$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3078/Ced57QBZLneKH9Kze-kEGKUHnrg.roa File: Ced57QBZLneKH9Kze-kEGKUHnrg.roa (raw, json) Hash identifier: P40Nj2HSIYRo1aLg77y+jVkzV7URrD4SSkj+FYna/VY= Subject key identifier: 09:E7:79:ED:00:59:2E:77:8A:1F:D2:B3:7B:E9:04:18:A5:07:9E:B8 Certificate issuer: /CN=F702935F02FC1B81297D1FFB4C78CE0BA1D43785 Certificate serial: 42 Authority key identifier: F7:02:93:5F:02:FC:1B:81:29:7D:1F:FB:4C:78:CE:0B:A1:D4:37:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/Ced57QBZLneKH9Kze-kEGKUHnrg.roa Signing time: Sat 17 May 2025 03:42:32 +0000 ROA not before: Sat 17 May 2025 03:42:32 +0000 ROA not after: Sun 10 May 2026 04:51:55 +0000 asID: 151270 IP address blocks: 110.40.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 04:43:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F702935F02FC1B81297D1FFB4C78CE0BA1D43785 Validity Not Before: May 17 03:42:32 2025 GMT Not After : May 10 04:51:55 2026 GMT Subject: CN=09E779ED00592E778A1FD2B37BE90418A5079EB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:74:ff:7e:ca:00:c5:9c:ce:4b:bb:e4:1e:35: e5:5d:cf:f7:39:9f:67:cd:6a:6c:d9:49:74:c1:cd: 20:61:2e:ef:be:19:d4:9a:34:fa:a6:dc:21:64:3f: 34:3d:55:60:d6:10:1c:ec:5e:e6:5b:1c:31:a0:93: f4:2c:d7:8e:81:c5:53:9d:9d:22:08:03:e2:92:3e: 75:dd:d6:ad:43:0e:ff:03:06:84:a3:c4:13:4f:3c: c2:26:b7:d1:aa:1c:9e:6c:3c:36:22:1e:7e:cd:c7: d4:ed:36:63:11:8d:3b:9b:e3:3b:05:4e:0f:7f:34: ac:f0:aa:ea:5d:f1:85:6a:0f:74:89:92:cb:16:ff: 57:ac:f4:ba:47:90:c7:01:39:01:ee:19:07:2d:63: b6:e5:83:79:92:8d:3e:ec:70:77:48:be:f6:21:ab: bd:75:e1:fe:e6:47:53:5c:7a:54:78:96:b4:3e:66: ef:fa:bd:7a:fa:2f:67:d5:95:ae:39:a8:20:27:ca: a5:90:ce:5c:e0:73:f1:78:ad:12:58:f8:c0:ac:ae: a7:2c:dd:92:c6:cf:7e:7d:47:de:55:9f:54:11:bd: 47:38:f8:59:51:a8:e1:97:d0:7f:94:d8:b7:03:9c: 25:5d:1b:c5:fd:9d:81:b2:7c:5d:55:f2:b2:81:75: 4d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:E7:79:ED:00:59:2E:77:8A:1F:D2:B3:7B:E9:04:18:A5:07:9E:B8 X509v3 Authority Key Identifier: keyid:F7:02:93:5F:02:FC:1B:81:29:7D:1F:FB:4C:78:CE:0B:A1:D4:37:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/Ced57QBZLneKH9Kze-kEGKUHnrg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 110.40.62.0/24 Signature Algorithm: sha256WithRSAEncryption a2:a2:f9:59:7b:a1:fe:a0:7f:f4:81:2d:00:e1:56:de:7a:39: 