$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3078/eCLskOeLuWaHHsqV9qy-n9QqCI8.roa File: eCLskOeLuWaHHsqV9qy-n9QqCI8.roa (raw, json) Hash identifier: TMG8j23hhw24lShU7CR3Oxvj7lxTwHYTSqIoZb/WDtk= Subject key identifier: 78:22:EC:90:E7:8B:B9:66:87:1E:CA:95:F6:AC:BE:9F:D4:2A:08:8F Certificate issuer: /CN=F702935F02FC1B81297D1FFB4C78CE0BA1D43785 Certificate serial: 40 Authority key identifier: F7:02:93:5F:02:FC:1B:81:29:7D:1F:FB:4C:78:CE:0B:A1:D4:37:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/eCLskOeLuWaHHsqV9qy-n9QqCI8.roa Signing time: Sat 17 May 2025 03:42:31 +0000 ROA not before: Sat 17 May 2025 03:42:31 +0000 ROA not after: Sun 10 May 2026 04:51:55 +0000 asID: 151270 IP address blocks: 110.40.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 17:11:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F702935F02FC1B81297D1FFB4C78CE0BA1D43785 Validity Not Before: May 17 03:42:31 2025 GMT Not After : May 10 04:51:55 2026 GMT Subject: CN=7822EC90E78BB966871ECA95F6ACBE9FD42A088F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4e:4b:9e:ad:2b:69:0b:95:9e:88:30:7d:65: 6c:4d:ab:e6:5c:dd:20:ef:d7:d3:2b:de:f4:0c:24: 61:e3:7c:5e:84:1f:eb:18:5a:c0:74:00:77:36:07: 17:dc:33:05:74:da:3f:ce:98:e9:d2:d3:1e:0d:59: 91:f1:6a:80:3c:2d:56:e5:5b:4f:fa:35:fd:7c:ba: 08:91:61:d5:60:03:f6:90:bf:64:59:a0:f8:b9:c8: 70:06:4f:70:0a:3e:ac:6c:74:21:57:d7:05:a0:15: b1:38:b5:d8:6b:cb:4e:d3:a4:e9:18:83:30:86:80: 0d:a0:2e:01:f3:0d:31:02:9f:82:5b:e3:2f:73:8a: 5f:9b:54:e2:a1:62:c8:80:9b:33:4b:2a:f8:0f:62: 74:a5:0e:6b:00:a4:75:2e:e6:d1:92:68:4e:9c:8d: 86:12:d2:11:fb:54:c1:b1:cb:55:9e:81:dd:2f:f8: 93:37:d9:75:7e:22:37:ba:48:ad:cb:a9:2a:49:dc: ff:fb:71:23:b2:f7:e2:4d:08:a4:98:d7:5b:36:7c: 4b:f4:3c:5c:9d:96:a9:0d:73:e3:e3:8d:9b:db:65: 34:9c:5d:c7:41:a4:4d:9f:39:3d:10:f7:00:21:69: fe:dc:40:e1:8d:9f:b0:7d:00:d8:ee:97:fb:72:ed: 71:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:22:EC:90:E7:8B:B9:66:87:1E:CA:95:F6:AC:BE:9F:D4:2A:08:8F X509v3 Authority Key Identifier: keyid:F7:02:93:5F:02:FC:1B:81:29:7D:1F:FB:4C:78:CE:0B:A1:D4:37:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/eCLskOeLuWaHHsqV9qy-n9QqCI8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 110.40.65.0/24 Signature Algorithm: sha256WithRSAEncryption ae:8a:62:43:20:6a:05:22:72:7b:a0:1a:72:28:c9:2b:5a:07: