$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/aUfFArMMGfnSmYqIG04h9NgqyTs.roa File: aUfFArMMGfnSmYqIG04h9NgqyTs.roa (raw, json) Hash identifier: YCOIn79L9+QY3ysaFZyoKSOR+zNxNJDXbZdqOPzeRBY= Subject key identifier: 69:47:C5:02:B3:0C:19:F9:D2:99:8A:88:1B:4E:21:F4:D8:2A:C9:3B Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Certificate serial: 04 Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/aUfFArMMGfnSmYqIG04h9NgqyTs.roa Signing time: Tue 27 May 2025 07:47:49 +0000 ROA not before: Tue 27 May 2025 07:47:49 +0000 ROA not after: Wed 27 May 2026 07:38:41 +0000 asID: 146788 IP address blocks: 240a:4040::/27 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 07:11:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Validity Not Before: May 27 07:47:49 2025 GMT Not After : May 27 07:38:41 2026 GMT Subject: CN=6947C502B30C19F9D2998A881B4E21F4D82AC93B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:15:fc:4a:3d:c9:40:79:dc:88:79:57:cf:19: 98:63:76:ad:db:fa:d9:d0:97:f8:9e:6b:11:db:07: b6:fb:92:ef:6e:86:e1:65:82:00:f3:2a:a7:a4:6f: fb:ea:22:34:23:d9:cc:80:66:36:ba:cb:cc:b8:b1: e3:ed:09:47:ac:2f:dd:d5:cd:5f:6d:e6:ec:da:9f: 4d:d6:7f:2d:30:16:37:42:fc:a0:3e:01:2f:f2:92: 83:a6:db:e6:61:99:1b:11:b2:9d:9f:a2:06:0f:77: d3:3d:13:40:52:b1:ad:04:3a:33:a2:be:66:2d:ed: a0:ff:97:61:f0:7f:f5:d6:ed:d6:fa:8f:61:96:dc: bd:62:05:31:6f:cf:bb:0b:72:e3:94:72:30:f3:f0: 17:29:75:bc:91:f8:98:1c:4b:0b:f3:4b:75:38:f5: 78:4e:ad:ce:f0:39:3a:8a:93:eb:03:28:9f:af:30: c0:18:b8:37:5c:93:aa:f9:bc:0b:f8:fb:57:ca:47: 9c:4b:7f:31:69:be:10:ca:17:b0:e8:0a:cd:42:fb: 67:09:05:bb:4b:22:b1:b9:29:7a:0d:e0:87:39:8d: bb:eb:96:c8:fc:48:05:7f:d2:e5:41:23:55:6a:69: d2:ef:d9:2b:95:ae:1e:e6:99:aa:30:e1:00:31:a0: b1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:47:C5:02:B3:0C:19:F9:D2:99:8A:88:1B:4E:21:F4:D8:2A:C9:3B X509v3 Authority Key Identifier: keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/aUfFArMMGfnSmYqIG04h9NgqyTs.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 240a:4040::/27 Signature Algorithm: sha256WithRSAEncryption a2:b7:ce:6d:d9:5a:39:7d:bc:0d:01:7a:03:85:da:9d:a9:71: 7d:08:e6:e1:32:f8:1a:bf:77:09:fe:48:14:c7:13:1c:50:60: 20:dd:f4:f4:0d:1b:b9:9f:8c:4f:3c:e7:ae:9b:1b:1b:c2:01: a5:50:0c:69:4c:e1:57:76:3e:9a:85:62:7d:c6:aa:69:35:c6: 15:d9:4d:1d:45:2a:81:56:74:96:a0:06:76:65:51:a0:ff:8b: a3:9f:3b:a8:54:c9:e8:4c:82:03:63:2e:d1:46:7e:7b:9e:b0: 4d:6f:5e:0b:2b:2c:80:52:7f:d8:25:ef:69:40:83:71:5a:18: 9a:b5:23:7c:ab:58:be:c9:99:6b:52:77:01:ff:04:5a:a5:b0: d0:2f:7b:a0:93:8f:1b:4f:ea:0d:3d:e4:9a:5a:bb:9d:98:de: 71:3e:05:92:ed:c0:4c:33:b5:86:6e:96:37:ce:7e:7f:4a:37: 66:cd:7c:75:e9:aa:44:58:52:b7:d3:f0:ac:3a:aa:fb:67:a7: 96:db:b7:b0:89:36:5a:6e:09:44:d9:de:ec:80:43:0d:7a:18: 35:9d:d6:28:bb:cb:a7:52:fd:e8:3c:ff:4d:8b:21:66:0b:f5: fd:94:88:82:26:23:86:90:9b:75:3c:37:1c:2a:ce:a1:6f:a7: 70:d1:f5:ae -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgIBBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NEVG RjczOTJFMUVEQzEyMjVGQzRDRkI4RkFCNkVCNjE3QTlEMjREMB4XDTI1MDUyNzA3 NDc0OVoXDTI2MDUyNzA3Mzg0MVowMzExMC8GA1UEAxMoNjk0N0M1MDJCMzBDMTlG OUQyOTk4QTg4MUI0RTIxRjREODJBQzkzQjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMUV/Eo9yUB53Ih5V88ZmGN2rdv62dCX+J5rEdsHtvuS726G4WWC APMqp6Rv++oiNCPZzIBmNrrLzLix4+0JR6wv3dXNX23m7NqfTdZ/LTAWN0L8oD4B L/KSg6bb5mGZGxGynZ+iBg930z0TQFKxrQQ6M6K+Zi3toP+XYfB/9dbt1vqPYZbc vWIFMW/Puwty45RyMPPwFyl1vJH4mBxLC/NLdTj1eE6tzvA5OoqT6wMon68wwBi4 N1yTqvm8C/j7V8pHnEt/MWm+EMoXsOgKzUL7ZwkFu0sisbkpeg3ghzmNu+uWyPxI BX/S5UEjVWpp0u/ZK5WuHuaZqjDhADGgsQ8CAwEAAaOCAfQwggHwMB0GA1UdDgQW BBRpR8UCswwZ+dKZiogbTiH02CrJOzAfBgNVHSMEGDAWgBSU7/c5Lh7cEiX8TPuP q262F6nSTTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNjcy L2xPXzNPUzRlM0JJbF9FejdqNnR1dGhlcDBrMC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvbE9fM09TNGUzQklsX0V6N2o2dHV0aGVwMGswLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3Mi9hVWZGQXJNTUdmblNt WXFJRzA0aDlOZ3F5VHMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH AwUFJApAQDANBgkqhkiG9w0BAQsFAAOCAQEAorfObdlaOX28DQF6A4XanalxfQjm 4TL4Gr93Cf5IFMcTHFBgIN309A0buZ+MTzznrpsbG8IBpVAMaUzhV3Y+moVifcaq aTXGFdlNHUUqgVZ0lqAGdmVRoP+Lo587qFTJ6EyCA2Mu0UZ+e56wTW9eCyssgFJ/ 2CXvaUCDcVoYmrUjfKtYvsmZa1J3Af8EWqWw0C97oJOPG0/qDT3kmlq7nZjecT4F ku3ATDO1hm6WN85+f0o3Zs18demqRFhSt9PwrDqq+2enltu3sIk2Wm4JRNne7IBD DXoYNZ3WKLvLp1L96Dz/TYshZgv1/ZSIgiYjhpCbdTw3HCrOoW+ncNH1rg== -----END CERTIFICATE-----Generated at Sun Jun 22 06:28:27 2025 by rpki-client