$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/yrENJ_dNZEDdnj4rhEq8F4_Min0.roa File: yrENJ_dNZEDdnj4rhEq8F4_Min0.roa (raw, json) Hash identifier: XyFXD6ZPEQHrRiYIq6uJwaSV/44s8VUy62lTASzTEpc= Subject key identifier: CA:B1:0D:27:F7:4D:64:40:DD:9E:3E:2B:84:4A:BC:17:8F:CC:8A:7D Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Certificate serial: 25 Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/yrENJ_dNZEDdnj4rhEq8F4_Min0.roa Signing time: Tue 27 May 2025 08:19:36 +0000 ROA not before: Tue 27 May 2025 08:19:36 +0000 ROA not after: Wed 27 May 2026 07:38:41 +0000 asID: 24547 IP address blocks: 240a:4288::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 00:39:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Validity Not Before: May 27 08:19:36 2025 GMT Not After : May 27 07:38:41 2026 GMT Subject: CN=CAB10D27F74D6440DD9E3E2B844ABC178FCC8A7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:21:ef:9d:0a:6f:6c:eb:d7:a9:bb:ca:d8:6d: 56:fc:b0:52:05:ee:c6:38:10:9f:e1:da:d9:5b:23: d8:a2:77:70:e4:54:fd:19:c0:3f:82:c5:f4:d7:13: 5c:d8:ea:e5:52:e6:d4:85:2e:6d:c4:60:9e:a0:f8: 7a:9a:4b:6f:49:db:4b:dd:a3:bb:49:69:bb:15:e1: c3:b9:ce:a1:a7:3d:ee:f7:46:da:cb:72:3e:7c:25: 17:e0:90:f3:02:13:b8:77:43:07:63:6b:f8:d6:6b: a3:f1:48:95:09:b3:8e:7f:44:f8:e8:2f:ec:0a:93: db:f2:c0:5c:5a:13:6a:16:d6:1b:41:9a:e5:c2:aa: 1d:54:81:1d:5b:30:f4:43:53:d6:cb:85:bc:8b:8e: dd:c6:fa:33:af:d9:19:46:93:cf:38:ce:bf:a8:9f: c7:c8:8f:a5:9d:6f:49:14:dc:7e:42:8f:80:b9:34: 8f:a1:b4:d6:92:49:f5:22:36:60:c5:93:24:ac:00: 4f:f1:fa:05:ad:a9:22:68:00:78:0b:aa:e9:13:de: f7:33:92:11:c1:d6:d4:ac:7e:6a:1d:a0:15:92:7a: cf:78:69:0b:86:e4:b3:e2:10:be:1e:e4:fd:c8:db: 15:29:83:32:30:fa:89:ec:a9:ad:83:07:2b:35:9a: 0b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B1:0D:27:F7:4D:64:40:DD:9E:3E:2B:84:4A:BC:17:8F:CC:8A:7D X509v3 Authority Key Identifier: keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/yrENJ_dNZEDdnj4rhEq8F4_Min0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 240a:4288::/31 Signature Algorithm: sha256WithRSAEncryption 4b:74:19:f5:7c:be:ae:6b:a1:bb:c0:9f:1f:3a:e1:fe:92:3b: de:c3:a1:05:31:eb:23:5a:04:52:51:8f:03:1c:cb:c1:2c:7d: 08:95:73:a7:1a:db:fe:10:f5:83:fc:d0:a4:d7:49:ba:a4:dc: b0:b1:b0:5b:92:f6:27:f7:43:c8:f2:09:c8:37:99:7c:7e:36: 15:03:b7:70:e0:45:cb:a9:34:18:75:ab:3e:6a:bd:81:9f:fd: 7c:13:0e:53:06:77:ce:a1:b2:dc:5a:de:ea:ca:83:73:ed:00: 5d:d7:d5:00:5b:02:c7:bd:ba:35:9d:a1:82:b4:af:ea:e2:b3: 66:63:98:ca:7d:a4:77:04:aa:9c:11:e2:45:4e:9e:63:7c:54: e3:fe:ca:02:65:7d:88:cc:b4:5b:ee:eb:79:fa:1d:78:32:0a: fd:b6:9f:c2:62:51:ec:67:0d:35:88:18:89:c6:f0:96:ac:80: a1:93:5e:80:2d:82:90:90:fd:70:64:5b:50:a7:06:bf:b0:38: e4:87:8f:33:a5:b9:4d:8c:98:45:08:c8:5d:da:8e:a6:e6:58: 1d:70:04:84:ca:9d:98:e8:d1:93:96:b2:29:04:78:f2:21:eb: 64:e8:e6:6c:6c:f4:17:5f:69:ea:98:d2:a6:d8:55:c5:a1:50: c6:2c:3e:9f -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgIBJTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NEVG RjczOTJFMUVEQzEyMjVGQzRDRkI4RkFCNkVCNjE3QTlEMjREMB4XDTI1MDUyNzA4 MTkzNloXDTI2MDUyNzA3Mzg0MVowMzExMC8GA1UEAxMoQ0FCMTBEMjdGNzRENjQ0 MEREOUUzRTJCODQ0QUJDMTc4RkNDOEE3RDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAK8h750Kb2zr16m7ythtVvywUgXuxjgQn+Ha2Vsj2KJ3cORU/RnA P4LF9NcTXNjq5VLm1IUubcRgnqD4eppLb0nbS92ju0lpuxXhw7nOoac97vdG2sty PnwlF+CQ8wITuHdDB2Nr+NZro/FIlQmzjn9E+Ogv7AqT2/LAXFoTahbWG0Ga5cKq HVSBHVsw9ENT1suFvIuO3cb6M6/ZGUaTzzjOv6ifx8iPpZ1vSRTcfkKPgLk0j6G0 1pJJ9SI2YMWTJKwAT/H6Ba2pImgAeAuq6RPe9zOSEcHW1Kx+ah2gFZJ6z3hpC4bk s+IQvh7k/cjbFSmDMjD6ieyprYMHKzWaCxMCAwEAAaOCAfQwggHwMB0GA1UdDgQW BBTKsQ0n901kQN2ePiuESrwXj8yKfTAfBgNVHSMEGDAWgBSU7/c5Lh7cEiX8TPuP q262F6nSTTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNjcy L2xPXzNPUzRlM0JJbF9FejdqNnR1dGhlcDBrMC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvbE9fM09TNGUzQklsX0V6N2o2dHV0aGVwMGswLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3Mi95ckVOSl9kTlpFRGRu ajRyaEVxOEY0X01pbjAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH AwUBJApCiDANBgkqhkiG9w0BAQsFAAOCAQEAS3QZ9Xy+rmuhu8CfHzrh/pI73sOh BTHrI1oEUlGPAxzLwSx9CJVzpxrb/hD1g/zQpNdJuqTcsLGwW5L2J/dDyPIJyDeZ fH42FQO3cOBFy6k0GHWrPmq9gZ/9fBMOUwZ3zqGy3Fre6sqDc+0AXdfVAFsCx726 NZ2hgrSv6uKzZmOYyn2kdwSqnBHiRU6eY3xU4/7KAmV9iMy0W+7refodeDIK/baf wmJR7GcNNYgYicbwlqyAoZNegC2CkJD9cGRbUKcGv7A45IePM6W5TYyYRQjIXdqO puZYHXAEhMqdmOjRk5ayKQR48iHrZOjmbGz0F19p6pjSpthVxaFQxiw+nw== -----END CERTIFICATE-----Generated at Thu Jun 5 20:30:13 2025 by rpki-client