$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/XW6zGMf3iLRhJNl634r4d2CjYrY.roa File: XW6zGMf3iLRhJNl634r4d2CjYrY.roa (raw, json) Hash identifier: KUckmyPxeQOvvIy/vdJpM8f/7JHpPvBtpkWqEtro9go= Subject key identifier: 5D:6E:B3:18:C7:F7:88:B4:61:24:D9:7A:DF:8A:F8:77:60:A3:62:B6 Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Certificate serial: AC Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/XW6zGMf3iLRhJNl634r4d2CjYrY.roa Signing time: Fri 06 Jun 2025 02:21:23 +0000 ROA not before: Fri 06 Jun 2025 02:21:23 +0000 ROA not after: Wed 27 May 2026 07:38:41 +0000 asID: 56042 IP address blocks: 240a:40c0:e010::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 18:41:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Validity Not Before: Jun 6 02:21:23 2025 GMT Not After : May 27 07:38:41 2026 GMT Subject: CN=5D6EB318C7F788B46124D97ADF8AF87760A362B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1c:b6:ec:21:68:9e:98:20:04:9d:d7:20:27: 7f:63:a2:67:a3:0e:f8:59:e4:af:26:b0:dd:a7:22: f7:e1:94:8e:b9:c2:5b:1b:47:2a:fa:a2:5a:fd:1d: 8c:64:dc:ff:8e:7f:98:dd:fe:7c:b5:9c:6f:ed:fb: 60:6c:a8:31:67:3a:44:00:64:f5:2b:66:8b:51:6c: 39:b9:35:1b:0a:a1:d9:86:88:39:12:23:bc:20:eb: bb:48:c6:33:22:de:2b:a1:8a:6d:5f:bb:17:eb:bf: dc:33:93:fa:1a:d7:16:0b:cc:e3:bf:46:6f:a5:a5: de:f9:46:89:49:0e:1d:fd:66:61:7d:46:29:a8:b9: ea:05:e7:3b:84:da:a0:a6:c9:70:1b:c4:eb:cf:d1: 98:c9:10:82:f5:33:06:4e:a9:70:3b:99:1f:ce:fa: b0:64:e5:7c:74:86:42:a7:27:39:e9:bb:15:3b:25: 4b:9f:67:26:0d:11:a0:a7:21:a3:7b:66:63:94:bc: af:40:e4:f5:a5:3b:23:07:36:27:1b:f8:c8:c9:db: 81:11:25:79:a4:51:e4:aa:73:bc:3e:7b:62:81:be: 53:c3:b0:e7:68:71:e5:57:dc:cf:0c:60:71:eb:e2: 29:b8:c1:fa:cf:d7:c1:d6:06:ec:43:68:af:38:d6: ef:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:6E:B3:18:C7:F7:88:B4:61:24:D9:7A:DF:8A:F8:77:60:A3:62:B6 X509v3 Authority Key Identifier: keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/XW6zGMf3iLRhJNl634r4d2CjYrY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 240a:40c0:e010::/44 Signature Algorithm: sha256WithRSAEncryption ae:37:6c:83:48:d2:b4:de:82:f2:fb:38:a9:dd:67:24:ed:f6: 0c:7f:30:5a:db:5a:02:6c:4b:4a:ed:f9:af:6c:90:dc:94:9f: 70:0c:b9:b8:9d:99:04:f0:11:d3:e6:0c:96:ac:c5:c6:82:0f: 1b:1f:4d:38:f5:e6:18:b1:95:56:3f:cf:6b:47:19:d8:bf:7d: 94:18:13:49:94:5e:2e:fd:97:61:62:eb:98:4d:0b:1c:5d:94: 12:c6:7e:20:53:db:31:a5:ef:aa:a4:6a:fb:94:b3:1a:6a:72: 0d:8f:22:92:eb:76:a4:4f:90:37:40:26:8d:70:a6:34:fd:9b: 66:06:02:cc:af:61:c2:6d:49:e1:9f:44:a6:7d:aa:f8:c7:a0: e3:3e:7c:33:25:f0:af:86:b1:9e:ce:0e:b4:88:bb:df:79:89: 61:5e:f0:68:e0:a4:ed:26:a9:3f:84:59:1c:64:09:9e:8d:87: 20:a3:12:b7:99:b9:34:ba:68:a7:78:45:20:52:0c:92:0a:1c: 12:5f:89:2b:5c:ef:f3:34:98:f9:d2:c6:7f:f5:f3:d6:ff:e4: a1:f8:ad:f7:3d:50:a6:81:8a:a5:76:5d:53:87:71:f0:70:f3: a6:9f:e1:a0:a6:4c:23:63:ea:eb:8b:85:81:5a:85:8a:da:79: 2c:f9:d3:97 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTRF RkY3MzkyRTFFREMxMjI1RkM0Q0ZCOEZBQjZFQjYxN0E5RDI0RDAeFw0yNTA2MDYw MjIxMjNaFw0yNjA1MjcwNzM4NDFaMDMxMTAvBgNVBAMTKDVENkVCMzE4QzdGNzg4 QjQ2MTI0RDk3QURGOEFGODc3NjBBMzYyQjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3HLbsIWiemCAEndcgJ39jomejDvhZ5K8msN2nIvfhlI65wlsb Ryr6olr9HYxk3P+Of5jd/ny1nG/t+2BsqDFnOkQAZPUrZotRbDm5NRsKodmGiDkS I7wg67tIxjMi3iuhim1fuxfrv9wzk/oa1xYLzOO/Rm+lpd75RolJDh39ZmF9Rimo ueoF5zuE2qCmyXAbxOvP0ZjJEIL1MwZOqXA7mR/O+rBk5Xx0hkKnJznpuxU7JUuf ZyYNEaCnIaN7ZmOUvK9A5PWlOyMHNicb+MjJ24ERJXmkUeSqc7w+e2KBvlPDsOdo ceVX3M8MYHHr4im4wfrP18HWBuxDaK841u/TAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUXW6zGMf3iLRhJNl634r4d2CjYrYwHwYDVR0jBBgwFoAUlO/3OS4e3BIl/Ez7 j6tuthep0k0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3 Mi9sT18zT1M0ZTNCSWxfRXo3ajZ0dXRoZXAwazAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2xPXzNPUzRlM0JJbF9FejdqNnR1dGhlcDBrMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2NzIvWFc2ekdNZjNpTFJo Sk5sNjM0cjRkMkNqWXJZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHBCQKQMDgEDANBgkqhkiG9w0BAQsFAAOCAQEArjdsg0jStN6C8vs4qd1nJO32 DH8wWttaAmxLSu35r2yQ3JSfcAy5uJ2ZBPAR0+YMlqzFxoIPGx9NOPXmGLGVVj/P a0cZ2L99lBgTSZReLv2XYWLrmE0LHF2UEsZ+IFPbMaXvqqRq+5SzGmpyDY8ikut2 pE+QN0AmjXCmNP2bZgYCzK9hwm1J4Z9Epn2q+Meg4z58MyXwr4axns4OtIi733mJ YV7waOCk7SapP4RZHGQJno2HIKMSt5m5NLpop3hFIFIMkgocEl+JK1zv8zSY+dLG f/Xz1v/kofit9z1QpoGKpXZdU4dx8HDzpp/hoKZMI2Pq64uFgVqFitp5LPnTlw== -----END CERTIFICATE-----Generated at Fri Jun 13 18:23:48 2025 by rpki-client