$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3078/u9FZXYXiD2v_anJ0_vUTlaa9iCs.roa File: u9FZXYXiD2v_anJ0_vUTlaa9iCs.roa (raw, json) Hash identifier: 6FLggfxE+ACuRt8hMyz7pysi/RideXVwAmYqMFYsztY= Subject key identifier: BB:D1:59:5D:85:E2:0F:6B:FF:6A:72:74:FE:F5:13:95:A6:BD:88:2B Certificate issuer: /CN=F702935F02FC1B81297D1FFB4C78CE0BA1D43785 Certificate serial: 36 Authority key identifier: F7:02:93:5F:02:FC:1B:81:29:7D:1F:FB:4C:78:CE:0B:A1:D4:37:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/u9FZXYXiD2v_anJ0_vUTlaa9iCs.roa Signing time: Sat 17 May 2025 03:40:38 +0000 ROA not before: Sat 17 May 2025 03:40:38 +0000 ROA not after: Sun 10 May 2026 04:51:55 +0000 asID: 151270 IP address blocks: 110.40.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 19:21:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F702935F02FC1B81297D1FFB4C78CE0BA1D43785 Validity Not Before: May 17 03:40:38 2025 GMT Not After : May 10 04:51:55 2026 GMT Subject: CN=BBD1595D85E20F6BFF6A7274FEF51395A6BD882B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b6:b0:d4:b2:a8:0f:27:28:c4:5c:a8:68:fd: 98:6a:1f:9b:cb:95:36:5f:e5:db:27:04:20:76:be: a4:68:68:bf:56:b2:4a:06:d9:e1:4f:01:36:e3:14: 75:13:0b:a3:b3:1b:04:47:23:07:d4:f4:d5:15:91: 86:9d:c2:7b:11:7e:f9:3f:d0:3c:79:08:18:ee:18: 7c:d3:ab:06:38:62:d6:61:bc:db:16:df:96:ca:83: 53:a6:54:72:de:8f:ce:1b:cd:38:b5:f1:4e:55:89: 55:7b:76:3c:07:1e:92:0d:27:5d:ce:ea:fd:32:c8: e9:65:04:96:98:e4:1a:80:d3:8a:4a:df:e1:8b:0c: a8:cb:27:33:aa:c6:c5:82:ba:b1:bb:78:b3:ec:cf: a3:88:e4:23:ef:e0:44:0a:c6:66:a0:9b:dc:91:5f: 2e:06:56:60:92:65:95:c6:41:70:48:35:e0:f4:a4: a5:98:1c:fb:25:57:90:bc:b6:05:09:53:f5:be:a9: 02:94:89:f8:eb:61:68:f0:76:00:b7:d9:6e:13:fd: a2:ae:f2:1f:9f:e4:92:56:d4:90:bf:de:6f:e1:48: d3:5a:0d:18:fd:9a:ea:22:d0:2b:fb:de:a6:7d:4b: 1e:07:da:7e:ad:33:1a:bb:bc:2f:7a:88:19:47:e3: dc:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D1:59:5D:85:E2:0F:6B:FF:6A:72:74:FE:F5:13:95:A6:BD:88:2B X509v3 Authority Key Identifier: keyid:F7:02:93:5F:02:FC:1B:81:29:7D:1F:FB:4C:78:CE:0B:A1:D4:37:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/u9FZXYXiD2v_anJ0_vUTlaa9iCs.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 110.40.38.