$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/sDy83wuzoEg3UZ_ac6H10sNrahA.roa File: sDy83wuzoEg3UZ_ac6H10sNrahA.roa (raw, json) Hash identifier: 3pkExZCIECR0WvfiyPu22HfiVyeO4Mqi9ZiuT+Ic9pg= Subject key identifier: B0:3C:BC:DF:0B:B3:A0:48:37:51:9F:DA:73:A1:F5:D2:C3:6B:6A:10 Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Certificate serial: 45 Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/sDy83wuzoEg3UZ_ac6H10sNrahA.roa Signing time: Tue 27 May 2025 08:25:32 +0000 ROA not before: Tue 27 May 2025 08:25:32 +0000 ROA not after: Wed 27 May 2026 07:38:41 +0000 asID: 9808 IP address blocks: 240a:42ce::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 12:11:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Validity Not Before: May 27 08:25:32 2025 GMT Not After : May 27 07:38:41 2026 GMT Subject: CN=B03CBCDF0BB3A04837519FDA73A1F5D2C36B6A10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ff:e0:80:f3:81:6c:81:41:a5:2a:fa:2e:a1: 83:27:8b:40:a3:d5:f3:15:fb:b8:a9:b7:48:80:0e: d1:da:4d:99:c1:c1:87:f0:a3:67:35:b7:a4:4e:79: 83:9b:c4:ab:4b:1b:a6:d2:ac:86:b0:b9:24:84:31: ff:d3:f5:5e:83:f6:30:89:15:1a:50:aa:9c:2a:7a: 42:ff:fc:36:0c:0c:f8:ca:f9:af:10:cf:cc:8f:65: 67:12:8a:f8:44:d6:07:66:24:46:30:22:b7:16:27: ee:b2:b6:d6:a5:86:25:71:f5:b0:7a:67:6a:75:38: 45:de:39:0d:6c:23:5e:5c:24:06:85:f9:03:04:94: 55:f2:e3:d1:29:7a:14:c1:50:aa:69:d2:6d:12:16: ef:42:fa:0e:6f:74:42:08:1d:0d:9f:25:13:f3:9c: a2:43:47:e7:a6:f1:c7:a3:89:2a:cb:7c:23:cb:4b: 17:35:59:4e:6f:94:ae:f0:ca:4f:e5:b6:9f:62:46: 61:af:08:89:ea:66:48:ce:65:c2:32:05:51:5a:fd: 80:67:d4:86:82:d8:d3:57:f4:90:0b:84:7a:6a:72: 00:35:55:48:18:58:4d:8d:d0:27:f3:26:39:fe:2b: 08:c6:95:dd:23:9a:09:db:1e:d2:b8:05:86:bd:fd: 29:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:3C:BC:DF:0B:B3:A0:48:37:51:9F:DA:73:A1:F5:D2:C3:6B:6A:10 X509v3 Authority Key Identifier: keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/sDy83wuzoEg3UZ_ac6H10sNrahA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 240a:42ce::/31 Signature Algorithm: sha256WithRSAEncryption 0c:8b:db:4d:67:4d:03:54:3c:20:92:9e:0f:27:34:43:5c:9a: 0f:ab:20:5d:f0:aa:27:5e:71:09:da:d1:d8:4e:b5:77:48:2b: a0:26:9d:c3:f5:ad:fc:fd:0c:22:1d:d6:f1:f2:7b:60:b3:ed: 0a:2b:f7:ea:49:39:b8:99:ac:0f:95:1f:65:bf:a6:42:a3:5a: 08:eb:fd:24:22:a1:fc:b3:c4:92:2b:7b:05:10:fe:fa:35:0a: a2:5b:8c:50:ad:f9:25:d1:e8:0d:60:ee:bf:53:54:d2:cc:e0: 10:9a:b9:b7:33:4d:9a:06:37:4b:e2:e3:00:13:cb:a2:14:89: 3b:8d:b6:71:ea:f2:1d:63:28:95:73:02:46:7d:b8:08:68:00: ea:2c:28:56:a0:bf:19:2d:94:ce:3d:ff:17:59:4c:78:89:5f: e7:e9:7f:c7:f6:00:36:ee:95:79:52:60:98:a4:c7:ae:37:e3: 4d:db:22:de:ab:66:a7:16:da:65:42:27:60:cb:cf:be:07:a1: 75:fb:41:0d:7c:c8:4d:b9:4a:dc:f4:8d:dd:63:2d:e6:64:b8: b4:c8:c1:50:fd:d0:f8:8e:b4:14:1d:c7:b5:59:d5:77:fc:13: 54:75:5a:90:bc:8f:6e:8d:54:d0:19:03:dd:b6:be:1f:f4:cb: 82:8c:75:ed -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgIBRTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NEVG RjczOTJFMUVEQzEyMjVGQzRDRkI4RkFCNkVCNjE3QTlEMjREMB4XDTI1MDUyNzA4 MjUzMloXDTI2MDUyNzA3Mzg0MVowMzExMC8GA1UEAxMoQjAzQ0JDREYwQkIzQTA0 ODM3NTE5RkRBNzNBMUY1RDJDMzZCNkExMDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALr/4IDzgWyBQaUq+i6hgyeLQKPV8xX7uKm3SIAO0dpNmcHBh/Cj ZzW3pE55g5vEq0sbptKshrC5JIQx/9P1XoP2MIkVGlCqnCp6Qv/8NgwM+Mr5rxDP zI9lZxKK+ETWB2YkRjAitxYn7rK21qWGJXH1sHpnanU4Rd45DWwjXlwkBoX5AwSU VfLj0Sl6FMFQqmnSbRIW70L6Dm90QggdDZ8lE/OcokNH56bxx6OJKst8I8tLFzVZ Tm+UrvDKT+W2n2JGYa8IiepmSM5lwjIFUVr9gGfUhoLY01f0kAuEempyADVVSBhY TY3QJ/MmOf4rCMaV3SOaCdse0rgFhr39KekCAwEAAaOCAfQwggHwMB0GA1UdDgQW BBSwPLzfC7OgSDdRn9pzofXSw2tqEDAfBgNVHSMEGDAWgBSU7/c5Lh7cEiX8TPuP q262F6nSTTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNjcy L2xPXzNPUzRlM0JJbF9FejdqNnR1dGhlcDBrMC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvbE9fM09TNGUzQklsX0V6N2o2dHV0aGVwMGswLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3Mi9zRHk4M3d1em9FZzNV Wl9hYzZIMTBzTnJhaEEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH AwUBJApCzjANBgkqhkiG9w0BAQsFAAOCAQEADIvbTWdNA1Q8IJKeDyc0Q1yaD6sg XfCqJ15xCdrR2E61d0groCadw/Wt/P0MIh3W8fJ7YLPtCiv36kk5uJmsD5UfZb+m QqNaCOv9JCKh/LPEkit7BRD++jUKoluMUK35JdHoDWDuv1NU0szgEJq5tzNNmgY3 S+LjABPLohSJO422ceryHWMolXMCRn24CGgA6iwoVqC/GS2Uzj3/F1lMeIlf5+l/ x/YANu6VeVJgmKTHrjfjTdsi3qtmpxbaZUInYMvPvgehdftBDXzITblK3PSN3WMt 5mS4tMjBUP3Q+I60FB3HtVnVd/wTVHVakLyPbo1U0BkD3ba+H/TLgox17Q== -----END CERTIFICATE-----Generated at Sun Jun 22 12:11:36 2025 by rpki-client