$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/64/NpRrsLdPP0YpI7jjQD34UQ5k4G8.roa File: NpRrsLdPP0YpI7jjQD34UQ5k4G8.roa (raw, json) Hash identifier: 01WGFpA57IU1hSI2uRZXrj1/+8ZrG6EjbFFy2SBjfaM= Subject key identifier: 36:94:6B:B0:B7:4F:3F:46:29:23:B8:E3:40:3D:F8:51:0E:64:E0:6F Certificate issuer: /CN=5EB8C57D72F7946DD7B2420599288ECA153CB709 Certificate serial: 14 Authority key identifier: 5E:B8:C5:7D:72:F7:94:6D:D7:B2:42:05:99:28:8E:CA:15:3C:B7:09 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XrjFfXL3lG3XskIFmSiOyhU8twk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/64/NpRrsLdPP0YpI7jjQD34UQ5k4G8.roa Signing time: Mon 26 May 2025 00:56:40 +0000 ROA not before: Mon 26 May 2025 00:56:40 +0000 ROA not after: Tue 26 May 2026 00:40:26 +0000 asID: 23724 IP address blocks: 211.157.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/64/XrjFfXL3lG3XskIFmSiOyhU8twk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/64/XrjFfXL3lG3XskIFmSiOyhU8twk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XrjFfXL3lG3XskIFmSiOyhU8twk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 19:11:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EB8C57D72F7946DD7B2420599288ECA153CB709 Validity Not Before: May 26 00:56:40 2025 GMT Not After : May 26 00:40:26 2026 GMT Subject: CN=36946BB0B74F3F462923B8E3403DF8510E64E06F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ba:67:15:c5:79:38:45:67:bd:f0:fc:24:e2: 80:28:a9:27:4c:c5:64:a7:0d:e3:a9:83:69:5c:69: c8:fd:d8:6a:1c:38:7a:b2:7a:40:af:53:9c:21:59: d8:e1:ed:bb:dc:f0:a8:49:34:4f:c5:e4:49:5e:c5: c3:ca:a5:0e:2c:b3:b7:b8:76:ff:62:3c:db:f2:a6: 83:cb:0b:fd:55:92:4d:9e:3c:43:70:33:01:e1:00: fd:f0:c3:9f:5f:05:b5:bb:18:10:71:c9:26:e1:5e: ee:b5:42:a6:b0:b4:43:e6:ae:ff:3a:5e:6d:a8:dc: 04:8a:ff:a9:a3:6e:06:b1:ad:ec:36:f2:06:c7:fd: 93:56:06:d7:95:12:88:fb:48:3a:1a:1f:bd:4d:d9: 3d:3e:6b:77:56:59:dc:cb:fc:24:f5:a8:8d:cf:94: 39:88:6e:17:74:e6:fd:53:4a:dd:d7:30:f9:d6:be: a6:44:2a:16:18:b1:c8:6f:54:78:8e:ec:5f:f9:66: 72:15:c3:f1:a7:82:43:98:47:2b:23:51:46:93:5b: 5d:5a:38:dc:b6:e9:fd:47:6d:aa:54:7d:e0:2d:f4: c1:72:74:8f:e1:26:b5:c9:76:b5:72:99:6c:cc:0d: 7a:ae:22:59:0f:44:8a:73:90:ab:2c:e9:db:11:47: 1b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:94:6B:B0:B7:4F:3F:46:29:23:B8:E3:40:3D:F8:51:0E:64:E0:6F X509v3 Authority Key Identifier: keyid:5E:B8:C5:7D:72:F7:94:6D:D7:B2:42:05:99:28:8E:CA:15:3C:B7:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/64/XrjFfXL3lG3XskIFmSiOyhU8twk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XrjFfXL3lG3XskIFmSiOyhU8twk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/64/NpRrsLdPP0YpI7jjQD34UQ5k4G8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.157.128.0/18 