$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/u5Dtheaw_8sDBNJejIPXpVqOqSc.roa File: u5Dtheaw_8sDBNJejIPXpVqOqSc.roa (raw, json) Hash identifier: pmCNQUhBzMNkpugtMP5EyNVARUuHUs5ifKc14Kg6M10= Subject key identifier: BB:90:ED:85:E6:B0:FF:CB:03:04:D2:5E:8C:83:D7:A5:5A:8E:A9:27 Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Certificate serial: 17 Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/u5Dtheaw_8sDBNJejIPXpVqOqSc.roa Signing time: Tue 27 May 2025 08:11:31 +0000 ROA not before: Tue 27 May 2025 08:11:31 +0000 ROA not after: Wed 27 May 2026 07:38:41 +0000 asID: 56048 IP address blocks: 240a:4090:7100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:09:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Validity Not Before: May 27 08:11:31 2025 GMT Not After : May 27 07:38:41 2026 GMT Subject: CN=BB90ED85E6B0FFCB0304D25E8C83D7A55A8EA927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:38:d1:71:bd:87:f1:da:af:ca:7c:c0:7a:f6: 8d:c9:58:25:cb:7e:80:ef:6e:86:74:b9:27:f8:29: ca:c8:27:2c:42:68:e4:7d:75:68:a4:99:c1:47:34: 58:fe:48:9d:6a:55:6b:ec:d8:9f:3f:c2:ab:4d:07: ff:7a:8e:4f:74:e2:c0:a0:48:53:85:14:98:3a:f1: 21:11:68:0a:05:49:a4:de:a0:19:f8:f5:93:0b:10: 35:57:76:3c:4c:34:f9:39:f2:b7:6f:4d:57:e1:38: 83:c6:91:32:e0:19:f7:60:54:6f:f8:90:ba:24:2b: 3a:b0:0e:8d:5a:51:4b:bb:cf:d2:8f:97:cf:ea:fc: 44:6f:1a:99:26:e4:f0:9f:b1:e1:5b:2c:73:c2:a2: 20:52:8a:42:c7:d2:e6:5d:8b:05:cd:d0:17:22:28: 3d:1d:04:bd:fd:ba:36:4c:d1:5a:e1:97:c4:0f:9c: 7f:3b:39:bc:31:98:69:a8:9b:f2:38:e8:dd:70:86: b7:9c:d3:28:e6:18:80:3b:4e:07:0b:66:c6:5a:50: a4:26:e0:18:6c:d4:5c:4d:84:04:17:d0:e8:4e:e1: a0:f5:cd:dc:63:68:15:92:a4:8d:c1:44:4c:c7:f7: d2:14:94:bc:b4:83:81:bf:74:cb:4e:a7:53:63:d6: 1d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:90:ED:85:E6:B0:FF:CB:03:04:D2:5E:8C:83:D7:A5:5A:8E:A9:27 X509v3 Authority Key Identifier: keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/u5Dtheaw_8sDBNJejIPXpVqOqSc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 240a:4090:7100::/40 Signature Algorithm: sha256WithRSAEncryption 00:ca:90:ee:76:2b:71:30:83:68:8b:4b:d6:90:4d:05:9e:60: 66:a6:9d:97:77:a7:41:54:5e:b7:60:f9:e1:6b:39:76:48:f8: 0c:e5:8c:21:ee:5d:48:08:41:fb:8f:90:9f:a6:81:1a:f8:14: c6:ec:db:b4:13:24:a0:5f:87:c1:9b:a5:3a:9a:98:6e:db:67: 7c:cd:6d:69:24:0d:17:df:11:d8:65:7c:56:66:a8:88:8d:f1: ca:5a:56:4d:a7:7f:15:02:16:d7:0a:3e:2d:86:70:32:11:8a: bd:c1:f4:8f:00:f9:25:c2:ce:64:67:2f:c6:df:ca:c6:3f:ed: 2c:c6:41:0f:e7:1e:2b:40:ec:d2:aa:de:83:48:3e:60:b4:7e: db:c9:7c:1c:1a:72:3d:d0:12:d3:7e:6b:07:e3:c1:b6:ad:b3: 47:96:c4:8d:b5:86:c4:e4:22:89:fa:d3:02:45:50:8f:27:1f: e3:86:f1:a2:42:68:05:63:3b:70:8c:60:9c:8d:81:60:db:d0: ac:97:9f:97:78:d5:da:4b:0c:bd:ce:75:eb:b9:f7:bc:f3:40: d4:db:74:5c:a3:46:bd:27:94:b7:a3:e5:14:3a:e3:a6:2b:00: ad:58:87:22:56:ed:2e:2c:a2:b9:63:3a:fb:03:4e:27:3e:0c: cb:b5:14:c4 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIBFzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NEVG RjczOTJFMUVEQzEyMjVGQzRDRkI4RkFCNkVCNjE3QTlEMjREMB4XDTI1MDUyNzA4 MTEzMVoXDTI2MDUyNzA3Mzg0MVowMzExMC8GA1UEAxMoQkI5MEVEODVFNkIwRkZD QjAzMDREMjVFOEM4M0Q3QTU1QThFQTkyNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL440XG9h/Har8p8wHr2jclYJct+gO9uhnS5J/gpysgnLEJo5H11 aKSZwUc0WP5InWpVa+zYnz/Cq00H/3qOT3TiwKBIU4UUmDrxIRFoCgVJpN6gGfj1 kwsQNVd2PEw0+Tnyt29NV+E4g8aRMuAZ92BUb/iQuiQrOrAOjVpRS7vP0o+Xz+r8 RG8amSbk8J+x4Vssc8KiIFKKQsfS5l2LBc3QFyIoPR0Evf26NkzRWuGXxA+cfzs5 vDGYaaib8jjo3XCGt5zTKOYYgDtOBwtmxlpQpCbgGGzUXE2EBBfQ6E7hoPXN3GNo FZKkjcFETMf30hSUvLSDgb90y06nU2PWHQMCAwEAAaOCAfUwggHxMB0GA1UdDgQW BBS7kO2F5rD/ywME0l6Mg9elWo6pJzAfBgNVHSMEGDAWgBSU7/c5Lh7cEiX8TPuP q262F6nSTTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNjcy L2xPXzNPUzRlM0JJbF9FejdqNnR1dGhlcDBrMC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvbE9fM09TNGUzQklsX0V6N2o2dHV0aGVwMGswLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3Mi91NUR0aGVhd184c0RC TkplaklQWHBWcU9xU2Mucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI AwYAJApAkHEwDQYJKoZIhvcNAQELBQADggEBAADKkO52K3Ewg2iLS9aQTQWeYGam nZd3p0FUXrdg+eFrOXZI+AzljCHuXUgIQfuPkJ+mgRr4FMbs27QTJKBfh8GbpTqa mG7bZ3zNbWkkDRffEdhlfFZmqIiN8cpaVk2nfxUCFtcKPi2GcDIRir3B9I8A+SXC zmRnL8bfysY/7SzGQQ/nHitA7NKq3oNIPmC0ftvJfBwacj3QEtN+awfjwbats0eW xI21hsTkIon60wJFUI8nH+OG8aJCaAVjO3CMYJyNgWDb0KyXn5d41dpLDL3Odeu5 97zzQNTbdFyjRr0nlLej5RQ646YrAK1YhyJW7S4sorljOvsDTic+DMu1FMQ= -----END CERTIFICATE-----Generated at Fri Jun 6 17:17:17 2025 by rpki-client