$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/iK7VohfYRchaw0hp_lOayN4JOqI.roa File: iK7VohfYRchaw0hp_lOayN4JOqI.roa (raw, json) Hash identifier: Rf3BJUmeLYZghnjr2EPBukenD+LgN15hUSCPD7A+yOk= Subject key identifier: 88:AE:D5:A2:17:D8:45:C8:5A:C3:48:69:FE:53:9A:C8:DE:09:3A:A2 Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Certificate serial: 38 Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/iK7VohfYRchaw0hp_lOayN4JOqI.roa Signing time: Tue 27 May 2025 08:25:27 +0000 ROA not before: Tue 27 May 2025 08:25:27 +0000 ROA not after: Wed 27 May 2026 07:38:41 +0000 asID: 9808 IP address blocks: 240a:42de::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Validity Not Before: May 27 08:25:27 2025 GMT Not After : May 27 07:38:41 2026 GMT Subject: CN=88AED5A217D845C85AC34869FE539AC8DE093AA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7f:43:bc:66:6c:a3:3e:eb:c1:54:73:65:c2: fb:58:ba:2d:5d:e2:da:3e:cb:25:7b:12:6b:ae:e9: ba:86:94:0c:72:69:1f:7e:72:df:eb:68:ad:58:ad: 4a:44:d6:a7:ca:2b:00:9c:43:7a:2d:cb:b5:1b:4f: 58:84:a6:b8:15:fd:4d:43:f3:9e:84:91:fe:fd:e6: 04:da:01:eb:5f:d2:7c:1d:11:69:09:c5:fa:a2:28: 27:9e:c7:70:27:c1:23:7f:12:50:7a:bc:90:15:b6: 04:44:d2:09:26:86:f8:68:ee:d9:d1:17:0d:63:8f: 89:64:d1:12:6d:38:26:b3:c7:26:ba:fb:2b:12:81: 7e:54:32:3e:56:92:e8:22:b3:da:57:ea:5f:c2:3d: a1:73:7b:58:56:f7:75:67:db:39:36:e9:03:78:f2: 39:fb:43:09:8c:3b:45:49:ea:71:54:57:b7:c3:2d: 8c:2c:a0:6f:96:3b:93:ab:ba:16:30:b2:a7:ed:c5: c3:c4:6c:37:a0:fa:ba:f1:50:23:2c:9d:1e:05:ba: 87:0a:0a:0e:92:97:37:45:be:bd:34:2c:d4:48:c3: b3:07:5f:06:f0:0d:e6:ae:4c:36:bc:d3:b7:3d:cc: d8:88:9d:86:08:71:04:a2:59:51:1e:03:53:27:79: fc:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:AE:D5:A2:17:D8:45:C8:5A:C3:48:69:FE:53:9A:C8:DE:09:3A:A2 X509v3 Authority Key Identifier: keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/iK7VohfYRchaw0hp_lOayN4JOqI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 240a:42de::/31 Signature Algorithm: sha256WithRSAEncryption 26:57:c7:df:e7:1e:d8:7b:c3:a0:5f:94:48:db:c6:d0:65:31: 3d:67:2a:48:b2:e0:92:e7:e5:c9:c3:45:18:e7:4c:aa:b6:f6: a5:2c:7d:46:82:70:36:3b:69:6d:d6:74:08:9c:8f:ee:a4:9c: 85:2f:ac:4e:f8:ba:37:2d:68:f4:26:20:99:e2:95:f2:ed:6c: 9b:24:43:c2:75:bc:3b:9f:07:52:ee:51:a0:2d:37:50:1f:61: e5:e4:5b:e8:74:68:12:a0:ba:b1:fa:96:1a:b5:4c:2a:cf:8e: 16:f2:34:39:33:07:86:27:af:0c:ff:26:ee:66:9c:dc:3b:99: 7e:76:cf:ed:ac:fa:74:26:99:f7:fe:82:fb:82:af:80:b7:e5: c4:3c:fc:9a:3c:6d:36:89:bf:43:26:bf:87:f7:fd:39:c4:21: 1e:22:76:8e:86:a9:3d:63:ce:88:23:14:ef:70:83:b2:55:58: 59:8e:a0:20:7b:f9:7e:1c:4b:bb:f5:99:61:54:d6:be:9b:5c: c5:37:37:ab:f0:22:9a:3d:83:f8:7f:db:d7:6e:62:1e:fa:bb: de:76:0b:c7:da:d8:15:0c:9f:9f:ca:14:c0:29:d5:19:3c:9e: 0b:df:41:f6:4a:13:4d:8b:5b:8b:1c:ea:72:ee:b1:11:e1:21: da:3c:59:8c -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgIBODANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NEVG RjczOTJFMUVEQzEyMjVGQzRDRkI4RkFCNkVCNjE3QTlEMjREMB4XDTI1MDUyNzA4 MjUyN1oXDTI2MDUyNzA3Mzg0MVowMzExMC8GA1UEAxMoODhBRUQ1QTIxN0Q4NDVD ODVBQzM0ODY5RkU1MzlBQzhERTA5M0FBMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMx/Q7xmbKM+68FUc2XC+1i6LV3i2j7LJXsSa67puoaUDHJpH35y 3+torVitSkTWp8orAJxDei3LtRtPWISmuBX9TUPznoSR/v3mBNoB61/SfB0RaQnF +qIoJ57HcCfBI38SUHq8kBW2BETSCSaG+Gju2dEXDWOPiWTREm04JrPHJrr7KxKB flQyPlaS6CKz2lfqX8I9oXN7WFb3dWfbOTbpA3jyOftDCYw7RUnqcVRXt8MtjCyg b5Y7k6u6FjCyp+3Fw8RsN6D6uvFQIyydHgW6hwoKDpKXN0W+vTQs1EjDswdfBvAN 5q5MNrzTtz3M2IidhghxBKJZUR4DUyd5/FUCAwEAAaOCAfQwggHwMB0GA1UdDgQW BBSIrtWiF9hFyFrDSGn+U5rI3gk6ojAfBgNVHSMEGDAWgBSU7/c5Lh7cEiX8TPuP q262F6nSTTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNjcy L2xPXzNPUzRlM0JJbF9FejdqNnR1dGhlcDBrMC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvbE9fM09TNGUzQklsX0V6N2o2dHV0aGVwMGswLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3Mi9pSzdWb2hmWVJjaGF3 MGhwX2xPYXlONEpPcUkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH AwUBJApC3jANBgkqhkiG9w0BAQsFAAOCAQEAJlfH3+ce2HvDoF+USNvG0GUxPWcq SLLgkuflycNFGOdMqrb2pSx9RoJwNjtpbdZ0CJyP7qSchS+sTvi6Ny1o9CYgmeKV 8u1smyRDwnW8O58HUu5RoC03UB9h5eRb6HRoEqC6sfqWGrVMKs+OFvI0OTMHhiev DP8m7mac3DuZfnbP7az6dCaZ9/6C+4KvgLflxDz8mjxtNom/Qya/h/f9OcQhHiJ2 joapPWPOiCMU73CDslVYWY6gIHv5fhxLu/WZYVTWvptcxTc3q/Aimj2D+H/b125i Hvq73nYLx9rYFQyfn8oUwCnVGTyeC99B9koTTYtbixzqcu6xEeEh2jxZjA== -----END CERTIFICATE-----Generated at Wed Jun 4 01:23:03 2025 by rpki-client