$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/620/7Z7H7XDbGSChn1KThGrbYqqjJHE.roa File: 7Z7H7XDbGSChn1KThGrbYqqjJHE.roa (raw, json) Hash identifier: CKgQ1EEnL7Kx3DHSKdphsYIEX6AeW/sIq4uCgtNcOUM= Subject key identifier: ED:9E:C7:ED:70:DB:19:20:A1:9F:52:93:84:6A:DB:62:AA:A3:24:71 Certificate issuer: /CN=309C2A943B28DC0858C39B9208A1609C0973E49A Certificate serial: 0185 Authority key identifier: 30:9C:2A:94:3B:28:DC:08:58:C3:9B:92:08:A1:60:9C:09:73:E4:9A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/7Z7H7XDbGSChn1KThGrbYqqjJHE.roa Signing time: Fri 28 Mar 2025 02:40:04 +0000 ROA not before: Fri 28 Mar 2025 02:40:04 +0000 ROA not after: Tue 13 Jan 2026 01:35:26 +0000 asID: 142132 IP address blocks: 114.28.212.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 14:36:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 389 (0x185) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=309C2A943B28DC0858C39B9208A1609C0973E49A Validity Not Before: Mar 28 02:40:04 2025 GMT Not After : Jan 13 01:35:26 2026 GMT Subject: CN=ED9EC7ED70DB1920A19F5293846ADB62AAA32471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:01:b7:0f:57:24:25:eb:71:c6:bf:ab:82:e1: e0:f1:30:b6:40:69:7e:30:ba:91:9c:1f:58:8f:11: 59:5b:b1:e9:87:ee:f0:c2:9f:80:de:bc:f7:78:2b: fb:4a:be:f1:85:25:57:0f:38:f8:71:d6:98:7f:9c: f3:11:40:ad:f0:b0:f4:b6:00:89:6f:46:b9:2e:fa: 23:d0:23:e7:d4:f1:d3:04:b9:27:c6:80:9e:60:ab: 93:f1:8f:b5:36:0b:51:d3:7c:17:97:27:23:5f:6a: 76:ad:c5:57:3f:14:bd:a2:81:4d:97:8d:4d:e1:75: 05:45:c7:00:12:16:8f:9d:5c:c0:27:0c:21:9a:03: ce:2b:15:20:e1:20:e2:d5:10:85:e7:ec:83:e9:36: 11:c0:10:5f:53:c6:c4:a3:17:c4:e1:9e:3b:88:40: f3:3f:bc:55:59:69:a5:e8:a5:07:0f:c7:5c:2b:e7: 1d:57:96:ab:57:7f:62:c5:ed:1b:36:0a:3e:1a:2a: ba:ab:27:cc:13:db:19:ce:fd:e6:e8:34:37:fe:d2: 26:d1:4e:83:08:6f:b6:66:86:65:92:1a:f3:19:d7: 9d:e3:46:f8:0e:cb:86:33:06:37:2c:14:47:10:4a: a4:12:7c:e6:de:78:5e:b3:c4:f1:e4:2c:05:d0:d5: 38:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:9E:C7:ED:70:DB:19:20:A1:9F:52:93:84:6A:DB:62:AA:A3:24:71 X509v3 Authority Key Identifier: keyid:30:9C:2A:94:3B:28:DC:08:58:C3:9B:92:08:A1:60:9C:09:73:E4:9A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/7Z7H7XDbGSChn1KThGrbYqqjJHE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.28.212.0/22 Signature Algorithm: sha256WithRSAEncryption 