$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/2cJI6HiE7dX2nW-cwYl1zeJqSJU.roa File: 2cJI6HiE7dX2nW-cwYl1zeJqSJU.roa (raw, json) Hash identifier: yyRVh4Vh071KA6CyIasJ7F+FKA2Ceg72r94rh79qDQ0= Subject key identifier: D9:C2:48:E8:78:84:ED:D5:F6:9D:6F:9C:C1:89:75:CD:E2:6A:48:95 Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Certificate serial: CB Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/2cJI6HiE7dX2nW-cwYl1zeJqSJU.roa Signing time: Fri 06 Jun 2025 02:31:09 +0000 ROA not before: Fri 06 Jun 2025 02:31:09 +0000 ROA not after: Wed 27 May 2026 07:38:41 +0000 asID: 24444 IP address blocks: 240a:40c2:4010::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:11:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 203 (0xcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Validity Not Before: Jun 6 02:31:09 2025 GMT Not After : May 27 07:38:41 2026 GMT Subject: CN=D9C248E87884EDD5F69D6F9CC18975CDE26A4895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3c:1e:8f:da:f4:5d:0f:d1:73:78:94:1e:9d: ff:e3:f4:18:7b:c1:20:0b:97:8f:12:86:04:a3:26: ee:a2:67:99:9d:ea:d7:98:48:58:87:d7:08:73:79: a4:67:3d:3f:b9:54:03:00:a3:f0:26:33:d1:3d:86: 46:46:57:bf:47:8e:2b:89:7c:9b:7c:60:d1:40:61: 9a:b6:8e:55:88:da:63:5e:09:99:6b:ea:ff:81:40: 66:85:54:2c:00:89:dd:14:b8:ca:83:cf:d3:4f:db: 94:33:6a:5e:ec:40:4e:5c:f2:08:1a:8b:66:11:31: 62:f4:bd:a3:9d:de:d8:a5:39:22:d7:ba:56:ce:68: ef:2c:a3:dc:64:30:22:84:9b:ee:19:ce:00:64:33: c7:c9:80:76:4d:59:85:82:57:97:90:3c:99:fb:d5: f5:31:6d:91:7e:ee:e2:c0:19:2b:96:fb:63:27:43: dc:8e:57:fb:4f:e4:f3:67:6a:42:8c:b7:98:41:ca: 72:d8:2f:b1:d7:f1:fc:a4:4d:f6:e8:50:12:9b:54: 4f:f3:ff:88:93:78:04:ca:c4:01:04:3d:c3:63:1b: fe:8d:b0:1a:14:88:0f:dc:a4:ef:69:df:6b:1c:c3: f5:0e:8f:1f:36:cd:65:cc:f0:1b:c3:75:e2:36:82: 88:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:C2:48:E8:78:84:ED:D5:F6:9D:6F:9C:C1:89:75:CD:E2:6A:48:95 X509v3 Authority Key Identifier: keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/2cJI6HiE7dX2nW-cwYl1zeJqSJU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 240a:40c2:4010::/44 Signature Algorithm: sha256WithRSAEncryption 91:2f:98:f2:78:dd:76:39:c5:9d:b1:6c:83:90:0b:c2:39:3c: 82:11:a0:fe:21:d3:e5:23:0b:ba:3b:8f:44:09:cd:1a:9e:d0: 9a:ab:57:be:c7:56:74:44:cd:fc:4f:8b:f2:11:7a:2b:5c:b7: ad:0b:70:b1:42:36:08:cf:78:92:02:37:8b:a9:e8:af:88:a7: c0:e2:7d:f9:da:e1:45:c9:bf:d4:a8:85:f2:b2:25:25:7a:e9: 63:a0:70:d2:0b:78:ec:6c:8c:20:85:7f:01:fa:87:cb:1d:86: fd:a9:e4:be:e6:55:00:51:b8:c7:31:b0:60:a1:b1:cd:3e:89: ac:81:41:aa:16:d8:6f:4f:31:95:b3:00:37:55:51:8d:1c:1b: 1a:77:52:63:39:1b:5b:f3:5f:04:aa:09:9c:a7:87:82:16:59: 06:f4:d4:f1:66:a8:95:a0:b0:2d:98:64:46:c7:db:f4:27:2d: e8:77:b9:1d:09:55:fd:32:b5:44:b7:f1:6a:04:c6:01:a4:a3: b6:5d:3b:4c:2d:11:1e:41:b7:e2:0e:16:0d:12:ec:8a:bf:03: af:7a:81:a6:1c:8d:39:ee:2c:b6:90:ff:de:db:65:40:dc:35: 8b:3a:fe:2d:23:0a:73:2e:65:7f:60:c5:52:90:83:ed:28:5a: 34:2a:95:aa -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICAMswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTRF RkY3MzkyRTFFREMxMjI1RkM0Q0ZCOEZBQjZFQjYxN0E5RDI0RDAeFw0yNTA2MDYw MjMxMDlaFw0yNjA1MjcwNzM4NDFaMDMxMTAvBgNVBAMTKEQ5QzI0OEU4Nzg4NEVE RDVGNjlENkY5Q0MxODk3NUNERTI2QTQ4OTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCiPB6P2vRdD9FzeJQenf/j9Bh7wSALl48ShgSjJu6iZ5md6teY SFiH1whzeaRnPT+5VAMAo/AmM9E9hkZGV79HjiuJfJt8YNFAYZq2jlWI2mNeCZlr 6v+BQGaFVCwAid0UuMqDz9NP25Qzal7sQE5c8ggai2YRMWL0vaOd3tilOSLXulbO aO8so9xkMCKEm+4ZzgBkM8fJgHZNWYWCV5eQPJn71fUxbZF+7uLAGSuW+2MnQ9yO V/tP5PNnakKMt5hBynLYL7HX8fykTfboUBKbVE/z/4iTeATKxAEEPcNjG/6NsBoU iA/cpO9p32scw/UOjx82zWXM8BvDdeI2gojdAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQU2cJI6HiE7dX2nW+cwYl1zeJqSJUwHwYDVR0jBBgwFoAUlO/3OS4e3BIl/Ez7 j6tuthep0k0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3 Mi9sT18zT1M0ZTNCSWxfRXo3ajZ0dXRoZXAwazAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2xPXzNPUzRlM0JJbF9FejdqNnR1dGhlcDBrMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2NzIvMmNKSTZIaUU3ZFgy blctY3dZbDF6ZUpxU0pVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHBCQKQMJAEDANBgkqhkiG9w0BAQsFAAOCAQEAkS+Y8njddjnFnbFsg5ALwjk8 ghGg/iHT5SMLujuPRAnNGp7QmqtXvsdWdETN/E+L8hF6K1y3rQtwsUI2CM94kgI3 i6nor4inwOJ9+drhRcm/1KiF8rIlJXrpY6Bw0gt47GyMIIV/AfqHyx2G/ankvuZV AFG4xzGwYKGxzT6JrIFBqhbYb08xlbMAN1VRjRwbGndSYzkbW/NfBKoJnKeHghZZ BvTU8WaolaCwLZhkRsfb9Cct6He5HQlV/TK1RLfxagTGAaSjtl07TC0RHkG34g4W DRLsir8Dr3qBphyNOe4stpD/3ttlQNw1izr+LSMKcy5lf2DFUpCD7ShaNCqVqg== -----END CERTIFICATE-----Generated at Sun Jun 22 00:31:52 2025 by rpki-client