$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/12FG2u660WWz92ml-VzLLfRZYT0.roa File: 12FG2u660WWz92ml-VzLLfRZYT0.roa (raw, json) Hash identifier: pvN18q7eASUUFPShBs5U+OSbz2aTfcrJsYEW3FM1o4Y= Subject key identifier: D7:61:46:DA:EE:BA:D1:65:B3:F7:69:A5:F9:5C:CB:2D:F4:59:61:3D Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Certificate serial: 15 Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/12FG2u660WWz92ml-VzLLfRZYT0.roa Signing time: Tue 27 May 2025 08:11:30 +0000 ROA not before: Tue 27 May 2025 08:11:30 +0000 ROA not after: Wed 27 May 2026 07:38:41 +0000 asID: 56048 IP address blocks: 240a:4090:1000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 19:43:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Validity Not Before: May 27 08:11:30 2025 GMT Not After : May 27 07:38:41 2026 GMT Subject: CN=D76146DAEEBAD165B3F769A5F95CCB2DF459613D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:44:b2:0f:07:eb:de:70:01:1c:93:6a:af:45: 33:1d:da:8e:ee:43:7f:ab:5d:52:79:ec:6b:f6:fd: 56:5b:69:81:07:a6:3d:c5:03:6d:9c:20:6e:60:a8: 96:88:21:24:96:c8:f8:11:fa:60:64:e0:c9:71:6a: 73:8c:86:cb:41:bd:63:54:f0:ba:fc:c5:29:e9:47: da:5b:1f:e7:0e:25:b5:b8:ba:d4:53:0f:fd:92:1b: d8:68:70:c7:31:5b:f8:44:33:e5:55:1a:56:0c:1b: 3d:3b:c9:46:67:64:af:02:29:cf:16:9f:57:3f:78: 3b:70:16:1c:b0:22:b2:30:2e:17:ba:74:03:b4:03: 4c:c3:d4:87:f1:0d:98:42:7b:72:95:90:f0:50:67: bd:75:f1:a1:b9:5f:39:29:bb:32:24:84:36:38:81: 71:95:46:a8:29:d7:2b:48:20:f6:ab:47:9c:e1:b9: 8f:b0:2a:3f:14:86:16:47:e6:d6:e8:f7:9a:6e:28: 9d:b2:08:48:4a:01:89:8a:49:99:dd:4a:ec:b4:a3: 3b:11:89:59:96:0c:9b:8e:8b:6a:ee:0e:af:ca:8d: 78:d8:05:68:5f:b5:e2:aa:e8:9c:49:da:5b:3c:79: 98:63:08:6a:25:ca:37:c0:f5:40:a8:bf:fb:1f:d5: f2:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:61:46:DA:EE:BA:D1:65:B3:F7:69:A5:F9:5C:CB:2D:F4:59:61:3D X509v3 Authority Key Identifier: keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/12FG2u660WWz92ml-VzLLfRZYT0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 240a:4090:1000::/40 Signature Algorithm: sha256WithRSAEncryption 46:ad:59:2f:5d:ba:36:46:05:55:23:35:a2:af:61:bc:67:b3: 78:93:d7:ed:fd:91:76:fa:82:59:61:2e:89:6f:eb:4e:83:dc: e4:5b:6d:f2:97:1a:2d:9a:8c:2d:5c:6b:56:ba:ba:12:82:1c: c7:25:d8:a3:6b:98:90:4e:28:88:a9:72:64:93:03:67:24:6b: fe:70:e1:ce:b7:5b:d0:af:36:6c:05:c0:d0:23:b7:4a:97:c7: 0b:44:58:46:c0:f5:7b:0a:75:58:01:ec:d0:29:db:00:78:13: 65:70:41:b4:46:b8:c7:90:bb:4a:0e:e2:a7:08:a4:53:85:d8: 19:1d:d7:ae:a8:2c:99:58:da:8c:8b:15:d3:60:87:53:63:16: 7b:d4:9d:b3:c7:72:fb:19:2e:49:94:d8:f2:a5:57:01:63:5b: 1c:44:e6:d7:9f:bb:1a:ae:4e:0e:7a:4c:f8:e3:e6:90:43:ab: ad:57:e6:47:2f:52:72:5e:da:f2:8e:90:0b:64:52:2f:85:67: 4d:00:9e:b1:71:8a:b8:a3:8e:08:fc:0d:ff:ec:52:28:cd:77: 2b:d5:fa:da:f1:f4:cb:7e:6b:3f:e6:89:b2:fa:2c:0d:df:6f: 18:62:ed:55:9a:40:ab:85:6f:3f:75:3b:d6:67:5a:0d:b0:c6: 4f:dd:32:34 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIBFTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NEVG RjczOTJFMUVEQzEyMjVGQzRDRkI4RkFCNkVCNjE3QTlEMjREMB4XDTI1MDUyNzA4 MTEzMFoXDTI2MDUyNzA3Mzg0MVowMzExMC8GA1UEAxMoRDc2MTQ2REFFRUJBRDE2 NUIzRjc2OUE1Rjk1Q0NCMkRGNDU5NjEzRDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOBEsg8H695wARyTaq9FMx3aju5Df6tdUnnsa/b9VltpgQemPcUD bZwgbmCologhJJbI+BH6YGTgyXFqc4yGy0G9Y1TwuvzFKelH2lsf5w4ltbi61FMP /ZIb2GhwxzFb+EQz5VUaVgwbPTvJRmdkrwIpzxafVz94O3AWHLAisjAuF7p0A7QD TMPUh/ENmEJ7cpWQ8FBnvXXxoblfOSm7MiSENjiBcZVGqCnXK0gg9qtHnOG5j7Aq PxSGFkfm1uj3mm4onbIISEoBiYpJmd1K7LSjOxGJWZYMm46Lau4Or8qNeNgFaF+1 4qronEnaWzx5mGMIaiXKN8D1QKi/+x/V8mUCAwEAAaOCAfUwggHxMB0GA1UdDgQW BBTXYUba7rrRZbP3aaX5XMst9FlhPTAfBgNVHSMEGDAWgBSU7/c5Lh7cEiX8TPuP q262F6nSTTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNjcy L2xPXzNPUzRlM0JJbF9FejdqNnR1dGhlcDBrMC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvbE9fM09TNGUzQklsX0V6N2o2dHV0aGVwMGswLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3Mi8xMkZHMnU2NjBXV3o5 Mm1sLVZ6TExmUlpZVDAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI AwYAJApAkBAwDQYJKoZIhvcNAQELBQADggEBAEatWS9dujZGBVUjNaKvYbxns3iT 1+39kXb6gllhLolv606D3ORbbfKXGi2ajC1ca1a6uhKCHMcl2KNrmJBOKIipcmST A2cka/5w4c63W9CvNmwFwNAjt0qXxwtEWEbA9XsKdVgB7NAp2wB4E2VwQbRGuMeQ u0oO4qcIpFOF2Bkd166oLJlY2oyLFdNgh1NjFnvUnbPHcvsZLkmU2PKlVwFjWxxE 5tefuxquTg56TPjj5pBDq61X5kcvUnJe2vKOkAtkUi+FZ00AnrFxirijjgj8Df/s UijNdyvV+trx9Mt+az/mibL6LA3fbxhi7VWaQKuFbz91O9ZnWg2wxk/dMjQ= -----END CERTIFICATE-----Generated at Fri Jun 20 18:17:00 2025 by rpki-client