$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/4F62l6wbZ8RAx9KkvXpFOvIKv4g.roa File: 4F62l6wbZ8RAx9KkvXpFOvIKv4g.roa (raw, json) Hash identifier: zThDlVnBnVusVYbnCulXMgX2R5k6+0L4t4duQXZ7ycQ= Subject key identifier: E0:5E:B6:97:AC:1B:67:C4:40:C7:D2:A4:BD:7A:45:3A:F2:0A:BF:88 Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Certificate serial: 1E Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/4F62l6wbZ8RAx9KkvXpFOvIKv4g.roa Signing time: Tue 27 May 2025 08:19:34 +0000 ROA not before: Tue 27 May 2025 08:19:34 +0000 ROA not after: Wed 27 May 2026 07:38:41 +0000 asID: 9808 IP address blocks: 240a:4021:883a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 07:11:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Validity Not Before: May 27 08:19:34 2025 GMT Not After : May 27 07:38:41 2026 GMT Subject: CN=E05EB697AC1B67C440C7D2A4BD7A453AF20ABF88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:97:64:53:47:b0:e4:91:2e:cc:df:6a:c6:f0: 40:89:41:9f:cd:08:91:ed:e7:63:c9:ad:06:69:7c: ad:8e:e6:d4:53:37:4c:d2:5d:18:8f:e2:04:c1:96: 41:f3:3b:40:af:f5:f3:c4:cb:33:e0:52:6b:2d:f4: 21:93:8b:3d:b9:c6:b5:88:85:38:79:23:55:6d:55: 47:ed:8a:0a:23:85:a4:7d:7f:a7:53:58:65:38:9b: 8b:47:c9:a0:e2:49:6c:08:8b:7f:f1:03:74:e8:62: 6c:7c:0d:5e:54:af:32:b4:3a:b5:20:de:3a:7e:11: a3:c3:52:a0:7b:75:31:e3:00:86:51:b1:ec:fe:01: 9b:c7:fb:f8:18:0b:3a:1e:a2:45:43:05:cd:d7:04: da:80:61:cd:77:0a:a1:59:87:7f:e9:47:b6:df:63: fa:30:ad:4a:8f:31:e0:0a:d6:34:fa:ff:59:f4:0f: 3a:b0:e3:c4:86:7f:44:e5:ff:02:4d:a8:01:4c:41: de:ab:fc:cd:39:78:9e:e6:b1:89:24:53:73:16:8a: 51:ed:41:69:51:4b:98:e4:1b:79:bd:18:76:45:55: 32:33:22:25:c7:b8:52:e2:06:22:ba:1a:37:f8:3e: 12:44:49:2d:21:b2:70:7a:b7:de:05:20:6e:5d:bc: ab:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:5E:B6:97:AC:1B:67:C4:40:C7:D2:A4:BD:7A:45:3A:F2:0A:BF:88 X509v3 Authority Key Identifier: keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/4F62l6wbZ8RAx9KkvXpFOvIKv4g.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 240a:4021:883a::/48 Signature Algorithm: sha256WithRSAEncryption b3:76:b3:d5:ba:a7:41:c9:f7:15:d9:b2:e6:ef:42:dc:36:e2: 65:33:91:bc:c4:5c:3c:ed:47:c9:4f:98:e1:8d:c4:80:1e:27: 81:ac:a0:25:f9:dc:0d:78:cc:0f:92:ba:e7:61:62:32:04:84: cf:6c:b7:11:fc:6b:e0:21:9b:5d:cd:73:e9:33:e1:34:4b:63: 2d:0b:b2:99:f8:37:b0:5a:99:75:c2:0a:9a:15:a9:97:54:0b: 59:5e:3e:ce:bc:35:6c:af:fa:e2:4e:a7:ce:c2:17:05:dd:2d: 53:fb:42:be:74:cc:ca:51:53:fa:84:50:e3:46:98:a7:2b:fa: 97:d9:d8:7a:45:8c:c0:c7:60:11:6e:62:38:f9:cf:a0:54:b9: 3b:ae:cf:2d:e9:86:85:d8:d8:36:5f:8f:1e:44:6b:42:a2:d2: da:5a:a2:d1:33:bd:86:0e:0a:44:b2:5f:5d:86:c3:5c:7f:0f: fd:0a:58:7b:68:b0:29:43:47:9f:0b:d4:e8:1a:73:53:0f:ed: 47:f6:b8:80:a4:b7:01:d4:1f:da:d8:94:24:4a:a5:cf:56:b0: 06:b8:b4:28:27:c6:55:7c:98:81:8b:88:2d:b1:87:9d:4f:d8: ed:d1:53:40:2b:e2:28:f5:0c:89:ab:73:b4:31:e1:b2:6f:d2: de:34:cc:6d -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIBHjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NEVG RjczOTJFMUVEQzEyMjVGQzRDRkI4RkFCNkVCNjE3QTlEMjREMB4XDTI1MDUyNzA4 MTkzNFoXDTI2MDUyNzA3Mzg0MVowMzExMC8GA1UEAxMoRTA1RUI2OTdBQzFCNjdD NDQwQzdEMkE0QkQ3QTQ1M0FGMjBBQkY4ODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMGXZFNHsOSRLszfasbwQIlBn80Ike3nY8mtBml8rY7m1FM3TNJd GI/iBMGWQfM7QK/188TLM+BSay30IZOLPbnGtYiFOHkjVW1VR+2KCiOFpH1/p1NY ZTibi0fJoOJJbAiLf/EDdOhibHwNXlSvMrQ6tSDeOn4Ro8NSoHt1MeMAhlGx7P4B m8f7+BgLOh6iRUMFzdcE2oBhzXcKoVmHf+lHtt9j+jCtSo8x4ArWNPr/WfQPOrDj xIZ/ROX/Ak2oAUxB3qv8zTl4nuaxiSRTcxaKUe1BaVFLmOQbeb0YdkVVMjMiJce4 UuIGIroaN/g+EkRJLSGycHq33gUgbl28qwECAwEAAaOCAfYwggHyMB0GA1UdDgQW BBTgXraXrBtnxEDH0qS9ekU68gq/iDAfBgNVHSMEGDAWgBSU7/c5Lh7cEiX8TPuP q262F6nSTTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNjcy L2xPXzNPUzRlM0JJbF9FejdqNnR1dGhlcDBrMC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvbE9fM09TNGUzQklsX0V6N2o2dHV0aGVwMGswLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3Mi80RjYybDZ3Ylo4UkF4 OUtrdlhwRk92SUt2NGcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcAJApAIYg6MA0GCSqGSIb3DQEBCwUAA4IBAQCzdrPVuqdByfcV2bLm70LcNuJl M5G8xFw87UfJT5jhjcSAHieBrKAl+dwNeMwPkrrnYWIyBITPbLcR/GvgIZtdzXPp M+E0S2MtC7KZ+DewWpl1wgqaFamXVAtZXj7OvDVsr/riTqfOwhcF3S1T+0K+dMzK UVP6hFDjRpinK/qX2dh6RYzAx2ARbmI4+c+gVLk7rs8t6YaF2Ng2X48eRGtCotLa WqLRM72GDgpEsl9dhsNcfw/9Clh7aLApQ0efC9ToGnNTD+1H9riApLcB1B/a2JQk SqXPVrAGuLQoJ8ZVfJiBi4gtsYedT9jt0VNAK+Io9QyJq3O0MeGyb9LeNMxt -----END CERTIFICATE-----Generated at Sun Jun 22 06:28:33 2025 by rpki-client