$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/64/AasOdNmv0zHu4_c9-AzjNCkc0uI.roa File: AasOdNmv0zHu4_c9-AzjNCkc0uI.roa (raw, json) Hash identifier: N8YP934qLXcJhJar5NjswQEwIUS7svcuTKLe+uxGRAM= Subject key identifier: 01:AB:0E:74:D9:AF:D3:31:EE:E3:F7:3D:F8:0C:E3:34:29:1C:D2:E2 Certificate issuer: /CN=5EB8C57D72F7946DD7B2420599288ECA153CB709 Certificate serial: 17 Authority key identifier: 5E:B8:C5:7D:72:F7:94:6D:D7:B2:42:05:99:28:8E:CA:15:3C:B7:09 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XrjFfXL3lG3XskIFmSiOyhU8twk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/64/AasOdNmv0zHu4_c9-AzjNCkc0uI.roa Signing time: Mon 26 May 2025 09:51:01 +0000 ROA not before: Mon 26 May 2025 09:51:01 +0000 ROA not after: Tue 26 May 2026 00:40:26 +0000 asID: 9803 IP address blocks: 211.150.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/64/XrjFfXL3lG3XskIFmSiOyhU8twk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/64/XrjFfXL3lG3XskIFmSiOyhU8twk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XrjFfXL3lG3XskIFmSiOyhU8twk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 16:41:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EB8C57D72F7946DD7B2420599288ECA153CB709 Validity Not Before: May 26 09:51:01 2025 GMT Not After : May 26 00:40:26 2026 GMT Subject: CN=01AB0E74D9AFD331EEE3F73DF80CE334291CD2E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f0:5d:0c:fa:3e:d6:a3:2a:34:29:81:98:ac: 2e:8b:9f:44:c6:6b:a2:27:13:31:a5:c0:b0:79:24: 4e:bf:2a:8d:6d:cf:45:48:60:04:46:ba:be:82:b9: b7:2f:91:cb:9c:c6:1c:a1:ba:80:62:01:17:eb:f3: d3:95:5e:43:d5:40:82:40:0c:72:6f:06:4f:09:3f: 67:e3:2e:d6:a4:57:19:e5:d9:33:95:64:3d:88:4a: f4:fd:a2:d8:1a:57:4b:1e:c7:41:f8:0e:af:91:04: e3:6d:66:c2:ac:20:a1:38:6a:75:c7:95:cc:93:ac: 1e:1d:07:82:26:d6:fb:7d:97:25:91:8b:61:41:2d: 88:b8:2e:ee:82:98:f2:66:db:a1:37:b3:12:0a:f0: 96:00:a4:71:2c:a6:99:2c:53:78:5b:fa:63:e6:b1: 1d:91:cd:1d:e1:f1:e8:d2:c1:35:6b:4c:30:27:c9: e5:b0:60:08:3d:88:68:44:a1:87:be:68:9d:70:fc: 2e:bd:06:0f:2b:3f:0c:8e:83:31:38:47:df:dd:f0: 29:3d:f2:95:d8:ee:bd:58:6e:4d:7e:1a:5a:61:74: a5:d9:e8:90:05:7f:77:3f:d1:7d:84:cf:27:e1:1b: 5d:85:2c:e4:25:18:b1:ff:31:43:44:3d:31:c9:9c: 2c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:AB:0E:74:D9:AF:D3:31:EE:E3:F7:3D:F8:0C:E3:34:29:1C:D2:E2 X509v3 Authority Key Identifier: keyid:5E:B8:C5:7D:72:F7:94:6D:D7:B2:42:05:99:28:8E:CA:15:3C:B7:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/64/XrjFfXL3lG3XskIFmSiOyhU8twk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XrjFfXL3lG3XskIFmSiOyhU8twk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/64/AasOdNmv0zHu4_c9-AzjNCkc0uI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.150.128.