$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/cBCoctfARJWkEMY2Tg8UbQv23ZU.roa File: cBCoctfARJWkEMY2Tg8UbQv23ZU.roa (raw, json) Hash identifier: +3GxD5db+NEZWv1EZ/Oikj/LK30omooO/pjw+l565YM= Subject key identifier: 70:10:A8:72:D7:C0:44:95:A4:10:C6:36:4E:0F:14:6D:0B:F6:DD:95 Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA Certificate serial: 1217 Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/cBCoctfARJWkEMY2Tg8UbQv23ZU.roa Signing time: Mon 05 May 2025 12:06:41 +0000 ROA not before: Mon 05 May 2025 12:06:41 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 62387 IP address blocks: 101.232.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 16:13:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4631 (0x1217) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA Validity Not Before: May 5 12:06:41 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=7010A872D7C04495A410C6364E0F146D0BF6DD95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:26:3b:43:26:3d:45:b8:bf:7d:18:87:c3:43: 0a:27:ea:30:59:35:0d:a8:b9:2a:02:7c:cc:c7:74: 93:76:43:5a:91:69:7c:7c:45:f9:10:8c:c7:25:be: fd:28:85:c0:6e:96:15:9f:fe:67:bc:ca:2c:b5:a7: 73:10:92:79:32:1a:22:eb:26:00:e9:90:7c:fd:4d: 43:16:0d:7c:14:7f:b8:b8:91:79:06:74:9a:6b:ad: 5c:91:4f:32:95:7f:77:68:83:d7:ec:3d:d2:5e:35: 28:54:8f:d5:16:14:14:8b:30:79:2b:48:dd:eb:77: ff:f4:c0:32:74:e7:b0:76:0c:4e:df:65:31:c7:e3: b4:64:e6:0e:b1:05:9e:be:c0:a9:d6:fe:c2:4b:11: 63:db:ad:d7:54:20:fc:77:8c:e1:cd:2e:54:f1:ef: 1f:12:57:be:af:18:71:9c:37:31:b6:52:ff:e7:bc: db:7d:4c:b1:c2:8c:c7:73:26:c8:3d:4d:cd:39:ef: 04:eb:71:60:31:3c:0b:91:30:f0:e6:2a:ce:d8:80: fe:e9:61:64:2d:77:e8:d8:99:66:89:f6:51:8f:4c: 91:15:9c:77:6a:82:7a:49:f0:99:6d:50:6f:8f:a2: 74:30:aa:69:8c:08:48:dc:ff:7e:c4:f0:f5:3b:47: fd:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:10:A8:72:D7:C0:44:95:A4:10:C6:36:4E:0F:14:6D:0B:F6:DD:95 X509v3 Authority Key Identifier: keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/cBCoctfARJWkEMY2Tg8UbQv23ZU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 101.232.116.0/22 Signature Algorithm: sha256WithRSAEncryption 21:78:78:48:9e:c1:de:38:9b:64:da:1b:f8:d8:59:a8:38:12: 8b:f7:4e:cd:12:91:e2:95:aa:fc:2b:aa:18:66:14:8e:fe:ef: 89:f8:3b:d8:66:b1:a6:d3:8d:ac:59:02:74:76:27:1a:bc:1b: 64:1b:b4:c0:eb:b3:11:61:57:e3:8a:e8:66:68:17:9f:3c:7b: ad:aa:fa:32:a6:c0:c2:9f:b1:fe:5d:6c:d2:73:a2:cd:40:ad: 87:61:79:25:3a:c5:5f:45:26:da:c9:ee:ef:d0:d8:df:9d:e3: fe:a4:f1:0d:ab:5b:dc:8d:d7:fb:a9:12:2e:8e:bc:88:f1:36: 34:cf:10:c1:8d:a2:ab:0a:aa:f2:a8:b5:c7:59:91:ae:ef:07: 29:7e:04:aa:d5:cc:8f:11:e5:90:11:69:3c:78:4e:f4:d3:67: b5:84:87:59:d8:a5:6e:35:39:c7:6d:0b:c8:0a:15:1e:26:a3: 63:e8:8f:cb:e0:40:16:71:7d:f8:bf:50:a1:10:3c:47:62:70: 4f:53:4b:79:19:02:43:99:68:5f:23:9d:9c:62:fa:e3:a6:e1: a7:14:51:51:e6:60:40:a2:41:dc:4c:2a:58:c1:d8:fe:fb:ac: fa:5f:74:7c:80:c9:da:64:76:26:aa:1c:7a:54:92:60:80:76: 30:3d:6d:46 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICEhcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzY1 QkY1N0JEQzlCNUJFN0Q5N0UwRDY1QUE0MjIyQjFFRkFBQkVBQTAeFw0yNTA1MDUx MjA2NDFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDcwMTBBODcyRDdDMDQ0 OTVBNDEwQzYzNjRFMEYxNDZEMEJGNkREOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdJjtDJj1FuL99GIfDQwon6jBZNQ2ouSoCfMzHdJN2Q1qRaXx8 RfkQjMclvv0ohcBulhWf/me8yiy1p3MQknkyGiLrJgDpkHz9TUMWDXwUf7i4kXkG dJprrVyRTzKVf3dog9fsPdJeNShUj9UWFBSLMHkrSN3rd//0wDJ057B2DE7fZTHH 47Rk5g6xBZ6+wKnW/sJLEWPbrddUIPx3jOHNLlTx7x8SV76vGHGcNzG2Uv/nvNt9 TLHCjMdzJsg9Tc057wTrcWAxPAuRMPDmKs7YgP7pYWQtd+jYmWaJ9lGPTJEVnHdq gnpJ8JltUG+PonQwqmmMCEjc/37E8PU7R/2pAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUcBCoctfARJWkEMY2Tg8UbQv23ZUwHwYDVR0jBBgwFoAUxlv1e9ybW+fZfg1l qkIise+qvqowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEz L3hsdjFlOXliVy1mWmZnMWxxa0lpc2UtcXZxby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAveGx2MWU5eWJXLWZaZmcxbHFrSWlzZS1xdnFvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEzL2NCQ29jdGZBUkpXa0VN WTJUZzhVYlF2MjNaVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJl6HQwDQYJKoZIhvcNAQELBQADggEBACF4eEiewd44m2TaG/jYWag4Eov3Ts0S keKVqvwrqhhmFI7+74n4O9hmsabTjaxZAnR2Jxq8G2QbtMDrsxFhV+OK6GZoF588 e62q+jKmwMKfsf5dbNJzos1ArYdheSU6xV9FJtrJ7u/Q2N+d4/6k8Q2rW9yN1/up Ei6OvIjxNjTPEMGNoqsKqvKotcdZka7vByl+BKrVzI8R5ZARaTx4TvTTZ7WEh1nY pW41OcdtC8gKFR4mo2Poj8vgQBZxffi/UKEQPEdicE9TS3kZAkOZaF8jnZxi+uOm 4acUUVHmYECiQdxMKljB2P77rPpfdHyAydpkdiaqHHpUkmCAdjA9bUY= -----END CERTIFICATE-----Generated at Fri May 16 14:15:27 2025 by rpki-client