$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/8pl3bU8deDrGc8FdC5TWUxlM3_w.roa File: 8pl3bU8deDrGc8FdC5TWUxlM3_w.roa (raw, json) Hash identifier: YiqWtBj2Qai/hukWx433tBRu7xd6H0ap+V2x0K9O4O4= Subject key identifier: F2:99:77:6D:4F:1D:78:3A:C6:73:C1:5D:0B:94:D6:53:19:4C:DF:FC Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Certificate serial: 20 Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/8pl3bU8deDrGc8FdC5TWUxlM3_w.roa Signing time: Tue 27 May 2025 08:19:34 +0000 ROA not before: Tue 27 May 2025 08:19:34 +0000 ROA not after: Wed 27 May 2026 07:38:41 +0000 asID: 9808 IP address blocks: 240a:42ac::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 12:11:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Validity Not Before: May 27 08:19:34 2025 GMT Not After : May 27 07:38:41 2026 GMT Subject: CN=F299776D4F1D783AC673C15D0B94D653194CDFFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9f:c7:bf:41:de:86:6d:c4:4b:ec:50:4b:72: 61:f3:c3:d9:e2:b3:a7:b1:58:be:9f:71:a6:d7:01: 3e:de:6f:e2:bd:43:4c:15:cb:73:80:56:1d:d3:0e: 8d:aa:10:ee:c0:02:23:76:46:66:17:61:5b:b6:cc: 65:dd:14:67:cc:39:41:32:4c:76:af:19:77:40:ce: dd:fb:69:45:d6:03:46:6c:87:fd:78:a6:0f:c3:62: 2a:ef:ee:14:19:79:3e:02:74:b6:2d:c9:3f:ad:a7: ec:7a:66:09:ae:a3:25:2c:cc:59:84:68:67:0a:3b: e7:57:23:52:7a:c7:e5:f5:18:96:5e:19:b1:36:df: c0:8e:23:57:69:1e:f6:2f:85:ba:dc:b3:a6:53:68: 4f:f1:df:a3:dd:82:b1:7b:9f:79:89:15:1b:1f:6d: e8:a0:c0:b1:6d:12:aa:9e:6d:20:08:90:91:fa:4d: bc:05:d4:af:bb:85:93:b7:cb:86:09:00:ff:91:e8: 55:32:cc:cc:cf:3e:61:38:98:cb:78:ad:cb:bc:c0: b7:4f:1a:4d:a6:a4:49:a2:95:74:5d:2a:03:9d:ec: b6:4e:fe:d9:93:4b:ba:4f:5b:64:32:c6:2b:07:c7: 60:0c:31:23:f8:d2:9b:29:a7:d1:e3:ed:9b:54:8d: 79:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:99:77:6D:4F:1D:78:3A:C6:73:C1:5D:0B:94:D6:53:19:4C:DF:FC X509v3 Authority Key Identifier: keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/8pl3bU8deDrGc8FdC5TWUxlM3_w.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 240a:42ac::/31 Signature Algorithm: sha256WithRSAEncryption a6:53:6a:eb:32:70:75:86:61:bd:86:ab:89:45:a6:d7:8f:02: ef:4a:1c:6b:f1:76:9c:82:ee:cc:4c:af:d1:0c:74:de:e8:8b: c5:7c:65:f2:cd:6d:b6:23:96:82:75:ba:e8:26:18:c0:b2:8b: 42:fd:01:02:83:57:8e:fb:ab:b3:db:f8:31:df:5d:a5:70:65: 3a:40:b8:87:77:80:e5:6a:00:09:7b:2f:2f:cd:2b:76:4c:42: 2b:65:d4:60:95:ec:9e:a9:49:53:ea:38:3d:9d:76:c1:27:06: da:d2:c6:a8:03:b6:d5:e4:f1:03:a9:ee:4d:99:c5:d1:50:c2: ba:9e:2e:9d:44:35:33:c2:d1:5a:01:ee:85:c6:b5:ed:8f:29: 52:1c:87:6d:36:8c:99:88:d8:09:9c:18:c2:4d:dd:d0:fc:79: 02:35:b7:f9:2d:69:53:a7:08:9e:2c:39:f5:56:18:06:f8:77: 22:ef:b5:fe:41:4c:82:93:56:2d:71:a9:b6:78:b9:53:b0:a0: c1:17:53:aa:35:6c:27:93:81:de:5d:dc:e1:74:82:4c:4e:0a: 65:1c:19:96:7e:2e:68:1c:67:d9:86:62:42:38:1a:83:07:1a: ab:74:74:f5:2a:53:2e:d3:82:0c:8e:00:e2:54:06:46:37:fc: c4:57:8b:c1 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgIBIDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NEVG RjczOTJFMUVEQzEyMjVGQzRDRkI4RkFCNkVCNjE3QTlEMjREMB4XDTI1MDUyNzA4 MTkzNFoXDTI2MDUyNzA3Mzg0MVowMzExMC8GA1UEAxMoRjI5OTc3NkQ0RjFENzgz QUM2NzNDMTVEMEI5NEQ2NTMxOTRDREZGQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL2fx79B3oZtxEvsUEtyYfPD2eKzp7FYvp9xptcBPt5v4r1DTBXL c4BWHdMOjaoQ7sACI3ZGZhdhW7bMZd0UZ8w5QTJMdq8Zd0DO3ftpRdYDRmyH/Xim D8NiKu/uFBl5PgJ0ti3JP62n7HpmCa6jJSzMWYRoZwo751cjUnrH5fUYll4ZsTbf wI4jV2ke9i+FutyzplNoT/Hfo92CsXufeYkVGx9t6KDAsW0Sqp5tIAiQkfpNvAXU r7uFk7fLhgkA/5HoVTLMzM8+YTiYy3ity7zAt08aTaakSaKVdF0qA53stk7+2ZNL uk9bZDLGKwfHYAwxI/jSmymn0ePtm1SNeR0CAwEAAaOCAfQwggHwMB0GA1UdDgQW BBTymXdtTx14OsZzwV0LlNZTGUzf/DAfBgNVHSMEGDAWgBSU7/c5Lh7cEiX8TPuP q262F6nSTTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNjcy L2xPXzNPUzRlM0JJbF9FejdqNnR1dGhlcDBrMC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvbE9fM09TNGUzQklsX0V6N2o2dHV0aGVwMGswLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3Mi84cGwzYlU4ZGVEckdj OEZkQzVUV1V4bE0zX3cucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH AwUBJApCrDANBgkqhkiG9w0BAQsFAAOCAQEAplNq6zJwdYZhvYariUWm148C70oc a/F2nILuzEyv0Qx03uiLxXxl8s1ttiOWgnW66CYYwLKLQv0BAoNXjvurs9v4Md9d pXBlOkC4h3eA5WoACXsvL80rdkxCK2XUYJXsnqlJU+o4PZ12wScG2tLGqAO21eTx A6nuTZnF0VDCup4unUQ1M8LRWgHuhca17Y8pUhyHbTaMmYjYCZwYwk3d0Px5AjW3 +S1pU6cIniw59VYYBvh3Iu+1/kFMgpNWLXGptni5U7CgwRdTqjVsJ5OB3l3c4XSC TE4KZRwZln4uaBxn2YZiQjgagwcaq3R09SpTLtOCDI4A4lQGRjf8xFeLwQ== -----END CERTIFICATE-----Generated at Sun Jun 22 10:33:22 2025 by rpki-client