$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1232/EymkZ2O9iJVfSgzvm060kVTQVyg.roa File: EymkZ2O9iJVfSgzvm060kVTQVyg.roa (raw, json) Hash identifier: eyNKQ3fv1lyTKq2NTvQ7FRdH5rbLJKDM6/3zOa23Dp0= Subject key identifier: 13:29:A4:67:63:BD:88:95:5F:4A:0C:EF:9B:4E:B4:91:54:D0:57:28 Certificate issuer: /CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4 Certificate serial: 39 Authority key identifier: F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/EymkZ2O9iJVfSgzvm060kVTQVyg.roa Signing time: Fri 22 Aug 2025 06:30:20 +0000 ROA not before: Fri 22 Aug 2025 06:30:20 +0000 ROA not after: Thu 20 Aug 2026 07:49:18 +0000 asID: 139140 IP address blocks: 2402:7d80:8888::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 15:05:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4 Validity Not Before: Aug 22 06:30:20 2025 GMT Not After : Aug 20 07:49:18 2026 GMT Subject: CN=1329A46763BD88955F4A0CEF9B4EB49154D05728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1c:e9:76:37:ab:b5:9b:11:e7:9f:d1:2d:a2: 2d:44:c7:7b:a0:b1:52:a3:fa:3e:e9:48:ee:f0:8e: e9:b2:40:0c:e5:33:be:63:84:31:1d:ad:96:a0:35: 25:2f:57:88:3b:b4:a4:b8:37:0d:54:a6:56:0f:52: 26:f0:5b:9b:2a:1c:97:0f:cf:e0:97:c1:ea:e4:1f: c6:6a:5e:44:5f:3b:0f:e3:13:02:9d:18:f3:15:10: 22:9c:16:e2:59:ce:45:a4:c2:75:b1:6a:a1:c1:9b: 5b:1b:fb:a4:be:a8:4d:d9:9e:21:21:f9:2b:80:d9: f3:a2:74:ca:fe:c5:ad:d8:52:45:f3:5d:e0:9d:c0: 60:dc:cf:50:fa:73:34:6c:1d:e5:19:15:a2:31:96: ac:69:e4:6d:4a:f7:90:a8:4e:ae:2c:94:b4:13:69: 2b:9c:8a:0d:de:d9:9f:a1:cd:f2:88:bf:82:ac:b1: c8:42:f5:64:a3:6f:43:27:4b:84:09:41:1b:96:1b: 78:79:22:ad:a2:36:cc:46:b9:f1:1e:f3:61:e0:a0: 15:88:fc:c2:e8:23:41:ed:ef:c6:22:cc:07:c0:1a: 8f:29:9f:73:4f:72:32:21:e4:3a:2a:bd:53:55:ce: 1c:6a:60:6f:9c:47:56:2e:87:8d:24:24:69:95:52: 30:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:29:A4:67:63:BD:88:95:5F:4A:0C:EF:9B:4E:B4:91:54:D0:57:28 X509v3 Authority Key Identifier: keyid:F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/EymkZ2O9iJVfSgzvm060kVTQVyg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2402:7d80:8888::/48 Signature Algorithm: sha256WithRSAEncryption 69:1d:cb:87:84:4b:3f:6d:78:35:9b:ad:6d:99:8b:53:37:64: 63:64:18:5a:66:6c:f5:e1:aa:f2:40:c2:a7:c9:f9:25:b0:e8: bc:25:0e:ea:26:73:6e:20:01:9e:67:d4:d5:19:01:b1:d6:ff: 08:59:09:43:19:7f:c4:14:0a:e5:39:c7:da:ed:43:aa:19:52: de:5f:7e:cb:84:a3:c6:f6:9e:9a:07:c2:28:69:e0:2b:16:8b: 40:7e:47:f0:66:80:58:68:4e:20:09:ba:2b:15:3e:a0:74:5c: d6:9d:2d:be:7e:72:e6:91:43:cd:46:8b:dd:ad:d5:29:4e:ba: f9:60:38:64:7d:9e:9d:96:b2:06:f2:e0:fe:63:2f:08:26:fd: 16:4c:0e:de:f8:84:4c:52:e5:47:78:3a:11:b8:d1:0a:76:ba: 2e:3d:16:96:9a:f0:86:54:83:1f:0b:a3:0c:e1:a6:b0:5d:80: 70:50:a7:64:27:d2:22:fb:f5:bb:d6:56:14:3a:7d:1d:d8:92: a6:08:e7:d0:77:76:45:97:41:74:af:d5:c5:e1:64:d7:bd:b7: 3e:15:0c:74:f2:c3:e3:34:a6:b9:71:75:10:09:4f:45:0d:73: f9:2d:9b:da:70:31:a5:37:d7:43:49:7e:0c:d2:d9:02:17:85: 65:46:a0:ff -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIBOTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGMTk4 OUI0MDY5MDFBREY4ODEwQjlEQ0RDNEUwRkM5RTdFODVFRUI0MB4XDTI1MDgyMjA2 MzAyMFoXDTI2MDgyMDA3NDkxOFowMzExMC8GA1UEAxMoMTMyOUE0Njc2M0JEODg5 NTVGNEEwQ0VGOUI0RUI0OTE1NEQwNTcyODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMsc6XY3q7WbEeef0S2iLUTHe6CxUqP6PulI7vCO6bJADOUzvmOE MR2tlqA1JS9XiDu0pLg3DVSmVg9SJvBbmyoclw/P4JfB6uQfxmpeRF87D+MTAp0Y 8xUQIpwW4lnORaTCdbFqocGbWxv7pL6oTdmeISH5K4DZ86J0yv7FrdhSRfNd4J3A YNzPUPpzNGwd5RkVojGWrGnkbUr3kKhOriyUtBNpK5yKDd7Zn6HN8oi/gqyxyEL1 ZKNvQydLhAlBG5YbeHkiraI2zEa58R7zYeCgFYj8wugjQe3vxiLMB8Aajymfc09y MiHkOiq9U1XOHGpgb5xHVi6HjSQkaZVSMMMCAwEAAaOCAfYwggHyMB0GA1UdDgQW BBQTKaRnY72IlV9KDO+bTrSRVNBXKDAfBgNVHSMEGDAWgBTxmJtAaQGt+IELnc3E 4PyefoXutDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xMjMy LzhaaWJRR2tCcmZpQkM1M054T0Q4bm42RjdyUS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOFppYlFHa0JyZmlCQzUzTnhPRDhubjZGN3JRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIzMi9FeW1rWjJPOWlKVmZT Z3p2bTA2MGtWVFFWeWcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcAJAJ9gIiIMA0GCSqGSIb3DQEBCwUAA4IBAQBpHcuHhEs/bXg1m61tmYtTN2Rj ZBhaZmz14aryQMKnyfklsOi8JQ7qJnNuIAGeZ9TVGQGx1v8IWQlDGX/EFArlOcfa 7UOqGVLeX37LhKPG9p6aB8IoaeArFotAfkfwZoBYaE4gCborFT6gdFzWnS2+fnLm kUPNRovdrdUpTrr5YDhkfZ6dlrIG8uD+Yy8IJv0WTA7e+IRMUuVHeDoRuNEKdrou PRaWmvCGVIMfC6MM4aawXYBwUKdkJ9Ii+/W71lYUOn0d2JKmCOfQd3ZFl0F0r9XF 4WTXvbc+FQx08sPjNKa5cXUQCU9FDXP5LZvacDGlN9dDSX4M0tkCF4VlRqD/ -----END CERTIFICATE-----Generated at Mon Sep 8 11:59:35 2025 by rpki-client