$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3168/6WUQ5B5vun0CoK_vLAyUdcYhk0Y.roa File: 6WUQ5B5vun0CoK_vLAyUdcYhk0Y.roa (raw, json) Hash identifier: 9SnwaZ1aA/kOcSBtXH6cQmmrvzUJK8pB6FbTGh869ws= Subject key identifier: E9:65:10:E4:1E:6F:BA:7D:02:A0:AF:EF:2C:0C:94:75:C6:21:93:46 Certificate issuer: /CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094 Certificate serial: 1446 Authority key identifier: 24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/6WUQ5B5vun0CoK_vLAyUdcYhk0Y.roa Signing time: Tue 27 May 2025 00:18:50 +0000 ROA not before: Tue 27 May 2025 00:18:50 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 211392 IP address blocks: 45.250.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:11:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5190 (0x1446) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094 Validity Not Before: May 27 00:18:50 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=E96510E41E6FBA7D02A0AFEF2C0C9475C6219346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:59:4f:da:04:a3:d6:6b:bb:3f:4b:2c:18:08: 6f:cf:2c:03:73:c5:34:a1:58:87:4f:da:87:9b:1c: f6:fc:f3:b5:c5:eb:04:07:69:7a:aa:44:c3:a9:54: 61:55:e0:e1:87:24:6f:7b:56:e4:36:7b:bc:b0:51: 33:25:62:10:e1:56:24:0b:b7:5c:5d:b7:1a:52:1c: 42:15:78:f3:56:c7:6b:cf:0c:24:db:d8:07:43:ae: 46:6b:9e:72:a1:f2:96:c0:85:4a:33:e8:2e:a1:ce: c5:14:bc:cc:7e:f5:83:1d:35:3a:c7:46:8a:47:a1: ba:63:38:eb:db:a1:30:e3:1a:aa:09:66:8a:d8:48: ec:dd:16:da:60:2b:20:e8:c7:f6:6a:65:11:40:06: 44:97:90:25:1d:9d:dd:b2:4a:72:6c:36:5e:69:06: 01:c7:8d:52:ec:e6:9e:5e:70:e2:58:f8:e6:ff:dc: db:0e:e8:03:d7:05:ec:de:cd:8e:43:4d:f9:4e:b2: 1f:65:bc:60:de:4a:66:e2:dd:b7:18:07:1e:57:b4: f0:ce:07:4c:a9:74:b1:cf:db:8c:ec:8c:1b:6e:81: cf:96:98:b9:d6:1b:45:0f:60:52:47:10:ee:96:bd: a1:8f:fd:f2:1f:d6:20:e1:1c:9a:9f:24:2b:02:d9: 41:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:65:10:E4:1E:6F:BA:7D:02:A0:AF:EF:2C:0C:94:75:C6:21:93:46 X509v3 Authority Key Identifier: keyid:24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/6WUQ5B5vun0CoK_vLAyUdcYhk0Y.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.250.152.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:ff:6b:d8:45:f8:a6:95:61:3a:b0:b8:5a:5a:d9:50:1f:9f: 41:5f:a4:b7:fc:f7:ed:bf:f5:f8:8f:05:30:2f:b0:cc:24:5d: 84:2e:bb:c0:48:dc:e6:d0:bb:49:01:b3:18:f3:5a:12:77:dd: 2a:02:8a:50:9d:a6:49:9e:bb:69:b3:aa:f8:80:90:54:d7:de: fd:ad:1c:82:be:bd:37:8d:d8:94:4b:a6:fd:77:fe:e0:44:fa: 34:e2:72:1c:35:a6:89:8a:66:1f:f8:92:9f:aa:68:12:f6:42: 8c:3a:05:85:49:06:2d:36:29:b2:57:c4:ad:ef:03:5b:81:2f: 9c:7a:ae:0c:63:7c:0a:27:26:a8:74:0e:73:f0:3b:be:56:95: d0:8a:ea:58:4f:a6:3b:a4:7d:21:2d:7f:10:a7:36:de:08:74: fd:90:e8:10:fe:1f:6f:13:25:dc:d9:8c:b0:fb:70:4e:e3:83: 4b:9c:6e:ec:08:c9:07:56:f1:99:5c:f7:33:8d:28:22:45:8e: 3e:82:0a:cb:67:a8:7d:e0:f3:25:5e:ca:31:34:a3:39:d8:cd: c0:96:9c:b0:e0:ae:dd:e1:cc:9d:ad:8b:37:d4:18:4f:1d:44: 8e:17:09:8e:6b:81:f3:e6:31:e2:f1:5b:fa:a9:7f:e1:f9:a3: f4:be:4b:e1 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFEYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjQw OTg3RjQwQTYwMzBDREZBMzNERUQxRUVFN0NGNERDN0MzMDA5NDAeFw0yNTA1Mjcw MDE4NTBaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEU5NjUxMEU0MUU2RkJB N0QwMkEwQUZFRjJDMEM5NDc1QzYyMTkzNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5WU/aBKPWa7s/SywYCG/PLANzxTShWIdP2oebHPb887XF6wQH aXqqRMOpVGFV4OGHJG97VuQ2e7ywUTMlYhDhViQLt1xdtxpSHEIVePNWx2vPDCTb 2AdDrkZrnnKh8pbAhUoz6C6hzsUUvMx+9YMdNTrHRopHobpjOOvboTDjGqoJZorY SOzdFtpgKyDox/ZqZRFABkSXkCUdnd2ySnJsNl5pBgHHjVLs5p5ecOJY+Ob/3NsO 6APXBezezY5DTflOsh9lvGDeSmbi3bcYBx5XtPDOB0ypdLHP24zsjBtugc+WmLnW G0UPYFJHEO6WvaGP/fIf1iDhHJqfJCsC2UG5AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU6WUQ5B5vun0CoK/vLAyUdcYhk0YwHwYDVR0jBBgwFoAUJAmH9ApgMM36M97R 7ufPTcfDAJQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE2 OC9KQW1IOUFwZ01NMzZNOTdSN3VmUFRjZkRBSlEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0pBbUg5QXBnTU0zNk05N1I3dWZQVGNmREFKUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNjgvNldVUTVCNXZ1bjBD b0tfdkxBeVVkY1loazBZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAC36mDANBgkqhkiG9w0BAQsFAAOCAQEAL/9r2EX4ppVhOrC4WlrZUB+fQV+k t/z37b/1+I8FMC+wzCRdhC67wEjc5tC7SQGzGPNaEnfdKgKKUJ2mSZ67abOq+ICQ VNfe/a0cgr69N43YlEum/Xf+4ET6NOJyHDWmiYpmH/iSn6poEvZCjDoFhUkGLTYp slfEre8DW4EvnHquDGN8CicmqHQOc/A7vlaV0IrqWE+mO6R9IS1/EKc23gh0/ZDo EP4fbxMl3NmMsPtwTuODS5xu7AjJB1bxmVz3M40oIkWOPoIKy2eofeDzJV7KMTSj OdjNwJacsOCu3eHMna2LN9QYTx1EjhcJjmuB8+Yx4vFb+ql/4fmj9L5L4Q== -----END CERTIFICATE-----Generated at Wed Jun 4 00:53:58 2025 by rpki-client