$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3134/x7LsoUNk0WuhBwx6uu0Cvpzo_9g.roa File: x7LsoUNk0WuhBwx6uu0Cvpzo_9g.roa (raw, json) Hash identifier: nA0g6q/JceSYJ2jvm2w0zQOFkRrhUtlWcTj5Q8V+XS4= Subject key identifier: C7:B2:EC:A1:43:64:D1:6B:A1:07:0C:7A:BA:ED:02:BE:9C:E8:FF:D8 Certificate issuer: /CN=1BC6D9A9F4A226A61F5FA1A9163941D4B35BA35B Certificate serial: 06DB Authority key identifier: 1B:C6:D9:A9:F4:A2:26:A6:1F:5F:A1:A9:16:39:41:D4:B3:5B:A3:5B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/x7LsoUNk0WuhBwx6uu0Cvpzo_9g.roa Signing time: Tue 10 Jun 2025 01:40:24 +0000 ROA not before: Tue 10 Jun 2025 01:40:24 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 146762 IP address blocks: 114.111.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 21:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1755 (0x6db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BC6D9A9F4A226A61F5FA1A9163941D4B35BA35B Validity Not Before: Jun 10 01:40:24 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=C7B2ECA14364D16BA1070C7ABAED02BE9CE8FFD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:18:b7:cf:dd:c2:85:fa:75:87:1e:97:02:7a: 3d:8a:42:e1:55:cd:16:57:5a:96:c7:82:ff:72:c0: 85:35:cd:fe:f5:ee:57:42:f9:c4:5c:0a:5c:a2:f4: b5:5f:77:f0:cf:e0:b2:74:fb:4b:5d:57:d8:58:c7: 46:db:d8:08:ff:f0:0f:59:0c:7f:56:3c:0c:98:ca: 67:ce:23:8f:54:2e:fd:71:a7:89:0c:47:2e:05:3e: ba:3c:34:44:9a:3d:a8:78:bf:d9:31:e1:ab:c8:6c: 58:af:6c:0b:c9:79:79:50:ef:18:d9:01:6e:2b:7f: fe:a9:5e:1c:6c:dd:0a:05:a7:79:40:e7:9e:d3:20: 1d:d4:e8:09:0f:0f:63:5b:cd:82:cd:2d:43:42:e4: e5:07:f8:4f:74:c3:c4:43:0e:0c:84:a4:ad:9f:94: c0:4b:b3:47:65:10:54:06:ee:b9:9a:bc:78:c5:96: 18:f7:7f:dd:d6:09:94:77:17:ac:13:7f:72:b0:e9: 51:0d:0c:b3:ed:aa:07:f0:3e:7f:96:fb:3a:bc:6d: 3d:10:d2:eb:6e:c8:83:15:a2:2e:91:a7:27:27:f5: 93:b6:0c:07:c1:5e:6a:9e:47:52:2a:f4:9c:02:a9: ff:9a:cf:6a:8c:e1:2d:c9:6f:02:52:96:a7:c5:6d: fc:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:B2:EC:A1:43:64:D1:6B:A1:07:0C:7A:BA:ED:02:BE:9C:E8:FF:D8 X509v3 Authority Key Identifier: keyid:1B:C6:D9:A9:F4:A2:26:A6:1F:5F:A1:A9:16:39:41:D4:B3:5B:A3:5B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/x7LsoUNk0WuhBwx6uu0Cvpzo_9g.