$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/83uDL26oFjmE6-QOHsF2uwbvsnk.roa File: 83uDL26oFjmE6-QOHsF2uwbvsnk.roa (raw, json) Hash identifier: D/UVreFAse6odxhNyJXZ4P2uPftMq1UNbNQVxZgVbWM= Subject key identifier: F3:7B:83:2F:6E:A8:16:39:84:EB:E4:0E:1E:C1:76:BB:06:EF:B2:79 Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA Certificate serial: 10DD Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/83uDL26oFjmE6-QOHsF2uwbvsnk.roa Signing time: Sun 09 Mar 2025 16:19:07 +0000 ROA not before: Sun 09 Mar 2025 16:19:07 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 62387 IP address blocks: 101.232.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 20:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4317 (0x10dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA Validity Not Before: Mar 9 16:19:07 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=F37B832F6EA8163984EBE40E1EC176BB06EFB279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:3f:67:6b:b2:1b:8d:09:33:c5:f8:cf:e7:a2: 04:62:06:ae:e0:b5:d9:ab:20:84:8c:d3:d1:e6:96: a5:7d:13:b3:e9:56:c7:8d:ed:f6:b9:d7:cc:4b:cd: 7c:cf:bd:e2:d3:ed:7e:d2:06:2a:b7:0c:79:1a:95: 38:2f:a4:aa:8b:1d:b8:93:ec:d8:86:42:17:b5:7a: 24:b3:87:6b:4c:5e:02:cf:95:ee:13:3d:dd:f6:93: 48:17:d9:35:19:2e:25:d3:61:89:6c:bc:ef:7f:96: 4e:f0:69:bb:2d:df:12:65:9c:a0:73:bd:6f:05:07: e1:71:e9:07:f5:82:d6:7d:7d:21:88:36:be:fa:f0: 12:d9:16:39:2e:2b:1f:ca:cd:f2:74:11:49:29:90: aa:74:14:bd:cc:80:ee:e7:5a:db:47:f6:27:4e:c0: 8b:51:e1:93:7b:1d:e2:35:9e:29:e5:e0:e1:b0:13: ca:91:dc:0d:1a:9b:81:ba:40:18:26:7c:83:2f:06: 0c:dd:e2:e5:6d:6d:a6:be:99:7f:90:41:fd:6c:11: cf:92:03:b7:66:c5:cf:bf:03:f5:2a:77:61:75:c7: 59:d4:7c:4c:b9:c1:2e:7e:7a:ac:cd:a5:a6:8a:ba: e2:d2:24:93:0a:26:12:45:ae:23:ab:c2:5a:c3:83: 23:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:7B:83:2F:6E:A8:16:39:84:EB:E4:0E:1E:C1:76:BB:06:EF:B2:79 X509v3 Authority Key Identifier: keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/83uDL26oFjmE6-QOHsF2uwbvsnk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 101.232.20.0/22 Signature Algorithm: sha256WithRSAEncryption ae:76:29:07:aa:2d:62:e2:c9:f8:01:e2:68:35:a7:1e:22:a8: a8:58:dd:6a:51:85:e9:0d:8b:6c:9d:3f:26:b6:95:ee:4a:33: 22:72:de:ff:5d:d1:9d:43:45:ec:97:5a:08:1d:f1:7e:6f:14: 35:c5:bd:5f:51:6d:60:5f:bd:7f:e5:fd:01:6b:13:3f:12:8c: 3d:a0:87:21:18:fd:d8:dd:ff:6c:21:61:eb:6b:9f:86:18:19: 93:fa:c9:2d:fb:5b:ce:0c:91:a9:14:41:ed:ee:6a:fc:1b:cb: 56:e2:1d:5e:92:1f:b1:4b:35:92:59:9d:24:08:ad:75:61:20: 6b:71:1d:fc:ec:58:7f:6a:6f:67:cf:71:03:e3:04:03:ce:0f: 5c:fc:4b:60:ab:bb:1a:61:c3:1d:4f:a5:e4:58:b4:4d:bd:3e: 0b:26:80:36:ce:8f:f5:0f:af:23:ff:9e:25:8a:b1:1e:04:5d: 1f:17:12:6b:ed:7b:cf:3c:50:b3:e9:76:1a:77:04:9a:85:9d: 4d:fa:fe:f2:15:ad:77:78:d0:81:ed:2c:3c:84:33:dd:43:7f: 71:8c:9a:2e:a4:57:d0:ef:63:5b:62:22:b1:ce:c5:52:89:1a: d6:75:95:25:c6:db:27:ac:ac:f6:85:1f:76:5a:35:9f:ba:e5: df:54:86:13 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICEN0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzY1 QkY1N0JEQzlCNUJFN0Q5N0UwRDY1QUE0MjIyQjFFRkFBQkVBQTAeFw0yNTAzMDkx NjE5MDdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEYzN0I4MzJGNkVBODE2 Mzk4NEVCRTQwRTFFQzE3NkJCMDZFRkIyNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDrP2drshuNCTPF+M/nogRiBq7gtdmrIISM09HmlqV9E7PpVseN 7fa518xLzXzPveLT7X7SBiq3DHkalTgvpKqLHbiT7NiGQhe1eiSzh2tMXgLPle4T Pd32k0gX2TUZLiXTYYlsvO9/lk7wabst3xJlnKBzvW8FB+Fx6Qf1gtZ9fSGINr76 8BLZFjkuKx/KzfJ0EUkpkKp0FL3MgO7nWttH9idOwItR4ZN7HeI1ninl4OGwE8qR 3A0am4G6QBgmfIMvBgzd4uVtbaa+mX+QQf1sEc+SA7dmxc+/A/Uqd2F1x1nUfEy5 wS5+eqzNpaaKuuLSJJMKJhJFriOrwlrDgyOZAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU83uDL26oFjmE6+QOHsF2uwbvsnkwHwYDVR0jBBgwFoAUxlv1e9ybW+fZfg1l qkIise+qvqowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEz L3hsdjFlOXliVy1mWmZnMWxxa0lpc2UtcXZxby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAveGx2MWU5eWJXLWZaZmcxbHFrSWlzZS1xdnFvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEzLzgzdURMMjZvRmptRTYt UU9Ic0YydXdidnNuay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJl6BQwDQYJKoZIhvcNAQELBQADggEBAK52KQeqLWLiyfgB4mg1px4iqKhY3WpR hekNi2ydPya2le5KMyJy3v9d0Z1DReyXWggd8X5vFDXFvV9RbWBfvX/l/QFrEz8S jD2ghyEY/djd/2whYetrn4YYGZP6yS37W84MkakUQe3uavwby1biHV6SH7FLNZJZ nSQIrXVhIGtxHfzsWH9qb2fPcQPjBAPOD1z8S2Cruxphwx1PpeRYtE29PgsmgDbO j/UPryP/niWKsR4EXR8XEmvte888ULPpdhp3BJqFnU36/vIVrXd40IHtLDyEM91D f3GMmi6kV9DvY1tiIrHOxVKJGtZ1lSXG2yesrPaFH3ZaNZ+65d9UhhM= -----END CERTIFICATE-----Generated at Sun May 18 19:03:18 2025 by rpki-client