$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/623/EC3gE1dxTtjtPEaJ88WCelQ7A0o.roa File: EC3gE1dxTtjtPEaJ88WCelQ7A0o.roa (raw, json) Hash identifier: xkpEwQMitnNjvZ4Drw0D9EMapoTas5GP4egJkuKAM50= Subject key identifier: 10:2D:E0:13:57:71:4E:D8:ED:3C:46:89:F3:C5:82:7A:54:3B:03:4A Certificate issuer: /CN=DEBFC900EDC34F81DA4827F1F9F63D04E0E2F756 Certificate serial: 07B9 Authority key identifier: DE:BF:C9:00:ED:C3:4F:81:DA:48:27:F1:F9:F6:3D:04:E0:E2:F7:56 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/EC3gE1dxTtjtPEaJ88WCelQ7A0o.roa Signing time: Tue 13 May 2025 06:52:26 +0000 ROA not before: Tue 13 May 2025 06:52:26 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 58834 IP address blocks: 202.168.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/3r_JAO3DT4HaSCfx-fY9BODi91Y.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/3r_JAO3DT4HaSCfx-fY9BODi91Y.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 00:39:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1977 (0x7b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEBFC900EDC34F81DA4827F1F9F63D04E0E2F756 Validity Not Before: May 13 06:52:26 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=102DE01357714ED8ED3C4689F3C5827A543B034A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:93:34:b5:7b:ee:39:be:75:7a:c5:37:af:5d: c6:69:11:fd:6e:85:48:f4:92:97:5e:6b:6f:c6:4e: 82:75:88:1a:54:f7:c4:79:42:cf:63:c4:5b:94:67: 53:bb:c3:39:22:86:15:2f:0b:d4:46:79:63:f6:c7: c6:ab:d1:ba:3f:cc:bd:5c:c4:8c:3a:8b:c9:45:ba: b3:c8:bc:ec:1b:c4:0d:69:c8:e7:f7:ae:13:d2:b9: 35:d0:07:8d:b3:a8:9e:5d:65:04:0d:c1:f9:27:59: 2a:97:cc:ba:9a:53:7f:54:d4:26:fd:dd:90:f4:18: ba:83:2a:60:34:e3:ac:49:6d:e8:33:51:f6:70:b0: d2:44:37:9c:c5:e4:d8:08:0a:ee:b9:da:cc:bc:d0: e9:c9:2b:81:9b:80:9f:74:fc:56:e9:45:40:20:71: cd:c2:6d:79:c3:a0:ba:20:52:3d:3a:c8:f0:2e:ee: d7:8e:a4:1a:d3:14:42:98:f1:2d:78:c0:76:25:22: fd:1f:6e:15:e6:6f:cf:3f:4b:d1:71:0d:9c:7c:bb: 32:2a:9c:bb:12:79:2e:58:e0:5f:48:c5:8f:0d:f4: 36:52:8c:71:1e:e9:8d:c5:5e:b2:d9:d5:75:cf:7d: a6:8f:86:6b:7c:8d:54:ab:af:76:79:7a:dd:44:69: 35:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:2D:E0:13:57:71:4E:D8:ED:3C:46:89:F3:C5:82:7A:54:3B:03:4A X509v3 Authority Key Identifier: keyid:DE:BF:C9:00:ED:C3:4F:81:DA:48:27:F1:F9:F6:3D:04:E0:E2:F7:56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/3r_JAO3DT4HaSCfx-fY9BODi91Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/EC3gE1dxTtjtPEaJ88WCelQ7A0o.