$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/Dhn_bw4xhJB691KP5jCNHDjKRbs.roa File: Dhn_bw4xhJB691KP5jCNHDjKRbs.roa (raw, json) Hash identifier: l/MtGIE5yzeoJWXqYNU8VMp88JGLtM3CJinlD5DtYWg= Subject key identifier: 0E:19:FF:6F:0E:31:84:90:7A:F7:52:8F:E6:30:8D:1C:38:CA:45:BB Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Certificate serial: 305D Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/Dhn_bw4xhJB691KP5jCNHDjKRbs.roa Signing time: Sun 30 Mar 2025 19:58:18 +0000 ROA not before: Sun 30 Mar 2025 19:58:18 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 134762 IP address blocks: 43.226.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 19:08:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12381 (0x305d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Validity Not Before: Mar 30 19:58:18 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=0E19FF6F0E3184907AF7528FE6308D1C38CA45BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9e:ee:a9:f4:45:fa:5f:b7:29:cb:70:44:a8: 35:5b:e8:de:4d:31:c7:20:b9:b0:ed:ff:b3:e2:7a: 0b:e3:75:b6:80:e1:e5:68:cd:d1:8f:a8:30:87:a9: 8b:78:d6:1e:1d:22:95:b7:8d:bc:c5:16:6f:f4:30: 05:df:48:96:43:47:bb:64:26:60:32:c1:7f:5d:ef: 26:f3:84:0f:1a:ab:49:bc:85:36:d4:96:bc:b0:4f: 98:76:eb:48:b3:4f:59:4f:9b:96:16:fe:bc:d4:bc: 60:44:66:c0:a2:1a:e5:d4:f1:c2:2e:49:0f:9b:07: c2:92:1a:25:e8:d2:d7:b8:79:da:c3:78:dd:e3:3a: 6d:e3:17:ae:6c:fd:23:6a:43:50:f2:95:1e:b6:83: 77:71:e0:d4:e9:d0:f3:7d:4a:aa:21:d4:4d:84:31: a7:1c:31:a9:20:9e:49:c1:c7:1d:6c:0a:6b:5b:cc: c1:8b:a2:7d:96:45:00:81:7b:ae:f4:b6:c5:13:02: e5:89:25:16:0e:29:a0:e8:d5:29:fc:2a:36:bb:93: a4:ef:10:32:0c:83:6a:69:52:48:f9:a6:7c:e5:06: 2d:26:3e:bb:a8:15:7d:81:8c:9f:31:69:b9:e7:7f: 58:1d:3a:9b:20:9e:36:0f:be:f5:45:37:a9:95:3f: d4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:19:FF:6F:0E:31:84:90:7A:F7:52:8F:E6:30:8D:1C:38:CA:45:BB X509v3 Authority Key Identifier: keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/Dhn_bw4xhJB691KP5jCNHDjKRbs.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.226.54.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:22:df:e7:5e:88:a3:cf:1f:18:31:97:28:0e:84:5e:7e:d4: ad:bc:6a:df:bb:e4:c8:0a:5e:78:dd:ac:94:12:4d:60:d8:1b: 11:85:63:55:64:3f:39:e3:0a:c3:6e:e0:7a:98:bf:7f:f6:58: f5:59:cd:9e:f2:c0:d3:f3:3a:ee:a5:09:0e:25:07:0f:6f:20: 89:e7:88:04:91:c3:4a:e1:f8:61:99:b3:79:9b:00:06:f6:e6: 28:bb:24:11:b8:cb:f9:9e:ce:a9:5d:be:6e:9e:d0:83:78:b0: 02:72:01:05:ca:a1:0c:14:86:41:9a:b9:05:e9:d1:12:4f:d4: 70:f0:60:ea:53:9e:d4:1d:93:d1:2b:fb:21:6e:b5:4a:68:1f: c4:57:0f:fa:7c:61:a1:20:b8:8e:65:3d:e0:bf:19:c5:4c:b2: ab:6f:8c:a2:9b:bb:32:19:57:34:45:15:0f:5d:e3:b4:dc:85: 95:20:70:87:e4:ca:bb:8c:57:69:6d:85:2a:c0:71:fc:e7:d6: 1e:d8:48:67:0a:81:8f:1a:d0:dd:bd:ed:bd:dc:ea:74:2d:86: 3b:03:89:b7:d0:c8:a1:26:50:a4:40:0a:a2:0d:61:b1:99:24: 0b:fa:6e:e1:6e:5e:4b:cf:ca:ca:fa:6a:41:65:19:2d:c2:b0: 9d:a3:d2:3e -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICMF0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEFF NENGNzhCNDlERjBCMkMxRDI5RDMyRTQ4QTk0M0FFNEY0MUFDQzAeFw0yNTAzMzAx OTU4MThaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDBFMTlGRjZGMEUzMTg0 OTA3QUY3NTI4RkU2MzA4RDFDMzhDQTQ1QkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSnu6p9EX6X7cpy3BEqDVb6N5NMccgubDt/7PiegvjdbaA4eVo zdGPqDCHqYt41h4dIpW3jbzFFm/0MAXfSJZDR7tkJmAywX9d7ybzhA8aq0m8hTbU lrywT5h260izT1lPm5YW/rzUvGBEZsCiGuXU8cIuSQ+bB8KSGiXo0te4edrDeN3j Om3jF65s/SNqQ1DylR62g3dx4NTp0PN9Sqoh1E2EMaccMakgnknBxx1sCmtbzMGL on2WRQCBe670tsUTAuWJJRYOKaDo1Sn8Kja7k6TvEDIMg2ppUkj5pnzlBi0mPruo FX2BjJ8xabnnf1gdOpsgnjYPvvVFN6mVP9QHAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUDhn/bw4xhJB691KP5jCNHDjKRbswHwYDVR0jBBgwFoAUiuTPeLSd8LLB0p0y 5IqUOuT0GswwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTY2 My9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2l1VFBlTFNkOExMQjBwMHk1SXFVT3VUMEdzdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2NjMvRGhuX2J3NHhoSkI2 OTFLUDVqQ05IRGpLUmJzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEACviNjANBgkqhkiG9w0BAQsFAAOCAQEAfSLf516Io88fGDGXKA6EXn7Urbxq 37vkyApeeN2slBJNYNgbEYVjVWQ/OeMKw27gepi/f/ZY9VnNnvLA0/M67qUJDiUH D28gieeIBJHDSuH4YZmzeZsABvbmKLskEbjL+Z7OqV2+bp7Qg3iwAnIBBcqhDBSG QZq5BenREk/UcPBg6lOe1B2T0Sv7IW61SmgfxFcP+nxhoSC4jmU94L8ZxUyyq2+M opu7MhlXNEUVD13jtNyFlSBwh+TKu4xXaW2FKsBx/OfWHthIZwqBjxrQ3b3tvdzq dC2GOwOJt9DIoSZQpEAKog1hsZkkC/pu4W5eS8/KyvpqQWUZLcKwnaPSPg== -----END CERTIFICATE-----Generated at Sat Apr 26 17:33:44 2025 by rpki-client