$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/qcXXabrh8EqtnxOR04v9Fj3msyw.roa File: qcXXabrh8EqtnxOR04v9Fj3msyw.roa (raw, json) Hash identifier: wS6+a8n0hkLBsxSnU2o77y+by7S5CdPzqs4r1HU6aoM= Subject key identifier: A9:C5:D7:69:BA:E1:F0:4A:AD:9F:13:91:D3:8B:FD:16:3D:E6:B3:2C Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Certificate serial: 31 Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/qcXXabrh8EqtnxOR04v9Fj3msyw.roa Signing time: Tue 27 May 2025 08:19:39 +0000 ROA not before: Tue 27 May 2025 08:19:39 +0000 ROA not after: Wed 27 May 2026 07:38:41 +0000 asID: 38019 IP address blocks: 240a:4284::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Validity Not Before: May 27 08:19:39 2025 GMT Not After : May 27 07:38:41 2026 GMT Subject: CN=A9C5D769BAE1F04AAD9F1391D38BFD163DE6B32C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:99:9d:0e:52:fe:cc:02:66:6c:72:70:aa:69: c0:23:0f:e6:05:b5:c1:59:3b:3e:f4:8a:3c:ab:5c: cf:1b:8e:d2:96:70:08:2c:36:7e:de:77:dc:e1:03: e2:d0:de:9f:62:42:c1:ac:8d:57:16:09:d7:38:44: 42:1e:47:f1:77:bc:ec:e5:db:ee:29:03:98:8b:3a: 22:d5:49:a5:8c:8d:01:d7:d1:b8:f7:62:c5:94:bd: ac:19:fc:a2:3f:b9:80:6a:f6:53:c6:93:74:9e:49: 58:4a:fb:5f:0a:04:c7:f1:76:b4:55:2a:71:2a:09: 70:81:3c:e6:c4:a4:5e:fb:4c:cd:1b:0f:72:6a:6f: d9:b0:f8:8a:f1:00:9c:86:13:9c:06:fd:cf:45:04: 7d:06:75:13:26:aa:23:a7:6d:1e:bd:e9:de:7c:2a: 7f:15:f8:5f:fc:31:85:af:b3:b2:5e:14:29:f6:94: c0:19:dd:f6:f0:c7:00:a2:b3:fd:88:3f:e6:d4:2b: 50:0f:d7:7e:b9:e2:c8:45:ae:7f:48:1a:66:3d:37: 1a:1e:40:df:1b:c3:2a:f7:c2:72:3d:b9:eb:7f:a6: 08:0a:5e:1d:5d:f2:a6:9d:75:41:06:a6:ef:39:4a: d6:04:89:8b:85:a9:46:16:11:c8:2f:4e:d5:a8:c2: 03:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C5:D7:69:BA:E1:F0:4A:AD:9F:13:91:D3:8B:FD:16:3D:E6:B3:2C X509v3 Authority Key Identifier: keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/qcXXabrh8EqtnxOR04v9Fj3msyw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 240a:4284::/31 Signature Algorithm: sha256WithRSAEncryption 13:ee:e4:1f:85:ed:57:e6:40:1c:00:71:23:98:43:d1:03:fc: 55:a3:32:f4:c4:aa:42:64:b8:e1:7b:18:47:e4:60:19:31:ff: 81:82:c6:ed:04:cf:5d:ce:de:56:8b:32:8f:df:9c:d8:02:f0: ef:46:dd:7c:6c:43:6f:81:22:e6:30:6a:44:83:b7:e0:04:3d: 46:1a:84:4f:be:b4:fb:d0:ca:1a:a8:db:ef:84:b6:b8:9b:15: 4c:da:43:54:45:d2:80:e4:48:bb:ae:be:ae:a5:61:ae:f9:87: 9c:c7:49:3d:d4:02:ad:62:b7:18:dc:0a:0f:a3:27:b5:c6:6a: 35:94:09:f5:51:d7:11:01:a3:fa:9e:75:d5:4c:45:e6:5d:93: 89:9c:25:20:0f:4b:33:3a:8a:e5:c1:5a:00:46:b3:36:16:72: b9:2c:be:a4:71:d2:78:5e:52:9e:05:07:da:ee:ef:07:4d:84: 79:ef:a6:17:39:1e:3a:27:04:86:48:0c:be:6c:4f:eb:6d:8d: e9:db:ff:48:28:ce:7f:ea:7c:aa:de:90:67:b8:7f:b5:d3:cf: 89:e8:b0:38:07:7e:17:0f:34:f2:98:0b:f4:62:23:fc:37:3a: 74:b4:f4:63:1a:d6:d3:e6:94:7a:a0:74:5c:db:b2:3f:27:78: fd:8b:04:30 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgIBMTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NEVG RjczOTJFMUVEQzEyMjVGQzRDRkI4RkFCNkVCNjE3QTlEMjREMB4XDTI1MDUyNzA4 MTkzOVoXDTI2MDUyNzA3Mzg0MVowMzExMC8GA1UEAxMoQTlDNUQ3NjlCQUUxRjA0 QUFEOUYxMzkxRDM4QkZEMTYzREU2QjMyQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOyZnQ5S/swCZmxycKppwCMP5gW1wVk7PvSKPKtczxuO0pZwCCw2 ft533OED4tDen2JCwayNVxYJ1zhEQh5H8Xe87OXb7ikDmIs6ItVJpYyNAdfRuPdi xZS9rBn8oj+5gGr2U8aTdJ5JWEr7XwoEx/F2tFUqcSoJcIE85sSkXvtMzRsPcmpv 2bD4ivEAnIYTnAb9z0UEfQZ1EyaqI6dtHr3p3nwqfxX4X/wxha+zsl4UKfaUwBnd 9vDHAKKz/Yg/5tQrUA/XfrniyEWuf0gaZj03Gh5A3xvDKvfCcj2563+mCApeHV3y pp11QQam7zlK1gSJi4WpRhYRyC9O1ajCA9MCAwEAAaOCAfQwggHwMB0GA1UdDgQW BBSpxddpuuHwSq2fE5HTi/0WPeazLDAfBgNVHSMEGDAWgBSU7/c5Lh7cEiX8TPuP q262F6nSTTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNjcy L2xPXzNPUzRlM0JJbF9FejdqNnR1dGhlcDBrMC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvbE9fM09TNGUzQklsX0V6N2o2dHV0aGVwMGswLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3Mi9xY1hYYWJyaDhFcXRu eE9SMDR2OUZqM21zeXcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH AwUBJApChDANBgkqhkiG9w0BAQsFAAOCAQEAE+7kH4XtV+ZAHABxI5hD0QP8VaMy 9MSqQmS44XsYR+RgGTH/gYLG7QTPXc7eVosyj9+c2ALw70bdfGxDb4Ei5jBqRIO3 4AQ9RhqET760+9DKGqjb74S2uJsVTNpDVEXSgORIu66+rqVhrvmHnMdJPdQCrWK3 GNwKD6MntcZqNZQJ9VHXEQGj+p511UxF5l2TiZwlIA9LMzqK5cFaAEazNhZyuSy+ pHHSeF5SngUH2u7vB02Eee+mFzkeOicEhkgMvmxP622N6dv/SCjOf+p8qt6QZ7h/ tdPPieiwOAd+Fw808pgL9GIj/Dc6dLT0YxrW0+aUeqB0XNuyPyd4/YsEMA== -----END CERTIFICATE-----Generated at Wed Jun 4 02:03:26 2025 by rpki-client