$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/0OxXWPbQIrCoNZY4f1SN1B-Z3vw.roa File: 0OxXWPbQIrCoNZY4f1SN1B-Z3vw.roa (raw, json) Hash identifier: w4Zw+1+/h2bxwe2IxC3t1hpwmz+0dzYGkrOhuk7JaDk= Subject key identifier: D0:EC:57:58:F6:D0:22:B0:A8:35:96:38:7F:54:8D:D4:1F:99:DE:FC Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 1344 Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/0OxXWPbQIrCoNZY4f1SN1B-Z3vw.roa Signing time: Thu 22 May 2025 09:04:44 +0000 ROA not before: Thu 22 May 2025 09:04:44 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 55990 IP address blocks: 101.245.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 09:43:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4932 (0x1344) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: May 22 09:04:44 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=D0EC5758F6D022B0A83596387F548DD41F99DEFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3f:fa:98:62:3c:9e:e1:8e:46:77:a8:40:a7: 49:9c:8f:a4:68:3a:d8:49:73:ca:84:fc:18:52:62: e8:10:25:2f:ea:92:5b:4a:41:65:0b:a9:6d:23:0e: 1f:14:76:07:65:24:b4:a1:99:62:c7:69:ff:00:38: de:ae:a4:56:27:ba:de:ac:de:df:eb:67:f2:6a:0a: ff:27:03:04:1f:01:94:ff:ea:f5:33:55:78:7a:41: c2:9a:7b:97:13:1c:09:9e:7f:dc:31:78:50:be:96: c4:76:1d:e1:64:8e:8b:29:3b:c7:26:7b:1c:d0:2a: 8a:8b:56:b6:34:84:42:82:8c:e4:ff:38:dd:e4:24: d9:13:3d:c6:e5:40:d0:4e:89:6c:47:82:f5:0c:03: d0:9f:6d:83:20:94:9c:f5:53:a9:5f:f5:92:b2:00: ff:38:1a:30:71:cb:a0:e5:83:86:71:97:9f:01:1c: 69:e8:42:e8:8d:bd:d0:e1:94:13:fc:f9:c4:24:a4: 4c:c7:c8:bf:c8:02:73:b7:b6:df:a4:0b:45:37:81: 23:79:4f:bf:10:a3:e5:2e:31:7d:53:2e:ae:46:16: 07:98:61:4e:74:a1:16:1d:fa:7d:7d:03:23:30:71: ca:00:77:a1:df:c4:b8:06:14:1d:6b:48:dc:d9:a1: d3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:EC:57:58:F6:D0:22:B0:A8:35:96:38:7F:54:8D:D4:1F:99:DE:FC X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/0OxXWPbQIrCoNZY4f1SN1B-Z3vw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 101.245.44.0/22 Signature Algorithm: sha256WithRSAEncryption b5:a8:81:37:f3:3d:b6:b7:64:4b:fe:59:92:98:df:12:a9:a1: 90:aa:d7:eb:5e:e1:13:05:c7:5c:27:fa:cf:ba:12:d9:af:80: b5:de:d0:74:69:e5:7a:75:c7:f7:a1:d8:f8:5d:ac:98:ce:4a: ed:20:1b:1a:9a:af:74:d7:e7:e2:14:8d:42:5d:1a:fa:74:47: 60:d6:74:a0:62:3b:eb:17:42:10:16:30:31:2c:45:66:36:b8: a8:84:49:70:9f:5c:91:f0:c8:9c:a7:63:09:64:12:9a:a9:20: 1c:4e:23:cf:fc:23:ff:33:dd:ea:f1:13:0d:cd:81:11:fe:23: a1:9b:ff:86:bd:9f:a9:f8:3b:1c:ab:a2:56:4a:54:ba:1a:04: 12:85:eb:21:91:4f:0c:6b:cf:ab:59:31:9a:69:ab:d2:63:5d: 9a:b1:0d:b1:16:e7:25:6c:21:c0:bf:fc:ad:05:97:ab:d4:df: e8:ef:3b:2c:82:11:3a:3a:d9:44:c1:ac:dc:e1:25:6e:7a:18: d7:71:f1:ac:f3:23:0b:34:33:c7:4b:ac:e0:cc:74:0c:45:5a: 5e:e5:ca:37:7a:4e:1b:45:8a:cc:ac:99:91:e3:5a:f2:7a:0d: fa:fe:ac:c5:ce:4a:fa:45:79:f0:c3:22:fc:70:e4:c6:30:73: 8d:55:e8:04 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICE0QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNTA1MjIw OTA0NDRaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEQwRUM1NzU4RjZEMDIy QjBBODM1OTYzODdGNTQ4REQ0MUY5OURFRkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQP/qYYjye4Y5Gd6hAp0mcj6RoOthJc8qE/BhSYugQJS/qkltK QWULqW0jDh8UdgdlJLShmWLHaf8AON6upFYnut6s3t/rZ/JqCv8nAwQfAZT/6vUz VXh6QcKae5cTHAmef9wxeFC+lsR2HeFkjospO8cmexzQKoqLVrY0hEKCjOT/ON3k JNkTPcblQNBOiWxHgvUMA9CfbYMglJz1U6lf9ZKyAP84GjBxy6Dlg4Zxl58BHGno QuiNvdDhlBP8+cQkpEzHyL/IAnO3tt+kC0U3gSN5T78Qo+UuMX1TLq5GFgeYYU50 oRYd+n19AyMwccoAd6HfxLgGFB1rSNzZodMvAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU0OxXWPbQIrCoNZY4f1SN1B+Z3vwwHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvME94WFdQYlFJckNv TlpZNGYxU04xQi1aM3Z3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmX1LDANBgkqhkiG9w0BAQsFAAOCAQEAtaiBN/M9trdkS/5ZkpjfEqmhkKrX 617hEwXHXCf6z7oS2a+Atd7QdGnlenXH96HY+F2smM5K7SAbGpqvdNfn4hSNQl0a +nRHYNZ0oGI76xdCEBYwMSxFZja4qIRJcJ9ckfDInKdjCWQSmqkgHE4jz/wj/zPd 6vETDc2BEf4joZv/hr2fqfg7HKuiVkpUuhoEEoXrIZFPDGvPq1kxmmmr0mNdmrEN sRbnJWwhwL/8rQWXq9Tf6O87LIIROjrZRMGs3OElbnoY13HxrPMjCzQzx0us4Mx0 DEVaXuXKN3pOG0WKzKyZkeNa8noN+v6sxc5K+kV58MMi/HDkxjBzjVXoBA== -----END CERTIFICATE-----Generated at Sun Jun 22 08:56:21 2025 by rpki-client