$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/1NRLM4kpgAdltlc50A1CU2GWUDs.roa File: 1NRLM4kpgAdltlc50A1CU2GWUDs.roa (raw, json) Hash identifier: plH2/FcKvMRUj0CXEaGr5MiGA4cfpQjpCRmp1UFbZRc= Subject key identifier: D4:D4:4B:33:89:29:80:07:65:B6:57:39:D0:0D:42:53:61:96:50:3B Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Certificate serial: 1A Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/1NRLM4kpgAdltlc50A1CU2GWUDs.roa Signing time: Tue 27 May 2025 08:11:32 +0000 ROA not before: Tue 27 May 2025 08:11:31 +0000 ROA not after: Wed 27 May 2026 07:38:41 +0000 asID: 56048 IP address blocks: 240a:4090:2041::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 07:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Validity Not Before: May 27 08:11:31 2025 GMT Not After : May 27 07:38:41 2026 GMT Subject: CN=D4D44B338929800765B65739D00D42536196503B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:9e:6e:71:14:9e:81:00:33:87:95:28:69:8e: dc:21:f3:a0:2d:1c:3d:09:96:3a:ad:f6:e3:55:44: 47:32:0c:94:ee:b6:59:c3:b4:bb:04:d5:89:59:ef: c7:9a:60:72:ee:cf:e3:f3:05:f7:c1:55:e6:c6:bb: 26:6b:ba:23:bc:92:d5:b3:f5:ba:0c:18:f6:f7:cc: eb:cb:09:c3:4b:1a:36:c0:2c:8c:7a:6b:c8:df:4b: b4:4d:a1:2c:87:84:47:41:5a:c9:42:06:81:00:24: b8:d3:d9:12:e8:7c:72:17:a6:40:70:6b:7b:ed:d9: 90:a7:91:be:e1:7a:95:32:6d:14:92:20:91:7f:7f: 8f:c2:40:a5:6c:23:3d:6f:f3:a4:26:57:de:0d:50: e5:7b:50:4c:08:69:79:65:10:0d:b4:93:47:23:33: 8d:2c:84:80:38:5e:4e:b8:a3:08:4e:ee:22:83:18: c6:6d:46:20:52:fd:73:42:12:87:80:0f:e1:ff:e2: 18:c2:aa:db:07:b4:70:8d:19:e1:2c:0b:b2:28:e4: 58:97:6a:71:d2:91:8e:45:46:38:49:1a:2c:03:c1: f9:3a:df:63:83:1c:b1:e4:5a:44:ac:d2:a4:d8:2d: 9c:b1:23:2e:84:b2:b4:55:c4:ab:63:ea:49:e9:4b: 2a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D4:4B:33:89:29:80:07:65:B6:57:39:D0:0D:42:53:61:96:50:3B X509v3 Authority Key Identifier: keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/1NRLM4kpgAdltlc50A1CU2GWUDs.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 240a:4090:2041::/48 Signature Algorithm: sha256WithRSAEncryption 26:d5:3d:7b:d0:38:b5:b1:33:7b:2b:cf:bc:dc:ff:76:5d:ef: 66:bb:a5:9d:5a:61:f6:1c:f1:f1:fc:f4:1a:c6:a0:c2:7e:7a: 97:90:7e:af:37:93:66:d0:20:0f:c4:e6:07:fb:7f:ff:b3:e4: 33:b8:33:90:5b:d2:29:30:ee:c1:6d:68:db:e3:02:5d:7c:fa: 72:73:38:a4:8c:e4:83:e7:b3:59:3c:85:b6:2a:79:d2:4d:56: d3:0c:93:6b:ca:58:c7:fe:95:07:f8:a1:b3:b8:c2:3d:a8:82: 92:c5:1c:b5:51:ea:e7:85:5c:20:f2:00:71:37:ca:21:b0:7e: f0:be:83:9a:bb:13:63:50:a4:f9:88:b6:70:38:c4:cd:e1:8f: a7:77:f6:d7:ec:c1:46:90:fd:bf:f8:f7:a6:63:72:f3:7a:e4: 6a:e4:d3:37:17:18:57:dd:a4:ee:c8:34:af:bf:dd:1c:2d:e2: 05:75:b0:1e:22:dc:27:44:70:97:31:d5:fb:f1:0e:26:63:cb: 8c:e5:89:65:75:a7:8e:3a:5a:ff:e8:ed:54:4c:03:1e:ce:da: 80:dd:92:fc:4b:c5:4f:80:0c:d6:cd:67:8a:ea:6f:6e:d4:1b: 89:09:67:24:48:52:41:51:dc:cc:c2:3e:60:2b:ba:db:00:da: f4:02:95:8f -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIBGjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NEVG RjczOTJFMUVEQzEyMjVGQzRDRkI4RkFCNkVCNjE3QTlEMjREMB4XDTI1MDUyNzA4 MTEzMVoXDTI2MDUyNzA3Mzg0MVowMzExMC8GA1UEAxMoRDRENDRCMzM4OTI5ODAw NzY1QjY1NzM5RDAwRDQyNTM2MTk2NTAzQjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOCebnEUnoEAM4eVKGmO3CHzoC0cPQmWOq3241VERzIMlO62WcO0 uwTViVnvx5pgcu7P4/MF98FV5sa7Jmu6I7yS1bP1ugwY9vfM68sJw0saNsAsjHpr yN9LtE2hLIeER0FayUIGgQAkuNPZEuh8chemQHBre+3ZkKeRvuF6lTJtFJIgkX9/ j8JApWwjPW/zpCZX3g1Q5XtQTAhpeWUQDbSTRyMzjSyEgDheTrijCE7uIoMYxm1G IFL9c0ISh4AP4f/iGMKq2we0cI0Z4SwLsijkWJdqcdKRjkVGOEkaLAPB+TrfY4Mc seRaRKzSpNgtnLEjLoSytFXEq2PqSelLKhECAwEAAaOCAfYwggHyMB0GA1UdDgQW BBTU1EsziSmAB2W2VznQDUJTYZZQOzAfBgNVHSMEGDAWgBSU7/c5Lh7cEiX8TPuP q262F6nSTTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNjcy L2xPXzNPUzRlM0JJbF9FejdqNnR1dGhlcDBrMC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvbE9fM09TNGUzQklsX0V6N2o2dHV0aGVwMGswLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3Mi8xTlJMTTRrcGdBZGx0 bGM1MEExQ1UyR1dVRHMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcAJApAkCBBMA0GCSqGSIb3DQEBCwUAA4IBAQAm1T170Di1sTN7K8+83P92Xe9m u6WdWmH2HPHx/PQaxqDCfnqXkH6vN5Nm0CAPxOYH+3//s+QzuDOQW9IpMO7BbWjb 4wJdfPpyczikjOSD57NZPIW2KnnSTVbTDJNryljH/pUH+KGzuMI9qIKSxRy1Uern hVwg8gBxN8ohsH7wvoOauxNjUKT5iLZwOMTN4Y+nd/bX7MFGkP2/+PemY3LzeuRq 5NM3FxhX3aTuyDSvv90cLeIFdbAeItwnRHCXMdX78Q4mY8uM5YlldaeOOlr/6O1U TAMeztqA3ZL8S8VPgAzWzWeK6m9u1BuJCWckSFJBUdzMwj5gK7rbANr0ApWP -----END CERTIFICATE-----Generated at Sat Jun 21 07:10:32 2025 by rpki-client