$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/BIkMc74um78SwhA4viNhqCv6KVY.roa File: BIkMc74um78SwhA4viNhqCv6KVY.roa (raw, json) Hash identifier: zFIIeJPkutzpVnQzdFxIAjwc1NFTjBjXKWi3NyFeEUg= Subject key identifier: 04:89:0C:73:BE:2E:9B:BF:12:C2:10:38:BE:23:61:A8:2B:FA:29:56 Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Certificate serial: 2D Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/BIkMc74um78SwhA4viNhqCv6KVY.roa Signing time: Tue 27 May 2025 08:19:38 +0000 ROA not before: Tue 27 May 2025 08:19:38 +0000 ROA not after: Wed 27 May 2026 07:38:41 +0000 asID: 38019 IP address blocks: 240a:4286::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:43:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Validity Not Before: May 27 08:19:38 2025 GMT Not After : May 27 07:38:41 2026 GMT Subject: CN=04890C73BE2E9BBF12C21038BE2361A82BFA2956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:00:e8:7d:39:c6:04:09:f4:47:25:56:fb:17: f9:60:0c:43:63:24:52:92:ba:af:1b:08:94:4f:d0: da:f9:e6:36:74:ef:46:a4:69:21:98:51:db:9d:3c: 95:8b:27:4a:a9:da:87:e7:c1:8e:2d:fa:80:75:27: e6:09:bc:3d:e8:d0:ff:6e:f5:0d:dc:93:96:12:1a: bb:14:e8:34:44:2c:44:ce:a4:c2:44:df:76:8b:1f: d3:ae:f7:1e:26:fb:7f:07:6f:2e:a2:85:b2:1b:2f: 4b:2b:1e:88:72:64:6c:35:a3:c3:a1:b6:fe:5c:a2: e3:80:c4:32:94:1f:f8:9d:5f:69:8f:d3:3a:f9:5b: f3:73:1c:c7:39:27:32:54:26:de:5b:c4:99:df:18: c3:7c:52:82:cb:aa:7c:73:d4:46:73:b9:9a:ec:a9: a7:77:4b:08:b8:98:e2:b9:7b:b5:2f:44:4c:3b:dc: b0:74:07:56:aa:94:34:71:bf:59:46:04:6e:ec:14: 80:92:1a:78:56:ed:ec:c6:24:22:c0:56:0c:db:ae: ef:e1:70:f0:33:68:1f:2a:7a:2a:47:a8:ac:69:0d: 25:cd:39:fc:e4:7d:63:ff:9f:70:95:86:37:55:c6: 93:04:23:4b:4f:b8:e3:73:ef:7b:33:75:e5:3f:54: ef:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:89:0C:73:BE:2E:9B:BF:12:C2:10:38:BE:23:61:A8:2B:FA:29:56 X509v3 Authority Key Identifier: keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/BIkMc74um78SwhA4viNhqCv6KVY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 240a:4286::/31 Signature Algorithm: sha256WithRSAEncryption 1e:60:2f:e2:ae:73:8a:fe:c6:c0:2e:b7:e2:dd:b5:ec:2b:4c: b5:66:dc:58:d5:9c:bc:0f:8f:8e:12:95:5e:01:ad:c3:e1:fb: 20:54:ce:28:50:18:85:39:5f:5a:77:41:8c:5f:7b:1e:f1:91: fc:d8:33:5b:42:99:90:17:79:22:e3:c1:62:05:7d:d2:64:f3: 90:64:08:d7:3f:1f:ee:98:0f:10:37:c0:da:7d:04:f2:f7:4a: 22:e9:aa:f1:e9:08:2c:c1:6c:36:ff:9e:ab:49:3d:12:49:d7: c6:a5:15:70:3d:24:32:d6:cf:25:87:8b:49:7b:de:56:b9:01: 50:d8:90:70:d9:a6:9e:7d:e9:12:91:85:93:b7:4b:4e:18:f0: f1:05:4b:c4:6c:1e:14:c6:1a:73:49:21:53:5f:3e:6e:b2:80: f8:04:fb:31:1d:71:d2:30:51:96:ea:ff:fb:67:08:35:d8:e9: 58:0a:d6:1c:2d:3b:76:7c:a0:52:5f:31:8d:64:e7:b4:00:c6: ae:cf:c7:6f:4b:e9:da:9b:77:19:29:4b:34:7c:be:5b:ec:41: 68:bf:a7:a1:ef:2d:93:5e:5d:11:cd:6e:5b:66:4a:8f:f5:a4: c0:9e:13:eb:b9:4b:43:2a:c2:1b:f0:ea:4c:fa:0f:ed:f8:3f: ef:f4:92:f3 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgIBLTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NEVG RjczOTJFMUVEQzEyMjVGQzRDRkI4RkFCNkVCNjE3QTlEMjREMB4XDTI1MDUyNzA4 MTkzOFoXDTI2MDUyNzA3Mzg0MVowMzExMC8GA1UEAxMoMDQ4OTBDNzNCRTJFOUJC RjEyQzIxMDM4QkUyMzYxQTgyQkZBMjk1NjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALoA6H05xgQJ9EclVvsX+WAMQ2MkUpK6rxsIlE/Q2vnmNnTvRqRp IZhR2508lYsnSqnah+fBji36gHUn5gm8PejQ/271DdyTlhIauxToNEQsRM6kwkTf dosf0673Hib7fwdvLqKFshsvSyseiHJkbDWjw6G2/lyi44DEMpQf+J1faY/TOvlb 83McxzknMlQm3lvEmd8Yw3xSgsuqfHPURnO5muypp3dLCLiY4rl7tS9ETDvcsHQH VqqUNHG/WUYEbuwUgJIaeFbt7MYkIsBWDNuu7+Fw8DNoHyp6KkeorGkNJc05/OR9 Y/+fcJWGN1XGkwQjS0+443PvezN15T9U7/kCAwEAAaOCAfQwggHwMB0GA1UdDgQW BBQEiQxzvi6bvxLCEDi+I2GoK/opVjAfBgNVHSMEGDAWgBSU7/c5Lh7cEiX8TPuP q262F6nSTTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNjcy L2xPXzNPUzRlM0JJbF9FejdqNnR1dGhlcDBrMC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvbE9fM09TNGUzQklsX0V6N2o2dHV0aGVwMGswLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3Mi9CSWtNYzc0dW03OFN3 aEE0dmlOaHFDdjZLVlkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH AwUBJApChjANBgkqhkiG9w0BAQsFAAOCAQEAHmAv4q5ziv7GwC634t217CtMtWbc WNWcvA+PjhKVXgGtw+H7IFTOKFAYhTlfWndBjF97HvGR/NgzW0KZkBd5IuPBYgV9 0mTzkGQI1z8f7pgPEDfA2n0E8vdKIumq8ekILMFsNv+eq0k9EknXxqUVcD0kMtbP JYeLSXveVrkBUNiQcNmmnn3pEpGFk7dLThjw8QVLxGweFMYac0khU18+brKA+AT7 MR1x0jBRlur/+2cINdjpWArWHC07dnygUl8xjWTntADGrs/Hb0vp2pt3GSlLNHy+ W+xBaL+noe8tk15dEc1uW2ZKj/WkwJ4T67lLQyrCG/DqTPoP7fg/7/SS8w== -----END CERTIFICATE-----Generated at Sat Jun 21 14:41:34 2025 by rpki-client