$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/GzvC7AN9lqTfx6RMIb0aW2l4GS4.roa File: GzvC7AN9lqTfx6RMIb0aW2l4GS4.roa (raw, json) Hash identifier: 6UuZKyLFo1oNGs1Y+5u8by5Ra0l9b73tgVepOozGiWc= Subject key identifier: 1B:3B:C2:EC:03:7D:96:A4:DF:C7:A4:4C:21:BD:1A:5B:69:78:19:2E Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA Certificate serial: 10EF Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/GzvC7AN9lqTfx6RMIb0aW2l4GS4.roa Signing time: Wed 12 Mar 2025 04:45:58 +0000 ROA not before: Wed 12 Mar 2025 04:45:58 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 62387 IP address blocks: 211.149.78.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 05:39:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4335 (0x10ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA Validity Not Before: Mar 12 04:45:58 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=1B3BC2EC037D96A4DFC7A44C21BD1A5B6978192E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:39:57:ee:a9:d5:f4:1c:6f:0f:0a:05:51:4d: 0f:fb:b6:44:96:a7:f9:1f:94:2c:f8:4b:93:74:5d: ca:03:09:92:f2:53:c1:87:03:0b:3e:91:5b:80:f1: 5e:20:fe:a2:b5:8e:a6:37:f6:73:8a:59:b5:b0:aa: 07:5b:1e:c4:a3:7b:a6:84:e2:7f:69:b1:7b:47:2f: 45:52:06:65:b4:2c:bb:af:95:53:55:fd:b6:c0:8d: 01:18:8c:37:b9:3c:a0:f2:f7:66:3d:2c:46:27:a3: 58:a1:05:fa:93:a0:8f:ff:87:0b:df:9c:9c:5f:a3: 57:00:7c:70:7f:eb:d1:06:ba:cc:e7:c5:cf:1b:78: 6b:36:29:d2:0a:a9:2b:eb:2a:9f:ab:c9:2d:82:c4: 29:3a:a9:49:d9:48:b1:52:f6:8c:f3:2d:f0:07:f1: 88:40:78:33:d6:7f:16:09:9e:af:fb:26:f4:26:39: 44:c7:1f:05:5d:29:58:ad:8f:88:1f:ad:1f:62:52: 6f:b0:c3:e1:fb:ae:be:83:88:34:77:31:cf:7e:98: 77:76:23:d1:99:7d:88:bd:76:b7:48:13:ae:14:9a: a6:a9:ff:73:25:fc:71:b0:49:55:bf:b9:0b:86:c0: f4:71:76:1a:56:4f:53:8d:d5:66:49:c2:75:cc:72: 2e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:3B:C2:EC:03:7D:96:A4:DF:C7:A4:4C:21:BD:1A:5B:69:78:19:2E X509v3 Authority Key Identifier: keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/GzvC7AN9lqTfx6RMIb0aW2l4GS4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.149.78.0/23 Signature Algorithm: sha256WithRSAEncryption 93:c4:8e:85:95:b5:a7:cb:f9:e6:37:93:98:a1:f3:18:d3:eb: f5:94:6d:33:10:fc:fb:53:05:b3:44:eb:da:f5:22:ce:05:bd: cb:77:da:5b:9b:6d:5d:f6:a3:2a:d2:bd:4f:6f:da:5e:d0:8f: 66:8f:d0:2f:c2:c7:d6:63:66:7c:02:fb:38:88:87:8f:60:b9: 66:e9:5e:67:1a:0f:da:dc:30:f2:5d:76:04:1c:1d:52:b6:18: 68:8d:26:64:37:49:a3:c2:9a:72:ff:a0:85:a9:d0:cc:ff:5b: 97:70:35:b3:75:fe:7f:ba:43:8a:a9:f8:85:e8:87:e0:b5:3e: fd:13:3e:93:39:25:0f:c7:30:ed:e6:00:46:b3:c2:19:42:5f: fc:15:ae:37:d7:7d:11:57:84:db:3b:6d:e9:28:72:66:19:fb: 41:03:41:28:f9:ae:32:a5:d4:85:6f:67:3f:53:05:23:27:a2: 19:68:64:38:dc:e5:5b:7a:75:1b:63:5d:e4:06:31:54:bf:f1: ce:52:86:ad:5f:39:85:58:c2:35:37:c5:3d:bb:d8:41:0c:24: 9e:ae:3e:53:00:d4:95:35:3e:52:07:f9:ce:f1:75:50:f6:a8: fe:5d:7e:0e:a0:4d:96:4d:f8:56:20:2b:4d:f9:7d:0c:2d:04: 81:bd:28:fb -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICEO8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzY1 QkY1N0JEQzlCNUJFN0Q5N0UwRDY1QUE0MjIyQjFFRkFBQkVBQTAeFw0yNTAzMTIw NDQ1NThaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDFCM0JDMkVDMDM3RDk2 QTRERkM3QTQ0QzIxQkQxQTVCNjk3ODE5MkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDiOVfuqdX0HG8PCgVRTQ/7tkSWp/kflCz4S5N0XcoDCZLyU8GH Aws+kVuA8V4g/qK1jqY39nOKWbWwqgdbHsSje6aE4n9psXtHL0VSBmW0LLuvlVNV /bbAjQEYjDe5PKDy92Y9LEYno1ihBfqToI//hwvfnJxfo1cAfHB/69EGusznxc8b eGs2KdIKqSvrKp+ryS2CxCk6qUnZSLFS9ozzLfAH8YhAeDPWfxYJnq/7JvQmOUTH HwVdKVitj4gfrR9iUm+ww+H7rr6DiDR3Mc9+mHd2I9GZfYi9drdIE64Umqap/3Ml /HGwSVW/uQuGwPRxdhpWT1ON1WZJwnXMci73AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUGzvC7AN9lqTfx6RMIb0aW2l4GS4wHwYDVR0jBBgwFoAUxlv1e9ybW+fZfg1l qkIise+qvqowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEz L3hsdjFlOXliVy1mWmZnMWxxa0lpc2UtcXZxby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAveGx2MWU5eWJXLWZaZmcxbHFrSWlzZS1xdnFvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEzL0d6dkM3QU45bHFUZng2 Uk1JYjBhVzJsNEdTNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAHTlU4wDQYJKoZIhvcNAQELBQADggEBAJPEjoWVtafL+eY3k5ih8xjT6/WUbTMQ /PtTBbNE69r1Is4Fvct32lubbV32oyrSvU9v2l7Qj2aP0C/Cx9ZjZnwC+ziIh49g uWbpXmcaD9rcMPJddgQcHVK2GGiNJmQ3SaPCmnL/oIWp0Mz/W5dwNbN1/n+6Q4qp +IXoh+C1Pv0TPpM5JQ/HMO3mAEazwhlCX/wVrjfXfRFXhNs7bekocmYZ+0EDQSj5 rjKl1IVvZz9TBSMnohloZDjc5Vt6dRtjXeQGMVS/8c5Shq1fOYVYwjU3xT272EEM JJ6uPlMA1JU1PlIH+c7xdVD2qP5dfg6gTZZN+FYgK035fQwtBIG9KPs= -----END CERTIFICATE-----Generated at Sun May 18 03:55:32 2025 by rpki-client