$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/65/Hid9TSxvy611Z8cDtqNMLtc4760.roa File: Hid9TSxvy611Z8cDtqNMLtc4760.roa (raw, json) Hash identifier: 5G/Adrd2lTvVPhN1xnfJeUTCdkxClmLK6htDh4mHOlI= Subject key identifier: 1E:27:7D:4D:2C:6F:CB:AD:75:67:C7:03:B6:A3:4C:2E:D7:38:EF:AD Certificate issuer: /CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9 Certificate serial: 1282 Authority key identifier: 98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/Hid9TSxvy611Z8cDtqNMLtc4760.roa Signing time: Fri 23 May 2025 11:06:17 +0000 ROA not before: Fri 23 May 2025 11:06:17 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 23853 IP address blocks: 120.136.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 03:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4738 (0x1282) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9 Validity Not Before: May 23 11:06:17 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=1E277D4D2C6FCBAD7567C703B6A34C2ED738EFAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:55:53:3d:47:ae:1f:a2:de:ac:29:65:ef:4a: 38:a2:54:5d:36:e0:1e:0c:d3:38:cc:0f:e8:60:9d: 5d:25:06:aa:6a:6a:03:67:70:01:92:eb:d6:f7:26: 13:e4:be:f9:6a:80:00:7f:68:6f:4d:9c:34:de:d1: 11:eb:7f:a3:f1:20:c1:b5:1a:93:c4:75:bc:3f:4d: 2b:be:0d:a0:aa:51:f5:15:28:6a:58:af:38:70:16: f4:0e:49:18:ba:5c:85:78:66:52:76:ff:b5:c9:89: be:21:f5:21:d0:fc:4b:93:50:85:10:a3:8a:de:52: e7:dc:d7:73:28:ab:a8:d5:ed:e4:62:ec:07:6e:f4: 85:7a:b1:15:dd:51:38:e3:59:c0:9c:05:a7:11:c7: 21:63:24:2b:e5:1a:8f:b6:3a:5f:b4:a5:4a:be:6b: 4c:15:5e:7e:76:6b:53:4a:ce:c3:d7:9b:3d:dd:35: 25:e3:94:0e:78:f0:f9:a1:b0:51:38:7f:2a:fc:04: 30:86:d8:cf:83:c7:79:18:88:80:e2:00:4d:08:dd: 6d:b7:f7:c0:41:3c:80:28:95:ee:a0:56:0f:e3:54: 33:bb:71:d4:53:16:64:3f:03:2d:dc:e3:f7:e6:b1: 14:6e:a1:56:ee:46:14:90:2a:58:52:45:68:75:8a: 16:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:27:7D:4D:2C:6F:CB:AD:75:67:C7:03:B6:A3:4C:2E:D7:38:EF:AD X509v3 Authority Key Identifier: keyid:98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/Hid9TSxvy611Z8cDtqNMLtc4760.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 120.136.128.0/21 Signature Algorithm: sha256WithRSAEncryption 2c:1c:55:4f:9a:ee:c8:68:fe:13:04:3d:bf:eb:e0:e4:88:cd: 16:7c:d2:16:fc:61:1b:c3:8f:05:9e:96:f8:81:1d:e2:41:44: 8d:a8:74:51:e8:d2:55:55:88:44:b6:c4:4c:48:63:ed:78:9c: 9c:48:64:23:b9:b8:c0:89:b0:07:78:4d:57:4a:bf:49:e4:ad: b9:5f:f1:98:75:04:59:65:49:16:a1:88:0a:e3:a9:19:99:d8: d2:21:7b:5a:64:42:e6:8b:b6:c8:72:60:4a:5f:ec:d9:b5:74: 3b:ad:15:02:7a:8b:ea:03:25:63:d2:01:1b:99:b9:e4:5e:3b: 4e:74:68:f1:58:82:27:c6:f6:4a:da:77:de:a5:b8:be:a0:ea: eb:a4:2f:39:2b:a9:e3:ef:ef:6e:04:c9:9e:e6:98:ce:3a:a9: 19:c4:ac:e9:eb:3e:2a:bf:3d:58:f3:8a:49:56:05:8e:b1:a7: 1d:50:a8:cf:c1:9d:c4:41:ba:51:54:7e:ba:01:fe:fa:65:db: c9:0d:30:27:4a:ff:85:3c:c9:15:83:37:3f:41:a9:bc:67:de: e2:87:a2:99:65:c1:d3:b5:cc:43:11:52:02:5f:38:82:c1:e7: 34:2d:41:e4:55:07:78:0a:3c:4b:e2:89:48:34:e5:5a:ea:53: b9:77:ea:55 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICEoIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTgy NEM1NTUyMjhCMjhCNjk4RERFNzdCQzFBREQwRTI4MDdCODZCOTAeFw0yNTA1MjMx MTA2MTdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDFFMjc3RDREMkM2RkNC QUQ3NTY3QzcwM0I2QTM0QzJFRDczOEVGQUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqVVM9R64fot6sKWXvSjiiVF024B4M0zjMD+hgnV0lBqpqagNn cAGS69b3JhPkvvlqgAB/aG9NnDTe0RHrf6PxIMG1GpPEdbw/TSu+DaCqUfUVKGpY rzhwFvQOSRi6XIV4ZlJ2/7XJib4h9SHQ/EuTUIUQo4reUufc13Moq6jV7eRi7Adu 9IV6sRXdUTjjWcCcBacRxyFjJCvlGo+2Ol+0pUq+a0wVXn52a1NKzsPXmz3dNSXj lA548PmhsFE4fyr8BDCG2M+Dx3kYiIDiAE0I3W2398BBPIAole6gVg/jVDO7cdRT FmQ/Ay3c4/fmsRRuoVbuRhSQKlhSRWh1ihabAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUHid9TSxvy611Z8cDtqNMLtc4760wHwYDVR0jBBgwFoAUmCTFVSKLKLaY3ed7 wa3Q4oB7hrkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjUv bUNURlZTS0xLTGFZM2VkN3dhM1E0b0I3aHJrLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9tQ1RGVlNLTEtMYVkzZWQ3d2EzUTRvQjdocmsuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC82NS9IaWQ5VFN4dnk2MTFaOGNE dHFOTUx0YzQ3NjAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD eIiAMA0GCSqGSIb3DQEBCwUAA4IBAQAsHFVPmu7IaP4TBD2/6+DkiM0WfNIW/GEb w48Fnpb4gR3iQUSNqHRR6NJVVYhEtsRMSGPteJycSGQjubjAibAHeE1XSr9J5K25 X/GYdQRZZUkWoYgK46kZmdjSIXtaZELmi7bIcmBKX+zZtXQ7rRUCeovqAyVj0gEb mbnkXjtOdGjxWIInxvZK2nfepbi+oOrrpC85K6nj7+9uBMme5pjOOqkZxKzp6z4q vz1Y84pJVgWOsacdUKjPwZ3EQbpRVH66Af76ZdvJDTAnSv+FPMkVgzc/Qam8Z97i h6KZZcHTtcxDEVICXziCwec0LUHkVQd4CjxL4olINOVa6lO5d+pV -----END CERTIFICATE-----Generated at Mon Jun 23 01:13:24 2025 by rpki-client