$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/1USC9KyDqR3EGjbPcCvafcCVgQs.roa File: 1USC9KyDqR3EGjbPcCvafcCVgQs.roa (raw, json) Hash identifier: 9kLNqkMtOKw50JNdbelDI527ZMsAim7/5NhivdmcQ1w= Subject key identifier: D5:44:82:F4:AC:83:A9:1D:C4:1A:36:CF:70:2B:DA:7D:C0:95:81:0B Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Certificate serial: 8E Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/1USC9KyDqR3EGjbPcCvafcCVgQs.roa Signing time: Fri 06 Jun 2025 01:44:52 +0000 ROA not before: Fri 06 Jun 2025 01:44:52 +0000 ROA not after: Wed 27 May 2026 07:38:41 +0000 asID: 56044 IP address blocks: 240a:4294::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:41:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Validity Not Before: Jun 6 01:44:52 2025 GMT Not After : May 27 07:38:41 2026 GMT Subject: CN=D54482F4AC83A91DC41A36CF702BDA7DC095810B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d0:c2:d7:62:71:62:ac:1c:88:fd:48:7e:61: c5:2f:b3:86:c9:42:d4:a2:36:b7:2d:88:c7:ce:77: c4:cf:14:d3:66:89:a5:9f:18:77:70:0f:91:61:4b: 57:53:5d:27:2c:04:fc:44:a8:23:15:46:21:49:44: 4b:9b:a9:97:34:5a:28:62:f4:2d:38:df:4a:a2:bc: 6f:89:86:30:8d:dc:01:4d:5c:89:17:06:bd:6c:bc: 76:fa:42:07:bc:8d:56:54:9a:6c:33:d2:56:f0:e1: fc:f8:29:49:63:e2:b8:5e:b2:d2:a1:f8:2e:7d:b0: 07:da:b2:03:eb:d1:44:ea:7f:56:ba:41:04:aa:8d: 51:c8:66:13:d7:27:bf:e6:a5:a6:94:cd:d7:b6:51: bd:97:2b:45:90:b8:77:3f:1d:8f:30:26:a1:80:56: 3a:4f:13:15:ae:a7:80:88:8e:a0:42:db:97:f4:52: 10:06:3f:a8:21:4e:bf:3f:90:b4:81:7a:d3:1d:25: 2b:d4:f0:e6:aa:9d:26:31:a5:85:40:80:ac:87:d8: b1:d6:89:72:cb:68:9c:3f:11:88:41:df:51:0d:88: 14:8b:42:93:30:18:be:2c:2d:97:06:70:35:4c:f7: c8:a0:6a:79:60:53:cf:cd:13:0c:0d:bf:12:0e:2e: 73:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:44:82:F4:AC:83:A9:1D:C4:1A:36:CF:70:2B:DA:7D:C0:95:81:0B X509v3 Authority Key Identifier: keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/1USC9KyDqR3EGjbPcCvafcCVgQs.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 240a:4294::/31 Signature Algorithm: sha256WithRSAEncryption 64:03:95:c7:80:61:b4:3f:40:aa:85:1c:1b:2f:a4:ca:58:d2: 75:6b:e4:17:5d:6a:a8:ca:15:84:4d:f8:45:2e:d8:92:66:f6: 75:6d:03:fb:7f:4e:17:a2:b0:a9:ed:82:d3:87:14:8e:8a:6d: a8:a9:71:b8:0e:25:52:7c:e2:76:f9:e6:85:a8:2c:c6:21:5a: 4b:3d:40:5b:8b:50:86:b4:40:c1:1a:e6:52:b8:d6:b6:a9:29: e2:28:b7:38:d0:c3:6f:5c:30:c6:70:23:97:43:a4:9d:28:1e: d2:e8:1f:34:15:be:14:7c:a6:b3:39:eb:06:a3:03:20:c9:b8: 80:8b:43:c3:ca:2b:52:cd:5d:71:74:71:09:c0:a0:f4:e5:17: f4:2a:b7:fa:be:db:44:0c:9f:70:c1:3b:74:85:6a:dc:de:bb: 6b:5c:e6:8c:74:07:80:45:aa:02:14:02:42:b7:ae:9c:df:49: 6e:2f:00:2d:7c:c2:4a:9f:e9:4d:cb:38:f7:12:0d:07:38:82: 2f:8f:ac:78:3b:2a:c6:a2:99:2f:03:91:c5:bc:09:ca:1a:06: 65:83:93:d6:3f:e3:3a:e4:b5:2e:64:42:6d:4c:3f:be:e6:f6: 94:75:e2:d0:3a:e7:f6:3a:2f:67:9e:3a:b7:29:87:0b:fb:6b: 7a:70:a8:74 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTRF RkY3MzkyRTFFREMxMjI1RkM0Q0ZCOEZBQjZFQjYxN0E5RDI0RDAeFw0yNTA2MDYw MTQ0NTJaFw0yNjA1MjcwNzM4NDFaMDMxMTAvBgNVBAMTKEQ1NDQ4MkY0QUM4M0E5 MURDNDFBMzZDRjcwMkJEQTdEQzA5NTgxMEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDj0MLXYnFirByI/Uh+YcUvs4bJQtSiNrctiMfOd8TPFNNmiaWf GHdwD5FhS1dTXScsBPxEqCMVRiFJREubqZc0Wihi9C0430qivG+JhjCN3AFNXIkX Br1svHb6Qge8jVZUmmwz0lbw4fz4KUlj4rhestKh+C59sAfasgPr0UTqf1a6QQSq jVHIZhPXJ7/mpaaUzde2Ub2XK0WQuHc/HY8wJqGAVjpPExWup4CIjqBC25f0UhAG P6ghTr8/kLSBetMdJSvU8OaqnSYxpYVAgKyH2LHWiXLLaJw/EYhB31ENiBSLQpMw GL4sLZcGcDVM98iganlgU8/NEwwNvxIOLnNPAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQU1USC9KyDqR3EGjbPcCvafcCVgQswHwYDVR0jBBgwFoAUlO/3OS4e3BIl/Ez7 j6tuthep0k0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3 Mi9sT18zT1M0ZTNCSWxfRXo3ajZ0dXRoZXAwazAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2xPXzNPUzRlM0JJbF9FejdqNnR1dGhlcDBrMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2NzIvMVVTQzlLeURxUjNF R2piUGNDdmFmY0NWZ1FzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFASQKQpQwDQYJKoZIhvcNAQELBQADggEBAGQDlceAYbQ/QKqFHBsvpMpY0nVr 5BddaqjKFYRN+EUu2JJm9nVtA/t/TheisKntgtOHFI6KbaipcbgOJVJ84nb55oWo LMYhWks9QFuLUIa0QMEa5lK41rapKeIotzjQw29cMMZwI5dDpJ0oHtLoHzQVvhR8 prM56wajAyDJuICLQ8PKK1LNXXF0cQnAoPTlF/Qqt/q+20QMn3DBO3SFatzeu2tc 5ox0B4BFqgIUAkK3rpzfSW4vAC18wkqf6U3LOPcSDQc4gi+PrHg7KsaimS8DkcW8 CcoaBmWDk9Y/4zrktS5kQm1MP77m9pR14tA65/Y6L2eeOrcphwv7a3pwqHQ= -----END CERTIFICATE-----Generated at Sat Jun 7 05:38:34 2025 by rpki-client