$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/UaIEc9ETr6KEeo_OErmxD4Bm_yY.roa File: UaIEc9ETr6KEeo_OErmxD4Bm_yY.roa (raw, json) Hash identifier: mvkqEcF76NxBC4XkJhtvJJCO1xy+HX8lxx3ummsoy14= Subject key identifier: 51:A2:04:73:D1:13:AF:A2:84:7A:8F:CE:12:B9:B1:0F:80:66:FF:26 Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Certificate serial: AE Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/UaIEc9ETr6KEeo_OErmxD4Bm_yY.roa Signing time: Fri 06 Jun 2025 02:21:23 +0000 ROA not before: Fri 06 Jun 2025 02:21:23 +0000 ROA not after: Wed 27 May 2026 07:38:41 +0000 asID: 24547 IP address blocks: 240a:40c0:c000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 23:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 174 (0xae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Validity Not Before: Jun 6 02:21:23 2025 GMT Not After : May 27 07:38:41 2026 GMT Subject: CN=51A20473D113AFA2847A8FCE12B9B10F8066FF26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:83:91:65:87:d5:67:33:6e:a6:32:a8:c3:21: c2:2c:f8:b7:af:78:3c:a4:66:9b:7a:5f:3b:2d:31: b9:75:1b:ad:a3:6e:70:ec:10:7a:72:ba:b9:00:67: bb:63:6d:d4:a2:81:9a:ed:e5:8b:99:a5:44:bd:8f: 93:03:7e:3b:30:db:8f:7d:3d:11:ab:e2:5e:52:d7: be:0e:77:00:a0:32:f8:fb:b3:0c:c8:85:07:8b:b6: b5:f2:6a:fe:a3:30:97:51:5e:8f:03:55:c9:79:63: de:8e:39:61:2d:59:6f:55:0b:49:db:31:7d:20:eb: c8:ed:c0:1f:17:ee:ed:ba:cc:b6:16:1a:5c:e6:fa: b0:73:cd:47:6e:81:ca:1c:c2:25:0f:26:02:b7:ec: 8d:2a:d6:38:5e:d0:96:f9:c9:d0:28:13:10:df:de: e7:3c:43:21:8d:c7:9b:5f:49:98:da:ad:7c:12:fe: 41:7d:ea:51:7d:45:cc:3d:16:97:00:f0:38:80:aa: c2:2f:41:cc:ba:47:f5:f4:e8:cb:8e:1e:5f:01:54: d7:4f:06:e3:19:ca:0c:9b:02:cf:73:60:73:49:7c: 33:37:72:9a:c3:03:7d:38:8c:90:4c:45:03:c0:e8: b0:78:d3:44:8d:14:f2:09:b5:2b:71:23:97:9a:23: 07:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:A2:04:73:D1:13:AF:A2:84:7A:8F:CE:12:B9:B1:0F:80:66:FF:26 X509v3 Authority Key Identifier: keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/UaIEc9ETr6KEeo_OErmxD4Bm_yY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 240a:40c0:c000::/44 Signature Algorithm: sha256WithRSAEncryption d3:2e:88:37:fc:7b:18:de:e8:d5:d7:8c:3a:82:0a:27:fc:08: 15:bb:4f:3c:b7:55:cb:e6:64:ba:d5:07:d3:a1:5d:e1:da:1c: 6e:ea:8e:57:c6:c9:0a:70:e2:d8:be:78:06:48:fb:db:68:62: c6:5b:a8:af:fe:93:84:08:b4:79:20:f4:a3:4a:cb:d0:17:ab: 87:b0:0c:4c:39:bf:fc:0d:82:e9:f2:c5:52:6b:7f:a3:a3:3c: 88:7f:91:0a:d5:13:88:e1:f6:1f:6a:54:28:47:a8:de:f8:bf: 8a:c0:56:cd:8e:da:50:02:ed:18:f1:e6:c4:ad:e4:3c:19:75: e1:59:cf:89:a1:14:4d:89:ab:fe:ef:70:d3:79:0d:99:d4:47: ac:7a:fc:e1:fd:b5:27:fa:e6:b4:58:d5:79:be:d3:10:35:2c: be:2c:6d:1a:6d:1c:9d:32:e4:b0:c3:fd:d9:6c:12:95:2f:f8: 85:2d:32:40:09:e6:74:07:0c:d4:41:b6:65:34:2c:5f:34:de: ab:4d:7b:09:16:48:64:d4:2c:66:70:1a:53:7a:dc:9a:0d:bd: c8:e5:b3:0e:b4:9c:20:ce:62:d3:7f:d5:4c:9e:f7:99:8d:66: 2e:f6:24:3e:b3:de:22:17:7c:4a:36:99:76:c0:de:2c:88:2f: e3:8d:7f:30 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTRF RkY3MzkyRTFFREMxMjI1RkM0Q0ZCOEZBQjZFQjYxN0E5RDI0RDAeFw0yNTA2MDYw MjIxMjNaFw0yNjA1MjcwNzM4NDFaMDMxMTAvBgNVBAMTKDUxQTIwNDczRDExM0FG QTI4NDdBOEZDRTEyQjlCMTBGODA2NkZGMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRg5Flh9VnM26mMqjDIcIs+LeveDykZpt6XzstMbl1G62jbnDs EHpyurkAZ7tjbdSigZrt5YuZpUS9j5MDfjsw2499PRGr4l5S174OdwCgMvj7swzI hQeLtrXyav6jMJdRXo8DVcl5Y96OOWEtWW9VC0nbMX0g68jtwB8X7u26zLYWGlzm +rBzzUdugcocwiUPJgK37I0q1jhe0Jb5ydAoExDf3uc8QyGNx5tfSZjarXwS/kF9 6lF9Rcw9FpcA8DiAqsIvQcy6R/X06MuOHl8BVNdPBuMZygybAs9zYHNJfDM3cprD A304jJBMRQPA6LB400SNFPIJtStxI5eaIwdLAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUUaIEc9ETr6KEeo/OErmxD4Bm/yYwHwYDVR0jBBgwFoAUlO/3OS4e3BIl/Ez7 j6tuthep0k0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3 Mi9sT18zT1M0ZTNCSWxfRXo3ajZ0dXRoZXAwazAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2xPXzNPUzRlM0JJbF9FejdqNnR1dGhlcDBrMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2NzIvVWFJRWM5RVRyNktF ZW9fT0VybXhENEJtX3lZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHBCQKQMDAADANBgkqhkiG9w0BAQsFAAOCAQEA0y6IN/x7GN7o1deMOoIKJ/wI FbtPPLdVy+ZkutUH06Fd4docbuqOV8bJCnDi2L54Bkj722hixluor/6ThAi0eSD0 o0rL0Berh7AMTDm//A2C6fLFUmt/o6M8iH+RCtUTiOH2H2pUKEeo3vi/isBWzY7a UALtGPHmxK3kPBl14VnPiaEUTYmr/u9w03kNmdRHrHr84f21J/rmtFjVeb7TEDUs vixtGm0cnTLksMP92WwSlS/4hS0yQAnmdAcM1EG2ZTQsXzTeq017CRZIZNQsZnAa U3rcmg29yOWzDrScIM5i03/VTJ73mY1mLvYkPrPeIhd8SjaZdsDeLIgv441/MA== -----END CERTIFICATE-----Generated at Sat Jun 21 23:16:31 2025 by rpki-client