$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/P5JGvGJ5JGo9xHbh5PVjhcXYcHE.roa File: P5JGvGJ5JGo9xHbh5PVjhcXYcHE.roa (raw, json) Hash identifier: MgXvpmbZi0f0A4/L85jVaJgcfPoqxSadGXWmlCoplhM= Subject key identifier: 3F:92:46:BC:62:79:24:6A:3D:C4:76:E1:E4:F5:63:85:C5:D8:70:71 Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA Certificate serial: 10D9 Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/P5JGvGJ5JGo9xHbh5PVjhcXYcHE.roa Signing time: Sun 09 Mar 2025 16:18:41 +0000 ROA not before: Sun 09 Mar 2025 16:18:41 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 62387 IP address blocks: 101.232.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 15:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4313 (0x10d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA Validity Not Before: Mar 9 16:18:41 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=3F9246BC6279246A3DC476E1E4F56385C5D87071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:eb:f1:f9:da:0c:a9:7c:67:66:cd:ac:66:a4: 9f:23:cc:cc:05:e8:08:fa:4c:0b:0e:16:31:e5:40: 7e:4f:4d:49:ec:35:54:37:9f:67:e0:b4:d9:c7:43: fc:5a:7d:76:4b:81:dc:54:58:9f:dc:48:e6:38:5d: 07:5d:2d:3d:d1:d1:ac:47:04:9c:4d:f5:fc:df:d2: c6:1f:5c:65:b1:71:67:f4:a1:b6:9d:e5:02:e8:83: 83:70:5a:75:71:e4:05:42:56:fd:c0:b7:cc:42:96: 26:fe:ef:4b:3d:ed:d4:82:31:22:10:3d:42:a7:2b: 76:68:b4:7b:ad:9a:c0:ff:ed:db:68:43:62:87:c9: e4:38:d1:f4:f9:40:c9:18:1d:bc:a1:3c:e9:64:bf: 33:27:ae:51:8c:d7:1f:30:8f:7a:bf:79:02:5a:3c: c2:8b:22:b2:27:03:4e:a9:e4:c6:45:cd:bf:bd:1d: 3e:14:d3:ca:67:cc:63:5f:2e:74:f0:f6:41:81:9a: a0:13:c4:66:e7:da:66:6a:44:7b:d8:44:d5:96:87: ac:77:e4:6a:af:ac:94:72:65:11:cc:b9:14:ab:f1: 17:b6:d2:95:c9:e3:1c:76:26:ce:20:52:ff:f6:be: ab:bb:52:58:57:72:a7:bc:be:d1:71:ba:ee:43:9c: c9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:92:46:BC:62:79:24:6A:3D:C4:76:E1:E4:F5:63:85:C5:D8:70:71 X509v3 Authority Key Identifier: keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/P5JGvGJ5JGo9xHbh5PVjhcXYcHE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 101.232.12.0/22 Signature Algorithm: sha256WithRSAEncryption 6f:25:27:da:51:35:4f:ba:45:59:c8:a0:47:c3:30:a7:cb:4f: fe:47:5d:4f:84:9e:d9:99:03:3d:13:69:06:c1:4e:96:3d:90: 99:cb:e9:c7:d5:a8:b0:98:4f:ef:e5:dd:d4:de:7a:75:6e:d4: e9:fc:b4:9b:f2:1c:24:db:da:f7:4b:b6:0b:65:6d:c0:ab:00: 51:42:3f:46:78:21:2e:48:2b:4c:d7:ac:df:7b:61:e2:7a:d6: 61:ef:77:15:ef:57:fb:2e:10:49:09:0a:93:4c:db:30:61:61: ed:98:b5:eb:ff:24:be:c4:46:3c:98:4a:c9:85:e7:12:07:6b: 76:3d:f6:15:06:2d:2e:c4:38:db:c7:0b:01:86:ae:89:f4:cc: 10:02:ac:ef:18:0a:b7:f8:31:6d:2d:8c:f9:00:5a:d2:0a:f4: f3:0e:1a:56:9c:4b:e2:e6:e7:00:da:20:74:8e:5a:10:2b:59: c2:07:2e:b7:f3:85:11:d2:77:36:95:cf:0d:90:5e:d6:2c:f2: 81:db:50:ed:54:da:c0:60:4e:d0:55:80:a3:65:de:f2:22:8c: 2e:e0:a4:0b:e8:ea:cc:a0:dd:1c:05:80:33:27:18:22:34:36: 32:83:3b:c9:5d:4f:ff:4d:01:94:2b:d0:c2:84:58:cb:53:27: cc:c2:b0:1a -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICENkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzY1 QkY1N0JEQzlCNUJFN0Q5N0UwRDY1QUE0MjIyQjFFRkFBQkVBQTAeFw0yNTAzMDkx NjE4NDFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDNGOTI0NkJDNjI3OTI0 NkEzREM0NzZFMUU0RjU2Mzg1QzVEODcwNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCn6/H52gypfGdmzaxmpJ8jzMwF6Aj6TAsOFjHlQH5PTUnsNVQ3 n2fgtNnHQ/xafXZLgdxUWJ/cSOY4XQddLT3R0axHBJxN9fzf0sYfXGWxcWf0obad 5QLog4NwWnVx5AVCVv3At8xClib+70s97dSCMSIQPUKnK3ZotHutmsD/7dtoQ2KH yeQ40fT5QMkYHbyhPOlkvzMnrlGM1x8wj3q/eQJaPMKLIrInA06p5MZFzb+9HT4U 08pnzGNfLnTw9kGBmqATxGbn2mZqRHvYRNWWh6x35GqvrJRyZRHMuRSr8Re20pXJ 4xx2Js4gUv/2vqu7UlhXcqe8vtFxuu5DnMkHAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUP5JGvGJ5JGo9xHbh5PVjhcXYcHEwHwYDVR0jBBgwFoAUxlv1e9ybW+fZfg1l qkIise+qvqowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEz L3hsdjFlOXliVy1mWmZnMWxxa0lpc2UtcXZxby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAveGx2MWU5eWJXLWZaZmcxbHFrSWlzZS1xdnFvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEzL1A1Skd2R0o1SkdvOXhI Ymg1UFZqaGNYWWNIRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJl6AwwDQYJKoZIhvcNAQELBQADggEBAG8lJ9pRNU+6RVnIoEfDMKfLT/5HXU+E ntmZAz0TaQbBTpY9kJnL6cfVqLCYT+/l3dTeenVu1On8tJvyHCTb2vdLtgtlbcCr AFFCP0Z4IS5IK0zXrN97YeJ61mHvdxXvV/suEEkJCpNM2zBhYe2Ytev/JL7ERjyY SsmF5xIHa3Y99hUGLS7EONvHCwGGron0zBACrO8YCrf4MW0tjPkAWtIK9PMOGlac S+Lm5wDaIHSOWhArWcIHLrfzhRHSdzaVzw2QXtYs8oHbUO1U2sBgTtBVgKNl3vIi jC7gpAvo6syg3RwFgDMnGCI0NjKDO8ldT/9NAZQr0MKEWMtTJ8zCsBo= -----END CERTIFICATE-----Generated at Sat Apr 26 15:10:22 2025 by rpki-client