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.168.176.0/22 Signature Algorithm: sha256WithRSAEncryption 3d:7c:9f:54:2e:da:42:be:d2:1e:0c:bd:75:e4:bb:4e:e3:22: 6f:6b:1a:23:63:07:20:34:16:6a:95:33:9d:a2:2e:ce:f6:b4: e2:65:77:45:97:b7:b2:88:34:5d:7d:3d:64:41:84:16:0e:45: 7a:93:27:60:7b:03:b9:db:5e:91:10:bb:82:2f:64:23:21:3f: 01:08:c9:07:01:da:2c:44:8d:99:a9:c2:9d:42:29:95:d4:dc: 1e:58:fc:6d:d1:88:bd:78:ac:4d:dc:6b:5a:33:fb:0d:24:e5: 1d:b7:7e:f2:c3:55:98:f8:ab:fa:6a:ab:9f:ca:e0:3a:bc:1f: d4:13:52:67:d2:6f:7b:3f:2d:78:b8:5c:b2:48:e6:c8:d6:07: 8a:60:bb:1c:48:72:7a:7d:fa:bb:fd:31:47:52:d4:93:a6:43: 35:2f:d8:a4:5f:91:19:90:80:4e:34:f3:62:a4:87:41:d2:d7: 36:e6:fa:d8:39:b4:f1:b6:e0:37:bf:1a:fa:ee:22:18:77:f5: 3c:ca:f2:b5:c1:fe:60:05:32:04:47:91:10:c0:dc:86:71:63: e3:92:44:93:d5:8c:0c:b2:2f:18:b9:9d:ae:61:24:8c:88:57: 79:5c:4a:f7:98:9b:34:6d:f0:1a:96:f6:8e:1a:6d:64:8c:3a: 83:02:83:82 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICB7kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREVC RkM5MDBFREMzNEY4MURBNDgyN0YxRjlGNjNEMDRFMEUyRjc1NjAeFw0yNTA1MTMw NjUyMjZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDEwMkRFMDEzNTc3MTRF RDhFRDNDNDY4OUYzQzU4MjdBNTQzQjAzNEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQkzS1e+45vnV6xTevXcZpEf1uhUj0kpdea2/GToJ1iBpU98R5 Qs9jxFuUZ1O7wzkihhUvC9RGeWP2x8ar0bo/zL1cxIw6i8lFurPIvOwbxA1pyOf3 rhPSuTXQB42zqJ5dZQQNwfknWSqXzLqaU39U1Cb93ZD0GLqDKmA046xJbegzUfZw sNJEN5zF5NgICu652sy80OnJK4GbgJ90/FbpRUAgcc3CbXnDoLogUj06yPAu7teO pBrTFEKY8S14wHYlIv0fbhXmb88/S9FxDZx8uzIqnLsSeS5Y4F9IxY8N9DZSjHEe 6Y3FXrLZ1XXPfaaPhmt8jVSrr3Z5et1EaTVBAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUEC3gE1dxTtjtPEaJ88WCelQ7A0owHwYDVR0jBBgwFoAU3r/JAO3DT4HaSCfx +fY9BODi91YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIz LzNyX0pBTzNEVDRIYVNDZngtZlk5Qk9EaTkxWS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvM3JfSkFPM0RUNEhhU0NmeC1mWTlCT0RpOTFZLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIzL0VDM2dFMWR4VHRqdFBF YUo4OFdDZWxRN0Ewby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BALKqLAwDQYJKoZIhvcNAQELBQADggEBAD18n1Qu2kK+0h4MvXXku07jIm9rGiNj ByA0FmqVM52iLs72tOJld0WXt7KINF19PWRBhBYORXqTJ2B7A7nbXpEQu4IvZCMh PwEIyQcB2ixEjZmpwp1CKZXU3B5Y/G3RiL14rE3ca1oz+w0k5R23fvLDVZj4q/pq q5/K4Dq8H9QTUmfSb3s/LXi4XLJI5sjWB4pguxxIcnp9+rv9MUdS1JOmQzUv2KRf kRmQgE4082Kkh0HS1zbm+tg5tPG24De/GvruIhh39TzK8rXB/mAFMgRHkRDA3IZx Y+OSRJPVjAyyLxi5na5hJIyIV3lcSveYmzRt8BqW9o4abWSMOoMCg4I= -----END CERTIFICATE-----Generated at Sun May 18 23:30:25 2025 by rpki-client