$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/UimtX17XIOlQQXwPgmsAJTPr8Mw.roa File: UimtX17XIOlQQXwPgmsAJTPr8Mw.roa (raw, json) Hash identifier: neEJ0k6ghoNQatPD1NvHuhsn786oTIT00IbR4Hi+Nek= Subject key identifier: 52:29:AD:5F:5E:D7:20:E9:50:41:7C:0F:82:6B:00:25:33:EB:F0:CC Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Certificate serial: 59 Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/UimtX17XIOlQQXwPgmsAJTPr8Mw.roa Signing time: Tue 27 May 2025 08:36:33 +0000 ROA not before: Tue 27 May 2025 08:36:33 +0000 ROA not after: Wed 27 May 2026 07:38:41 +0000 asID: 56040 IP address blocks: 240a:42cc::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 19:39:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Validity Not Before: May 27 08:36:33 2025 GMT Not After : May 27 07:38:41 2026 GMT Subject: CN=5229AD5F5ED720E950417C0F826B002533EBF0CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:64:33:35:77:06:04:69:03:5d:9c:30:2c:9b: 6f:39:60:b5:a8:7a:2a:83:cb:99:38:34:9c:ff:7b: 48:43:6f:40:e9:15:fd:75:69:a7:bc:cb:ed:50:d6: a4:d9:c4:ec:e3:b7:65:81:8c:8f:d0:a8:9d:aa:2f: f6:4b:6d:b2:f9:c0:9a:76:b8:81:15:71:b0:a8:0a: 9f:0d:80:8c:5b:e5:b0:bf:6f:81:6a:e9:f6:05:a2: 84:da:ba:e7:4c:b0:db:c6:a8:33:20:00:e1:3d:88: 49:d0:f3:29:f1:40:95:7a:01:23:0c:eb:3f:ce:0e: d9:ac:07:e2:f9:2f:64:3b:b0:87:68:ea:83:b1:2a: 60:da:b7:f5:f6:09:61:f0:08:60:fa:e0:dc:05:b8: 0c:5a:73:ca:9b:2f:c8:8d:c5:63:35:70:7e:35:ba: c3:5a:3a:7a:58:79:ff:1e:7a:dc:e0:76:cf:87:64: 09:dc:8c:fd:94:73:61:5a:fd:97:b8:64:11:97:d1: 74:70:94:7a:8b:90:27:1d:b0:18:50:b7:f5:3b:47: d7:4e:2b:03:07:ba:5c:ac:bd:46:e3:88:a1:1c:b6: 33:b5:3f:7c:a4:46:b8:85:33:7a:54:de:1f:4e:b1: c6:2d:76:85:c5:01:8a:70:21:65:c8:0a:42:ce:3a: b9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:29:AD:5F:5E:D7:20:E9:50:41:7C:0F:82:6B:00:25:33:EB:F0:CC X509v3 Authority Key Identifier: keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/UimtX17XIOlQQXwPgmsAJTPr8Mw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 240a:42cc::/31 Signature Algorithm: sha256WithRSAEncryption 5d:0c:2c:9d:32:82:9d:1e:5d:9a:3d:e8:e3:3e:0d:9b:65:43: d2:a5:65:ed:08:ee:cc:1e:55:ff:c3:22:40:07:cb:85:9f:69: b0:97:12:ad:b7:1d:00:e5:03:dc:78:5a:79:eb:a3:c2:14:1b: 9a:23:b9:3c:bd:37:68:62:de:e3:f2:67:7b:eb:9a:6b:5a:92: 06:67:b2:70:e9:07:2b:70:13:d8:b3:ac:ef:20:80:17:12:54: cb:02:5b:92:bb:1a:c8:16:47:b1:0d:e7:98:1c:2f:99:0d:95: 87:ba:40:6e:fd:62:71:71:1f:e6:0f:8c:3c:a2:ee:13:8c:11: 30:77:25:e7:7d:6e:14:7f:1f:f7:98:d1:68:33:a4:a3:b3:9f: 8e:e2:ca:e3:13:e9:1f:3b:bb:48:53:38:50:43:fc:5d:3e:e2: 0d:4a:e9:9c:fb:f7:01:20:41:da:88:ab:af:21:29:98:43:a9: 1f:fe:63:2c:bb:97:5e:8e:f9:56:81:54:4b:f1:53:d4:de:b7: 57:0a:30:f8:3d:ca:da:54:2e:ef:0a:e2:ac:31:5d:2d:d9:26: 1a:4c:12:85:37:e1:8b:ef:02:c3:3e:28:ff:8e:50:6d:a1:00: 19:05:4c:ea:68:66:d2:2f:24:96:b5:15:e7:c5:af:e2:7d:2c: c0:56:1c:79 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgIBWTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NEVG RjczOTJFMUVEQzEyMjVGQzRDRkI4RkFCNkVCNjE3QTlEMjREMB4XDTI1MDUyNzA4 MzYzM1oXDTI2MDUyNzA3Mzg0MVowMzExMC8GA1UEAxMoNTIyOUFENUY1RUQ3MjBF OTUwNDE3QzBGODI2QjAwMjUzM0VCRjBDQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALdkMzV3BgRpA12cMCybbzlgtah6KoPLmTg0nP97SENvQOkV/XVp p7zL7VDWpNnE7OO3ZYGMj9Conaov9kttsvnAmna4gRVxsKgKnw2AjFvlsL9vgWrp 9gWihNq650yw28aoMyAA4T2ISdDzKfFAlXoBIwzrP84O2awH4vkvZDuwh2jqg7Eq YNq39fYJYfAIYPrg3AW4DFpzypsvyI3FYzVwfjW6w1o6elh5/x563OB2z4dkCdyM /ZRzYVr9l7hkEZfRdHCUeouQJx2wGFC39TtH104rAwe6XKy9RuOIoRy2M7U/fKRG uIUzelTeH06xxi12hcUBinAhZcgKQs46uSUCAwEAAaOCAfQwggHwMB0GA1UdDgQW BBRSKa1fXtcg6VBBfA+CawAlM+vwzDAfBgNVHSMEGDAWgBSU7/c5Lh7cEiX8TPuP q262F6nSTTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNjcy L2xPXzNPUzRlM0JJbF9FejdqNnR1dGhlcDBrMC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvbE9fM09TNGUzQklsX0V6N2o2dHV0aGVwMGswLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3Mi9VaW10WDE3WElPbFFR WHdQZ21zQUpUUHI4TXcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH AwUBJApCzDANBgkqhkiG9w0BAQsFAAOCAQEAXQwsnTKCnR5dmj3o4z4Nm2VD0qVl 7QjuzB5V/8MiQAfLhZ9psJcSrbcdAOUD3HhaeeujwhQbmiO5PL03aGLe4/Jne+ua a1qSBmeycOkHK3AT2LOs7yCAFxJUywJbkrsayBZHsQ3nmBwvmQ2Vh7pAbv1icXEf 5g+MPKLuE4wRMHcl531uFH8f95jRaDOko7OfjuLK4xPpHzu7SFM4UEP8XT7iDUrp nPv3ASBB2oirryEpmEOpH/5jLLuXXo75VoFUS/FT1N63Vwow+D3K2lQu7wrirDFd LdkmGkwShTfhi+8Cwz4o/45QbaEAGQVM6mhm0i8klrUV58Wv4n0swFYceQ== -----END CERTIFICATE-----Generated at Thu Jun 5 19:16:53 2025 by rpki-client