$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/pgX3Im21HRz-W8muHuK96T624L4.roa File: pgX3Im21HRz-W8muHuK96T624L4.roa (raw, json) Hash identifier: sYRzSvfPMutNjaXYDXa4JVKTyK/9bIiPfVHUR1ejudU= Subject key identifier: A6:05:F7:22:6D:B5:1D:1C:FE:5B:C9:AE:1E:E2:BD:E9:3E:B6:E0:BE Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Certificate serial: 0A Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/pgX3Im21HRz-W8muHuK96T624L4.roa Signing time: Tue 27 May 2025 08:11:27 +0000 ROA not before: Tue 27 May 2025 08:11:27 +0000 ROA not after: Wed 27 May 2026 07:38:41 +0000 asID: 56040 IP address blocks: 240a:4090:1200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Validity Not Before: May 27 08:11:27 2025 GMT Not After : May 27 07:38:41 2026 GMT Subject: CN=A605F7226DB51D1CFE5BC9AE1EE2BDE93EB6E0BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:45:af:e6:30:b3:9f:05:d6:af:8b:25:db:a4: 62:5e:1e:a9:a3:59:5b:7e:88:9c:aa:b5:85:6e:c0: 2b:4a:b5:11:c2:b6:1d:9d:18:33:eb:db:6f:24:86: 73:d6:5b:e6:e1:8e:2a:df:4a:c2:a1:a5:15:57:87: 26:e4:5e:4b:5a:5b:e3:49:ed:fe:03:2c:54:43:8c: ef:b8:96:49:a9:ca:29:fc:a2:0b:92:6d:02:14:14: b7:1b:71:76:bd:94:fd:4f:83:66:47:6a:b8:eb:a6: aa:e5:b4:f4:39:2a:be:1f:88:2f:a0:e8:2c:99:e7: fc:7b:3e:4c:20:bc:21:6d:10:b0:51:8e:cc:90:cb: 5a:c5:0a:4a:4b:96:b4:69:58:ec:60:cf:da:27:a0: 10:dc:d2:e6:f5:a7:04:8b:6e:e8:08:e3:84:2b:ad: f7:1e:40:26:9c:b2:0c:85:00:3c:c6:4b:af:84:55: d2:85:63:50:6a:4d:b7:30:28:93:c5:de:d9:e7:11: bf:56:0c:c0:06:0e:05:d6:27:e5:84:dc:c3:f0:3c: d0:be:d8:da:3f:58:ea:10:9c:76:45:12:3a:06:6e: 24:dc:a1:82:2f:d2:0f:6b:a2:5f:17:38:49:d8:11: 66:26:5c:76:a2:4b:68:e7:e5:50:c9:86:53:ea:66: c9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:05:F7:22:6D:B5:1D:1C:FE:5B:C9:AE:1E:E2:BD:E9:3E:B6:E0:BE X509v3 Authority Key Identifier: keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/pgX3Im21HRz-W8muHuK96T624L4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 240a:4090:1200::/40 Signature Algorithm: sha256WithRSAEncryption 33:0f:1f:76:06:34:e8:e2:5a:be:2b:97:4c:db:60:8d:eb:6f: a6:89:31:60:e7:76:0c:50:7b:d6:fe:95:d1:04:2a:e2:00:87: 37:b0:10:87:ac:25:60:69:be:8b:f7:bb:72:80:e1:37:b0:14: cf:5d:93:9d:30:1f:fa:fc:4c:23:d3:d8:d4:e9:f1:48:2f:a3: ad:4a:79:6b:60:84:6e:d2:33:4c:61:dc:26:4d:36:00:ab:2a: 16:70:d9:fa:3f:12:df:e0:a1:e6:23:98:ee:4c:d3:36:53:cb: 62:a3:35:d6:e6:df:50:80:75:c2:23:c3:1e:e8:e1:e5:1e:aa: 49:03:20:d8:b7:f9:6a:51:34:ae:9a:8e:70:f8:80:ad:b3:81: 0e:73:18:0a:cd:5c:04:00:41:e2:ab:53:14:3c:a8:5a:8e:ed: 6a:61:b7:1a:67:0c:8c:37:da:5c:58:ec:c6:a2:6c:bf:91:49: ac:39:e6:9f:98:37:8a:c1:c3:40:0f:b1:4f:6a:dd:3d:a2:b5: 61:6d:23:e0:5a:53:68:8b:0a:13:e7:bb:54:bd:5a:d1:89:28: 9e:6e:1e:6f:e4:dc:48:34:e1:3e:eb:e1:d5:56:fa:e7:b9:ce: 12:91:5e:89:5d:51:a1:64:a7:b8:c7:44:2d:1f:6c:8b:74:7f: e5:85:28:2c -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIBCjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NEVG RjczOTJFMUVEQzEyMjVGQzRDRkI4RkFCNkVCNjE3QTlEMjREMB4XDTI1MDUyNzA4 MTEyN1oXDTI2MDUyNzA3Mzg0MVowMzExMC8GA1UEAxMoQTYwNUY3MjI2REI1MUQx Q0ZFNUJDOUFFMUVFMkJERTkzRUI2RTBCRTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOZFr+Yws58F1q+LJdukYl4eqaNZW36InKq1hW7AK0q1EcK2HZ0Y M+vbbySGc9Zb5uGOKt9KwqGlFVeHJuReS1pb40nt/gMsVEOM77iWSanKKfyiC5Jt AhQUtxtxdr2U/U+DZkdquOumquW09Dkqvh+IL6DoLJnn/Hs+TCC8IW0QsFGOzJDL WsUKSkuWtGlY7GDP2iegENzS5vWnBItu6AjjhCut9x5AJpyyDIUAPMZLr4RV0oVj UGpNtzAok8Xe2ecRv1YMwAYOBdYn5YTcw/A80L7Y2j9Y6hCcdkUSOgZuJNyhgi/S D2uiXxc4SdgRZiZcdqJLaOflUMmGU+pmyUcCAwEAAaOCAfUwggHxMB0GA1UdDgQW BBSmBfcibbUdHP5bya4e4r3pPrbgvjAfBgNVHSMEGDAWgBSU7/c5Lh7cEiX8TPuP q262F6nSTTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNjcy L2xPXzNPUzRlM0JJbF9FejdqNnR1dGhlcDBrMC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvbE9fM09TNGUzQklsX0V6N2o2dHV0aGVwMGswLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3Mi9wZ1gzSW0yMUhSei1X OG11SHVLOTZUNjI0TDQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI AwYAJApAkBIwDQYJKoZIhvcNAQELBQADggEBADMPH3YGNOjiWr4rl0zbYI3rb6aJ MWDndgxQe9b+ldEEKuIAhzewEIesJWBpvov3u3KA4TewFM9dk50wH/r8TCPT2NTp 8Ugvo61KeWtghG7SM0xh3CZNNgCrKhZw2fo/Et/goeYjmO5M0zZTy2KjNdbm31CA dcIjwx7o4eUeqkkDINi3+WpRNK6ajnD4gK2zgQ5zGArNXAQAQeKrUxQ8qFqO7Wph txpnDIw32lxY7MaibL+RSaw55p+YN4rBw0APsU9q3T2itWFtI+BaU2iLChPnu1S9 WtGJKJ5uHm/k3Eg04T7r4dVW+ue5zhKRXoldUaFkp7jHRC0fbIt0f+WFKCw= -----END CERTIFICATE-----Generated at Wed Jun 4 01:21:18 2025 by rpki-client