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:4d:dc:28:c2:4d:a8:ee:29:27:6e:38:f2:b9:a6:6f:00:18: f1:e2:1f:f5:cb:6a:6d:fc:4f:71:da:15:ff:0c:34:83:fb:18: 5d:24:b8:8a:30:ec:79:4c:c4:44:22:42:18:df:66:f9:11:e6: 2f:cf:e9:58:b3:37:cf:1b:20:c5:0f:86:4c:fe:ef:c0:01:5e: d4:85:88:54:3e:a2:92:39:0f:64:f6:3c:7e:b0:d5:13:e5:04: 6e:a7:44:f2:83:fa:cc:8a:4e:cd:49:ef:b5:9c:6c:d0:79:52: 5d:5b:f5:01:74:c5:19:8f:cb:36:b9:7c:28:f6:61:a9:81:18: f8:78:1d:10:2d:d8:d5:c8:fb:a2:14:e4:e3:53:2f:dc:d9:ab: 11:a2:67:8e:6e:ee:5b:c8:ad:4e:9f:07:c1:60:aa:eb:b0:88: b3:6b:d7:9b:d7:c2:39:6f:a6:20:5d:93:18:f0:b9:ae:47:fe: f0:69:03:db:df:a6:ab:07:80:40:4e:50:89:f1:c6:7a:81:b9: 94:e0:7d:02:c9:37:8f:ed:d9:61:a9:10:68:42:27:ea:5b:8e: 2e:2e:30:e1:60:04:e6:2a:d4:3a:14:27:dd:5d:a3:6d:63:a2: 10:b9:ce:71:88:b1:4c:34:c6:27:29:b2:36:13:46:1a:35:f0: f6:20:d2:c1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIBFzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1RUI4 QzU3RDcyRjc5NDZERDdCMjQyMDU5OTI4OEVDQTE1M0NCNzA5MB4XDTI1MDUyNjA5 NTEwMVoXDTI2MDUyNjAwNDAyNlowMzExMC8GA1UEAxMoMDFBQjBFNzREOUFGRDMz MUVFRTNGNzNERjgwQ0UzMzQyOTFDRDJFMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANXwXQz6PtajKjQpgZisLoufRMZroicTMaXAsHkkTr8qjW3PRUhg BEa6voK5ty+Ry5zGHKG6gGIBF+vz05VeQ9VAgkAMcm8GTwk/Z+Mu1qRXGeXZM5Vk PYhK9P2i2BpXSx7HQfgOr5EE421mwqwgoThqdceVzJOsHh0HgibW+32XJZGLYUEt iLgu7oKY8mbboTezEgrwlgCkcSymmSxTeFv6Y+axHZHNHeHx6NLBNWtMMCfJ5bBg CD2IaEShh75onXD8Lr0GDys/DI6DMThH393wKT3yldjuvVhuTX4aWmF0pdnokAV/ dz/RfYTPJ+EbXYUs5CUYsf8xQ0Q9McmcLHUCAwEAAaOCAe8wggHrMB0GA1UdDgQW BBQBqw502a/TMe7j9z34DOM0KRzS4jAfBgNVHSMEGDAWgBReuMV9cveUbdeyQgWZ KI7KFTy3CTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsGA1UdHwRUMFIwUKBO oEyGSnJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC82NC9Y cmpGZlhMM2xHM1hza0lGbVNpT3loVTh0d2suY3JsMGMGCCsGAQUFBwEBBFcwVTBT BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw MDAwL1hyakZmWEwzbEczWHNrSUZtU2lPeWhVOHR3ay5jZXIwDgYDVR0PAQH/BAQD AgeAMIGbBggrBgEFBQcBCwSBjjCBizBWBggrBgEFBQcwC4ZKcnN5bmM6Ly9ycGtp LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzY0L0Fhc09kTm12MHpIdTRfYzkt QXpqTkNrYzB1SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5j bi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT loAwDQYJKoZIhvcNAQELBQADggEBAA9N3CjCTajuKSduOPK5pm8AGPHiH/XLam38 T3HaFf8MNIP7GF0kuIow7HlMxEQiQhjfZvkR5i/P6VizN88bIMUPhkz+78ABXtSF iFQ+opI5D2T2PH6w1RPlBG6nRPKD+syKTs1J77WcbNB5Ul1b9QF0xRmPyza5fCj2 YamBGPh4HRAt2NXI+6IU5ONTL9zZqxGiZ45u7lvIrU6fB8FgquuwiLNr15vXwjlv piBdkxjwua5H/vBpA9vfpqsHgEBOUInxxnqBuZTgfQLJN4/t2WGpEGhCJ+pbji4u MOFgBOYq1DoUJ91do21johC5znGIsUw0xicpsjYTRho18PYg0sE= -----END CERTIFICATE-----Generated at Fri Jul 4 14:39:11 2025 by rpki-client