$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/767/ZosdEjPAWx8LHeI97UmA2DI8sRM.roa File: ZosdEjPAWx8LHeI97UmA2DI8sRM.roa (raw, json) Hash identifier: TiPMhw8nKy1jKUPdHMc1CT4xJZde7QCehIKSh5mRHqk= Subject key identifier: 66:8B:1D:12:33:C0:5B:1F:0B:1D:E2:3D:ED:49:80:D8:32:3C:B1:13 Certificate issuer: /CN=FEE0C827CE296202006EB4ED2B6595DCE0E97C7B Certificate serial: 186C Authority key identifier: FE:E0:C8:27:CE:29:62:02:00:6E:B4:ED:2B:65:95:DC:E0:E9:7C:7B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_uDIJ84pYgIAbrTtK2WV3ODpfHs.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/ZosdEjPAWx8LHeI97UmA2DI8sRM.roa Signing time: Tue 20 May 2025 07:43:23 +0000 ROA not before: Tue 20 May 2025 07:43:23 +0000 ROA not after: Thu 09 Apr 2026 06:40:47 +0000 asID: 4808 IP address blocks: 103.43.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/_uDIJ84pYgIAbrTtK2WV3ODpfHs.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/_uDIJ84pYgIAbrTtK2WV3ODpfHs.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_uDIJ84pYgIAbrTtK2WV3ODpfHs.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 01:11:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6252 (0x186c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FEE0C827CE296202006EB4ED2B6595DCE0E97C7B Validity Not Before: May 20 07:43:23 2025 GMT Not After : Apr 9 06:40:47 2026 GMT Subject: CN=668B1D1233C05B1F0B1DE23DED4980D8323CB113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bb:06:43:c3:ce:ba:9a:5e:e9:0f:c1:62:a1: a4:26:24:ad:d9:3e:39:b9:11:4d:39:70:59:62:4b: 70:05:90:d8:6a:53:87:12:0f:8d:94:22:e8:bf:1e: 54:69:81:34:f5:c2:72:d5:3e:68:ad:1f:55:12:31: b9:a8:71:bd:f8:ce:a4:1d:a0:85:63:a3:6f:5f:86: 72:86:3a:20:ce:62:5a:2f:4b:98:2c:9f:92:66:8e: 00:3d:ab:6a:de:d7:b8:cd:b9:a6:03:42:39:88:7c: a9:68:29:f3:31:0d:c4:50:8b:6c:ac:82:43:5e:21: 1d:28:4c:da:36:4e:94:83:0d:ae:99:05:08:7d:8e: 53:4a:4c:51:5b:ca:40:e5:0c:52:c4:b8:d7:54:01: 29:0d:14:22:85:02:21:30:cd:e3:ba:bd:2b:15:48: 30:2f:62:52:db:a7:74:f0:28:0c:44:f4:61:56:a6: 5c:42:a1:d9:87:fc:bd:28:ee:20:6a:b9:d5:8e:48: 0a:81:a2:93:2e:19:6d:da:a5:57:27:62:a1:30:ed: 37:1c:95:95:24:fe:42:a3:c2:d1:2d:77:6b:86:d4: 3f:f0:1d:5c:75:3e:96:44:c6:06:d6:a6:d8:9e:35: 93:37:99:45:ce:9b:66:a7:43:da:84:87:b0:ca:29: c0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:8B:1D:12:33:C0:5B:1F:0B:1D:E2:3D:ED:49:80:D8:32:3C:B1:13 X509v3 Authority Key Identifier: keyid:FE:E0:C8:27:CE:29:62:02:00:6E:B4:ED:2B:65:95:DC:E0:E9:7C:7B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/_uDIJ84pYgIAbrTtK2WV3ODpfHs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_uDIJ84pYgIAbrTtK2WV3ODpfHs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/ZosdEjPAWx8LHeI97UmA2DI8sRM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.43.240.0/24 