$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/890/YEoc_em64quYq17bTF0xKnWv7aE.roa File: YEoc_em64quYq17bTF0xKnWv7aE.roa (raw, json) Hash identifier: /O1S5JzyuBalcXbYO6HLtboGEWC4Xpvu4qtlg0c/Gh8= Subject key identifier: 60:4A:1C:FD:E9:BA:E2:AB:98:AB:5E:DB:4C:5D:31:2A:75:AF:ED:A1 Certificate issuer: /CN=DBB4C5FA96B8741BF68B48BF004DBD6FD9636FAD Certificate serial: 0BF3 Authority key identifier: DB:B4:C5:FA:96:B8:74:1B:F6:8B:48:BF:00:4D:BD:6F:D9:63:6F:AD Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27TF-pa4dBv2i0i_AE29b9ljb60.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/YEoc_em64quYq17bTF0xKnWv7aE.roa Signing time: Tue 13 May 2025 07:04:28 +0000 ROA not before: Tue 13 May 2025 07:04:28 +0000 ROA not after: Thu 09 Apr 2026 06:41:00 +0000 asID: 63567 IP address blocks: 103.37.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/27TF-pa4dBv2i0i_AE29b9ljb60.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/27TF-pa4dBv2i0i_AE29b9ljb60.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27TF-pa4dBv2i0i_AE29b9ljb60.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 19:10:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3059 (0xbf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBB4C5FA96B8741BF68B48BF004DBD6FD9636FAD Validity Not Before: May 13 07:04:28 2025 GMT Not After : Apr 9 06:41:00 2026 GMT Subject: CN=604A1CFDE9BAE2AB98AB5EDB4C5D312A75AFEDA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0a:99:a0:d3:ba:56:b5:bd:f9:35:ff:85:84: 3e:68:a8:3c:3b:34:85:50:2c:ae:fb:6a:11:ca:aa: c9:c4:7c:ee:d2:d1:f6:e2:bf:29:72:e0:e2:ce:47: 25:df:a3:c2:f5:48:f8:e7:33:73:24:48:2a:44:da: 4f:70:56:7e:3c:36:fc:75:b8:09:be:2c:a4:70:31: 6b:03:5c:7b:6d:cb:97:09:5b:e1:e9:b1:54:4a:98: 77:7e:68:56:d7:b2:92:a8:9f:f2:04:e7:cc:29:fd: 12:1e:88:3b:c0:28:87:ba:68:8c:16:1f:46:3d:76: 7e:11:cc:de:a7:15:07:91:94:56:60:7e:d6:d8:59: f9:60:97:73:f4:9c:6f:fd:aa:16:df:72:66:34:32: c4:bb:24:fe:ca:d7:0f:d0:6b:7d:48:a0:ad:6b:da: fd:54:a2:10:0c:2a:a3:03:29:83:4f:e3:8a:1e:cf: b6:c2:1a:32:0d:e0:c2:85:cf:b6:3f:68:cb:2d:2f: f8:fa:c8:8e:d3:7c:06:7c:f2:ef:bb:ba:13:4a:b1: 74:d1:d1:df:53:9a:fd:43:d3:c6:37:e9:22:93:1c: b5:41:1e:2a:cc:30:da:10:a0:29:4a:dd:62:ee:85: 4e:09:26:35:34:16:c7:00:7c:4a:72:52:8b:a7:4c: 0c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:4A:1C:FD:E9:BA:E2:AB:98:AB:5E:DB:4C:5D:31:2A:75:AF:ED:A1 X509v3 Authority Key Identifier: keyid:DB:B4:C5:FA:96:B8:74:1B:F6:8B:48:BF:00:4D:BD:6F:D9:63:6F:AD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/27TF-pa4dBv2i0i_AE29b9ljb60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27TF-pa4dBv2i0i_AE29b9ljb60.