$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2988/v76ZeUDL7XeuImG3Z6XfawB1r4s.roa File: v76ZeUDL7XeuImG3Z6XfawB1r4s.roa (raw, json) Hash identifier: 591TgDtgoDv30DyaGcx7qNWrjSUDGPFlI5TjhU5Rz0k= Subject key identifier: BF:BE:99:79:40:CB:ED:77:AE:22:61:B7:67:A5:DF:6B:00:75:AF:8B Certificate issuer: /CN=012D4317BCA1660F88066F890F8C04AF557000CB Certificate serial: 21DB Authority key identifier: 01:2D:43:17:BC:A1:66:0F:88:06:6F:89:0F:8C:04:AF:55:70:00:CB Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/v76ZeUDL7XeuImG3Z6XfawB1r4s.roa Signing time: Fri 17 Jan 2025 01:28:44 +0000 ROA not before: Fri 17 Jan 2025 01:28:44 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 139139 IP address blocks: 2406:3340::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:09:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8667 (0x21db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=012D4317BCA1660F88066F890F8C04AF557000CB Validity Not Before: Jan 17 01:28:44 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=BFBE997940CBED77AE2261B767A5DF6B0075AF8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:51:51:fe:5d:23:6d:33:cc:3e:73:78:f8:77: ae:4f:54:34:a2:f9:54:da:37:f6:47:69:55:7b:0b: db:a2:3c:4b:fc:64:05:81:61:45:1c:c3:27:c2:f9: 6e:57:56:74:a1:33:cd:bf:ec:c2:bd:b2:cd:b4:e9: df:7f:e7:f9:2c:5f:8c:bd:74:86:14:af:25:2e:ad: 72:0f:34:17:c4:dc:3d:0c:37:b5:65:9f:1a:a3:72: cd:f8:ba:e4:46:e7:c3:be:c4:2a:ee:ca:c2:84:20: 0e:8e:46:65:5b:6e:3e:b2:52:1d:13:ce:38:c7:41: 99:ee:bd:c5:2b:f8:4d:88:fd:71:b1:4e:98:67:fe: f7:37:32:f4:d6:94:e8:d5:35:46:2c:d8:84:dd:de: 1c:35:6b:8e:1d:5a:2a:12:cb:60:b0:fa:6d:02:6d: c9:54:db:26:8b:69:4f:a9:73:2a:9a:37:a3:42:6e: cc:61:53:4c:86:5f:78:0d:33:4f:b8:61:3e:d7:40: fa:9f:94:a2:22:08:b2:64:45:e3:6b:5b:ea:94:3d: 32:27:01:a0:db:91:26:6e:2b:cb:4a:6b:07:bc:93: c4:33:7a:78:bc:a2:76:e0:b6:18:02:3e:6f:27:f3: 66:4b:59:7c:27:50:a7:90:05:c9:8b:d3:c6:b7:cb: 0f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:BE:99:79:40:CB:ED:77:AE:22:61:B7:67:A5:DF:6B:00:75:AF:8B X509v3 Authority Key Identifier: keyid:01:2D:43:17:BC:A1:66:0F:88:06:6F:89:0F:8C:04:AF:55:70:00:CB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/v76ZeUDL7XeuImG3Z6XfawB1r4s.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2406:3340::/32 Signature Algorithm: sha256WithRSAEncryption 0b:d9:ba:68:8d:80:48:16:cb:14:0e:44:19:32:fe:69:0b:c8: 26:a4:e5:e6:3c:2c:e5:d1:53:fc:b5:c2:15:03:a0:d9:aa:17: 16:14:2d:08:ac:7b:04:22:7e:ab:53:d0:3f:8b:a4:3d:83:aa: dd:06:02:ec:2f:9b:9a:58:eb:5c:1e:30:e5:f7:6f:d5:d4:47: c4:0d:30:69:f8:1d:74:80:de:51:fd:2f:21:97:e9:cf:97:e6: 81:2e:86:3f:bd:1c:19:71:58:b2:e3:b1:2d:c1:fe:c4:3e:ab: 2d:73:5a:04:09:df:15:c4:2d:3b:cb:23:a4:69:79:b0:d1:d9: ef:fa:9c:d1:39:7d:a2:a8:b3:8c:04:c0:93:c0:7b:fd:19:f1: c3:1d:c9:82:d8:bc:dd:22:eb:68:e1:6c:30:13:0f:85:e3:87: 07:74:0c:9d:80:c0:5e:6c:fd:cf:6b:bb:b4:82:fc:80:12:0a: fd:e0:ee:b2:c0:b3:05:0d:f4:d7:64:6b:87:ac:78:70:7f:52: b4:68:8a:5e:a4:21:c4:18:12:a3:6a:d3:f5:bf:5d:18:0b:8c: 75:9b:05:91:97:de:5b:60:f7:f1:5b:3c:02:b1:73:86:05:33: 73:a0:bd:d9:9f:03:85:be:9c:92:ac:2b:08:df:8c:58:5d:12: 50:62:d3:73 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICIdswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDEy RDQzMTdCQ0ExNjYwRjg4MDY2Rjg5MEY4QzA0QUY1NTcwMDBDQjAeFw0yNTAxMTcw MTI4NDRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEJGQkU5OTc5NDBDQkVE NzdBRTIyNjFCNzY3QTVERjZCMDA3NUFGOEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBUVH+XSNtM8w+c3j4d65PVDSi+VTaN/ZHaVV7C9uiPEv8ZAWB YUUcwyfC+W5XVnShM82/7MK9ss206d9/5/ksX4y9dIYUryUurXIPNBfE3D0MN7Vl nxqjcs34uuRG58O+xCruysKEIA6ORmVbbj6yUh0TzjjHQZnuvcUr+E2I/XGxTphn /vc3MvTWlOjVNUYs2ITd3hw1a44dWioSy2Cw+m0CbclU2yaLaU+pcyqaN6NCbsxh U0yGX3gNM0+4YT7XQPqflKIiCLJkReNrW+qUPTInAaDbkSZuK8tKawe8k8Qzeni8 onbgthgCPm8n82ZLWXwnUKeQBcmL08a3yw9FAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUv76ZeUDL7XeuImG3Z6XfawB1r4swHwYDVR0jBBgwFoAUAS1DF7yhZg+IBm+J D4wEr1VwAMswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjk4 OC9BUzFERjd5aFpnLUlCbS1KRDR3RXIxVndBTXMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0FTMURGN3loWmctSUJtLUpENHdFcjFWd0FNcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI5ODgvdjc2WmVVREw3WGV1 SW1HM1o2WGZhd0IxcjRzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQGM0AwDQYJKoZIhvcNAQELBQADggEBAAvZumiNgEgWyxQORBky/mkLyCak 5eY8LOXRU/y1whUDoNmqFxYULQisewQifqtT0D+LpD2Dqt0GAuwvm5pY61weMOX3 b9XUR8QNMGn4HXSA3lH9LyGX6c+X5oEuhj+9HBlxWLLjsS3B/sQ+qy1zWgQJ3xXE LTvLI6RpebDR2e/6nNE5faKos4wEwJPAe/0Z8cMdyYLYvN0i62jhbDATD4Xjhwd0 DJ2AwF5s/c9ru7SC/IASCv3g7rLAswUN9Ndka4eseHB/UrRoil6kIcQYEqNq0/W/ XRgLjHWbBZGX3ltg9/FbPAKxc4YFM3OgvdmfA4W+nJKsKwjfjFhdElBi03M= -----END CERTIFICATE-----Generated at Fri Apr 4 18:34:52 2025 by rpki-client