$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/192/9omd2_8tYCPypdLTo0NwVrdK9Xo.roa File: 9omd2_8tYCPypdLTo0NwVrdK9Xo.roa (raw, json) Hash identifier: bDV/PevuKEYmN+weMPipHmu9hjEx2GxpXrrkL+BbXJo= Subject key identifier: F6:89:9D:DB:FF:2D:60:23:F2:A5:D2:D3:A3:43:70:56:B7:4A:F5:7A Certificate issuer: /CN=193E93B5D1DD046927E649A3FC2328E119C40863 Certificate serial: 1D61 Authority key identifier: 19:3E:93:B5:D1:DD:04:69:27:E6:49:A3:FC:23:28:E1:19:C4:08:63 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GT6TtdHdBGkn5kmj_CMo4RnECGM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/9omd2_8tYCPypdLTo0NwVrdK9Xo.roa Signing time: Wed 09 Apr 2025 06:47:44 +0000 ROA not before: Wed 09 Apr 2025 06:47:44 +0000 ROA not after: Thu 09 Apr 2026 06:39:56 +0000 asID: 4134 IP address blocks: 202.141.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/GT6TtdHdBGkn5kmj_CMo4RnECGM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/GT6TtdHdBGkn5kmj_CMo4RnECGM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GT6TtdHdBGkn5kmj_CMo4RnECGM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 14:38:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7521 (0x1d61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=193E93B5D1DD046927E649A3FC2328E119C40863 Validity Not Before: Apr 9 06:47:44 2025 GMT Not After : Apr 9 06:39:56 2026 GMT Subject: CN=F6899DDBFF2D6023F2A5D2D3A3437056B74AF57A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f5:86:92:ac:7e:97:9d:a2:2c:6a:c7:1e:ea: 5c:51:cd:a8:3d:c8:0e:ea:97:07:61:d1:99:65:ed: c4:cf:a3:96:67:c7:3f:b1:80:80:db:c7:46:a2:ef: 55:3b:06:11:33:10:c3:b6:93:73:4e:ed:47:2d:6c: f3:ca:75:ea:b3:ef:99:69:7b:4e:94:d8:d6:16:eb: db:a4:85:9d:3f:66:b8:ac:b7:5b:c5:66:09:0e:5b: 61:d1:54:e8:5c:14:19:83:92:46:60:2a:ab:02:4e: 8b:ef:cc:61:f5:74:10:1a:ee:73:a8:bd:b0:99:0b: 3d:76:26:36:0a:d7:af:ea:9f:43:ad:b3:95:22:a9: 29:2c:4b:93:ea:94:0f:12:8b:77:55:6d:9e:94:c7: b1:7a:41:00:b9:54:4a:98:54:fb:1e:69:45:9f:50: 0b:94:cf:34:ac:88:9e:69:f4:5c:fb:75:98:50:65: 26:e9:0e:54:82:b5:34:1f:a1:eb:87:e1:bf:e2:35: 9e:d3:84:46:02:04:d6:68:94:c8:7d:64:bc:9b:2e: 78:af:ad:f5:c3:5e:e5:09:0e:5a:b6:81:b5:d6:bc: 4c:3e:ef:31:45:9e:8f:01:9f:d7:cd:41:af:d3:de: 97:e7:67:62:0f:fa:84:b4:2c:81:af:8a:e2:91:d5: bf:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:89:9D:DB:FF:2D:60:23:F2:A5:D2:D3:A3:43:70:56:B7:4A:F5:7A X509v3 Authority Key Identifier: keyid:19:3E:93:B5:D1:DD:04:69:27:E6:49:A3:FC:23:28:E1:19:C4:08:63 