$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/Hio82ZpVD1ZrKhNl7jjBZV8XZxE.roa File: Hio82ZpVD1ZrKhNl7jjBZV8XZxE.roa (raw, json) Hash identifier: COjrCFnnNs2hpJPh2rYLdYuCjt8k99DWq7mVc7heljI= Subject key identifier: 1E:2A:3C:D9:9A:55:0F:56:6B:2A:13:65:EE:38:C1:65:5F:17:67:11 Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Certificate serial: 09 Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/Hio82ZpVD1ZrKhNl7jjBZV8XZxE.roa Signing time: Tue 27 May 2025 08:11:27 +0000 ROA not before: Tue 27 May 2025 08:11:27 +0000 ROA not after: Wed 27 May 2026 07:38:41 +0000 asID: 56048 IP address blocks: 240a:4090:5100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Validity Not Before: May 27 08:11:27 2025 GMT Not After : May 27 07:38:41 2026 GMT Subject: CN=1E2A3CD99A550F566B2A1365EE38C1655F176711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:90:de:43:60:94:83:0a:81:f2:26:40:17:12: 77:1a:25:43:0c:29:52:3f:77:77:f2:aa:5a:94:4c: 40:af:0f:b7:98:80:de:ce:07:05:f0:79:f3:3c:cb: da:f8:30:33:e1:c3:78:41:4d:75:98:a6:c2:0f:46: e8:b4:31:8e:e8:bc:8f:e4:d4:58:63:67:dc:34:2f: cc:95:ea:ff:8a:73:11:d7:4d:67:cc:49:b0:d9:c2: 66:61:c3:f3:28:09:67:d7:99:df:09:8c:2f:89:75: 60:08:e4:25:db:49:1a:87:7e:c3:24:76:76:9f:0d: b2:3f:d0:cf:c2:af:ac:12:b8:20:78:10:ae:98:cb: f0:51:9f:57:95:d4:0e:dc:34:31:9f:62:02:91:41: df:f1:ae:78:d9:b1:19:66:64:4e:77:37:6b:49:dd: 93:73:ad:5c:a6:e4:4c:90:e2:dc:fe:19:99:98:ac: 89:6f:09:3d:cd:da:c8:ed:96:95:c0:32:99:ec:b0: 43:dd:e4:28:eb:71:32:6d:30:74:69:f3:9e:41:6f: d6:c1:01:2b:86:3e:05:24:5a:57:97:31:d8:4a:39: 72:3e:63:38:8e:11:20:5d:c4:5a:eb:c7:c1:62:b4: 90:95:d9:2f:a9:86:8b:8f:5c:98:0e:85:80:11:0d: e4:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:2A:3C:D9:9A:55:0F:56:6B:2A:13:65:EE:38:C1:65:5F:17:67:11 X509v3 Authority Key Identifier: keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/Hio82ZpVD1ZrKhNl7jjBZV8XZxE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 240a:4090:5100::/40 Signature Algorithm: sha256WithRSAEncryption 6f:e4:f3:9d:65:0d:66:a2:c9:46:f0:84:78:f8:6a:5c:fe:5e: b5:97:96:0b:8d:a5:00:45:83:95:2c:27:95:f7:76:15:0a:d6: a3:26:83:d0:65:06:18:0f:e1:1b:c8:13:67:c3:18:00:6a:42: 8c:2f:09:21:71:ab:16:f3:63:11:6e:e4:20:07:79:6f:81:d5: 69:f1:dd:9c:21:de:a1:57:a9:78:fe:93:d8:a3:29:07:ce:74: ee:08:8d:2f:a9:d3:c5:e5:ba:5c:04:38:97:ab:a6:e6:64:75: 3d:3e:f4:85:af:a6:c9:ed:ee:b3:7c:72:6b:d2:34:1b:b5:47: d2:a7:de:20:8d:d8:57:f3:8a:c0:93:74:e9:d1:5f:c7:c7:8d: 95:88:ea:10:f1:6c:e6:e9:f9:3b:32:29:76:4d:86:7b:58:63: 1d:46:71:03:0d:7a:8b:a7:f4:b4:cb:97:23:b4:3e:b4:59:85: 66:25:77:4b:ec:36:33:6b:db:3a:1e:e3:8b:44:65:85:5a:88: db:55:c5:8d:1f:a5:49:d8:e0:0a:ea:d2:eb:ad:eb:da:2d:22: ad:e1:ad:27:f4:b0:84:46:63:32:61:79:fa:c2:45:f4:3f:dc: 62:26:56:97:0c:b8:b3:7d:d0:fb:b8:94:6c:e5:9c:b6:15:8f: 78:2b:8d:20 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIBCTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NEVG RjczOTJFMUVEQzEyMjVGQzRDRkI4RkFCNkVCNjE3QTlEMjREMB4XDTI1MDUyNzA4 MTEyN1oXDTI2MDUyNzA3Mzg0MVowMzExMC8GA1UEAxMoMUUyQTNDRDk5QTU1MEY1 NjZCMkExMzY1RUUzOEMxNjU1RjE3NjcxMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMCQ3kNglIMKgfImQBcSdxolQwwpUj93d/KqWpRMQK8Pt5iA3s4H BfB58zzL2vgwM+HDeEFNdZimwg9G6LQxjui8j+TUWGNn3DQvzJXq/4pzEddNZ8xJ sNnCZmHD8ygJZ9eZ3wmML4l1YAjkJdtJGod+wyR2dp8Nsj/Qz8KvrBK4IHgQrpjL 8FGfV5XUDtw0MZ9iApFB3/GueNmxGWZkTnc3a0ndk3OtXKbkTJDi3P4ZmZisiW8J Pc3ayO2WlcAymeywQ93kKOtxMm0wdGnznkFv1sEBK4Y+BSRaV5cx2Eo5cj5jOI4R IF3EWuvHwWK0kJXZL6mGi49cmA6FgBEN5AsCAwEAAaOCAfUwggHxMB0GA1UdDgQW BBQeKjzZmlUPVmsqE2XuOMFlXxdnETAfBgNVHSMEGDAWgBSU7/c5Lh7cEiX8TPuP q262F6nSTTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNjcy L2xPXzNPUzRlM0JJbF9FejdqNnR1dGhlcDBrMC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvbE9fM09TNGUzQklsX0V6N2o2dHV0aGVwMGswLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3Mi9IaW84MlpwVkQxWnJL aE5sN2pqQlpWOFhaeEUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI AwYAJApAkFEwDQYJKoZIhvcNAQELBQADggEBAG/k851lDWaiyUbwhHj4alz+XrWX lguNpQBFg5UsJ5X3dhUK1qMmg9BlBhgP4RvIE2fDGABqQowvCSFxqxbzYxFu5CAH eW+B1Wnx3Zwh3qFXqXj+k9ijKQfOdO4IjS+p08XlulwEOJerpuZkdT0+9IWvpsnt 7rN8cmvSNBu1R9Kn3iCN2FfzisCTdOnRX8fHjZWI6hDxbObp+TsyKXZNhntYYx1G cQMNeoun9LTLlyO0PrRZhWYld0vsNjNr2zoe44tEZYVaiNtVxY0fpUnY4Arq0uut 69otIq3hrSf0sIRGYzJhefrCRfQ/3GImVpcMuLN90Pu4lGzlnLYVj3grjSA= -----END CERTIFICATE-----Generated at Wed Jun 4 02:10:19 2025 by rpki-client