$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/361/IFIcvn9UMKRt83vukpON6Sbhixc.roa File: IFIcvn9UMKRt83vukpON6Sbhixc.roa (raw, json) Hash identifier: ee53oRxFxX0OVmISpeWc6zEnCZNfNuioeAQEgPEAWCM= Subject key identifier: 20:52:1C:BE:7F:54:30:A4:6D:F3:7B:EE:92:93:8D:E9:26:E1:8B:17 Certificate issuer: /CN=585206C87420BE42C7B9042DE3E5FD51595FF14B Certificate serial: 1E87 Authority key identifier: 58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/IFIcvn9UMKRt83vukpON6Sbhixc.roa Signing time: Thu 05 Jun 2025 08:53:13 +0000 ROA not before: Thu 05 Jun 2025 08:53:13 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 4812 IP address blocks: 202.57.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 04:41:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7815 (0x1e87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=585206C87420BE42C7B9042DE3E5FD51595FF14B Validity Not Before: Jun 5 08:53:13 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=20521CBE7F5430A46DF37BEE92938DE926E18B17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7d:8c:df:79:cb:e3:4a:bd:95:d2:f4:53:5e: ca:92:0b:bc:72:14:90:cb:21:17:3a:71:ab:c8:03: c5:63:5e:01:0f:e0:f1:60:c5:c4:29:fa:c0:2a:99: f0:b0:69:ce:f1:e7:a2:8c:74:d0:23:da:d1:79:4d: 35:91:00:f7:86:ff:21:9b:60:04:52:8d:ad:1b:ba: c5:2f:bf:8b:c0:d9:e6:9d:17:a7:d0:d6:96:68:23: 5b:02:bf:2e:e5:e0:64:de:10:ae:eb:fa:bb:0d:5f: 01:fd:e4:8a:89:7c:6a:44:bf:92:d5:9c:3a:ad:d3: f5:2a:d3:3e:52:8f:8c:94:91:21:b0:eb:46:8e:e6: 49:82:44:31:84:64:7f:e2:c3:a9:3c:d0:70:77:6a: 0f:48:03:de:6d:e0:39:45:6f:6d:53:59:0f:f1:79: 6d:5f:76:0e:bf:10:0b:d4:6f:9a:d5:c9:fa:ca:4b: 33:3c:ce:ec:56:df:c8:4a:c1:ce:68:54:2b:27:52: 81:96:0a:3f:27:ac:b3:aa:53:4a:30:bd:eb:45:e7: 64:93:8d:94:b0:47:fc:3f:fd:9c:13:1a:ac:8e:00: aa:93:87:49:0b:da:59:68:34:18:a0:30:92:d9:f5: af:d2:73:90:cf:00:d4:2f:ad:59:89:3f:92:47:e7: 42:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:52:1C:BE:7F:54:30:A4:6D:F3:7B:EE:92:93:8D:E9:26:E1:8B:17 X509v3 Authority Key Identifier: keyid:58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/IFIcvn9UMKRt83vukpON6Sbhixc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.57.201.0/24 Signature Algorithm: sha256WithRSAEncryption 55:96:e6:77:a7:1d:7b:cc:95:a8:13:7f:ae:9d:6b:d1:1c:18: 75:81:72:c6:2e:5a:0f:d6:fb:90:c5:49:16:46:a5:38:7f:9f: 87:36:5a:27:89:7c:26:da:fc:99:8e:67:be:77:d2:d3:07:72: ba:b0:04:78:6a:30:bb:3d:1a:60:e2:ea:25:5e:61:39:99:4b: a4:64:f0:bb:29:98:ab:96:86:20:90:54:94:d7:db:8f:f2:ea: 5b:8b:d6:5d:ac:09:0d:43:f9:f9:81:ff:72:cf:6a:d7:9d:ea: 2b:e3:b1:7e:db:5b:a2:02:21:01:34:62:8e:32:64:7f:b1:8d: f6:4b:4c:96:51:17:cc:57:dc:5c:09:c1:e6:75:3a:3c:32:fc: 37:80:e3:42:2e:c2:1c:68:35:b0:69:7a:5e:62:8f:9a:6a:cb: 8c:0b:b0:01:65:23:27:e3:48:2d:d4:72:2d:72:1e:16:ec:fd: 1d:a6:a1:3a:e7:0d:c2:49:42:a6:09:81:75:ff:73:09:da:36: 36:76:9c:31:2d:68:4b:ab:55:a5:95:21:0d:f0:9c:b6:ac:8a: 44:cb:66:8e:f0:f7:21:ab:f2:55:4a:b5:e2:1d:36:ac:a3:5e: 03:b1:c5:14:d3:28:e9:95:a3:f9:dc:25:0b:d1:01:84:87:21: 46:b3:88:9e -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHocwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTg1 MjA2Qzg3NDIwQkU0MkM3QjkwNDJERTNFNUZENTE1OTVGRjE0QjAeFw0yNTA2MDUw ODUzMTNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDIwNTIxQ0JFN0Y1NDMw QTQ2REYzN0JFRTkyOTM4REU5MjZFMThCMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxfYzfecvjSr2V0vRTXsqSC7xyFJDLIRc6cavIA8VjXgEP4PFg xcQp+sAqmfCwac7x56KMdNAj2tF5TTWRAPeG/yGbYARSja0busUvv4vA2eadF6fQ 1pZoI1sCvy7l4GTeEK7r+rsNXwH95IqJfGpEv5LVnDqt0/Uq0z5Sj4yUkSGw60aO 5kmCRDGEZH/iw6k80HB3ag9IA95t4DlFb21TWQ/xeW1fdg6/EAvUb5rVyfrKSzM8 zuxW38hKwc5oVCsnUoGWCj8nrLOqU0owvetF52STjZSwR/w//ZwTGqyOAKqTh0kL 2lloNBigMJLZ9a/Sc5DPANQvrVmJP5JH50IhAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUIFIcvn9UMKRt83vukpON6SbhixcwHwYDVR0jBBgwFoAUWFIGyHQgvkLHuQQt 4+X9UVlf8UswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzYx L1dGSUd5SFFndmtMSHVRUXQ0LVg5VVZsZjhVcy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvV0ZJR3lIUWd2a0xIdVFRdDQtWDlVVmxmOFVzLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzYxL0lGSWN2bjlVTUtSdDgz dnVrcE9ONlNiaGl4Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADKOckwDQYJKoZIhvcNAQELBQADggEBAFWW5nenHXvMlagTf66da9EcGHWBcsYu Wg/W+5DFSRZGpTh/n4c2WieJfCba/JmOZ7530tMHcrqwBHhqMLs9GmDi6iVeYTmZ S6Rk8LspmKuWhiCQVJTX24/y6luL1l2sCQ1D+fmB/3LPated6ivjsX7bW6ICIQE0 Yo4yZH+xjfZLTJZRF8xX3FwJweZ1Ojwy/DeA40IuwhxoNbBpel5ij5pqy4wLsAFl IyfjSC3Uci1yHhbs/R2moTrnDcJJQqYJgXX/cwnaNjZ2nDEtaEurVaWVIQ3wnLas ikTLZo7w9yGr8lVKteIdNqyjXgOxxRTTKOmVo/ncJQvRAYSHIUaziJ4= -----END CERTIFICATE-----Generated at Sun Jun 22 03:57:17 2025 by rpki-client