$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/M3cxNIt0rXAVQ1JrVVOSlPeKyuA.roa File: M3cxNIt0rXAVQ1JrVVOSlPeKyuA.roa (raw, json) Hash identifier: ugXWO/gCWVaWG43VkvnNLfmX8KdnOkhRmXUfuyS6H8E= Subject key identifier: 33:77:31:34:8B:74:AD:70:15:43:52:6B:55:53:92:94:F7:8A:CA:E0 Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Certificate serial: 28 Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/M3cxNIt0rXAVQ1JrVVOSlPeKyuA.roa Signing time: Tue 27 May 2025 08:19:37 +0000 ROA not before: Tue 27 May 2025 08:19:37 +0000 ROA not after: Wed 27 May 2026 07:38:41 +0000 asID: 56042 IP address blocks: 240a:4290::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 18:41:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Validity Not Before: May 27 08:19:37 2025 GMT Not After : May 27 07:38:41 2026 GMT Subject: CN=337731348B74AD701543526B55539294F78ACAE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:62:46:94:36:5b:88:2c:74:e0:5b:b5:46:35: 68:8b:c1:fa:c8:59:98:bc:4e:34:95:be:b2:ef:57: 88:4e:5d:6e:6c:4d:bd:9f:9a:28:c5:b3:f3:61:c1: 92:ac:b4:5f:bb:b1:f0:b5:a1:c0:37:ae:39:bb:20: 6f:9a:87:62:72:ce:11:a4:7c:80:4c:3a:af:49:f6: 40:62:e4:28:c5:9a:d9:32:88:80:33:80:5d:70:1b: c1:6b:f6:9c:8b:ef:1a:57:df:24:6a:7e:48:40:1f: cf:6f:2a:64:47:dd:95:e2:5b:92:ba:dd:f6:d4:e3: 6f:27:dd:10:90:78:57:73:20:00:31:fc:63:6b:40: 90:ce:6a:f2:9b:f8:18:45:e6:81:ee:52:cd:2a:81: 70:01:78:4f:52:bf:c3:d5:16:3a:07:db:ff:9d:2c: 5e:ea:b6:f6:f6:99:6d:55:7f:8b:af:09:cb:f7:e8: 24:61:61:1d:51:7a:40:fd:75:76:98:6f:33:c9:85: 4b:b3:1e:0b:55:64:4b:62:d9:3a:88:ca:cd:7f:e6: 6c:08:1d:ff:d9:07:d8:97:1f:7e:3d:ff:37:a5:03: 04:b7:9b:2f:32:a7:32:21:e9:f8:15:a7:b7:6c:1d: 31:f5:11:93:61:37:8f:c8:0b:08:21:b7:bd:00:61: af:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:77:31:34:8B:74:AD:70:15:43:52:6B:55:53:92:94:F7:8A:CA:E0 X509v3 Authority Key Identifier: keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/M3cxNIt0rXAVQ1JrVVOSlPeKyuA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 240a:4290::/31 Signature Algorithm: sha256WithRSAEncryption 25:46:2a:25:ec:7c:2b:25:35:74:7a:8a:dc:fa:a1:e0:a4:a4: 3b:a0:33:ec:d8:17:da:dd:ce:c0:06:8f:ce:31:7a:63:e9:f2: 0e:02:82:01:36:fe:fb:db:68:b5:a1:24:a6:6b:12:0d:f0:8d: 0a:0c:5a:01:ed:a2:0d:86:bd:50:10:1e:af:8e:2b:55:1c:3d: b1:4c:a1:e8:f6:b1:ea:bb:92:14:07:92:5f:5d:bc:aa:49:9a: fd:50:a0:ae:4c:cb:fb:f1:b6:2f:4e:68:56:c9:16:49:5b:19: 45:66:29:4e:d1:9d:0b:51:ec:70:ca:9c:a5:aa:19:2c:ab:2e: 66:f3:9a:18:0a:8f:67:1d:b7:d0:44:d3:2a:e3:ee:af:51:ec: 1c:f5:b2:1f:dc:a5:76:88:0b:78:ed:96:42:7d:ea:55:67:db: 21:f7:93:8f:e4:42:92:e8:a1:f6:cf:57:11:95:24:79:a1:14: d9:c9:15:b5:8d:67:bb:9b:24:32:5b:d8:26:42:d6:05:ed:23: 24:2f:fa:f3:f3:bb:7d:04:66:67:5b:6c:c7:09:ae:a4:42:86: b1:51:16:33:34:22:22:cb:26:a3:f5:da:54:82:79:12:14:8c: 9e:25:36:5c:2b:c7:d9:ac:06:16:fe:24:0a:f4:72:5e:40:4d: 24:b7:8b:41 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgIBKDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NEVG RjczOTJFMUVEQzEyMjVGQzRDRkI4RkFCNkVCNjE3QTlEMjREMB4XDTI1MDUyNzA4 MTkzN1oXDTI2MDUyNzA3Mzg0MVowMzExMC8GA1UEAxMoMzM3NzMxMzQ4Qjc0QUQ3 MDE1NDM1MjZCNTU1MzkyOTRGNzhBQ0FFMDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANpiRpQ2W4gsdOBbtUY1aIvB+shZmLxONJW+su9XiE5dbmxNvZ+a KMWz82HBkqy0X7ux8LWhwDeuObsgb5qHYnLOEaR8gEw6r0n2QGLkKMWa2TKIgDOA XXAbwWv2nIvvGlffJGp+SEAfz28qZEfdleJbkrrd9tTjbyfdEJB4V3MgADH8Y2tA kM5q8pv4GEXmge5SzSqBcAF4T1K/w9UWOgfb/50sXuq29vaZbVV/i68Jy/foJGFh HVF6QP11dphvM8mFS7MeC1VkS2LZOojKzX/mbAgd/9kH2Jcffj3/N6UDBLebLzKn MiHp+BWnt2wdMfURk2E3j8gLCCG3vQBhr48CAwEAAaOCAfQwggHwMB0GA1UdDgQW BBQzdzE0i3StcBVDUmtVU5KU94rK4DAfBgNVHSMEGDAWgBSU7/c5Lh7cEiX8TPuP q262F6nSTTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNjcy L2xPXzNPUzRlM0JJbF9FejdqNnR1dGhlcDBrMC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvbE9fM09TNGUzQklsX0V6N2o2dHV0aGVwMGswLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3Mi9NM2N4Tkl0MHJYQVZR MUpyVlZPU2xQZUt5dUEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH AwUBJApCkDANBgkqhkiG9w0BAQsFAAOCAQEAJUYqJex8KyU1dHqK3Pqh4KSkO6Az 7NgX2t3OwAaPzjF6Y+nyDgKCATb++9totaEkpmsSDfCNCgxaAe2iDYa9UBAer44r VRw9sUyh6Pax6ruSFAeSX128qkma/VCgrkzL+/G2L05oVskWSVsZRWYpTtGdC1Hs cMqcpaoZLKsuZvOaGAqPZx230ETTKuPur1HsHPWyH9yldogLeO2WQn3qVWfbIfeT j+RCkuih9s9XEZUkeaEU2ckVtY1nu5skMlvYJkLWBe0jJC/68/O7fQRmZ1tsxwmu pEKGsVEWMzQiIssmo/XaVIJ5EhSMniU2XCvH2awGFv4kCvRyXkBNJLeLQQ== -----END CERTIFICATE-----Generated at Wed Nov 5 18:36:02 2025 by rpki-client