a9:2f:3f:69:1b:78:89:05:40:8a:c4:f0:de:0a:8b:c6:85:20: 51:4e:69:d3:b6:6e:ed:ba:bd:84:99:fa:92:57:97:63:a3:ca: d5:7f:9e:63:ff:7a:e1:50:6c:85:51:98:e2:ba:e4:19:7a:a3: c8:42:85:00:80:96:b4:e7:e0:86:b5:1d:00:3a:1f:35:01:41: df:b0:92:cc:62:cd:3b:c7:6a:e0:3a:7e:d5:b9:91:55:c5:da: e6:52:60:7f:13:4a:0e:39:9a:33:c7:3d:71:a3:db:df:05:41: 08:f0:a5:14:aa:d5:04:ad:ff:82:b2:96:43:3a:e3:aa:09:6c: 41:5a:a8:b2:dc:b7:aa:5a:b2:2f:fa:38:96:1a:6f:89:5e:4a: 4b:7b:67:83:77:af:43:8a:ec:18:ec:4c:ab:3c:bd:3d:e0:29: f5:0c:e3:92:68:48:e1:2a:84:db:50:44:8c:c8:01:a2:76:47: 3b:ed:7c:b3:7d:ac:c7:50:18:6f:b4:47:af:3b:6c:8a:be:d8: e0:6f:87:c5:f3:fe:67:fc:31:b8:95:25:61:f6:57:9a:d3:ec: 29:bf:8d:e5:c8:0e:fc:85:53:d3:40:63:be:41:cb:27:7b:07: ce:4a:05:fe -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBQDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGNzAy OTM1RjAyRkMxQjgxMjk3RDFGRkI0Qzc4Q0UwQkExRDQzNzg1MB4XDTI1MDUxNzAz NDIzMVoXDTI2MDUxMDA0NTE1NVowMzExMC8GA1UEAxMoNzgyMkVDOTBFNzhCQjk2 Njg3MUVDQTk1RjZBQ0JFOUZENDJBMDg4RjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKROS56tK2kLlZ6IMH1lbE2r5lzdIO/X0yve9AwkYeN8XoQf6xha wHQAdzYHF9wzBXTaP86Y6dLTHg1ZkfFqgDwtVuVbT/o1/Xy6CJFh1WAD9pC/ZFmg +LnIcAZPcAo+rGx0IVfXBaAVsTi12GvLTtOk6RiDMIaADaAuAfMNMQKfglvjL3OK X5tU4qFiyICbM0sq+A9idKUOawCkdS7m0ZJoTpyNhhLSEftUwbHLVZ6B3S/4kzfZ dX4iN7pIrcupKknc//txI7L34k0IpJjXWzZ8S/Q8XJ2WqQ1z4+ONm9tlNJxdx0Gk TZ85PRD3ACFp/txA4Y2fsH0A2O6X+3LtcSUCAwEAAaOCAfMwggHvMB0GA1UdDgQW BBR4IuyQ54u5ZoceypX2rL6f1CoIjzAfBgNVHSMEGDAWgBT3ApNfAvwbgSl9H/tM eM4LodQ3hTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMDc4 Lzl3S1RYd0w4RzRFcGZSXzdUSGpPQzZIVU40VS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOXdLVFh3TDhHNEVwZlJfN1RIak9DNkhVTjRVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA3OC9lQ0xza09lTHVXYUhI c3FWOXF5LW45UXFDSTgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAbihBMA0GCSqGSIb3DQEBCwUAA4IBAQCuimJDIGoFInJ7oBpyKMkrWgepLz9p G3iJBUCKxPDeCovGhSBRTmnTtm7tur2EmfqSV5djo8rVf55j/3rhUGyFUZjiuuQZ eqPIQoUAgJa05+CGtR0AOh81AUHfsJLMYs07x2rgOn7VuZFVxdrmUmB/E0oOOZoz xz1xo9vfBUEI8KUUqtUErf+CspZDOuOqCWxBWqiy3LeqWrIv+jiWGm+JXkpLe2eD d69DiuwY7EyrPL094Cn1DOOSaEjhKoTbUESMyAGidkc77XyzfazHUBhvtEevO2yK vtjgb4fF8/5n/DG4lSVh9lea0+wpv43lyA78hVPTQGO+QcsnewfOSgX+ -----END CERTIFICATE-----Generated at Sun Jun 22 16:46:06 2025 by rpki-client