0e:dc:68:d9:02:aa:2b:38:6f:d8:d8:a0:4a:a0:55:c2:80:c9: 49:47:89:3e:5b:26:99:d0:73:1e:9f:03:f4:21:89:93:f6:b4: 4e:ed:06:0d:a7:e0:2d:3b:c9:9d:80:19:35:50:96:3d:60:d6: ba:93:6f:2d:e5:74:1c:17:97:31:70:7e:a3:fd:b7:87:4d:d1: d7:a4:e0:4b:6d:6a:f2:6e:bd:ca:72:e7:23:75:e6:5b:5a:05: e4:7e:7d:d2:ac:27:c0:26:b8:3d:98:7d:b3:29:13:a5:af:cc: df:35:fc:d5:25:8a:48:66:64:a9:0b:0c:6d:be:59:87:50:31: a4:b9:97:da:cb:55:bc:cb:bc:e6:68:bb:b2:83:d9:77:3c:e5: cd:34:0a:94:8e:dc:26:12:0d:d2:a0:2e:b6:eb:4a:6b:6a:28: ce:45:90:e6:76:c0:96:10:82:be:c6:61:f8:4e:0d:bb:96:25: 98:ae:f3:ae:6b:1d:4c:85:f6:f5:1b:d5:23:86:6a:e5:6d:13: bc:0c:87:1a:d2:11:78:6f:f6:65:88:8e:0f:ca:7f:c5:4c:9f: 67:3e:14:30:ac:09:42:e8:6c:2c:42:bd:8c:8b:8a:50:b6:f0: b0:34:5c:22:5c:f5:12:61:85:61:d1:c5:dd:60:ce:65:06:10: 76:1f:a4:e4 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzA5 QzJBOTQzQjI4REMwODU4QzM5QjkyMDhBMTYwOUMwOTczRTQ5QTAeFw0yNTAzMjgw MjQwMDRaFw0yNjAxMTMwMTM1MjZaMDMxMTAvBgNVBAMTKEVEOUVDN0VENzBEQjE5 MjBBMTlGNTI5Mzg0NkFEQjYyQUFBMzI0NzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqAbcPVyQl63HGv6uC4eDxMLZAaX4wupGcH1iPEVlbsemH7vDC n4DevPd4K/tKvvGFJVcPOPhx1ph/nPMRQK3wsPS2AIlvRrku+iPQI+fU8dMEuSfG gJ5gq5Pxj7U2C1HTfBeXJyNfanatxVc/FL2igU2XjU3hdQVFxwASFo+dXMAnDCGa A84rFSDhIOLVEIXn7IPpNhHAEF9TxsSjF8ThnjuIQPM/vFVZaaXopQcPx1wr5x1X lqtXf2LF7Rs2Cj4aKrqrJ8wT2xnO/eboNDf+0ibRToMIb7ZmhmWSGvMZ153jRvgO y4YzBjcsFEcQSqQSfObeeF6zxPHkLAXQ1TjxAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU7Z7H7XDbGSChn1KThGrbYqqjJHEwHwYDVR0jBBgwFoAUMJwqlDso3AhYw5uS CKFgnAlz5JowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIw L01Kd3FsRHNvM0FoWXc1dVNDS0ZnbkFsejVKby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvTUp3cWxEc28zQWhZdzV1U0NLRmduQWx6NUpvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIwLzdaN0g3WERiR1NDaG4x S1RoR3JiWXFxakpIRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJyHNQwDQYJKoZIhvcNAQELBQADggEBAA7caNkCqis4b9jYoEqgVcKAyUlHiT5b JpnQcx6fA/QhiZP2tE7tBg2n4C07yZ2AGTVQlj1g1rqTby3ldBwXlzFwfqP9t4dN 0dek4EttavJuvcpy5yN15ltaBeR+fdKsJ8AmuD2YfbMpE6WvzN81/NUlikhmZKkL DG2+WYdQMaS5l9rLVbzLvOZou7KD2Xc85c00CpSO3CYSDdKgLrbrSmtqKM5FkOZ2 wJYQgr7GYfhODbuWJZiu865rHUyF9vUb1SOGauVtE7wMhxrSEXhv9mWIjg/Kf8VM n2c+FDCsCULobCxCvYyLilC28LA0XCJc9RJhhWHRxd1gzmUGEHYfpOQ= -----END CERTIFICATE-----Generated at Sat Apr 26 14:34:07 2025 by rpki-client