$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/6CwlLESfMyGA2wrF-7TBHGrL9os.roa File: 6CwlLESfMyGA2wrF-7TBHGrL9os.roa (raw, json) Hash identifier: pjeRQP5YN+mH6XEOvpSRy2KKiiYW6nDsubc+Jlsb5bo= Subject key identifier: E8:2C:25:2C:44:9F:33:21:80:DB:0A:C5:FB:B4:C1:1C:6A:CB:F6:8B Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 1346 Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/6CwlLESfMyGA2wrF-7TBHGrL9os.roa Signing time: Thu 22 May 2025 09:04:44 +0000 ROA not before: Thu 22 May 2025 09:04:44 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 55990 IP address blocks: 115.32.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 09:43:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4934 (0x1346) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: May 22 09:04:44 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=E82C252C449F332180DB0AC5FBB4C11C6ACBF68B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:44:10:9d:98:a7:74:fb:f7:ee:f7:bc:fc:59: 00:4e:3e:98:86:11:1f:f8:38:9e:95:1a:48:9c:8c: 9e:81:d9:a3:80:fa:58:a3:5f:b5:df:db:bb:46:f0: a9:82:04:14:47:d9:2b:1a:d1:f0:4d:4b:4d:09:f0: 8a:8e:9d:b6:dd:76:b0:d1:71:9d:4a:02:8d:6c:ce: c3:d5:08:a7:4d:2d:52:de:61:34:5e:aa:6a:71:87: 02:ca:7a:20:d5:39:7f:b3:c2:35:68:be:7b:5d:b0: bd:7c:33:e9:c1:88:24:19:30:de:43:21:d8:a7:b8: 48:ef:44:2e:85:2d:0d:74:b9:37:c4:02:10:94:97: 00:7e:da:7b:73:d3:f9:b8:89:cb:ab:66:df:92:c9: e8:92:9e:a6:88:12:ca:cf:47:f0:a0:d3:64:b5:5b: 8f:a3:bb:ac:d9:a8:16:c3:cc:40:35:20:b0:7b:dc: 53:5e:2b:d1:34:89:f9:33:cb:25:e1:4c:f9:71:c3: 5d:81:22:98:d4:95:19:33:38:9b:b5:51:c5:62:6b: 5f:c7:60:9b:0f:e8:ce:36:5d:8f:54:c7:d8:1c:05: 81:db:78:6e:28:7a:dd:28:cb:a7:78:45:dd:42:2e: 89:24:ae:ba:c0:a1:4c:6a:97:02:05:9e:97:54:49: 20:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:2C:25:2C:44:9F:33:21:80:DB:0A:C5:FB:B4:C1:1C:6A:CB:F6:8B X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/6CwlLESfMyGA2wrF-7TBHGrL9os.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 115.32.0.0/20 Signature Algorithm: sha256WithRSAEncryption a7:9f:21:78:2c:2a:07:0c:ac:eb:b3:30:e2:67:46:22:57:65: e9:74:1b:5e:b5:24:ff:0a:9b:8f:b2:63:b7:f4:18:54:0d:be: 01:6e:47:e3:2d:28:ca:35:0e:bc:27:48:e8:d3:de:9b:23:f5: 13:b2:0a:d3:81:37:96:4f:ca:0c:bc:ee:90:86:63:a6:f7:b5: d5:02:bd:a6:19:fd:8f:d4:c2:ac:e5:3c:37:8f:e7:c1:dd:6f: e9:98:7b:a1:f8:c3:0f:db:1f:2e:42:ed:66:ee:0b:7f:15:0a: d1:c7:19:f8:68:17:46:78:e3:50:18:fe:d4:7c:49:59:9e:a0: 7e:30:0e:7f:d6:6d:bd:97:71:ab:84:d5:d1:4b:21:d4:f4:68: 8e:e4:d3:69:f9:04:a8:c7:5b:5e:f8:44:76:10:f1:fb:36:f8: a7:c0:4a:6a:98:2a:a9:dd:17:0b:a3:17:b9:6a:d7:64:cf:4d: 09:6d:a0:f2:0b:14:27:13:bb:9a:a5:90:6d:f5:77:ba:3f:b2: da:29:3e:0d:7a:d0:90:6f:34:01:5c:fe:86:e6:ee:79:45:2e: 1f:99:5a:27:41:66:e8:e9:a9:e3:31:76:e9:21:ac:c1:6d:21: ad:d0:73:61:8e:72:88:8d:af:ab:64:37:c8:32:0c:86:c6:3c: 7a:22:03:b1 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICE0YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNTA1MjIw OTA0NDRaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEU4MkMyNTJDNDQ5RjMz MjE4MERCMEFDNUZCQjRDMTFDNkFDQkY2OEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRRBCdmKd0+/fu97z8WQBOPpiGER/4OJ6VGkicjJ6B2aOA+lij X7Xf27tG8KmCBBRH2Ssa0fBNS00J8IqOnbbddrDRcZ1KAo1szsPVCKdNLVLeYTRe qmpxhwLKeiDVOX+zwjVovntdsL18M+nBiCQZMN5DIdinuEjvRC6FLQ10uTfEAhCU lwB+2ntz0/m4icurZt+SyeiSnqaIEsrPR/Cg02S1W4+ju6zZqBbDzEA1ILB73FNe K9E0ifkzyyXhTPlxw12BIpjUlRkzOJu1UcVia1/HYJsP6M42XY9Ux9gcBYHbeG4o et0oy6d4Rd1CLokkrrrAoUxqlwIFnpdUSSD7AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU6CwlLESfMyGA2wrF+7TBHGrL9oswHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvNkN3bExFU2ZNeUdB MndyRi03VEJIR3JMOW9zLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBHMgADANBgkqhkiG9w0BAQsFAAOCAQEAp58heCwqBwys67Mw4mdGIldl6XQb XrUk/wqbj7Jjt/QYVA2+AW5H4y0oyjUOvCdI6NPemyP1E7IK04E3lk/KDLzukIZj pve11QK9phn9j9TCrOU8N4/nwd1v6Zh7ofjDD9sfLkLtZu4LfxUK0ccZ+GgXRnjj UBj+1HxJWZ6gfjAOf9ZtvZdxq4TV0Ush1PRojuTTafkEqMdbXvhEdhDx+zb4p8BK apgqqd0XC6MXuWrXZM9NCW2g8gsUJxO7mqWQbfV3uj+y2ik+DXrQkG80AVz+hubu eUUuH5laJ0Fm6Omp4zF26SGswW0hrdBzYY5yiI2vq2Q3yDIMhsY8eiIDsQ== -----END CERTIFICATE-----Generated at Sun Jun 22 08:56:50 2025 by rpki-client