:00:a9:ac:87:f2:cd:21:cd:88:08: d5:8e:ee:bb:0e:1d:c3:ef:39:f0:40:a9:b0:9a:98: f9:14:32:e6:ca:71:42:cd:64:33:48:32:06:46:c7: e5:24:b9:8f:92:83:12:f2:f6:ce:2d:48:41:0b:6e: ed:3a:5d:06:87:2e:52:df:0d:94:c2:77:47:e8:29: 25:7e:80:8c:cd:60:99:08:42:a3:bc:25:32:eb:b5: 1f:9d:62:97:12:4e:f7:e2:40:0a:c2:2b:74:6e:72: 74:3c:7d:5f:2c:06:9e:60:f6:61:08:2b:a6:89:78: e3:b5:35:c4:af:87:41:c3:33:58:85:b8:ef:12:bc: 05:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:91:13:FB:E1:CF:4B:F8:B0:36:02:AF:76:F8:4E:EA:15:29:61:8F X509v3 Authority Key Identifier: keyid:AB:CC:2E:EA:FA:EA:AF:0D:44:E3:CD:20:04:09:99:ED:3E:8B:6E:56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/q8wu6vrqrw1E480gBAmZ7T6LblY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/q8wu6vrqrw1E480gBAmZ7T6LblY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/8pET--HPS_iwNgKvdvhO6hUpYY8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.242.244.0/22 Signature Algorithm: sha256WithRSAEncryption 3f:5b:f9:c7:21:41:d5:f0:dc:02:8d:5c:db:75:d9:01:c7:d1: af:de:1c:ba:9c:d6:4b:a1:e2:cf:27:74:23:bc:30:de:4d:1b: dc:17:ad:27:9e:ee:11:91:92:d9:69:6a:f2:0c:80:40:ce:b9: 60:ec:2b:ed:ff:ef:9a:29:b8:d0:69:85:3d:c8:1b:71:93:e0: 33:14:81:f1:f6:5c:a2:d7:0e:1e:b0:54:a6:85:a0:a9:e7:60: 96:dc:e5:d6:3a:ad:ab:e5:e8:a8:75:a0:2f:8c:40:4f:d1:67: 89:6c:67:73:ff:66:0d:0c:dd:df:98:e5:b3:5c:e9:a8:20:e5: 41:be:af:1e:75:75:7a:a9:8c:8c:86:5b:f9:35:69:06:22:91: 5a:ce:24:00:22:61:1b:f9:f7:c5:d2:ee:a2:04:c0:5b:81:39: 68:b7:83:31:bf:ba:39:91:98:e6:74:cc:d0:a1:0b:e8:74:28: d5:f8:bb:5d:dd:d1:00:bf:67:7a:21:e5:9f:57:20:bb:df:01: 89:25:fb:f5:c2:2b:39:76:86:6d:d7:81:24:0f:0a:ce:71:c7: ea:35:70:f7:b6:7f:b8:71:cc:aa:91:07:93:70:ad:c7:a9:fe: 7e:dd:3e:c8:36:77:65:3c:27:1d:37:9e:8f:d4:2b:f1:3a:15: d2:9b:45:36 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBBzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBQkND MkVFQUZBRUFBRjBENDRFM0NEMjAwNDA5OTlFRDNFOEI2RTU2MB4XDTI1MDUyODA2 NTAzNFoXDTI2MDQwMzA4MDAwOVowMzExMC8GA1UEAxMoRjI5MTEzRkJFMUNGNEJG OEIwMzYwMkFGNzZGODRFRUExNTI5NjE4RjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANcSEzB2L6NxmAHR7rhAc+8o/RaC9TbVIs+uEiNujeIwiD4UaENS xT3Em6MUy1t0M5A0GShaMpl1Ts0pDLlXMTVs6veYRoQ9O89G9X4C/t4aW4XmjN+L rOwwTdzOHrkA8qnjaPFcdtN127QEetuD+sUSmBPIVMypvltq6mYAqayH8s0hzYgI 1Y7uuw4dw+858ECpsJqY+RQy5spxQs1kM0gyBkbH5SS5j5KDEvL2zi1IQQtu7Tpd BocuUt8NlMJ3R+gpJX6AjM1gmQhCo7wlMuu1H51ilxJO9+JACsIrdG5ydDx9XywG nmD2YQgrpol447U1xK+HQcMzWIW47xK8BdECAwEAAaOCAfMwggHvMB0GA1UdDgQW BBTykRP74c9L+LA2Aq92+E7qFSlhjzAfBgNVHSMEGDAWgBSrzC7q+uqvDUTjzSAE CZntPotuVjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMzE3 L3E4d3U2dnJxcncxRTQ4MGdCQW1aN1Q2TGJsWS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvcTh3dTZ2cnFydzFFNDgwZ0JBbVo3VDZMYmxZLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMxNy84cEVULS1IUFNfaXdO Z0t2ZHZoTzZoVXBZWTgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQClvL0MA0GCSqGSIb3DQEBCwUAA4IBAQA/W/nHIUHV8NwCjVzbddkBx9Gv3hy6 nNZLoeLPJ3QjvDDeTRvcF60nnu4RkZLZaWryDIBAzrlg7Cvt/++aKbjQaYU9yBtx k+AzFIHx9lyi1w4esFSmhaCp52CW3OXWOq2r5eiodaAvjEBP0WeJbGdz/2YNDN3f mOWzXOmoIOVBvq8edXV6qYyMhlv5NWkGIpFaziQAImEb+ffF0u6iBMBbgTlot4Mx v7o5kZjmdMzQoQvodCjV+Ltd3dEAv2d6IeWfVyC73wGJJfv1wis5doZt14EkDwrO ccfqNXD3tn+4ccyqkQeTcK3Hqf5+3T7INndlPCcdN56P1CvxOhXSm0U2 -----END CERTIFICATE-----Generated at Fri Jul 4 20:09:28 2025 by rpki-client