$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/65/NJ6BNlK4xsz2pWt6jh9TRbdmtwo.roa File: NJ6BNlK4xsz2pWt6jh9TRbdmtwo.roa (raw, json) Hash identifier: Y+tSg/LbrZHtVLaNMJYRvOXDF9n+5BI9LZsRPd5h1io= Subject key identifier: 34:9E:81:36:52:B8:C6:CC:F6:A5:6B:7A:8E:1F:53:45:B7:66:B7:0A Certificate issuer: /CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9 Certificate serial: 128D Authority key identifier: 98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/NJ6BNlK4xsz2pWt6jh9TRbdmtwo.roa Signing time: Fri 23 May 2025 11:37:39 +0000 ROA not before: Fri 23 May 2025 11:37:39 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 23853 IP address blocks: 120.136.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:11:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4749 (0x128d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9 Validity Not Before: May 23 11:37:39 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=349E813652B8C6CCF6A56B7A8E1F5345B766B70A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ca:8b:dd:9c:c7:1a:9d:64:58:c6:a9:49:ef: 88:3a:e3:0d:97:f0:fb:a4:78:a2:e5:de:87:52:b1: c8:51:da:af:b1:f4:ce:60:1c:0d:bb:66:0a:c5:4d: 4b:0b:d8:8d:3a:82:d8:ac:65:2e:72:25:78:30:b7: 49:c0:0f:72:eb:49:de:4f:f4:31:53:48:30:b8:fa: 6c:d5:96:2b:ed:17:87:25:0a:ae:58:ba:46:13:42: 88:59:0a:d5:1d:35:d5:27:93:55:db:34:f5:87:04: 3d:69:da:f9:7b:42:13:68:6c:13:bd:9d:a9:14:e1: 2f:f8:a1:c0:b2:6a:d9:32:b8:c8:c9:a2:51:4b:e6: 7c:a3:05:5b:9c:5a:77:65:25:4b:c8:2d:08:16:12: 58:cd:63:e6:81:e9:23:c8:fb:a2:ab:90:42:c9:08: af:f0:69:c9:6d:3f:c6:88:76:80:83:46:d9:e8:de: df:4e:d1:f9:94:22:64:e5:f2:ab:9e:5e:68:ab:fc: b6:fb:18:17:46:7c:4d:a5:a3:cb:bc:2e:51:7a:25: 50:9a:46:1f:6e:2e:c5:48:3e:bb:db:ab:04:78:31: 1f:b2:cd:20:d0:af:b4:88:f3:5c:b1:16:ab:16:05: a1:06:66:7b:57:8b:c2:7b:52:f5:06:b3:01:be:3a: 9e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:9E:81:36:52:B8:C6:CC:F6:A5:6B:7A:8E:1F:53:45:B7:66:B7:0A X509v3 Authority Key Identifier: keyid:98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/NJ6BNlK4xsz2pWt6jh9TRbdmtwo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 120.136.184.0/22 Signature Algorithm: sha256WithRSAEncryption c1:3e:35:b3:46:e4:5c:4b:51:ad:b7:9c:44:3a:2f:7c:2a:71: e8:b8:dd:b6:73:e5:f9:50:d0:4b:47:0b:2a:d5:52:c2:d0:ee: a1:d0:a4:99:c5:38:d5:62:a4:5b:4e:50:a1:db:87:46:b5:09: 24:e2:2b:28:56:14:57:56:d2:88:1b:2f:1b:8a:34:da:a6:0d: 3b:5b:33:0b:d3:ca:bd:15:ed:50:a8:0c:d2:b6:e4:1e:ba:22: 06:b5:e7:c4:81:66:9b:e5:b2:9a:81:4d:68:ac:78:4c:1f:3d: bc:cc:92:17:4b:30:39:40:01:58:c4:fa:47:dc:8e:a7:8a:68: bc:d0:26:50:06:4e:e2:6d:90:6e:34:b0:50:d0:83:a0:12:bb: 43:5f:2f:ff:8c:70:1a:58:f6:e6:eb:5c:e4:34:1e:e7:8a:7c: 5b:de:0e:ba:2b:33:23:8c:ee:82:21:47:ec:bd:dc:4c:40:c9: 5f:df:24:d3:03:2d:73:3e:b3:2a:7d:2a:d7:01:c6:bc:23:e4: eb:9f:06:2d:c5:3e:58:a5:98:35:a2:36:2b:55:56:51:05:ab: 73:67:17:01:05:10:78:f5:06:26:ff:3a:81:69:e3:9e:ad:87: 73:87:48:d3:37:c2:3f:36:ee:e5:f3:f3:fa:a8:6c:1e:24:b5: 55:e4:8f:b3 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICEo0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTgy NEM1NTUyMjhCMjhCNjk4RERFNzdCQzFBREQwRTI4MDdCODZCOTAeFw0yNTA1MjMx MTM3MzlaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDM0OUU4MTM2NTJCOEM2 Q0NGNkE1NkI3QThFMUY1MzQ1Qjc2NkI3MEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkyovdnMcanWRYxqlJ74g64w2X8PukeKLl3odSschR2q+x9M5g HA27ZgrFTUsL2I06gtisZS5yJXgwt0nAD3LrSd5P9DFTSDC4+mzVlivtF4clCq5Y ukYTQohZCtUdNdUnk1XbNPWHBD1p2vl7QhNobBO9nakU4S/4ocCyatkyuMjJolFL 5nyjBVucWndlJUvILQgWEljNY+aB6SPI+6KrkELJCK/wacltP8aIdoCDRtno3t9O 0fmUImTl8queXmir/Lb7GBdGfE2lo8u8LlF6JVCaRh9uLsVIPrvbqwR4MR+yzSDQ r7SI81yxFqsWBaEGZntXi8J7UvUGswG+Op7HAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUNJ6BNlK4xsz2pWt6jh9TRbdmtwowHwYDVR0jBBgwFoAUmCTFVSKLKLaY3ed7 wa3Q4oB7hrkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjUv bUNURlZTS0xLTGFZM2VkN3dhM1E0b0I3aHJrLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9tQ1RGVlNLTEtMYVkzZWQ3d2EzUTRvQjdocmsuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC82NS9OSjZCTmxLNHhzejJwV3Q2 amg5VFJiZG10d28ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC eIi4MA0GCSqGSIb3DQEBCwUAA4IBAQDBPjWzRuRcS1Gtt5xEOi98KnHouN22c+X5 UNBLRwsq1VLC0O6h0KSZxTjVYqRbTlCh24dGtQkk4isoVhRXVtKIGy8bijTapg07 WzML08q9Fe1QqAzStuQeuiIGtefEgWab5bKagU1orHhMHz28zJIXSzA5QAFYxPpH 3I6nimi80CZQBk7ibZBuNLBQ0IOgErtDXy//jHAaWPbm61zkNB7ninxb3g66KzMj jO6CIUfsvdxMQMlf3yTTAy1zPrMqfSrXAca8I+TrnwYtxT5YpZg1ojYrVVZRBatz ZxcBBRB49QYm/zqBaeOerYdzh0jTN8I/Nu7l8/P6qGweJLVV5I+z -----END CERTIFICATE-----Generated at Sun Jun 22 01:10:34 2025 by rpki-client