$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/QRHswIE6i107KklP5tu8dOJh-PE.roa File: QRHswIE6i107KklP5tu8dOJh-PE.roa (raw, json) Hash identifier: Mes742gMj0FBBe/d9eKBOxRBcIkkEQYJFVPssIx2QdM= Subject key identifier: 41:11:EC:C0:81:3A:8B:5D:3B:2A:49:4F:E6:DB:BC:74:E2:61:F8:F1 Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Certificate serial: 1B Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/QRHswIE6i107KklP5tu8dOJh-PE.roa Signing time: Tue 27 May 2025 08:11:32 +0000 ROA not before: Tue 27 May 2025 08:11:32 +0000 ROA not after: Wed 27 May 2026 07:38:41 +0000 asID: 56048 IP address blocks: 240a:4090:2060::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 07:11:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Validity Not Before: May 27 08:11:32 2025 GMT Not After : May 27 07:38:41 2026 GMT Subject: CN=4111ECC0813A8B5D3B2A494FE6DBBC74E261F8F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:34:fd:cc:f8:1d:95:67:ea:73:52:a2:50:76: 29:a4:88:04:e5:4a:25:4f:05:11:6c:d3:9e:ec:f4: 9e:9d:e6:1a:39:9e:4a:ae:59:c9:45:d6:8e:1d:7a: 3c:d0:e2:c4:84:e9:02:37:75:3e:99:0a:9f:04:35: d8:5c:93:4a:b5:c9:0e:4a:87:2f:45:1a:28:92:0a: 64:f1:8d:87:d8:c9:4a:ab:3c:04:bc:70:12:1b:a9: 67:13:be:ff:64:42:63:60:4e:9d:93:2c:a6:e9:eb: 19:8a:4c:58:08:45:f9:fd:d7:02:ac:9f:cf:e5:1c: bf:74:1e:d4:51:7a:be:b4:95:67:39:2a:47:b1:f7: ff:40:e7:ec:90:3a:65:9d:4e:08:d2:f7:93:bf:99: 3f:48:44:47:e7:80:d2:c5:1f:36:69:5b:ab:5c:cc: 4f:2d:fb:26:f1:26:a4:56:00:ee:f0:6c:eb:30:40: cc:1d:75:91:41:20:71:da:18:96:94:32:10:62:29: 78:6a:b3:20:89:dc:43:e9:c9:83:9e:b3:78:df:79: 2c:90:99:1b:96:7c:32:b6:87:d9:c8:2c:16:af:7e: 6d:ff:85:f7:c5:3c:26:d5:85:42:6b:0a:24:c4:ff: 96:d6:6b:58:69:6a:c3:d2:51:f5:e5:24:ba:a6:a7: ba:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:11:EC:C0:81:3A:8B:5D:3B:2A:49:4F:E6:DB:BC:74:E2:61:F8:F1 X509v3 Authority Key Identifier: keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/QRHswIE6i107KklP5tu8dOJh-PE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 240a:4090:2060::/48 Signature Algorithm: sha256WithRSAEncryption 33:eb:68:66:b9:ae:dc:f0:cd:ec:7d:48:db:c4:7b:c9:e3:35: f6:9f:1b:19:ae:16:51:9a:d6:e6:f7:ad:b1:7e:fe:21:cb:f6: ba:02:ab:15:5c:cc:b7:3d:b8:4e:1a:b4:78:3d:fa:7a:cc:7a: e4:f1:f3:87:d7:a0:ce:a2:12:4e:bd:d3:3b:29:ab:24:14:eb: 1b:f8:18:19:f9:ec:71:fd:b7:2a:47:72:52:be:65:a1:fa:24: f5:30:48:53:7c:8c:ad:02:28:29:8d:62:5e:2f:1c:fb:b0:70: fd:44:7d:de:db:71:04:10:06:a0:49:a1:81:0f:3f:32:92:8f: b5:6f:c3:6d:86:1d:32:08:66:1a:6c:25:45:d1:dc:5b:0b:7a: 9f:a3:93:8e:18:3d:b5:54:ea:64:bd:8b:b9:2a:96:4d:9a:3d: 89:2e:f5:e9:d6:3b:fb:8b:39:9a:5a:af:9a:7c:22:ca:5c:cb: 9a:f7:d5:55:4a:76:d3:07:77:2f:bb:29:b6:90:55:8a:fd:85: 55:16:9d:fe:25:a7:55:0d:15:f5:62:4f:fe:07:97:87:8a:1a: 70:3d:20:7d:d9:5d:18:7b:f5:f9:d2:9c:00:32:ff:52:6f:f1: 37:6d:70:04:cf:98:ce:03:67:98:e6:67:5c:e9:f2:54:89:7d: 47:53:1b:4e -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIBGzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NEVG RjczOTJFMUVEQzEyMjVGQzRDRkI4RkFCNkVCNjE3QTlEMjREMB4XDTI1MDUyNzA4 MTEzMloXDTI2MDUyNzA3Mzg0MVowMzExMC8GA1UEAxMoNDExMUVDQzA4MTNBOEI1 RDNCMkE0OTRGRTZEQkJDNzRFMjYxRjhGMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANQ0/cz4HZVn6nNSolB2KaSIBOVKJU8FEWzTnuz0np3mGjmeSq5Z yUXWjh16PNDixITpAjd1PpkKnwQ12FyTSrXJDkqHL0UaKJIKZPGNh9jJSqs8BLxw EhupZxO+/2RCY2BOnZMspunrGYpMWAhF+f3XAqyfz+Ucv3Qe1FF6vrSVZzkqR7H3 /0Dn7JA6ZZ1OCNL3k7+ZP0hER+eA0sUfNmlbq1zMTy37JvEmpFYA7vBs6zBAzB11 kUEgcdoYlpQyEGIpeGqzIIncQ+nJg56zeN95LJCZG5Z8MraH2cgsFq9+bf+F98U8 JtWFQmsKJMT/ltZrWGlqw9JR9eUkuqanujcCAwEAAaOCAfYwggHyMB0GA1UdDgQW BBRBEezAgTqLXTsqSU/m27x04mH48TAfBgNVHSMEGDAWgBSU7/c5Lh7cEiX8TPuP q262F6nSTTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNjcy L2xPXzNPUzRlM0JJbF9FejdqNnR1dGhlcDBrMC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvbE9fM09TNGUzQklsX0V6N2o2dHV0aGVwMGswLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3Mi9RUkhzd0lFNmkxMDdL a2xQNXR1OGRPSmgtUEUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcAJApAkCBgMA0GCSqGSIb3DQEBCwUAA4IBAQAz62hmua7c8M3sfUjbxHvJ4zX2 nxsZrhZRmtbm962xfv4hy/a6AqsVXMy3PbhOGrR4Pfp6zHrk8fOH16DOohJOvdM7 KaskFOsb+BgZ+exx/bcqR3JSvmWh+iT1MEhTfIytAigpjWJeLxz7sHD9RH3e23EE EAagSaGBDz8yko+1b8Nthh0yCGYabCVF0dxbC3qfo5OOGD21VOpkvYu5KpZNmj2J LvXp1jv7izmaWq+afCLKXMua99VVSnbTB3cvuym2kFWK/YVVFp3+JadVDRX1Yk/+ B5eHihpwPSB92V0Ye/X50pwAMv9Sb/E3bXAEz5jOA2eY5mdc6fJUiX1HUxtO -----END CERTIFICATE-----Generated at Sun Jun 22 06:26:48 2025 by rpki-client