Signature Algorithm: sha256WithRSAEncryption 35:78:57:aa:cf:84:ea:27:eb:9c:31:ca:c8:92:b4:34:30:08: b6:b3:f0:ab:c4:87:f6:f6:91:3b:b0:3d:a8:12:08:27:9a:8c: 8c:31:37:c5:00:8d:b7:7a:6c:9d:f8:9c:66:b6:d9:41:26:a5: 88:6d:be:e6:4b:04:61:c7:c5:11:85:d6:e0:c0:94:9b:55:25: 99:55:70:a7:77:3a:46:52:38:37:4d:c7:2a:a8:cc:a6:29:bd: 72:d2:1e:d3:45:3f:7f:80:8d:6c:1f:2b:e6:72:c7:3c:7b:97: 93:48:41:c4:19:4c:d6:31:26:38:3d:c8:86:64:d9:82:27:cb: b6:d7:de:e1:63:41:87:70:ae:40:86:f1:9d:ee:2b:fb:fc:71: 93:9d:03:50:8f:81:41:d3:36:cc:9f:96:13:dd:66:58:0e:ea: 07:39:8b:ca:2e:79:8d:dd:7e:07:6b:9b:0f:28:93:17:9c:bd: ea:ea:c0:00:bb:62:1b:d9:96:d2:f0:16:fb:04:53:00:d6:35: 71:e7:76:b2:5f:6b:18:6c:2d:d6:0f:ab:db:b2:a5:24:e3:9f: 31:19:1e:0b:9b:97:fc:18:68:24:78:55:4c:ac:6c:20:b3:37: 18:38:10:84:38:00:3d:c9:56:1f:3e:dc:1b:72:a1:4c:d3:4f: 89:80:fa:6b -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGGwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkVF MEM4MjdDRTI5NjIwMjAwNkVCNEVEMkI2NTk1RENFMEU5N0M3QjAeFw0yNTA1MjAw NzQzMjNaFw0yNjA0MDkwNjQwNDdaMDMxMTAvBgNVBAMTKDY2OEIxRDEyMzNDMDVC MUYwQjFERTIzREVENDk4MEQ4MzIzQ0IxMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFuwZDw866ml7pD8FioaQmJK3ZPjm5EU05cFliS3AFkNhqU4cS D42UIui/HlRpgTT1wnLVPmitH1USMbmocb34zqQdoIVjo29fhnKGOiDOYlovS5gs n5JmjgA9q2re17jNuaYDQjmIfKloKfMxDcRQi2ysgkNeIR0oTNo2TpSDDa6ZBQh9 jlNKTFFbykDlDFLEuNdUASkNFCKFAiEwzeO6vSsVSDAvYlLbp3TwKAxE9GFWplxC odmH/L0o7iBqudWOSAqBopMuGW3apVcnYqEw7TcclZUk/kKjwtEtd2uG1D/wHVx1 PpZExgbWptieNZM3mUXOm2anQ9qEh7DKKcCvAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUZosdEjPAWx8LHeI97UmA2DI8sRMwHwYDVR0jBBgwFoAU/uDIJ84pYgIAbrTt K2WV3ODpfHswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzY3 L191RElKODRwWWdJQWJyVHRLMldWM09EcGZIcy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvX3VESUo4NHBZZ0lBYnJUdEsyV1YzT0RwZkhzLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzY3L1pvc2RFalBBV3g4TEhl STk3VW1BMkRJOHNSTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnK/AwDQYJKoZIhvcNAQELBQADggEBADV4V6rPhOon65wxysiStDQwCLaz8KvE h/b2kTuwPagSCCeajIwxN8UAjbd6bJ34nGa22UEmpYhtvuZLBGHHxRGF1uDAlJtV JZlVcKd3OkZSODdNxyqozKYpvXLSHtNFP3+AjWwfK+Zyxzx7l5NIQcQZTNYxJjg9 yIZk2YIny7bX3uFjQYdwrkCG8Z3uK/v8cZOdA1CPgUHTNsyflhPdZlgO6gc5i8ou eY3dfgdrmw8okxecverqwAC7YhvZltLwFvsEUwDWNXHndrJfaxhsLdYPq9uypSTj nzEZHgubl/wYaCR4VUysbCCzNxg4EIQ4AD3JVh8+3BtyoUzTT4mA+ms= -----END CERTIFICATE-----Generated at Fri Jul 4 00:11:02 2025 by rpki-client