$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/IMrWgZzHTWwPA-lGs1IX1Inma6A.roa File: IMrWgZzHTWwPA-lGs1IX1Inma6A.roa (raw, json) Hash identifier: Bz/na8zXPeP6bDv2EFLgJWbembsIeSoN0SErR0raTVU= Subject key identifier: 20:CA:D6:81:9C:C7:4D:6C:0F:03:E9:46:B3:52:17:D4:89:E6:6B:A0 Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 10B1 Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/IMrWgZzHTWwPA-lGs1IX1Inma6A.roa Signing time: Fri 17 Jan 2025 01:28:55 +0000 ROA not before: Fri 17 Jan 2025 01:28:55 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 136907 IP address blocks: 110.41.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4273 (0x10b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Jan 17 01:28:55 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=20CAD6819CC74D6C0F03E946B35217D489E66BA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:46:ed:fb:ee:3f:4b:8e:27:c0:3e:e7:13:44: db:04:cd:2d:4a:63:bc:36:a8:e5:40:b2:af:19:b3: 3f:2c:a7:4f:a0:2f:26:80:a8:d3:cf:09:7f:79:d5: 6d:11:e5:fb:3e:58:8d:7d:a8:93:cb:e1:da:f0:81: 10:82:fa:8e:e7:e9:ba:3e:68:71:83:1a:46:ed:b8: db:9c:bf:43:d2:6d:24:ca:9f:95:d5:e7:ff:43:e3: ba:97:fe:23:44:73:e1:fe:90:e5:83:89:29:ee:54: 40:5a:f4:82:a5:25:8a:13:8b:f3:8c:65:d8:2a:01: 8e:22:1e:6d:36:b7:d2:a9:f1:21:9c:68:78:1a:71: 70:cd:5e:1a:7d:88:fe:90:0f:dc:c3:ec:5b:35:b6: 27:64:76:01:9e:12:12:13:6e:39:fc:7d:fa:a6:38: 04:60:1f:8b:5e:11:70:fe:08:9f:52:f0:9c:58:0f: e0:28:2c:1c:49:bf:f1:1e:6a:a9:88:d3:74:b3:0b: df:6b:96:95:f8:2d:54:e9:ab:ee:1a:5e:3c:9c:35: 19:7f:29:82:d5:3f:09:b5:1c:61:76:bb:43:2a:82: a8:6b:5c:86:32:7f:47:60:f0:63:7a:c9:99:f3:91: 5b:67:1f:91:ed:30:24:08:e9:98:03:d7:9c:03:a3: e1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:CA:D6:81:9C:C7:4D:6C:0F:03:E9:46:B3:52:17:D4:89:E6:6B:A0 X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/IMrWgZzHTWwPA-lGs1IX1Inma6A.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 110.41.208.0/24 Signature Algorithm: sha256WithRSAEncryption 39:2d:77:bc:fb:71:0f:e6:a5:19:da:dc:51:67:b3:54:f1:1f: 6e:9c:b8:7b:34:dc:7c:15:72:44:ab:97:21:91:04:ae:6a:b4: 1a:4a:26:76:6e:5f:51:0b:89:17:71:32:c1:2d:85:c4:2c:4e: 9b:ff:54:fe:80:86:69:ab:29:f7:47:0c:52:3f:e6:81:fd:36: fe:2a:db:e1:ef:73:e2:3e:3c:76:82:52:50:70:a2:0e:39:be: be:9b:8b:f5:f5:e5:03:15:69:08:fd:13:ec:c4:78:cc:76:8f: ea:5c:de:92:5f:4f:4a:0a:24:9c:7f:f2:cb:77:a6:3c:c1:eb: d0:24:f5:01:c3:3e:2d:f0:56:b7:16:f7:f1:d6:48:ed:5b:aa: 99:15:fa:56:45:de:82:16:5a:92:34:61:ba:f7:a6:48:cb:81: 56:af:0c:a0:c5:7f:44:8e:97:8b:23:fa:fc:90:69:ed:9c:2c: 99:4e:96:ab:86:e7:62:a5:00:b4:6a:cb:02:4d:e3:b5:a0:2d: 40:10:8f:b8:5e:3a:71:76:54:df:32:ac:1e:8a:8a:bb:6c:33: cd:1d:ff:8c:ba:15:b4:fc:1b:a6:e2:5c:d6:cf:6e:bd:f4:21: 2b:e8:0f:0b:83:3a:15:4a:9d:74:be:57:c9:da:8c:c9:e8:68: 36:e4:5e:ea -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICELEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNTAxMTcw MTI4NTVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDIwQ0FENjgxOUNDNzRE NkMwRjAzRTk0NkIzNTIxN0Q0ODlFNjZCQTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD6Ru377j9LjifAPucTRNsEzS1KY7w2qOVAsq8Zsz8sp0+gLyaA qNPPCX951W0R5fs+WI19qJPL4drwgRCC+o7n6bo+aHGDGkbtuNucv0PSbSTKn5XV 5/9D47qX/iNEc+H+kOWDiSnuVEBa9IKlJYoTi/OMZdgqAY4iHm02t9Kp8SGcaHga cXDNXhp9iP6QD9zD7Fs1tidkdgGeEhITbjn8ffqmOARgH4teEXD+CJ9S8JxYD+Ao LBxJv/EeaqmI03SzC99rlpX4LVTpq+4aXjycNRl/KYLVPwm1HGF2u0MqgqhrXIYy f0dg8GN6yZnzkVtnH5HtMCQI6ZgD15wDo+HVAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUIMrWgZzHTWwPA+lGs1IX1Inma6AwHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvSU1yV2daekhUV3dQ QS1sR3MxSVgxSW5tYTZBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAG4p0DANBgkqhkiG9w0BAQsFAAOCAQEAOS13vPtxD+alGdrcUWezVPEfbpy4 ezTcfBVyRKuXIZEErmq0Gkomdm5fUQuJF3EywS2FxCxOm/9U/oCGaasp90cMUj/m gf02/irb4e9z4j48doJSUHCiDjm+vpuL9fXlAxVpCP0T7MR4zHaP6lzekl9PSgok nH/yy3emPMHr0CT1AcM+LfBWtxb38dZI7VuqmRX6VkXeghZakjRhuvemSMuBVq8M oMV/RI6XiyP6/JBp7ZwsmU6Wq4bnYqUAtGrLAk3jtaAtQBCPuF46cXZU3zKsHoqK u2wzzR3/jLoVtPwbpuJc1s9uvfQhK+gPC4M6FUqddL5XydqMyehoNuRe6g== -----END CERTIFICATE-----Generated at Sat Apr 26 15:09:00 2025 by rpki-client