$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/ACBktcCIK2mFi-98s5sXBEyq7IM.roa File: ACBktcCIK2mFi-98s5sXBEyq7IM.roa (raw, json) Hash identifier: o6DvUOok/C3vgBvu1/Ayc0/sKGvjpBhKwmi70wnOr04= Subject key identifier: 00:20:64:B5:C0:88:2B:69:85:8B:EF:7C:B3:9B:17:04:4C:AA:EC:83 Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 1350 Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/ACBktcCIK2mFi-98s5sXBEyq7IM.roa Signing time: Thu 22 May 2025 09:04:49 +0000 ROA not before: Thu 22 May 2025 09:04:49 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 55990 IP address blocks: 101.245.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:13:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4944 (0x1350) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: May 22 09:04:49 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=002064B5C0882B69858BEF7CB39B17044CAAEC83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:08:2e:51:9b:a9:42:29:0a:3d:63:28:f4:3b: da:bb:98:71:f7:f7:3b:ae:7c:84:04:f5:7e:cc:67: 64:82:7f:45:4d:33:db:35:de:d5:b8:cd:20:83:aa: 53:01:5d:e5:f0:52:ee:6c:04:d8:b6:d0:21:23:cc: 39:2d:28:99:41:87:71:48:13:d3:69:38:e5:b7:42: 77:e6:27:68:be:74:ee:c3:47:fb:b1:97:9b:f6:57: e2:dc:86:d7:ec:40:ad:88:d0:82:14:d5:cc:c0:79: c1:79:fb:3d:35:b4:ff:eb:de:84:83:d8:ca:d1:c6: a8:9c:45:65:d4:36:06:65:3f:f3:ae:18:bc:46:6a: ae:6d:8f:70:d6:9d:50:35:57:81:99:5e:90:24:cf: 24:a4:75:2e:1a:89:a6:68:48:61:46:da:8f:1d:46: 63:44:89:4e:4d:f6:a7:96:58:b8:fb:cf:e2:14:71: c3:7a:80:57:78:a6:fb:ff:3a:d8:e9:3a:aa:b6:f6: 8f:28:93:81:7e:17:ea:79:7f:c8:b4:a0:73:c5:4f: 6c:63:64:56:ca:a8:75:2a:a5:81:e4:2d:64:bc:68: 47:c8:dd:aa:4d:ec:a6:e7:1d:f9:43:8f:ce:74:a9: cf:5b:93:70:c0:39:f7:ed:32:30:4b:5e:9c:81:8f: 82:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:20:64:B5:C0:88:2B:69:85:8B:EF:7C:B3:9B:17:04:4C:AA:EC:83 X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/ACBktcCIK2mFi-98s5sXBEyq7IM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 101.245.2.0/23 Signature Algorithm: sha256WithRSAEncryption 87:61:e6:b1:06:f9:20:81:f3:27:35:46:25:43:97:62:79:fe: 5a:2a:da:5e:a5:bb:52:d5:07:98:ce:e2:1e:b2:70:5d:93:9b: 42:9a:99:74:4e:26:9d:fb:06:f5:0b:be:ca:1d:1e:de:f8:41: e2:9e:72:98:02:74:24:ba:fe:27:9e:97:98:92:7a:cb:5a:75: fd:b2:68:d2:d9:ad:c0:e1:60:06:30:1e:42:59:a0:b8:1e:93: 54:eb:8a:ad:b1:ca:21:03:77:1e:2b:49:7a:8c:34:3e:72:2d: 73:b9:18:00:0f:1e:8c:f4:a8:cd:95:42:df:62:0a:b5:fb:36: aa:f2:02:82:f2:23:24:85:e4:96:bb:95:e1:2f:8a:fd:a0:0b: 24:2f:10:b5:7b:b4:1b:77:4f:e9:cd:ae:89:ad:a5:67:55:8f: a4:48:44:89:8d:a0:5a:6e:48:e5:17:39:1e:92:df:88:8b:f8: c4:d1:ff:be:07:ed:f2:10:78:24:1f:e5:ed:9a:c3:b3:f9:a2: aa:e4:5e:3f:84:94:ba:08:0a:dc:57:75:53:04:3e:46:4b:c1: c5:6b:19:6b:b4:9a:2f:e6:7d:75:be:c7:8d:6a:ad:7d:f4:d4: fe:d7:d3:07:8e:c8:87:a3:2f:75:b6:85:1f:8a:f8:59:a7:22: a2:d6:fc:54 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICE1AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNTA1MjIw OTA0NDlaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDAwMjA2NEI1QzA4ODJC Njk4NThCRUY3Q0IzOUIxNzA0NENBQUVDODMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrCC5Rm6lCKQo9Yyj0O9q7mHH39zuufIQE9X7MZ2SCf0VNM9s1 3tW4zSCDqlMBXeXwUu5sBNi20CEjzDktKJlBh3FIE9NpOOW3QnfmJ2i+dO7DR/ux l5v2V+LchtfsQK2I0IIU1czAecF5+z01tP/r3oSD2MrRxqicRWXUNgZlP/OuGLxG aq5tj3DWnVA1V4GZXpAkzySkdS4aiaZoSGFG2o8dRmNEiU5N9qeWWLj7z+IUccN6 gFd4pvv/OtjpOqq29o8ok4F+F+p5f8i0oHPFT2xjZFbKqHUqpYHkLWS8aEfI3apN 7KbnHflDj850qc9bk3DAOfftMjBLXpyBj4KxAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUACBktcCIK2mFi+98s5sXBEyq7IMwHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvQUNCa3RjQ0lLMm1G aS05OHM1c1hCRXlxN0lNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAWX1AjANBgkqhkiG9w0BAQsFAAOCAQEAh2HmsQb5IIHzJzVGJUOXYnn+Wira XqW7UtUHmM7iHrJwXZObQpqZdE4mnfsG9Qu+yh0e3vhB4p5ymAJ0JLr+J56XmJJ6 y1p1/bJo0tmtwOFgBjAeQlmguB6TVOuKrbHKIQN3HitJeow0PnItc7kYAA8ejPSo zZVC32IKtfs2qvICgvIjJIXklruV4S+K/aALJC8QtXu0G3dP6c2uia2lZ1WPpEhE iY2gWm5I5Rc5HpLfiIv4xNH/vgft8hB4JB/l7ZrDs/miquReP4SUuggK3Fd1UwQ+ RkvBxWsZa7SaL+Z9db7HjWqtffTU/tfTB47Ih6MvdbaFH4r4Waciotb8VA== -----END CERTIFICATE-----Generated at Sun Jun 22 00:25:17 2025 by rpki-client