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/YEoc_em64quYq17bTF0xKnWv7aE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.37.45.0/24 Signature Algorithm: sha256WithRSAEncryption 36:3c:83:4e:67:73:9e:75:c2:d0:08:68:26:17:cb:3d:e3:cb: fc:49:0c:14:7e:51:8d:65:07:e6:b3:76:30:2f:3c:17:85:ec: 60:a7:3d:6b:e4:39:d4:25:34:19:35:c0:e0:40:2f:7b:fd:e8: e3:7e:82:30:37:73:16:4e:c4:b3:fc:91:d1:7b:c5:69:c7:57: 5a:ef:b0:d3:5d:cc:ee:48:3d:4a:58:93:08:5b:bc:e6:fc:aa: 94:02:15:03:9f:c7:f6:d2:64:1d:fc:bc:f0:81:69:28:af:5d: 30:18:9d:82:0c:bf:a1:bc:1e:eb:33:89:31:ba:3c:46:1b:b6: e0:42:82:a3:f2:b7:51:b0:23:ff:67:12:46:f8:b3:8a:a3:52: 9a:0b:09:db:82:a2:9e:cd:c6:7b:3f:ba:7c:2b:6c:db:c8:38: 08:64:dc:d8:f4:8b:cd:7d:09:54:62:55:c9:b1:bc:d6:15:e4: d4:a4:c0:1a:d5:cd:db:03:45:fd:e7:29:46:74:60:68:ec:a5: fa:16:5c:d2:bd:d1:f3:ad:f3:f5:90:68:d5:09:df:10:05:6f: 5c:c9:32:63:ac:b5:64:9e:82:c6:56:63:93:4f:3a:a8:a0:8b: 30:d5:80:cf:ee:e0:a5:25:77:40:af:f1:c6:69:18:f4:bd:42: d6:4c:07:38 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICC/MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREJC NEM1RkE5NkI4NzQxQkY2OEI0OEJGMDA0REJENkZEOTYzNkZBRDAeFw0yNTA1MTMw NzA0MjhaFw0yNjA0MDkwNjQxMDBaMDMxMTAvBgNVBAMTKDYwNEExQ0ZERTlCQUUy QUI5OEFCNUVEQjRDNUQzMTJBNzVBRkVEQTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7Cpmg07pWtb35Nf+FhD5oqDw7NIVQLK77ahHKqsnEfO7S0fbi vyly4OLORyXfo8L1SPjnM3MkSCpE2k9wVn48Nvx1uAm+LKRwMWsDXHtty5cJW+Hp sVRKmHd+aFbXspKon/IE58wp/RIeiDvAKIe6aIwWH0Y9dn4RzN6nFQeRlFZgftbY Wflgl3P0nG/9qhbfcmY0MsS7JP7K1w/Qa31IoK1r2v1UohAMKqMDKYNP44oez7bC GjIN4MKFz7Y/aMstL/j6yI7TfAZ88u+7uhNKsXTR0d9Tmv1D08Y36SKTHLVBHirM MNoQoClK3WLuhU4JJjU0FscAfEpyUounTAxFAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUYEoc/em64quYq17bTF0xKnWv7aEwHwYDVR0jBBgwFoAU27TF+pa4dBv2i0i/ AE29b9ljb60wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODkw LzI3VEYtcGE0ZEJ2MmkwaV9BRTI5YjlsamI2MC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvMjdURi1wYTRkQnYyaTBpX0FFMjliOWxqYjYwLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODkwL1lFb2NfZW02NHF1WXEx N2JURjB4S25XdjdhRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnJS0wDQYJKoZIhvcNAQELBQADggEBADY8g05nc551wtAIaCYXyz3jy/xJDBR+ UY1lB+azdjAvPBeF7GCnPWvkOdQlNBk1wOBAL3v96ON+gjA3cxZOxLP8kdF7xWnH V1rvsNNdzO5IPUpYkwhbvOb8qpQCFQOfx/bSZB38vPCBaSivXTAYnYIMv6G8Husz iTG6PEYbtuBCgqPyt1GwI/9nEkb4s4qjUpoLCduCop7Nxns/unwrbNvIOAhk3Nj0 i819CVRiVcmxvNYV5NSkwBrVzdsDRf3nKUZ0YGjspfoWXNK90fOt8/WQaNUJ3xAF b1zJMmOstWSegsZWY5NPOqigizDVgM/u4KUld0Cv8cZpGPS9QtZMBzg= -----END CERTIFICATE-----Generated at Sat May 17 16:55:06 2025 by rpki-client