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/GT6TtdHdBGkn5kmj_CMo4RnECGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GT6TtdHdBGkn5kmj_CMo4RnECGM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/9omd2_8tYCPypdLTo0NwVrdK9Xo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.141.160.0/20 Signature Algorithm: sha256WithRSAEncryption b0:65:26:30:ed:85:cc:34:a3:42:5d:e0:8c:eb:d3:81:0a:22: 72:ae:8e:72:56:8f:f1:a4:a6:90:4f:62:28:95:15:d7:46:10: 3f:3d:da:41:e4:1a:e5:9f:92:ad:3a:8a:aa:45:9d:02:bd:fd: da:c4:32:44:b5:4f:28:cf:f8:26:4e:e2:2f:88:ab:74:e8:f2: be:e9:c8:86:aa:21:33:38:ea:f8:00:5e:59:6a:9a:8d:0c:ca: f4:55:db:88:9a:07:ee:c3:0e:69:49:48:0f:aa:cc:d3:5a:08: 6c:c0:6f:4d:a6:f0:6c:1e:f1:2f:34:06:de:f4:c9:76:d1:f9: 27:32:21:a6:c1:b0:7d:26:fd:c6:f7:ec:51:46:b1:01:30:08: f6:ca:7f:1f:78:cb:fe:98:1c:36:91:bf:8e:aa:2e:f0:11:68: a9:1f:3b:8d:8a:fe:33:40:50:a1:d3:ce:84:81:f7:1d:9f:66: fe:e7:5e:4f:b4:be:00:33:e8:c0:fe:4e:d6:d1:80:4d:c9:f5: 77:24:2e:04:8f:05:6e:80:a9:8d:1c:60:aa:12:cb:98:17:2d: 47:00:e9:c6:be:43:9e:83:f7:63:73:3f:0a:c1:c1:9e:64:a0: 7f:f3:17:0b:8a:c3:e7:c9:04:2e:56:98:7f:57:00:bc:c9:70: af:49:56:de -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHWEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTkz RTkzQjVEMUREMDQ2OTI3RTY0OUEzRkMyMzI4RTExOUM0MDg2MzAeFw0yNTA0MDkw NjQ3NDRaFw0yNjA0MDkwNjM5NTZaMDMxMTAvBgNVBAMTKEY2ODk5RERCRkYyRDYw MjNGMkE1RDJEM0EzNDM3MDU2Qjc0QUY1N0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCo9YaSrH6XnaIsasce6lxRzag9yA7qlwdh0Zll7cTPo5Znxz+x gIDbx0ai71U7BhEzEMO2k3NO7UctbPPKdeqz75lpe06U2NYW69ukhZ0/Zrist1vF ZgkOW2HRVOhcFBmDkkZgKqsCTovvzGH1dBAa7nOovbCZCz12JjYK16/qn0Ots5Ui qSksS5PqlA8Si3dVbZ6Ux7F6QQC5VEqYVPseaUWfUAuUzzSsiJ5p9Fz7dZhQZSbp DlSCtTQfoeuH4b/iNZ7ThEYCBNZolMh9ZLybLnivrfXDXuUJDlq2gbXWvEw+7zFF no8Bn9fNQa/T3pfnZ2IP+oS0LIGviuKR1b+ZAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU9omd2/8tYCPypdLTo0NwVrdK9XowHwYDVR0jBBgwFoAUGT6TtdHdBGkn5kmj /CMo4RnECGMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTky L0dUNlR0ZEhkQkdrbjVrbWpfQ01vNFJuRUNHTS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvR1Q2VHRkSGRCR2tuNWttal9DTW80Um5FQ0dNLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTkyLzlvbWQyXzh0WUNQeXBk TFRvME53VnJkSzlYby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BATKjaAwDQYJKoZIhvcNAQELBQADggEBALBlJjDthcw0o0Jd4Izr04EKInKujnJW j/GkppBPYiiVFddGED892kHkGuWfkq06iqpFnQK9/drEMkS1TyjP+CZO4i+Iq3To 8r7pyIaqITM46vgAXllqmo0MyvRV24iaB+7DDmlJSA+qzNNaCGzAb02m8Gwe8S80 Bt70yXbR+ScyIabBsH0m/cb37FFGsQEwCPbKfx94y/6YHDaRv46qLvARaKkfO42K /jNAUKHTzoSB9x2fZv7nXk+0vgAz6MD+TtbRgE3J9XckLgSPBW6AqY0cYKoSy5gX LUcA6ca+Q56D92NzPwrBwZ5koH/zFwuKw+fJBC5WmH9XALzJcK9JVt4= -----END CERTIFICATE-----Generated at Sat Apr 26 14:18:46 2025 by rpki-client