$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/ZGd8ZsNfXfAeMW1r6GKqtpXzIZY.roa File: ZGd8ZsNfXfAeMW1r6GKqtpXzIZY.roa (raw, json) Hash identifier: vU9UWCzWFfxgaT6x7e50mP3YzOm0/XgS1xFaG3dzjFo= Subject key identifier: 64:67:7C:66:C3:5F:5D:F0:1E:31:6D:6B:E8:62:AA:B6:95:F3:21:96 Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Certificate serial: 3F Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/ZGd8ZsNfXfAeMW1r6GKqtpXzIZY.roa Signing time: Tue 27 May 2025 08:25:30 +0000 ROA not before: Tue 27 May 2025 08:25:30 +0000 ROA not after: Wed 27 May 2026 07:38:41 +0000 asID: 9808 IP address blocks: 240a:42e2::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 14:13:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Validity Not Before: May 27 08:25:30 2025 GMT Not After : May 27 07:38:41 2026 GMT Subject: CN=64677C66C35F5DF01E316D6BE862AAB695F32196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e9:13:3c:de:d4:41:74:8b:2b:58:67:64:b5: b7:f9:4b:6d:75:eb:d1:6d:d6:f5:b9:5b:30:d1:50: 48:13:b0:16:bd:f8:43:e1:9d:f2:87:93:dd:9e:cc: 42:0e:aa:f2:6a:c6:8c:1f:eb:2b:d4:87:b6:7c:43: 63:16:15:9e:7b:88:e1:d5:d8:ea:9c:47:df:ee:db: 36:83:e4:e7:1d:f2:57:c2:79:a6:e0:c1:6f:64:d8: 2c:b8:2a:da:46:90:5a:00:60:cd:d5:7b:0f:b4:da: c9:d7:04:49:d0:f0:26:d7:f5:00:93:26:cd:ce:d3: fc:62:1d:c0:03:9e:c7:c9:20:84:15:2b:aa:55:c3: fc:8d:8c:30:76:c8:b6:d3:92:51:21:29:89:26:94: 19:41:65:5b:e9:35:cc:e9:78:a4:34:f4:6b:dd:14: 17:67:fa:eb:95:b6:37:f7:99:27:69:26:00:ae:15: 0a:36:b1:b4:9a:19:7b:99:36:28:8d:f9:d6:c6:5d: f8:55:df:7e:e5:09:e4:6e:80:a9:73:cb:b8:1a:b4: 78:2a:69:66:96:7c:29:ae:2e:dd:d7:61:fd:6b:a1: 0e:ad:a5:f0:7a:76:5f:01:23:2c:b5:8b:42:01:12: 48:90:c4:8f:ea:31:8b:a9:76:42:30:d4:50:db:72: 7a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:67:7C:66:C3:5F:5D:F0:1E:31:6D:6B:E8:62:AA:B6:95:F3:21:96 X509v3 Authority Key Identifier: keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/ZGd8ZsNfXfAeMW1r6GKqtpXzIZY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 240a:42e2::/31 Signature Algorithm: sha256WithRSAEncryption c6:f0:61:18:78:8f:8b:5d:a6:cb:b0:b7:d4:8d:95:31:fe:5b: b7:0e:95:25:b2:e9:18:a3:04:71:0e:e2:3b:17:cf:32:9c:f9: e5:b1:74:ba:09:27:4f:88:b2:2d:ab:a7:c2:ec:ab:50:b5:0c: b1:ec:e8:46:d5:e0:05:b1:85:eb:37:af:28:94:95:fd:7c:98: e6:36:b3:33:56:f2:c3:16:8f:1d:39:a3:e1:62:75:62:30:f1: bc:f9:c2:68:d6:50:ef:a9:66:ea:70:92:89:9a:99:fd:4f:0a: f7:cd:c4:4a:88:a0:d6:4d:7d:a2:14:0b:ea:21:43:e6:b2:e5: 93:d6:2d:2a:bf:d9:c0:b7:21:1a:b0:e4:6f:7e:4d:86:ae:ad: a9:f1:bc:97:b7:11:37:cd:75:58:c5:73:c4:c0:47:a9:f5:22: 2d:13:dd:99:db:3e:9e:98:42:ef:57:79:a0:5d:0f:50:b9:e8: 31:f2:04:02:21:ec:6f:5a:76:45:f6:1c:df:3e:b1:20:58:c0: e1:be:8f:51:a9:77:e6:d1:a4:0c:1e:71:6c:d7:85:fe:9a:ff: 44:6a:a7:90:a2:e3:32:e5:a0:78:95:11:e6:5a:a4:0f:91:18: ca:24:5b:6a:4e:e8:87:ba:e2:9c:0b:5a:eb:ad:87:87:21:ec: 2d:f1:ed:a4 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgIBPzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NEVG RjczOTJFMUVEQzEyMjVGQzRDRkI4RkFCNkVCNjE3QTlEMjREMB4XDTI1MDUyNzA4 MjUzMFoXDTI2MDUyNzA3Mzg0MVowMzExMC8GA1UEAxMoNjQ2NzdDNjZDMzVGNURG MDFFMzE2RDZCRTg2MkFBQjY5NUYzMjE5NjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKjpEzze1EF0iytYZ2S1t/lLbXXr0W3W9blbMNFQSBOwFr34Q+Gd 8oeT3Z7MQg6q8mrGjB/rK9SHtnxDYxYVnnuI4dXY6pxH3+7bNoPk5x3yV8J5puDB b2TYLLgq2kaQWgBgzdV7D7TaydcESdDwJtf1AJMmzc7T/GIdwAOex8kghBUrqlXD /I2MMHbIttOSUSEpiSaUGUFlW+k1zOl4pDT0a90UF2f665W2N/eZJ2kmAK4VCjax tJoZe5k2KI351sZd+FXffuUJ5G6AqXPLuBq0eCppZpZ8Ka4u3ddh/WuhDq2l8Hp2 XwEjLLWLQgESSJDEj+oxi6l2QjDUUNtyeisCAwEAAaOCAfQwggHwMB0GA1UdDgQW BBRkZ3xmw19d8B4xbWvoYqq2lfMhljAfBgNVHSMEGDAWgBSU7/c5Lh7cEiX8TPuP q262F6nSTTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNjcy L2xPXzNPUzRlM0JJbF9FejdqNnR1dGhlcDBrMC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvbE9fM09TNGUzQklsX0V6N2o2dHV0aGVwMGswLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3Mi9aR2Q4WnNOZlhmQWVN VzFyNkdLcXRwWHpJWlkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH AwUBJApC4jANBgkqhkiG9w0BAQsFAAOCAQEAxvBhGHiPi12my7C31I2VMf5btw6V JbLpGKMEcQ7iOxfPMpz55bF0ugknT4iyLaunwuyrULUMsezoRtXgBbGF6zevKJSV /XyY5jazM1bywxaPHTmj4WJ1YjDxvPnCaNZQ76lm6nCSiZqZ/U8K983ESoig1k19 ohQL6iFD5rLlk9YtKr/ZwLchGrDkb35Nhq6tqfG8l7cRN811WMVzxMBHqfUiLRPd mds+nphC71d5oF0PULnoMfIEAiHsb1p2RfYc3z6xIFjA4b6PUal35tGkDB5xbNeF /pr/RGqnkKLjMuWgeJUR5lqkD5EYyiRbak7oh7rinAta662HhyHsLfHtpA== -----END CERTIFICATE-----Generated at Sun Jun 22 13:29:40 2025 by rpki-client