$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/GttDUqDoF7EMgadNF-ynja2qV5w.roa File: GttDUqDoF7EMgadNF-ynja2qV5w.roa (raw, json) Hash identifier: 2Z+eo6tV7BHqymBJgmfJ4yk9gB/7Lpx8LU28CyoyaKQ= Subject key identifier: 1A:DB:43:52:A0:E8:17:B1:0C:81:A7:4D:17:EC:A7:8D:AD:AA:57:9C Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 1349 Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/GttDUqDoF7EMgadNF-ynja2qV5w.roa Signing time: Thu 22 May 2025 09:04:46 +0000 ROA not before: Thu 22 May 2025 09:04:46 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 55990 IP address blocks: 101.245.40.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 21:43:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4937 (0x1349) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: May 22 09:04:46 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=1ADB4352A0E817B10C81A74D17ECA78DADAA579C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:15:73:b0:e1:46:7c:41:3c:96:20:f2:62:ad: e6:d5:2c:92:1c:53:f3:44:9c:93:21:2a:3a:36:78: bc:d7:34:b1:d0:5a:77:b3:c2:48:21:92:65:b3:e3: b1:cd:7c:6f:a8:92:ca:e8:6d:a4:10:38:dd:a6:13: 3c:1d:6f:75:ca:4a:71:92:03:cc:19:a7:26:0e:5a: a0:c1:90:4f:4a:7f:27:44:18:a0:1a:6a:23:ae:fa: 8b:2b:0c:ec:27:3b:8c:89:49:b8:48:84:e5:98:4c: a3:ea:13:f6:3e:59:68:02:eb:e2:db:fa:de:81:0f: 7a:67:51:50:e0:13:7f:49:73:0d:04:fa:10:51:36: 8f:e8:f0:12:ef:36:79:4b:64:37:38:42:6d:d4:5c: de:06:3c:20:dc:51:f0:5a:60:6f:3d:f0:c4:46:91: fd:c7:20:92:12:32:90:dd:42:53:f3:52:1b:da:4c: 61:47:98:75:8d:7f:70:7a:fa:bd:bc:37:08:df:87: 91:b2:6c:c3:e3:f9:d5:67:45:dd:06:65:49:20:14: b2:d7:06:fe:80:1f:99:2b:7c:2a:4d:0c:43:9e:5c: ef:7d:4d:62:14:08:74:d4:87:04:6c:c1:3b:af:b0: d9:2e:b1:97:29:49:4c:a9:7b:9e:16:42:d3:d9:06: c0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:DB:43:52:A0:E8:17:B1:0C:81:A7:4D:17:EC:A7:8D:AD:AA:57:9C X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/GttDUqDoF7EMgadNF-ynja2qV5w.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 101.245.40.0/23 Signature Algorithm: sha256WithRSAEncryption a3:ce:0c:73:26:bb:80:75:a7:3a:59:eb:8b:20:66:dc:1b:5e: ab:6b:f2:af:c1:1f:fe:69:43:ac:73:4d:34:55:4a:3a:6b:da: e2:d8:31:60:94:5e:0a:0c:bb:fd:63:e6:f9:32:0c:ee:8e:7f: 50:bd:d8:a8:a2:6d:a6:45:fd:ba:c9:88:7b:47:de:02:2c:e9: 07:60:a5:c7:08:87:3d:22:5a:fe:ab:78:9a:a4:96:a8:9a:21: 60:db:3a:74:b0:d9:cb:36:3f:56:10:c1:fd:87:25:11:5d:d8: 47:5d:03:94:f6:de:0e:4e:41:a2:71:69:a5:53:fc:e1:de:96: d7:55:02:4b:dc:a9:52:09:f6:60:f8:27:95:15:90:4c:9c:bd: e8:3f:58:88:9f:bf:35:8e:20:db:94:f5:e2:81:9a:32:23:30: 29:5f:b5:80:c1:6e:5e:d5:4d:8c:79:9b:eb:1b:1b:9d:c4:b6: f7:95:59:03:56:e1:a3:1f:2c:89:bb:65:02:fe:69:7c:4d:87: 9e:8e:51:28:4c:87:e5:d8:04:b9:09:db:09:85:e8:ef:c7:40: 87:86:d0:40:6f:56:22:ab:60:e2:4a:52:82:40:ce:b8:4a:37: 20:a2:44:e9:c8:12:24:6a:c7:83:d1:e9:ed:a9:00:25:67:ac: 32:c5:04:0c -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICE0kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNTA1MjIw OTA0NDZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDFBREI0MzUyQTBFODE3 QjEwQzgxQTc0RDE3RUNBNzhEQURBQTU3OUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDFXOw4UZ8QTyWIPJirebVLJIcU/NEnJMhKjo2eLzXNLHQWnez wkghkmWz47HNfG+oksrobaQQON2mEzwdb3XKSnGSA8wZpyYOWqDBkE9KfydEGKAa aiOu+osrDOwnO4yJSbhIhOWYTKPqE/Y+WWgC6+Lb+t6BD3pnUVDgE39Jcw0E+hBR No/o8BLvNnlLZDc4Qm3UXN4GPCDcUfBaYG898MRGkf3HIJISMpDdQlPzUhvaTGFH mHWNf3B6+r28Nwjfh5GybMPj+dVnRd0GZUkgFLLXBv6AH5krfCpNDEOeXO99TWIU CHTUhwRswTuvsNkusZcpSUype54WQtPZBsB1AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUGttDUqDoF7EMgadNF+ynja2qV5wwHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvR3R0RFVxRG9GN0VN Z2FkTkYteW5qYTJxVjV3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAWX1KDANBgkqhkiG9w0BAQsFAAOCAQEAo84Mcya7gHWnOlnriyBm3Bteq2vy r8Ef/mlDrHNNNFVKOmva4tgxYJReCgy7/WPm+TIM7o5/UL3YqKJtpkX9usmIe0fe AizpB2ClxwiHPSJa/qt4mqSWqJohYNs6dLDZyzY/VhDB/YclEV3YR10DlPbeDk5B onFppVP84d6W11UCS9ypUgn2YPgnlRWQTJy96D9YiJ+/NY4g25T14oGaMiMwKV+1 gMFuXtVNjHmb6xsbncS295VZA1bhox8sibtlAv5pfE2Hno5RKEyH5dgEuQnbCYXo 78dAh4bQQG9WIqtg4kpSgkDOuEo3IKJE6cgSJGrHg9Hp7akAJWesMsUEDA== -----END CERTIFICATE-----Generated at Sat Jun 21 20:42:47 2025 by rpki-client