$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/fnepsiEvkwXrWP7WCrJ67-MSPWA.roa File: fnepsiEvkwXrWP7WCrJ67-MSPWA.roa (raw, json) Hash identifier: whno9ppayLSgcSzwW1H1100ipIkaMMDw7LN/Tb8emB4= Subject key identifier: 7E:77:A9:B2:21:2F:93:05:EB:58:FE:D6:0A:B2:7A:EF:E3:12:3D:60 Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Certificate serial: 4D Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/fnepsiEvkwXrWP7WCrJ67-MSPWA.roa Signing time: Tue 27 May 2025 08:36:30 +0000 ROA not before: Tue 27 May 2025 08:36:30 +0000 ROA not after: Wed 27 May 2026 07:38:41 +0000 asID: 56040 IP address blocks: 240a:42c6::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Validity Not Before: May 27 08:36:30 2025 GMT Not After : May 27 07:38:41 2026 GMT Subject: CN=7E77A9B2212F9305EB58FED60AB27AEFE3123D60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0e:89:fd:68:ff:d2:44:13:3e:64:fd:75:8a: 1c:7c:c9:8b:04:90:a9:67:8d:27:3f:a6:f2:3b:63: 58:3c:77:74:18:37:ab:72:3c:06:1a:f0:2e:68:fc: 82:3a:d1:8e:cb:50:7f:28:64:06:d1:5a:c7:5e:18: 80:68:7b:00:2c:91:04:9a:b2:ec:1c:7a:bd:11:f0: 43:ce:99:8f:bf:fa:41:19:46:1f:80:79:65:f0:fc: 5b:82:02:14:94:6d:0a:fc:7e:02:06:02:b2:ba:5b: d1:e0:a7:62:15:1a:0f:a4:1d:7a:85:f0:69:e9:91: cc:92:92:1b:5c:ab:fb:82:61:48:8c:47:f9:a8:4e: 64:58:02:b2:1f:8c:e9:d3:e3:d7:84:fc:61:f6:65: 1b:41:a0:cb:4a:8a:d2:4c:8b:42:65:87:62:be:5e: 19:f3:e4:75:4d:53:f5:78:8a:dd:3f:0e:78:0c:9f: 4a:d9:24:4c:9f:09:d9:9c:55:40:11:5a:ca:cd:02: 9f:1b:59:89:94:4b:c8:e4:08:f9:7d:a9:5b:20:75: 81:91:cf:ed:46:76:ab:cb:bb:33:5a:6c:93:6f:d0: 9f:68:e4:d0:a9:a7:f3:dc:34:a3:ae:37:bf:0d:07: 6f:49:81:11:df:7c:b0:7d:87:a1:0c:ae:f0:a0:33: 4d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:77:A9:B2:21:2F:93:05:EB:58:FE:D6:0A:B2:7A:EF:E3:12:3D:60 X509v3 Authority Key Identifier: keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/fnepsiEvkwXrWP7WCrJ67-MSPWA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 240a:42c6::/31 Signature Algorithm: sha256WithRSAEncryption 3a:e7:39:ea:cd:7c:8a:fd:ee:6d:ff:30:0a:24:1e:7d:c5:88: 9f:f6:80:d8:be:40:b5:5f:3c:53:ca:f3:69:5a:a0:b6:62:b2: 4b:b1:0c:3b:ed:e5:cb:03:12:80:ce:43:3d:15:16:8d:ff:70: 2d:4b:ad:67:00:e8:b8:cc:e7:b1:63:00:d8:1d:57:88:fc:4b: 40:52:2f:da:05:66:af:d1:79:7b:7f:47:5d:98:72:e2:39:14: 2c:e1:82:9e:5a:e0:20:df:b4:43:58:08:92:9d:06:86:be:ef: b0:c3:cf:e7:cb:14:7d:44:ea:dd:f6:c4:58:81:d6:1a:0a:c0: b6:db:15:2c:73:98:9b:05:2d:a9:38:34:f9:e7:d1:00:e7:b9: 1e:2f:dc:76:4c:1a:ee:a9:e2:13:f3:19:1e:db:7f:8a:56:87: e2:b1:d0:cb:d5:75:e3:95:8d:37:50:a6:a1:ae:6c:b6:c5:e1: 66:e1:3f:63:a5:f0:d9:ff:9b:bc:1f:f1:95:cd:eb:b3:31:ea: f0:3c:19:f7:17:af:51:b6:61:a0:49:c4:45:6c:40:1c:0c:d6: a5:94:44:f6:26:ac:a8:7c:5d:c4:0f:19:55:cd:ff:de:1f:43: 1c:e0:dc:3b:05:51:7f:b7:fd:50:39:90:c8:dd:6a:4f:e8:8a: 82:d4:76:ad -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgIBTTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NEVG RjczOTJFMUVEQzEyMjVGQzRDRkI4RkFCNkVCNjE3QTlEMjREMB4XDTI1MDUyNzA4 MzYzMFoXDTI2MDUyNzA3Mzg0MVowMzExMC8GA1UEAxMoN0U3N0E5QjIyMTJGOTMw NUVCNThGRUQ2MEFCMjdBRUZFMzEyM0Q2MDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALYOif1o/9JEEz5k/XWKHHzJiwSQqWeNJz+m8jtjWDx3dBg3q3I8 BhrwLmj8gjrRjstQfyhkBtFax14YgGh7ACyRBJqy7Bx6vRHwQ86Zj7/6QRlGH4B5 ZfD8W4ICFJRtCvx+AgYCsrpb0eCnYhUaD6QdeoXwaemRzJKSG1yr+4JhSIxH+ahO ZFgCsh+M6dPj14T8YfZlG0Ggy0qK0kyLQmWHYr5eGfPkdU1T9XiK3T8OeAyfStkk TJ8J2ZxVQBFays0CnxtZiZRLyOQI+X2pWyB1gZHP7UZ2q8u7M1psk2/Qn2jk0Kmn 89w0o643vw0Hb0mBEd98sH2HoQyu8KAzTZsCAwEAAaOCAfQwggHwMB0GA1UdDgQW BBR+d6myIS+TBetY/tYKsnrv4xI9YDAfBgNVHSMEGDAWgBSU7/c5Lh7cEiX8TPuP q262F6nSTTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNjcy L2xPXzNPUzRlM0JJbF9FejdqNnR1dGhlcDBrMC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvbE9fM09TNGUzQklsX0V6N2o2dHV0aGVwMGswLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3Mi9mbmVwc2lFdmt3WHJX UDdXQ3JKNjctTVNQV0Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH AwUBJApCxjANBgkqhkiG9w0BAQsFAAOCAQEAOuc56s18iv3ubf8wCiQefcWIn/aA 2L5AtV88U8rzaVqgtmKyS7EMO+3lywMSgM5DPRUWjf9wLUutZwDouMznsWMA2B1X iPxLQFIv2gVmr9F5e39HXZhy4jkULOGCnlrgIN+0Q1gIkp0Ghr7vsMPP58sUfUTq 3fbEWIHWGgrAttsVLHOYmwUtqTg0+efRAOe5Hi/cdkwa7qniE/MZHtt/ilaH4rHQ y9V145WNN1Cmoa5stsXhZuE/Y6Xw2f+bvB/xlc3rszHq8DwZ9xevUbZhoEnERWxA HAzWpZRE9iasqHxdxA8ZVc3/3h9DHODcOwVRf7f9UDmQyN1qT+iKgtR2rQ== -----END CERTIFICATE-----Generated at Wed Jun 4 00:55:19 2025 by rpki-client