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.111.176.0/20 Signature Algorithm: sha256WithRSAEncryption 37:72:3f:91:f8:fc:97:82:4a:10:f4:12:40:8f:af:52:6a:38: fe:03:f6:bf:2e:65:bd:be:2b:6e:8b:31:43:59:88:9d:5e:ff: 9c:93:18:8b:4a:81:f4:d1:91:c0:f6:1a:58:21:1e:2f:d6:16: 70:3d:45:21:c0:7b:62:ba:d4:80:1e:d3:2d:59:2e:71:13:27: b2:95:38:60:4f:98:b7:da:c6:1f:1c:30:69:32:09:12:eb:72: 40:ff:78:73:9f:b2:a4:2e:93:88:03:7b:b9:92:10:80:a1:5a: dc:f1:fa:7a:26:3b:c8:09:df:5a:fa:fc:90:f1:76:7b:8a:f5: 8f:07:0f:18:91:0b:33:a4:46:f5:91:2f:84:61:1a:e9:ae:1f: 71:25:eb:6f:0c:53:08:15:ff:40:18:3f:48:57:f1:eb:38:76: f3:7d:af:11:b5:50:ac:20:b9:bf:98:8f:d9:2d:bb:e4:7c:d4: a8:57:6c:6a:e4:1b:35:d7:80:74:fe:9d:48:2c:1a:7c:59:d4: 73:6e:44:21:e4:d1:7e:49:14:1a:df:28:d2:af:2d:76:ea:73: 4d:6f:b3:c2:75:43:0f:ae:44:fa:f7:b1:db:7b:da:56:75:a7: 9b:4d:b0:fd:70:fb:de:c4:cb:73:2e:92:e3:bc:d2:25:a1:e6: 4b:74:0f:aa -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICBtswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUJD NkQ5QTlGNEEyMjZBNjFGNUZBMUE5MTYzOTQxRDRCMzVCQTM1QjAeFw0yNTA2MTAw MTQwMjRaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEM3QjJFQ0ExNDM2NEQx NkJBMTA3MEM3QUJBRUQwMkJFOUNFOEZGRDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5GLfP3cKF+nWHHpcCej2KQuFVzRZXWpbHgv9ywIU1zf717ldC +cRcClyi9LVfd/DP4LJ0+0tdV9hYx0bb2Aj/8A9ZDH9WPAyYymfOI49ULv1xp4kM Ry4FPro8NESaPah4v9kx4avIbFivbAvJeXlQ7xjZAW4rf/6pXhxs3QoFp3lA557T IB3U6AkPD2NbzYLNLUNC5OUH+E90w8RDDgyEpK2flMBLs0dlEFQG7rmavHjFlhj3 f93WCZR3F6wTf3Kw6VENDLPtqgfwPn+W+zq8bT0Q0utuyIMVoi6Rpycn9ZO2DAfB XmqeR1Iq9JwCqf+az2qM4S3JbwJSlqfFbfwrAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUx7LsoUNk0WuhBwx6uu0Cvpzo/9gwHwYDVR0jBBgwFoAUG8bZqfSiJqYfX6Gp FjlB1LNbo1swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz NC9HOGJacWZTaUpxWWZYNkdwRmpsQjFMTmJvMXMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0c4YlpxZlNpSnFZZlg2R3BGamxCMUxOYm8xcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzQveDdMc29VTmswV3Vo Qnd4NnV1MEN2cHpvXzlnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBHJvsDANBgkqhkiG9w0BAQsFAAOCAQEAN3I/kfj8l4JKEPQSQI+vUmo4/gP2 vy5lvb4rbosxQ1mInV7/nJMYi0qB9NGRwPYaWCEeL9YWcD1FIcB7YrrUgB7TLVku cRMnspU4YE+Yt9rGHxwwaTIJEutyQP94c5+ypC6TiAN7uZIQgKFa3PH6eiY7yAnf Wvr8kPF2e4r1jwcPGJELM6RG9ZEvhGEa6a4fcSXrbwxTCBX/QBg/SFfx6zh2832v EbVQrCC5v5iP2S275HzUqFdsauQbNdeAdP6dSCwafFnUc25EIeTRfkkUGt8o0q8t dupzTW+zwnVDD65E+vex23vaVnWnm02w/XD73sTLcy6S47zSJaHmS3QPqg== -----END CERTIFICATE-----Generated at Sat Jun 21 20:22:52 2025 by rpki-client