$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/CtM6tTZsmcevA0s_k5gYwKV-0WE.roa File: CtM6tTZsmcevA0s_k5gYwKV-0WE.roa (raw, json) Hash identifier: FHEoWw2ccb9c+Nr1W6EDiJrqXAbg+yvC9dkcuzwcQZI= Subject key identifier: 0A:D3:3A:B5:36:6C:99:C7:AF:03:4B:3F:93:98:18:C0:A5:7E:D1:61 Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Certificate serial: 23 Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/CtM6tTZsmcevA0s_k5gYwKV-0WE.roa Signing time: Tue 27 May 2025 08:19:35 +0000 ROA not before: Tue 27 May 2025 08:19:35 +0000 ROA not after: Wed 27 May 2026 07:38:41 +0000 asID: 9808 IP address blocks: 240a:40b0:683a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 19:39:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Validity Not Before: May 27 08:19:35 2025 GMT Not After : May 27 07:38:41 2026 GMT Subject: CN=0AD33AB5366C99C7AF034B3F939818C0A57ED161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f1:0c:d7:0b:95:9f:c9:01:b3:e5:88:2f:39: 94:5e:73:0d:01:b8:a8:2c:d4:6c:ff:c0:d4:26:f2: 8a:a5:d5:c2:9a:fa:6d:87:9f:14:3f:1b:e8:55:43: 03:1e:0a:bd:6c:de:5e:8b:94:cd:08:ce:08:6f:c4: ac:db:1a:fd:ff:ef:1f:fc:59:ce:bf:52:89:00:f2: ab:98:ea:1b:41:9e:3b:20:f8:31:fa:ad:fe:d3:93: 4a:19:e8:78:a5:bf:48:67:9f:e0:3c:ff:ae:b0:ca: 6e:10:28:21:c8:06:18:3c:e7:21:67:13:6a:9d:94: 46:8e:fd:c2:0b:10:ab:0a:cc:7c:e3:eb:29:57:d7: 1a:3b:5f:80:1b:ca:89:80:7f:ea:35:fd:55:38:fc: 1c:2b:ed:ab:b2:3d:98:9b:33:9d:ea:5b:94:48:d9: 22:b4:12:34:f3:8f:86:d8:fd:06:1a:4a:db:52:57: d7:ec:e2:0f:2f:21:c3:14:a3:8b:e0:7c:15:8b:a9: fa:72:81:8c:4f:b3:71:ce:81:ed:dc:6c:cc:fe:56: e9:0b:ee:7a:d8:13:33:ee:c9:63:c5:57:0d:d1:8b: 46:a9:bb:90:cd:ce:43:c4:ed:a3:01:7a:ea:06:cc: 60:bc:bc:3d:5e:8d:4e:20:52:bb:d4:e3:a9:c9:15: cb:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:D3:3A:B5:36:6C:99:C7:AF:03:4B:3F:93:98:18:C0:A5:7E:D1:61 X509v3 Authority Key Identifier: keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/CtM6tTZsmcevA0s_k5gYwKV-0WE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 240a:40b0:683a::/48 Signature Algorithm: sha256WithRSAEncryption 03:b1:6b:db:48:3e:e8:07:9e:35:46:41:f4:37:26:29:1c:a0: 45:2e:79:b4:9c:e7:8c:49:b7:f2:d3:c6:7a:56:85:8a:d6:0b: 27:11:96:c8:b1:99:5a:97:80:a8:b1:0b:6b:30:99:da:70:7d: c5:17:fa:cb:b0:63:fb:ca:15:0d:46:66:bb:f6:e6:76:86:73: 04:be:8c:db:6f:e5:fb:e9:15:07:f4:cf:83:e4:d5:97:4b:76: 93:a5:f2:c0:b8:cb:58:0e:e1:f8:23:2c:54:fd:58:9e:5d:6e: 0f:99:d5:f3:4f:28:4d:38:9c:64:58:7e:f0:e2:ab:fa:ec:09: 4d:d8:fb:a3:18:9b:5a:d1:4e:cf:d0:ce:a5:4b:96:03:5f:e0: de:f4:6c:a8:87:b4:d2:76:be:44:69:31:86:31:3f:b2:bb:fd: 3a:a9:0c:bc:e7:99:af:d3:71:09:9c:bb:44:fd:64:8e:cc:3b: 6a:a7:c7:b4:ac:71:9b:7d:f8:c9:1f:9f:f9:e8:19:76:41:6c: b1:b3:a2:32:ba:17:6e:d8:d0:e4:99:7e:fb:a7:96:c6:e4:ee: d8:a2:bc:2a:33:e5:70:6c:70:46:5d:42:64:9c:53:cd:cc:31: db:6b:81:60:51:bd:cf:9e:67:71:f2:79:ac:f2:c8:bc:9d:ee: e3:28:69:e7 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIBIzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NEVG RjczOTJFMUVEQzEyMjVGQzRDRkI4RkFCNkVCNjE3QTlEMjREMB4XDTI1MDUyNzA4 MTkzNVoXDTI2MDUyNzA3Mzg0MVowMzExMC8GA1UEAxMoMEFEMzNBQjUzNjZDOTlD N0FGMDM0QjNGOTM5ODE4QzBBNTdFRDE2MTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKDxDNcLlZ/JAbPliC85lF5zDQG4qCzUbP/A1CbyiqXVwpr6bYef FD8b6FVDAx4KvWzeXouUzQjOCG/ErNsa/f/vH/xZzr9SiQDyq5jqG0GeOyD4Mfqt /tOTShnoeKW/SGef4Dz/rrDKbhAoIcgGGDznIWcTap2URo79wgsQqwrMfOPrKVfX GjtfgBvKiYB/6jX9VTj8HCvtq7I9mJsznepblEjZIrQSNPOPhtj9BhpK21JX1+zi Dy8hwxSji+B8FYup+nKBjE+zcc6B7dxszP5W6QvuetgTM+7JY8VXDdGLRqm7kM3O Q8TtowF66gbMYLy8PV6NTiBSu9TjqckVy3kCAwEAAaOCAfYwggHyMB0GA1UdDgQW BBQK0zq1NmyZx68DSz+TmBjApX7RYTAfBgNVHSMEGDAWgBSU7/c5Lh7cEiX8TPuP q262F6nSTTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNjcy L2xPXzNPUzRlM0JJbF9FejdqNnR1dGhlcDBrMC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvbE9fM09TNGUzQklsX0V6N2o2dHV0aGVwMGswLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3Mi9DdE02dFRac21jZXZB MHNfazVnWXdLVi0wV0Uucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcAJApAsGg6MA0GCSqGSIb3DQEBCwUAA4IBAQADsWvbSD7oB541RkH0NyYpHKBF Lnm0nOeMSbfy08Z6VoWK1gsnEZbIsZlal4CosQtrMJnacH3FF/rLsGP7yhUNRma7 9uZ2hnMEvozbb+X76RUH9M+D5NWXS3aTpfLAuMtYDuH4IyxU/VieXW4PmdXzTyhN OJxkWH7w4qv67AlN2PujGJta0U7P0M6lS5YDX+De9Gyoh7TSdr5EaTGGMT+yu/06 qQy855mv03EJnLtE/WSOzDtqp8e0rHGbffjJH5/56Bl2QWyxs6Iyuhdu2NDkmX77 p5bG5O7YorwqM+VwbHBGXUJknFPNzDHba4FgUb3Pnmdx8nms8si8ne7jKGnn -----END CERTIFICATE-----Generated at Thu Jun 5 19:16:54 2025 by rpki-client