$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/qclyFmCeB17UHVxq71Tpg1sgQyo.roa File: qclyFmCeB17UHVxq71Tpg1sgQyo.roa (raw, json) Hash identifier: yBogXmlC9p9F6kG48KRTA8Bdv06GAkMC3TbX4WHum+E= Subject key identifier: A9:C9:72:16:60:9E:07:5E:D4:1D:5C:6A:EF:54:E9:83:5B:20:43:2A Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Certificate serial: 40 Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/qclyFmCeB17UHVxq71Tpg1sgQyo.roa Signing time: Tue 27 May 2025 08:25:30 +0000 ROA not before: Tue 27 May 2025 08:25:30 +0000 ROA not after: Wed 27 May 2026 07:38:41 +0000 asID: 9808 IP address blocks: 240a:42c0::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 04:43:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Validity Not Before: May 27 08:25:30 2025 GMT Not After : May 27 07:38:41 2026 GMT Subject: CN=A9C97216609E075ED41D5C6AEF54E9835B20432A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e1:57:75:77:2e:ba:c7:d3:72:35:1a:f2:50: 3d:25:0c:22:bc:0a:71:ac:9f:e9:11:cc:b4:06:34: e9:41:68:03:16:b7:ef:9f:e5:b8:12:c3:25:c6:d5: cd:f3:72:a0:17:e1:a5:07:99:c1:4a:e7:63:6e:ae: 71:76:80:38:2d:46:0b:94:eb:bc:bb:8a:de:8a:ac: b1:46:28:8f:d0:ba:f4:f0:10:3d:09:1f:19:09:c7: 52:33:df:04:09:03:60:aa:da:9d:9e:33:73:45:23: b5:4b:e1:e3:cf:7c:2d:84:d6:a5:38:30:ca:90:19: 4a:f8:b1:03:f2:5c:97:d8:d7:fa:a7:2e:62:6c:ea: 04:32:3b:43:d7:d4:eb:7c:9a:12:cd:0e:1b:a2:07: d1:cd:76:17:15:55:97:a1:a1:2d:bb:62:1e:ae:af: d7:ef:63:be:0c:ea:00:5a:6a:7e:66:a7:91:b1:77: b3:ce:32:b6:af:55:38:56:0d:20:03:5d:62:1c:9c: f2:71:97:05:6b:21:70:14:34:16:45:6f:68:83:7f: 11:e8:14:76:3c:67:0d:e9:e2:58:35:56:1e:26:c0: 17:9d:1e:3c:13:13:dc:c2:7b:59:eb:08:0c:f1:ff: 65:5d:b1:46:a8:5e:3f:60:20:83:6c:f2:8d:d0:60: 07:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C9:72:16:60:9E:07:5E:D4:1D:5C:6A:EF:54:E9:83:5B:20:43:2A X509v3 Authority Key Identifier: keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/qclyFmCeB17UHVxq71Tpg1sgQyo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 240a:42c0::/31 Signature Algorithm: sha256WithRSAEncryption 81:af:14:55:54:76:f8:4d:f7:88:98:fb:64:0a:84:18:16:e3: 62:8d:7b:5b:7c:89:e2:1a:13:46:cf:94:df:21:4d:4e:7d:91: 4c:ae:91:63:2a:b2:66:3e:32:cb:b7:74:f2:eb:ff:cd:3a:13: bd:17:36:3f:e7:f4:99:e7:82:d6:cd:c9:b0:b5:d5:f3:d7:50: 18:97:f3:d7:fe:50:22:bd:1c:4d:36:9d:88:63:f7:00:c3:d6: 00:ef:13:b2:84:57:fd:5a:a1:60:e9:1f:aa:c9:b0:05:ac:fb: 02:f9:23:64:ac:55:f4:32:77:82:59:3b:12:a0:ba:2b:69:53: 80:76:07:20:35:f8:1d:e7:7e:d1:75:93:57:18:b0:73:29:96: 39:d7:de:17:df:33:35:21:79:b1:4e:b5:9a:12:20:73:4b:b8: 8f:3f:d6:3f:0b:90:67:56:34:1a:c3:44:f2:d9:33:57:73:12: 36:55:07:4d:b2:6e:15:f9:1b:3d:35:e0:b8:e3:8c:90:26:14: 7e:9b:cc:5e:62:b3:c1:d1:ab:9c:36:74:83:6c:c7:53:f0:e6: 14:e2:17:cc:f2:20:df:f2:b0:e0:64:02:70:2f:3d:72:0b:d2: b6:dd:03:79:9d:53:a8:5b:40:a8:b8:2d:e5:7e:67:8c:7e:64: 75:99:81:4a -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgIBQDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NEVG RjczOTJFMUVEQzEyMjVGQzRDRkI4RkFCNkVCNjE3QTlEMjREMB4XDTI1MDUyNzA4 MjUzMFoXDTI2MDUyNzA3Mzg0MVowMzExMC8GA1UEAxMoQTlDOTcyMTY2MDlFMDc1 RUQ0MUQ1QzZBRUY1NEU5ODM1QjIwNDMyQTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANbhV3V3LrrH03I1GvJQPSUMIrwKcayf6RHMtAY06UFoAxa375/l uBLDJcbVzfNyoBfhpQeZwUrnY26ucXaAOC1GC5TrvLuK3oqssUYoj9C69PAQPQkf GQnHUjPfBAkDYKranZ4zc0UjtUvh4898LYTWpTgwypAZSvixA/Jcl9jX+qcuYmzq BDI7Q9fU63yaEs0OG6IH0c12FxVVl6GhLbtiHq6v1+9jvgzqAFpqfmankbF3s84y tq9VOFYNIANdYhyc8nGXBWshcBQ0FkVvaIN/EegUdjxnDeniWDVWHibAF50ePBMT 3MJ7WesIDPH/ZV2xRqheP2Agg2zyjdBgBw0CAwEAAaOCAfQwggHwMB0GA1UdDgQW BBSpyXIWYJ4HXtQdXGrvVOmDWyBDKjAfBgNVHSMEGDAWgBSU7/c5Lh7cEiX8TPuP q262F6nSTTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNjcy L2xPXzNPUzRlM0JJbF9FejdqNnR1dGhlcDBrMC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvbE9fM09TNGUzQklsX0V6N2o2dHV0aGVwMGswLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3Mi9xY2x5Rm1DZUIxN1VI VnhxNzFUcGcxc2dReW8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH AwUBJApCwDANBgkqhkiG9w0BAQsFAAOCAQEAga8UVVR2+E33iJj7ZAqEGBbjYo17 W3yJ4hoTRs+U3yFNTn2RTK6RYyqyZj4yy7d08uv/zToTvRc2P+f0meeC1s3JsLXV 89dQGJfz1/5QIr0cTTadiGP3AMPWAO8TsoRX/VqhYOkfqsmwBaz7AvkjZKxV9DJ3 glk7EqC6K2lTgHYHIDX4Hed+0XWTVxiwcymWOdfeF98zNSF5sU61mhIgc0u4jz/W PwuQZ1Y0GsNE8tkzV3MSNlUHTbJuFfkbPTXguOOMkCYUfpvMXmKzwdGrnDZ0g2zH U/DmFOIXzPIg3/Kw4GQCcC89cgvStt0DeZ1TqFtAqLgt5X5njH5kdZmBSg== -----END CERTIFICATE-----Generated at Sun Jun 22 03:33:13 2025 by rpki-client