6f:60:68:27:c1:9f:92:ba:ae:24:c5:02:b8:b9:68:95:3b:1d: 87:77:b0:ad:b1:94:dd:70:ba:6d:bb:f5:b9:32:5c:f6:f5:d4: d4:73:a8:61:b1:75:da:d8:ea:c3:e1:e9:82:f8:d8:b0:65:45: 6c:1b:a5:f8:d5:26:3e:73:ed:61:af:9a:68:37:7a:f7:27:8a: f4:d3:fd:68:19:8f:b8:05:9b:4e:92:1f:d7:2e:4c:19:85:05: 89:11:13:ba:b2:99:19:e6:cf:77:e0:63:95:f5:79:54:e3:37: 21:df:58:06:64:f5:5b:2d:85:c9:42:7e:fa:ff:14:6a:44:b0: da:68:1b:a7:49:18:18:08:60:9b:e1:70:ae:0b:b6:52:79:df: 95:50:76:1c:ee:fd:40:79:c5:a4:25:56:5b:25:36:f9:61:25: 43:eb:4e:45:43:c9:8b:4f:39:14:f4:ef:cb:de:d4:b0:a5:f8: c7:6e:71:af:83:af:59:fa:a7:c2:96:a1:4f:c4:ba:0d:27:58: 89:32:92:90:80:ed:66:23:d6:89:18:39:17:20:dd:38:12:ea: 85:a7:bd:f9:90:2a:71:0e:c9:e1:da:c4:67:12:c0:14:7e:1f: 90:cc:cf:8a -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBQjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGNzAy OTM1RjAyRkMxQjgxMjk3RDFGRkI0Qzc4Q0UwQkExRDQzNzg1MB4XDTI1MDUxNzAz NDIzMloXDTI2MDUxMDA0NTE1NVowMzExMC8GA1UEAxMoMDlFNzc5RUQwMDU5MkU3 NzhBMUZEMkIzN0JFOTA0MThBNTA3OUVCODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOp0/37KAMWczku75B415V3P9zmfZ81qbNlJdMHNIGEu774Z1Jo0 +qbcIWQ/ND1VYNYQHOxe5lscMaCT9CzXjoHFU52dIggD4pI+dd3WrUMO/wMGhKPE E088wia30aocnmw8NiIefs3H1O02YxGNO5vjOwVOD380rPCq6l3xhWoPdImSyxb/ V6z0ukeQxwE5Ae4ZBy1jtuWDeZKNPuxwd0i+9iGrvXXh/uZHU1x6VHiWtD5m7/q9 evovZ9WVrjmoICfKpZDOXOBz8XitElj4wKyupyzdksbPfn1H3lWfVBG9Rzj4WVGo 4ZfQf5TYtwOcJV0bxf2dgbJ8XVXysoF1TakCAwEAAaOCAfMwggHvMB0GA1UdDgQW BBQJ53ntAFkud4of0rN76QQYpQeeuDAfBgNVHSMEGDAWgBT3ApNfAvwbgSl9H/tM eM4LodQ3hTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMDc4 Lzl3S1RYd0w4RzRFcGZSXzdUSGpPQzZIVU40VS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOXdLVFh3TDhHNEVwZlJfN1RIak9DNkhVTjRVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA3OC9DZWQ1N1FCWkxuZUtI OUt6ZS1rRUdLVUhucmcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAbig+MA0GCSqGSIb3DQEBCwUAA4IBAQCiovlZe6H+oH/0gS0A4VbeejlvYGgn wZ+Suq4kxQK4uWiVOx2Hd7CtsZTdcLptu/W5Mlz29dTUc6hhsXXa2OrD4emC+Niw ZUVsG6X41SY+c+1hr5poN3r3J4r00/1oGY+4BZtOkh/XLkwZhQWJERO6spkZ5s93 4GOV9XlU4zch31gGZPVbLYXJQn76/xRqRLDaaBunSRgYCGCb4XCuC7ZSed+VUHYc 7v1AecWkJVZbJTb5YSVD605FQ8mLTzkU9O/L3tSwpfjHbnGvg69Z+qfClqFPxLoN J1iJMpKQgO1mI9aJGDkXIN04EuqFp735kCpxDsnh2sRnEsAUfh+QzM+K -----END CERTIFICATE-----Generated at Sun Jun 22 03:33:08 2025 by rpki-client