Signature Algorithm: sha256WithRSAEncryption 3c:56:62:77:03:6d:3a:a7:f8:fb:48:5a:d7:6f:2d:7e:05:dc: 56:21:c6:44:73:9b:38:67:fa:c1:c0:2a:f0:fe:7b:26:fa:45: de:c7:b0:e6:53:a1:11:79:30:37:0e:37:e3:af:fa:f1:cc:62: 91:1f:cf:1a:87:e4:ae:af:eb:4e:cb:87:b9:8b:ba:b5:62:06: 18:64:2d:af:4e:df:7b:11:de:e3:79:c2:50:bc:88:94:ad:b6: bf:33:bd:20:74:fd:b7:f5:99:96:f9:7e:7b:15:9a:e8:71:ef: db:37:a9:1a:89:70:83:9a:86:ae:c1:2a:98:43:73:04:0b:5f: cc:ab:2b:52:27:dd:f0:c6:54:9f:ef:2e:79:c6:0a:d0:e6:61: 9f:60:5c:61:9a:69:c8:3b:06:8a:c5:46:c7:24:96:31:88:36: 02:05:56:fc:1b:c8:04:d3:02:fd:5a:0b:00:f9:33:7a:11:08: 10:35:f4:60:64:3a:07:58:f3:7a:f6:10:3f:bc:24:0a:5c:d0: 9e:17:5d:b5:0c:21:12:57:28:31:bf:48:6b:4f:51:f0:2d:57: 37:24:59:00:fc:d0:a6:f9:b8:74:1d:a3:be:c9:40:3d:95:7b: 00:f3:83:4a:b8:3a:a3:4b:38:46:a7:9e:4a:51:5d:92:3f:d3: af:86:2a:bc -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIBFDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1RUI4 QzU3RDcyRjc5NDZERDdCMjQyMDU5OTI4OEVDQTE1M0NCNzA5MB4XDTI1MDUyNjAw NTY0MFoXDTI2MDUyNjAwNDAyNlowMzExMC8GA1UEAxMoMzY5NDZCQjBCNzRGM0Y0 NjI5MjNCOEUzNDAzREY4NTEwRTY0RTA2RjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOK6ZxXFeThFZ73w/CTigCipJ0zFZKcN46mDaVxpyP3Yahw4erJ6 QK9TnCFZ2OHtu9zwqEk0T8XkSV7Fw8qlDiyzt7h2/2I82/Kmg8sL/VWSTZ48Q3Az AeEA/fDDn18FtbsYEHHJJuFe7rVCprC0Q+au/zpebajcBIr/qaNuBrGt7DbyBsf9 k1YG15USiPtIOhofvU3ZPT5rd1ZZ3Mv8JPWojc+UOYhuF3Tm/VNK3dcw+da+pkQq FhixyG9UeI7sX/lmchXD8aeCQ5hHKyNRRpNbXVo43Lbp/UdtqlR94C30wXJ0j+Em tcl2tXKZbMwNeq4iWQ9EinOQqyzp2xFHG9ECAwEAAaOCAe8wggHrMB0GA1UdDgQW BBQ2lGuwt08/RikjuONAPfhRDmTgbzAfBgNVHSMEGDAWgBReuMV9cveUbdeyQgWZ KI7KFTy3CTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsGA1UdHwRUMFIwUKBO oEyGSnJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC82NC9Y cmpGZlhMM2xHM1hza0lGbVNpT3loVTh0d2suY3JsMGMGCCsGAQUFBwEBBFcwVTBT BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw MDAwL1hyakZmWEwzbEczWHNrSUZtU2lPeWhVOHR3ay5jZXIwDgYDVR0PAQH/BAQD AgeAMIGbBggrBgEFBQcBCwSBjjCBizBWBggrBgEFBQcwC4ZKcnN5bmM6Ly9ycGtp LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzY0L05wUnJzTGRQUDBZcEk3ampR RDM0VVE1azRHOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5j bi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbT nYAwDQYJKoZIhvcNAQELBQADggEBADxWYncDbTqn+PtIWtdvLX4F3FYhxkRzmzhn +sHAKvD+eyb6Rd7HsOZToRF5MDcON+Ov+vHMYpEfzxqH5K6v607Lh7mLurViBhhk La9O33sR3uN5wlC8iJSttr8zvSB0/bf1mZb5fnsVmuhx79s3qRqJcIOahq7BKphD cwQLX8yrK1In3fDGVJ/vLnnGCtDmYZ9gXGGaacg7BorFRsckljGINgIFVvwbyATT Av1aCwD5M3oRCBA19GBkOgdY83r2ED+8JApc0J4XXbUMIRJXKDG/SGtPUfAtVzck WQD80Kb5uHQdo77JQD2VewDzg0q4OqNLOEannkpRXZI/06+GKrw= -----END CERTIFICATE-----Generated at Fri Jun 20 16:30:02 2025 by rpki-client