$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/jT09XRsBHfPtmEPWrhFGFMXgClg.roa File: jT09XRsBHfPtmEPWrhFGFMXgClg.roa (raw, json) Hash identifier: qRXP2zRb2Iiihm4Cfu3yfyZLEdCElFvnGVDJ91Rwxqg= Subject key identifier: 8D:3D:3D:5D:1B:01:1D:F3:ED:98:43:D6:AE:11:46:14:C5:E0:0A:58 Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA Certificate serial: 1321 Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/jT09XRsBHfPtmEPWrhFGFMXgClg.roa Signing time: Wed 18 Jun 2025 04:51:13 +0000 ROA not before: Wed 18 Jun 2025 04:51:13 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 62387 IP address blocks: 119.59.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 11:44:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4897 (0x1321) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA Validity Not Before: Jun 18 04:51:13 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=8D3D3D5D1B011DF3ED9843D6AE114614C5E00A58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c7:84:51:f1:32:e9:68:6e:9d:7d:f0:e7:51: 39:32:23:e3:76:b4:58:41:a7:89:9c:4e:0e:72:fc: 07:dc:4e:64:bf:35:26:fb:3f:a7:03:eb:9c:42:6c: ab:ae:8a:b4:dc:9a:0b:73:fa:d2:20:bc:a8:49:27: e0:9b:81:6b:2b:1d:f2:84:ec:04:17:16:44:46:56: 2d:d5:f8:80:32:31:7d:98:fa:f3:d1:b4:7b:6b:ca: 9a:f8:64:4c:61:0e:c4:ff:e6:14:b1:99:d0:e3:b3: 04:e1:41:42:54:8a:71:42:74:82:05:81:af:35:b2: a5:04:a1:d5:c4:d4:78:a9:9e:7e:89:4e:fe:9d:c5: cb:73:a4:0f:a0:5d:4f:4a:c4:87:9f:74:fe:e0:ea: 6a:11:22:5f:4f:ab:f1:70:8c:43:48:9f:92:1c:e1: e6:51:fa:0a:cd:da:ab:39:f2:21:0d:d4:26:2a:47: df:d4:be:30:8f:8d:d5:62:ea:c4:69:59:32:e0:3e: 5b:a0:1e:ad:cd:bc:51:31:50:b3:e8:3d:c1:40:27: 8f:48:70:8b:a0:c9:f1:8a:26:8e:53:3a:a6:3b:27: 14:ed:29:9d:aa:e7:3c:63:2b:b9:ec:e2:86:7d:f3: 3c:2d:bb:dd:f8:2a:6e:b1:06:a8:28:ef:d6:d7:07: 1a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:3D:3D:5D:1B:01:1D:F3:ED:98:43:D6:AE:11:46:14:C5:E0:0A:58 X509v3 Authority Key Identifier: keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/jT09XRsBHfPtmEPWrhFGFMXgClg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.59.244.0/22 Signature Algorithm: sha256WithRSAEncryption d0:f7:ae:22:c5:34:7e:1c:d0:ee:08:a0:6f:b2:88:c5:53:82: f1:f1:4b:a7:8c:33:c9:85:da:bd:77:9a:b8:4d:11:35:36:c0: 68:ae:6d:b8:61:a4:1d:1a:0e:3b:d9:98:f9:9d:9b:5e:b3:d6: cb:55:7c:f8:9a:40:ab:87:bd:58:7e:f8:44:10:79:2b:9e:6e: 33:ff:8c:eb:9a:f7:11:97:15:29:4c:c8:f2:70:b3:0c:9e:75: 87:10:1f:2e:71:cc:f0:14:03:fb:f3:8b:89:3f:a1:b2:ef:cf: df:f4:59:b8:b5:87:35:68:53:84:b3:36:53:84:f3:4f:6e:03: d5:17:e4:84:e1:4c:33:cd:9e:bd:90:0a:be:6c:04:ae:ec:cc: dd:71:f2:8d:03:06:ba:25:b0:b0:a1:93:1b:7b:4b:1c:ad:92: e1:96:84:3c:68:95:0b:ab:90:08:73:9c:94:25:7d:17:95:b1: 1c:40:51:32:3f:23:5d:77:f6:e4:99:98:ed:bf:2b:1b:e3:f2: 6a:a3:67:5d:fb:d1:5c:06:35:84:6e:5a:c9:5c:fe:9b:d4:51: ad:9b:7d:15:3e:68:ab:27:45:ca:ec:7d:0a:b3:f6:2c:b4:52: f2:ec:20:40:bf:51:6f:03:8f:3e:33:50:74:e6:8e:12:6b:a1: 61:6e:ed:9d -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICEyEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzY1 QkY1N0JEQzlCNUJFN0Q5N0UwRDY1QUE0MjIyQjFFRkFBQkVBQTAeFw0yNTA2MTgw NDUxMTNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDhEM0QzRDVEMUIwMTFE RjNFRDk4NDNENkFFMTE0NjE0QzVFMDBBNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCdx4RR8TLpaG6dffDnUTkyI+N2tFhBp4mcTg5y/AfcTmS/NSb7 P6cD65xCbKuuirTcmgtz+tIgvKhJJ+CbgWsrHfKE7AQXFkRGVi3V+IAyMX2Y+vPR tHtrypr4ZExhDsT/5hSxmdDjswThQUJUinFCdIIFga81sqUEodXE1Hipnn6JTv6d xctzpA+gXU9KxIefdP7g6moRIl9Pq/FwjENIn5Ic4eZR+grN2qs58iEN1CYqR9/U vjCPjdVi6sRpWTLgPlugHq3NvFExULPoPcFAJ49IcIugyfGKJo5TOqY7JxTtKZ2q 5zxjK7ns4oZ98zwtu934Km6xBqgo79bXBxpVAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUjT09XRsBHfPtmEPWrhFGFMXgClgwHwYDVR0jBBgwFoAUxlv1e9ybW+fZfg1l qkIise+qvqowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEz L3hsdjFlOXliVy1mWmZnMWxxa0lpc2UtcXZxby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAveGx2MWU5eWJXLWZaZmcxbHFrSWlzZS1xdnFvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEzL2pUMDlYUnNCSGZQdG1F UFdyaEZHRk1YZ0NsZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJ3O/QwDQYJKoZIhvcNAQELBQADggEBAND3riLFNH4c0O4IoG+yiMVTgvHxS6eM M8mF2r13mrhNETU2wGiubbhhpB0aDjvZmPmdm16z1stVfPiaQKuHvVh++EQQeSue bjP/jOua9xGXFSlMyPJwswyedYcQHy5xzPAUA/vzi4k/obLvz9/0Wbi1hzVoU4Sz NlOE809uA9UX5IThTDPNnr2QCr5sBK7szN1x8o0DBrolsLChkxt7SxytkuGWhDxo lQurkAhznJQlfReVsRxAUTI/I1139uSZmO2/Kxvj8mqjZ1370VwGNYRuWslc/pvU Ua2bfRU+aKsnRcrsfQqz9iy0UvLsIEC/UW8Djz4zUHTmjhJroWFu7Z0= -----END CERTIFICATE-----Generated at Thu Jul 3 11:22:45 2025 by rpki-client