$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/Sa9XdU0GKGeSYkQwf1ytaZ7DQDU.roa File: Sa9XdU0GKGeSYkQwf1ytaZ7DQDU.roa (raw, json) Hash identifier: 7FsawMAwmFo2GzgjutW/0ytC6eMRU11RyBDkQsL5XcM= Subject key identifier: 49:AF:57:75:4D:06:28:67:92:62:44:30:7F:5C:AD:69:9E:C3:40:35 Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Certificate serial: 36 Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/Sa9XdU0GKGeSYkQwf1ytaZ7DQDU.roa Signing time: Tue 27 May 2025 08:25:27 +0000 ROA not before: Tue 27 May 2025 08:25:27 +0000 ROA not after: Wed 27 May 2026 07:38:41 +0000 asID: 9808 IP address blocks: 240a:42e8::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 03:11:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Validity Not Before: May 27 08:25:27 2025 GMT Not After : May 27 07:38:41 2026 GMT Subject: CN=49AF57754D062867926244307F5CAD699EC34035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:24:48:5e:d9:9e:af:5a:54:98:ea:fe:be:8c: 1c:25:05:9f:14:ae:d6:1e:39:7b:d5:f7:ad:de:1a: 41:f5:53:a1:ab:7c:27:79:70:14:ee:ae:dc:1b:1f: 59:60:dc:e9:81:4c:76:06:29:2e:01:1f:c2:31:2f: fb:2a:21:ba:f9:75:d2:f1:8c:5a:aa:8e:d2:7c:17: 20:01:ab:10:1b:21:8b:43:31:91:95:50:73:c5:7a: f8:c9:b2:10:23:5f:e3:79:47:58:c5:12:f2:d4:39: 34:fc:3c:38:e9:d2:61:6d:93:d4:00:af:60:8c:ac: fc:21:18:ed:06:67:b4:14:2d:0a:4e:a8:f5:72:25: 3d:fd:c9:e7:c6:d0:ac:8f:52:14:b8:4b:3c:89:a3: 78:36:48:ca:72:20:cc:5e:8b:89:dd:23:b5:95:1e: 9a:27:8d:56:d0:04:b6:14:0f:b4:71:90:c9:60:81: e8:34:a6:7a:6e:32:9c:16:8b:54:02:83:f2:b7:22: bd:f5:18:55:99:d5:7c:3e:21:aa:04:29:7f:22:22: 41:74:6e:83:30:7e:3f:e0:e1:88:44:fd:12:37:1b: 1c:ce:ba:2e:fb:85:5c:51:74:65:41:57:cb:b7:15: d4:13:47:18:9c:0e:a3:dc:18:30:1a:d6:5e:af:83: b9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:AF:57:75:4D:06:28:67:92:62:44:30:7F:5C:AD:69:9E:C3:40:35 X509v3 Authority Key Identifier: keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/Sa9XdU0GKGeSYkQwf1ytaZ7DQDU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 240a:42e8::/31 Signature Algorithm: sha256WithRSAEncryption 4a:05:ee:74:fa:a6:68:f6:6b:bf:ec:de:b4:5b:1a:f3:5c:84: b1:b7:07:d4:7e:8f:e4:00:c3:14:e8:76:3d:7d:0d:e1:18:bc: 1c:b7:1d:fd:fa:10:98:95:b6:cc:37:1e:de:87:52:ba:3d:ad: 21:e6:cd:95:50:be:05:77:4d:9e:8f:06:1a:e3:59:99:91:97: 37:2a:7e:f1:b0:72:0a:1f:a2:8c:ee:59:2d:9a:cf:52:4b:82: 17:26:66:fa:f1:0f:17:81:6c:aa:7b:0f:08:68:ae:d1:33:fb: 54:0e:1b:df:99:46:a1:78:3d:f9:58:56:d7:c9:e0:97:51:c8: d7:b8:54:c4:f8:5a:93:7a:c2:83:34:ad:25:c6:36:9e:b9:9e: b7:d3:41:16:0a:9c:92:ff:9c:0a:05:3f:6c:68:a2:30:0d:6f: 86:a5:45:df:c2:26:0f:1f:c8:09:4d:45:2f:bd:5a:14:15:4c: e6:3d:01:d9:8b:63:07:ac:b2:9c:9c:08:aa:e1:16:46:92:91: 80:9c:df:25:90:63:fe:07:da:89:d1:1a:0e:2f:0b:77:8f:1b: 02:c1:a0:ca:ad:7a:ae:23:37:28:35:c4:78:76:64:3e:dd:d1: 68:2b:85:f8:60:66:e4:19:a8:15:89:08:e5:f5:3b:c1:64:8b: ae:f5:ef:e8 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgIBNjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NEVG RjczOTJFMUVEQzEyMjVGQzRDRkI4RkFCNkVCNjE3QTlEMjREMB4XDTI1MDUyNzA4 MjUyN1oXDTI2MDUyNzA3Mzg0MVowMzExMC8GA1UEAxMoNDlBRjU3NzU0RDA2Mjg2 NzkyNjI0NDMwN0Y1Q0FENjk5RUMzNDAzNTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJYkSF7Znq9aVJjq/r6MHCUFnxSu1h45e9X3rd4aQfVToat8J3lw FO6u3BsfWWDc6YFMdgYpLgEfwjEv+yohuvl10vGMWqqO0nwXIAGrEBshi0MxkZVQ c8V6+MmyECNf43lHWMUS8tQ5NPw8OOnSYW2T1ACvYIys/CEY7QZntBQtCk6o9XIl Pf3J58bQrI9SFLhLPImjeDZIynIgzF6Lid0jtZUemieNVtAEthQPtHGQyWCB6DSm em4ynBaLVAKD8rcivfUYVZnVfD4hqgQpfyIiQXRugzB+P+DhiET9EjcbHM66LvuF XFF0ZUFXy7cV1BNHGJwOo9wYMBrWXq+DuZsCAwEAAaOCAfQwggHwMB0GA1UdDgQW BBRJr1d1TQYoZ5JiRDB/XK1pnsNANTAfBgNVHSMEGDAWgBSU7/c5Lh7cEiX8TPuP q262F6nSTTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNjcy L2xPXzNPUzRlM0JJbF9FejdqNnR1dGhlcDBrMC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvbE9fM09TNGUzQklsX0V6N2o2dHV0aGVwMGswLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3Mi9TYTlYZFUwR0tHZVNZ a1F3ZjF5dGFaN0RRRFUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH AwUBJApC6DANBgkqhkiG9w0BAQsFAAOCAQEASgXudPqmaPZrv+zetFsa81yEsbcH 1H6P5ADDFOh2PX0N4Ri8HLcd/foQmJW2zDce3odSuj2tIebNlVC+BXdNno8GGuNZ mZGXNyp+8bByCh+ijO5ZLZrPUkuCFyZm+vEPF4FsqnsPCGiu0TP7VA4b35lGoXg9 +VhW18ngl1HI17hUxPhak3rCgzStJcY2nrmet9NBFgqckv+cCgU/bGiiMA1vhqVF 38ImDx/ICU1FL71aFBVM5j0B2YtjB6yynJwIquEWRpKRgJzfJZBj/gfaidEaDi8L d48bAsGgyq16riM3KDXEeHZkPt3RaCuF+GBm5BmoFYkI5fU7wWSLrvXv6A== -----END CERTIFICATE-----Generated at Mon Jun 23 01:33:47 2025 by rpki-client