$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/fCm0HO3RIYIUkfefOLdCTvm5awM.roa File: fCm0HO3RIYIUkfefOLdCTvm5awM.roa (raw, json) Hash identifier: 6JNGKVMLI331cyu2Q1Yx8W1ywEUi9VL8qpSIskTFc48= Subject key identifier: 7C:29:B4:1C:ED:D1:21:82:14:91:F7:9F:38:B7:42:4E:F9:B9:6B:03 Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0 Certificate serial: 0CB4 Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/fCm0HO3RIYIUkfefOLdCTvm5awM.roa Signing time: Fri 27 Jun 2025 14:08:50 +0000 ROA not before: Fri 27 Jun 2025 14:08:50 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 9304 IP address blocks: 124.173.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 21:44:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3252 (0xcb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0 Validity Not Before: Jun 27 14:08:50 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=7C29B41CEDD121821491F79F38B7424EF9B96B03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:97:ab:61:87:4a:85:ba:a4:23:b1:5f:c9:be: c9:98:0b:81:76:d3:ee:99:57:d8:48:6a:03:cd:ba: 86:b8:10:0a:87:d5:61:9f:4b:8a:5e:83:87:0e:c2: 50:50:c4:f4:82:9f:e0:45:1f:50:91:f4:6e:dd:d6: 6b:cf:f6:5d:99:30:49:b5:3d:fc:4e:d1:00:76:ad: 7b:40:08:2e:04:6b:8f:82:ce:7a:2b:70:b4:da:59: da:56:2f:32:44:01:23:34:51:4f:48:f0:26:d5:85: a6:87:84:01:79:16:62:29:fa:98:d9:03:f8:4c:11: 6f:94:a3:47:b6:ad:da:11:31:f5:35:81:95:c6:a3: 0b:da:da:71:90:82:5d:eb:65:87:e8:58:3d:83:74: 21:7b:e7:66:30:92:84:3c:df:cd:b2:72:d4:7b:b3: c1:54:e6:a6:84:5b:6e:43:56:b9:be:63:a8:3f:c8: 79:2c:00:d6:68:db:fa:af:99:bf:15:56:d5:bb:df: 10:20:90:11:50:e1:52:22:2c:18:0c:b7:d6:98:76: c1:c2:e2:f4:c9:a1:6b:b1:dd:40:4a:ce:03:19:c2: f0:14:c6:6b:c0:5e:07:0a:84:c7:19:af:00:0f:ed: 55:cd:d6:3d:5d:aa:36:57:35:24:3a:78:57:5e:73: 71:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:29:B4:1C:ED:D1:21:82:14:91:F7:9F:38:B7:42:4E:F9:B9:6B:03 X509v3 Authority Key Identifier: keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/fCm0HO3RIYIUkfefOLdCTvm5awM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.173.192.0/18 Signature Algorithm: sha256WithRSAEncryption dd:c9:03:ba:13:85:9d:e1:3f:36:b6:50:92:b3:bd:35:fa:4e: d8:21:7f:cc:88:c8:1c:49:da:af:9f:23:0e:73:af:22:3c:b3: ba:28:e9:2c:9c:0a:03:95:ce:47:4b:a7:92:19:58:b1:1a:82: 1a:d2:90:16:dc:ef:65:35:fb:08:4b:5c:33:28:03:4d:b8:63: ce:fb:49:d6:f6:1a:e4:d9:a2:f4:e0:70:d7:7f:72:fb:c5:50: d7:09:98:3f:b3:e0:41:6a:be:e7:9c:5c:6f:65:a9:9f:53:3e: 49:cb:d1:6a:02:f8:b8:15:2d:65:5f:42:38:f0:ac:50:16:cc: b9:c9:c9:c8:93:c3:3d:c0:ff:8d:ab:f8:0e:a8:d0:67:9b:a8: 8b:13:ce:6c:b0:d5:ef:1c:c7:31:67:e9:a8:05:4a:3d:59:53: 7a:9f:dd:fc:c8:79:0a:65:90:5b:f2:ec:83:91:92:31:9c:59: 9a:88:92:36:27:b9:e6:49:a8:e2:db:aa:fb:94:8d:07:df:7c: 3c:4d:d0:b0:6b:8c:29:9a:57:42:ff:7a:68:6a:23:fa:15:f7: 2d:8d:50:90:f9:b9:0a:80:e9:e1:ad:c1:04:b4:76:00:a7:53: c9:d6:d5:2d:2c:c0:7f:78:17:40:a7:f2:09:fd:d5:10:4d:7d: d9:05:be:10 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICDLQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTQ4 MUI0RTQwOTAxNUQ4RUI3RDAzRjM2MDM4ODMwRUMxMDk4QUJDMDAeFw0yNTA2Mjcx NDA4NTBaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDdDMjlCNDFDRUREMTIx ODIxNDkxRjc5RjM4Qjc0MjRFRjlCOTZCMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6l6thh0qFuqQjsV/JvsmYC4F20+6ZV9hIagPNuoa4EAqH1WGf S4peg4cOwlBQxPSCn+BFH1CR9G7d1mvP9l2ZMEm1PfxO0QB2rXtACC4Ea4+Cznor cLTaWdpWLzJEASM0UU9I8CbVhaaHhAF5FmIp+pjZA/hMEW+Uo0e2rdoRMfU1gZXG owva2nGQgl3rZYfoWD2DdCF752YwkoQ8382yctR7s8FU5qaEW25DVrm+Y6g/yHks ANZo2/qvmb8VVtW73xAgkBFQ4VIiLBgMt9aYdsHC4vTJoWux3UBKzgMZwvAUxmvA XgcKhMcZrwAP7VXN1j1dqjZXNSQ6eFdec3ExAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUfCm0HO3RIYIUkfefOLdCTvm5awMwHwYDVR0jBBgwFoAUlIG05AkBXY630D82 A4gw7BCYq8AwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNi9s SUcwNUFrQlhZNjMwRDgyQTRndzdCQ1lxOEEuY3JsMGMGCCsGAQUFBwEBBFcwVTBT BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw MDAwL2xJRzA1QWtCWFk2MzBEODJBNGd3N0JDWXE4QS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtp LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzYvZkNtMEhPM1JJWUlVa2ZlZk9M ZENUdm01YXdNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNu L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBnyt wDANBgkqhkiG9w0BAQsFAAOCAQEA3ckDuhOFneE/NrZQkrO9NfpO2CF/zIjIHEna r58jDnOvIjyzuijpLJwKA5XOR0unkhlYsRqCGtKQFtzvZTX7CEtcMygDTbhjzvtJ 1vYa5Nmi9OBw139y+8VQ1wmYP7PgQWq+55xcb2Wpn1M+ScvRagL4uBUtZV9COPCs UBbMucnJyJPDPcD/jav4DqjQZ5uoixPObLDV7xzHMWfpqAVKPVlTep/d/Mh5CmWQ W/Lsg5GSMZxZmoiSNie55kmo4tuq+5SNB998PE3QsGuMKZpXQv96aGoj+hX3LY1Q kPm5CoDp4a3BBLR2AKdTydbVLSzAf3gXQKfyCf3VEE192QW+EA== -----END CERTIFICATE-----Generated at Wed Jul 2 20:43:14 2025 by rpki-client