$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/RalSCeaLKVlu_4U9g7ZVmg7-NXg.roa File: RalSCeaLKVlu_4U9g7ZVmg7-NXg.roa (raw, json) Hash identifier: BirXNEFDT/E4tQiUeviQeJ2scfWcZrbi/16M/3Zz1tE= Subject key identifier: 45:A9:52:09:E6:8B:29:59:6E:FF:85:3D:83:B6:55:9A:0E:FE:35:78 Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Certificate serial: 16 Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/RalSCeaLKVlu_4U9g7ZVmg7-NXg.roa Signing time: Tue 27 May 2025 08:11:31 +0000 ROA not before: Tue 27 May 2025 08:11:31 +0000 ROA not after: Wed 27 May 2026 07:38:41 +0000 asID: 56048 IP address blocks: 240a:4090:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:18:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Validity Not Before: May 27 08:11:31 2025 GMT Not After : May 27 07:38:41 2026 GMT Subject: CN=45A95209E68B29596EFF853D83B6559A0EFE3578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:10:37:df:57:f4:78:ab:95:01:5c:e2:f2:1d: be:e0:a7:65:f7:b5:cf:fb:33:bd:65:f3:5c:3e:d7: b9:cc:25:be:28:e0:bc:53:20:43:2c:06:1b:99:ed: 94:85:60:89:11:f4:d0:cb:a3:e4:fc:81:96:0c:2e: 40:91:f9:29:d6:98:31:8a:6d:fe:02:eb:35:d0:16: ef:b6:90:0d:03:44:87:e0:71:5f:2b:3e:30:0a:53: d5:bc:7b:bb:d9:52:c3:19:57:9c:4a:e1:4f:65:08: 9f:ef:8e:c0:bc:e8:60:fb:a7:21:64:14:02:eb:0d: 9f:40:7f:92:1c:0e:4d:2f:91:13:f2:9f:fe:1c:da: b8:b9:ce:fa:9b:fe:d9:d1:54:e0:24:9f:8f:f6:e5: 09:ec:3a:5e:2e:70:a6:f7:21:7d:dc:23:a5:d2:ec: f9:38:d9:99:e3:e8:37:7b:69:60:c5:a2:f4:53:00: dc:aa:81:e9:e3:56:63:60:f7:8a:bc:2e:02:12:a1: 3a:4c:73:4b:84:63:e2:a5:b4:cb:c9:67:de:5b:73: 7e:24:fc:14:5c:ca:6d:df:01:2e:ce:2c:c0:a4:e8: 0e:a6:18:2a:2c:43:8c:52:e2:e8:2e:f4:32:74:e1: c8:48:c4:b4:6d:aa:09:d3:5f:0b:f3:80:41:0c:a2: 02:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A9:52:09:E6:8B:29:59:6E:FF:85:3D:83:B6:55:9A:0E:FE:35:78 X509v3 Authority Key Identifier: keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/RalSCeaLKVlu_4U9g7ZVmg7-NXg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 240a:4090:120::/48 Signature Algorithm: sha256WithRSAEncryption cb:66:f3:77:87:c8:d4:55:9e:13:a1:3a:27:b9:2a:91:a4:dd: f9:cf:6c:33:1c:52:17:a0:98:0b:27:08:00:8b:eb:e3:9a:d1: ec:b7:55:d8:49:87:9e:fa:d2:87:65:b5:d9:d1:f5:3a:d3:1e: 8d:38:17:0f:86:f6:91:f8:99:76:8f:62:e0:21:c3:ff:90:98: af:de:5c:21:f8:18:51:f4:57:86:ec:2f:2c:bf:64:93:b0:1d: 77:7d:34:be:a3:ac:e8:32:e6:68:46:48:8d:97:4f:2f:a3:35: 15:7c:b5:aa:8c:06:66:4e:67:e8:c0:83:47:2f:b7:6a:f0:83: 3a:a8:a8:30:36:be:55:f4:a9:62:af:2b:70:0b:79:e5:8b:71: 39:e3:f7:8a:89:89:38:7b:8e:54:ac:aa:f2:c4:f9:d8:23:52: 2d:12:41:a6:15:72:21:2e:77:f5:77:04:4c:cd:58:e7:dd:07: 73:01:16:58:47:4f:a8:dc:04:94:52:1b:db:f4:96:18:f4:70: bd:54:25:f4:61:b4:13:ef:9f:f1:09:08:70:45:2a:f0:ad:bb: 9e:99:85:65:a8:08:03:be:34:04:33:76:01:47:4e:90:81:c3: 2a:eb:92:a9:95:cd:1d:33:1f:03:2a:ec:02:0e:cd:6e:96:8d: 3b:75:84:6c -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIBFjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NEVG RjczOTJFMUVEQzEyMjVGQzRDRkI4RkFCNkVCNjE3QTlEMjREMB4XDTI1MDUyNzA4 MTEzMVoXDTI2MDUyNzA3Mzg0MVowMzExMC8GA1UEAxMoNDVBOTUyMDlFNjhCMjk1 OTZFRkY4NTNEODNCNjU1OUEwRUZFMzU3ODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALkQN99X9HirlQFc4vIdvuCnZfe1z/szvWXzXD7XucwlvijgvFMg QywGG5ntlIVgiRH00Muj5PyBlgwuQJH5KdaYMYpt/gLrNdAW77aQDQNEh+BxXys+ MApT1bx7u9lSwxlXnErhT2UIn++OwLzoYPunIWQUAusNn0B/khwOTS+RE/Kf/hza uLnO+pv+2dFU4CSfj/blCew6Xi5wpvchfdwjpdLs+TjZmePoN3tpYMWi9FMA3KqB 6eNWY2D3irwuAhKhOkxzS4Rj4qW0y8ln3ltzfiT8FFzKbd8BLs4swKToDqYYKixD jFLi6C70MnThyEjEtG2qCdNfC/OAQQyiAp8CAwEAAaOCAfYwggHyMB0GA1UdDgQW BBRFqVIJ5ospWW7/hT2DtlWaDv41eDAfBgNVHSMEGDAWgBSU7/c5Lh7cEiX8TPuP q262F6nSTTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNjcy L2xPXzNPUzRlM0JJbF9FejdqNnR1dGhlcDBrMC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvbE9fM09TNGUzQklsX0V6N2o2dHV0aGVwMGswLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3Mi9SYWxTQ2VhTEtWbHVf NFU5ZzdaVm1nNy1OWGcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcAJApAkAEgMA0GCSqGSIb3DQEBCwUAA4IBAQDLZvN3h8jUVZ4ToTonuSqRpN35 z2wzHFIXoJgLJwgAi+vjmtHst1XYSYee+tKHZbXZ0fU60x6NOBcPhvaR+Jl2j2Lg IcP/kJiv3lwh+BhR9FeG7C8sv2STsB13fTS+o6zoMuZoRkiNl08vozUVfLWqjAZm TmfowINHL7dq8IM6qKgwNr5V9KlirytwC3nli3E54/eKiYk4e45UrKryxPnYI1It EkGmFXIhLnf1dwRMzVjn3QdzARZYR0+o3ASUUhvb9JYY9HC9VCX0YbQT75/xCQhw RSrwrbuemYVlqAgDvjQEM3YBR06QgcMq65Kplc0dMx8DKuwCDs1ulo07dYRs -----END CERTIFICATE-----Generated at Thu Jun 19 23:57:16 2025 by rpki-client