$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/Bl3kelG_FWQCYccgHJF5fvnriOk.roa File: Bl3kelG_FWQCYccgHJF5fvnriOk.roa (raw, json) Hash identifier: z+kqdcB2zFf8A8Q9HV3e8vh8PeoGxJIuYO6Lo1To+Gs= Subject key identifier: 06:5D:E4:7A:51:BF:15:64:02:61:C7:20:1C:91:79:7E:F9:EB:88:E9 Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Certificate serial: 01A1 Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/Bl3kelG_FWQCYccgHJF5fvnriOk.roa Signing time: Thu 10 Jul 2025 06:35:38 +0000 ROA not before: Thu 10 Jul 2025 06:35:38 +0000 ROA not after: Wed 27 May 2026 07:38:41 +0000 asID: 56048 IP address blocks: 240a:4090:2061::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 13:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 417 (0x1a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Validity Not Before: Jul 10 06:35:38 2025 GMT Not After : May 27 07:38:41 2026 GMT Subject: CN=065DE47A51BF15640261C7201C91797EF9EB88E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d1:f6:53:bf:0c:b9:33:3a:9c:95:47:cc:6f: 59:0b:0b:4d:bd:6e:3c:00:3c:59:74:62:d3:5a:f0: 13:78:8e:b6:9c:26:ae:d6:08:be:e6:94:d0:fe:7e: 90:cc:14:43:a2:36:d3:98:3a:31:44:f8:a3:7c:2e: 70:6e:7a:ae:de:29:c9:ff:2b:27:33:0f:0b:2d:c2: db:5b:f4:0a:3d:49:32:4e:47:30:c0:f0:df:9e:fe: 37:ff:65:e9:53:75:0b:62:a7:95:06:da:d0:44:2a: d7:cd:d7:84:63:b0:a9:46:70:39:45:47:99:9d:e2: 2e:66:e9:f1:6c:da:06:b2:85:1f:da:16:0e:6a:cd: c7:44:b9:68:98:58:d8:7c:62:73:68:78:b7:58:a9: c9:f8:55:eb:c5:47:8b:58:ce:35:13:2c:d4:0c:fa: d9:d6:9c:a7:cb:33:8b:ac:99:71:43:36:c0:1c:02: 0e:4e:5d:36:6c:b3:ad:67:27:35:85:25:99:04:eb: e3:60:b6:70:b4:97:24:51:fb:c0:22:4a:da:65:06: 61:a2:05:f2:93:6f:26:8e:18:0b:fa:b7:6c:54:08: 5d:b5:c5:37:7f:26:95:f8:28:b8:84:7c:3b:20:e3: 14:20:0d:8a:72:d7:d0:c0:fe:e9:fc:22:c6:b5:28: d3:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:5D:E4:7A:51:BF:15:64:02:61:C7:20:1C:91:79:7E:F9:EB:88:E9 X509v3 Authority Key Identifier: keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/Bl3kelG_FWQCYccgHJF5fvnriOk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 240a:4090:2061::/48 Signature Algorithm: sha256WithRSAEncryption 79:f7:a5:bc:06:18:31:64:45:85:96:59:5f:6c:c2:5e:46:56: be:28:cd:1b:6b:5c:58:a5:66:18:a4:73:7b:78:30:33:14:94: c3:b9:e3:89:dc:a3:9f:65:63:91:28:07:14:0e:dc:6f:0d:a4: 37:af:fe:d9:5b:b2:66:fd:ad:5c:15:56:35:8c:1a:a6:fe:bb: 58:75:b8:ac:0a:ea:2e:c8:df:78:13:eb:29:e7:d6:28:cf:3f: 74:d9:a2:d6:c1:90:cd:3a:a6:80:bf:07:df:15:24:4f:ae:27: 24:f3:68:97:cf:0e:77:13:95:ac:29:8e:4a:6e:e4:5e:3c:0e: 05:f7:85:c4:03:bb:13:06:b4:cc:b1:e2:b5:1b:66:dc:ba:7c: 76:56:52:f4:5e:68:f1:ff:5f:92:77:eb:bb:38:f8:af:d1:ad: 0f:03:dd:d1:d1:9c:c2:da:59:55:d6:e8:3c:1a:39:dd:dd:e1: 9c:98:3f:a8:c4:83:47:05:cb:f5:83:0c:03:00:55:10:c7:9f: 0d:2d:49:28:de:c0:4e:89:65:58:a3:77:b4:ee:71:2a:21:78: 20:67:7a:f9:a8:6e:71:41:18:f1:90:fd:7e:91:93:4b:aa:2a: 6d:4a:87:9b:c1:87:02:d9:8e:29:05:82:36:13:11:f2:39:07: df:9e:54:0b -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTRF RkY3MzkyRTFFREMxMjI1RkM0Q0ZCOEZBQjZFQjYxN0E5RDI0RDAeFw0yNTA3MTAw NjM1MzhaFw0yNjA1MjcwNzM4NDFaMDMxMTAvBgNVBAMTKDA2NURFNDdBNTFCRjE1 NjQwMjYxQzcyMDFDOTE3OTdFRjlFQjg4RTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCu0fZTvwy5MzqclUfMb1kLC029bjwAPFl0YtNa8BN4jracJq7W CL7mlND+fpDMFEOiNtOYOjFE+KN8LnBueq7eKcn/KyczDwstwttb9Ao9STJORzDA 8N+e/jf/ZelTdQtip5UG2tBEKtfN14RjsKlGcDlFR5md4i5m6fFs2gayhR/aFg5q zcdEuWiYWNh8YnNoeLdYqcn4VevFR4tYzjUTLNQM+tnWnKfLM4usmXFDNsAcAg5O XTZss61nJzWFJZkE6+NgtnC0lyRR+8AiStplBmGiBfKTbyaOGAv6t2xUCF21xTd/ JpX4KLiEfDsg4xQgDYpy19DA/un8Isa1KNO/AgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUBl3kelG/FWQCYccgHJF5fvnriOkwHwYDVR0jBBgwFoAUlO/3OS4e3BIl/Ez7 j6tuthep0k0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3 Mi9sT18zT1M0ZTNCSWxfRXo3ajZ0dXRoZXAwazAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2xPXzNPUzRlM0JJbF9FejdqNnR1dGhlcDBrMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2NzIvQmwza2VsR19GV1FD WWNjZ0hKRjVmdm5yaU9rLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHACQKQJAgYTANBgkqhkiG9w0BAQsFAAOCAQEAefelvAYYMWRFhZZZX2zCXkZW vijNG2tcWKVmGKRze3gwMxSUw7njidyjn2VjkSgHFA7cbw2kN6/+2VuyZv2tXBVW NYwapv67WHW4rArqLsjfeBPrKefWKM8/dNmi1sGQzTqmgL8H3xUkT64nJPNol88O dxOVrCmOSm7kXjwOBfeFxAO7Ewa0zLHitRtm3Lp8dlZS9F5o8f9fknfruzj4r9Gt DwPd0dGcwtpZVdboPBo53d3hnJg/qMSDRwXL9YMMAwBVEMefDS1JKN7ATollWKN3 tO5xKiF4IGd6+ahucUEY8ZD9fpGTS6oqbUqHm8GHAtmOKQWCNhMR8jkH355UCw== -----END CERTIFICATE-----Generated at Thu Aug 14 11:12:08 2025 by rpki-client