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:12:6d:b9:86:40:da:ee:59:4f:9b:98:3a:1b:31:a8:81:81: ed:b1:37:6b:93:1e:0e:19:68:8c:83:3f:58:3d:cf:5f:33:ba: c3:a7:69:8c:a1:77:dd:ad:20:48:b8:dc:48:22:43:ba:11:32: 21:5d:3c:62:9c:55:e7:19:a2:e9:f4:56:d2:cd:ad:bb:ed:a0: 43:dd:1a:07:35:6c:d4:1c:d4:90:ab:cb:74:b6:65:2c:ea:9a: 35:23:5b:c1:b3:cf:72:0e:72:df:49:be:1a:20:a6:1a:43:cb: 7d:dc:3f:7f:26:e9:e5:80:3a:36:b4:3d:9f:ab:55:b2:24:4a: 4f:09:02:82:7e:29:53:14:14:ad:5d:63:02:fa:55:c6:d0:89: 61:93:be:02:00:8b:81:2f:ae:52:a8:73:f7:e2:6a:e5:30:a4: 21:58:21:91:84:8b:99:78:c8:fd:46:5d:8e:15:65:42:bd:13: ce:46:c1:b1:f1:f4:fd:08:34:d8:f6:8f:cc:c4:52:cd:db:95: 22:83:99:bc:30:89:81:de:e3:51:f1:37:d8:09:d8:e8:44:a6: b1:02:f5:8e:6a:61:a2:3f:da:5f:98:c4:92:17:07:c6:c1:f2: a6:5f:5c:44:1d:9b:b6:e4:e0:6b:e2:c5:66:9f:10:15:8d:20: 33:d3:f1:ee -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBNjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGNzAy OTM1RjAyRkMxQjgxMjk3RDFGRkI0Qzc4Q0UwQkExRDQzNzg1MB4XDTI1MDUxNzAz NDAzOFoXDTI2MDUxMDA0NTE1NVowMzExMC8GA1UEAxMoQkJEMTU5NUQ4NUUyMEY2 QkZGNkE3Mjc0RkVGNTEzOTVBNkJEODgyQjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAK62sNSyqA8nKMRcqGj9mGofm8uVNl/l2ycEIHa+pGhov1aySgbZ 4U8BNuMUdRMLo7MbBEcjB9T01RWRhp3CexF++T/QPHkIGO4YfNOrBjhi1mG82xbf lsqDU6ZUct6PzhvNOLXxTlWJVXt2PAcekg0nXc7q/TLI6WUElpjkGoDTikrf4YsM qMsnM6rGxYK6sbt4s+zPo4jkI+/gRArGZqCb3JFfLgZWYJJllcZBcEg14PSkpZgc +yVXkLy2BQlT9b6pApSJ+OthaPB2ALfZbhP9oq7yH5/kklbUkL/eb+FI01oNGP2a 6iLQK/vepn1LHgfafq0zGru8L3qIGUfj3CsCAwEAAaOCAfMwggHvMB0GA1UdDgQW BBS70VldheIPa/9qcnT+9ROVpr2IKzAfBgNVHSMEGDAWgBT3ApNfAvwbgSl9H/tM eM4LodQ3hTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMDc4 Lzl3S1RYd0w4RzRFcGZSXzdUSGpPQzZIVU40VS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOXdLVFh3TDhHNEVwZlJfN1RIak9DNkhVTjRVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA3OC91OUZaWFlYaUQydl9h bkowX3ZVVGxhYTlpQ3Mucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAbigmMA0GCSqGSIb3DQEBCwUAA4IBAQArEm25hkDa7llPm5g6GzGogYHtsTdr kx4OGWiMgz9YPc9fM7rDp2mMoXfdrSBIuNxIIkO6ETIhXTxinFXnGaLp9FbSza27 7aBD3RoHNWzUHNSQq8t0tmUs6po1I1vBs89yDnLfSb4aIKYaQ8t93D9/JunlgDo2 tD2fq1WyJEpPCQKCfilTFBStXWMC+lXG0Ilhk74CAIuBL65SqHP34mrlMKQhWCGR hIuZeMj9Rl2OFWVCvRPORsGx8fT9CDTY9o/MxFLN25Uig5m8MImB3uNR8TfYCdjo RKaxAvWOamGiP9pfmMSSFwfGwfKmX1xEHZu25OBr4sVmnxAVjSAz0/Hu -----END CERTIFICATE-----Generated at Thu Jun 19 18:48:52 2025 by rpki-client