$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/ukwesRJAGeHPYIGgNRWxFBwtV9A.roa File: ukwesRJAGeHPYIGgNRWxFBwtV9A.roa (raw, json) Hash identifier: /DcZblgdxWwrGbCtMzYcOfCI48NNEbcB7yNw/yM9toY= Subject key identifier: BA:4C:1E:B1:12:40:19:E1:CF:60:81:A0:35:15:B1:14:1C:2D:57:D0 Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Certificate serial: E4 Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/ukwesRJAGeHPYIGgNRWxFBwtV9A.roa Signing time: Fri 06 Jun 2025 02:36:25 +0000 ROA not before: Fri 06 Jun 2025 02:36:25 +0000 ROA not after: Wed 27 May 2026 07:38:41 +0000 asID: 9808 IP address blocks: 240a:40c3:6000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 23:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Validity Not Before: Jun 6 02:36:25 2025 GMT Not After : May 27 07:38:41 2026 GMT Subject: CN=BA4C1EB1124019E1CF6081A03515B1141C2D57D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6e:77:1b:dc:d1:25:bc:5f:c4:25:23:cb:fc: 8a:35:56:92:d2:79:ed:a9:35:41:2b:3f:b2:0f:38: 65:80:ea:6c:2a:39:1a:bf:f3:4f:62:ba:8f:2c:e4: 77:6f:94:ee:18:82:c7:9d:dc:d3:52:7b:53:f8:87: 0a:0e:75:02:a1:2a:90:aa:65:6e:5c:ef:10:6c:d0: 63:98:b4:91:b1:1f:2f:bc:c0:b6:65:09:d2:bd:ca: 21:aa:c2:18:07:d2:a0:7e:17:52:6d:fb:89:24:ee: c5:54:ff:79:97:49:2c:85:e6:f9:c4:b4:95:31:f8: f9:9c:c7:7b:b0:e0:e8:cd:22:00:d2:9c:9c:54:a6: 0c:7e:e9:cd:f9:d1:75:42:f3:fb:8a:5f:10:d8:97: 0b:6a:8b:db:6b:c6:b4:30:a3:88:05:a1:d1:1b:ec: 7c:95:1b:8d:a5:72:bb:9a:2d:64:37:c0:ca:e3:4b: 2d:5b:ce:3d:46:7f:74:82:21:3f:e8:fe:1a:65:94: 23:cf:43:ba:4d:2d:51:da:51:78:09:90:9e:f9:70: 00:dc:c2:b5:1e:fd:33:91:54:3b:9a:da:ce:f9:e0: 95:4c:c0:0b:e6:6d:8f:61:42:b2:01:10:53:31:07: b2:3e:d3:4c:b8:c1:66:34:d1:20:fe:41:20:0d:ce: e9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:4C:1E:B1:12:40:19:E1:CF:60:81:A0:35:15:B1:14:1C:2D:57:D0 X509v3 Authority Key Identifier: keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/ukwesRJAGeHPYIGgNRWxFBwtV9A.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 240a:40c3:6000::/44 Signature Algorithm: sha256WithRSAEncryption 51:8e:52:ab:40:a2:5c:ac:e9:a9:4a:cf:ad:85:78:bb:3a:c3: 23:72:d7:7b:81:db:5d:97:f8:42:90:f3:cb:15:03:05:26:9e: c2:38:d7:90:7e:c8:2a:0b:22:e1:e2:de:d5:44:b7:81:a0:76: c4:a5:91:f1:05:28:f4:12:8f:0a:ed:26:27:81:d3:54:0e:8f: b3:5b:92:9e:78:82:ae:4f:39:86:e3:70:82:df:5f:99:01:58: 12:af:ef:98:94:77:a3:03:05:7b:fc:ec:cb:bd:fd:db:81:a7: f1:5c:76:9c:b2:4b:9b:eb:2e:29:c3:9e:e4:80:31:f2:42:9d: bc:83:28:64:0c:a6:a4:9b:ca:30:07:7b:49:77:bc:ff:08:bc: 37:83:66:5a:c2:14:c0:b4:59:0c:2f:1d:2d:2d:3d:c2:05:18: e1:29:0e:90:cd:6b:dd:8d:b8:78:4a:c5:38:22:10:d1:98:d6: 15:1b:9a:a9:c2:0f:96:ac:63:c5:23:a1:8e:75:62:dc:02:ba: db:d2:f8:f0:70:c1:5a:34:95:05:6b:3b:f0:9b:f1:b0:a0:cf: bf:ab:7e:c7:33:03:64:41:a8:4e:47:dc:7d:cf:b4:15:2f:2d: 5d:92:84:cd:8e:4a:9b:84:ef:c8:75:0a:59:f3:0e:19:24:74: e5:a4:a9:20 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTRF RkY3MzkyRTFFREMxMjI1RkM0Q0ZCOEZBQjZFQjYxN0E5RDI0RDAeFw0yNTA2MDYw MjM2MjVaFw0yNjA1MjcwNzM4NDFaMDMxMTAvBgNVBAMTKEJBNEMxRUIxMTI0MDE5 RTFDRjYwODFBMDM1MTVCMTE0MUMyRDU3RDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAbncb3NElvF/EJSPL/Io1VpLSee2pNUErP7IPOGWA6mwqORq/ 809iuo8s5HdvlO4Ygsed3NNSe1P4hwoOdQKhKpCqZW5c7xBs0GOYtJGxHy+8wLZl CdK9yiGqwhgH0qB+F1Jt+4kk7sVU/3mXSSyF5vnEtJUx+Pmcx3uw4OjNIgDSnJxU pgx+6c350XVC8/uKXxDYlwtqi9trxrQwo4gFodEb7HyVG42lcruaLWQ3wMrjSy1b zj1Gf3SCIT/o/hpllCPPQ7pNLVHaUXgJkJ75cADcwrUe/TORVDua2s754JVMwAvm bY9hQrIBEFMxB7I+00y4wWY00SD+QSANzulPAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUukwesRJAGeHPYIGgNRWxFBwtV9AwHwYDVR0jBBgwFoAUlO/3OS4e3BIl/Ez7 j6tuthep0k0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3 Mi9sT18zT1M0ZTNCSWxfRXo3ajZ0dXRoZXAwazAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2xPXzNPUzRlM0JJbF9FejdqNnR1dGhlcDBrMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2NzIvdWt3ZXNSSkFHZUhQ WUlHZ05SV3hGQnd0VjlBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHBCQKQMNgADANBgkqhkiG9w0BAQsFAAOCAQEAUY5Sq0CiXKzpqUrPrYV4uzrD I3LXe4HbXZf4QpDzyxUDBSaewjjXkH7IKgsi4eLe1US3gaB2xKWR8QUo9BKPCu0m J4HTVA6Ps1uSnniCrk85huNwgt9fmQFYEq/vmJR3owMFe/zsy73924Gn8Vx2nLJL m+suKcOe5IAx8kKdvIMoZAympJvKMAd7SXe8/wi8N4NmWsIUwLRZDC8dLS09wgUY 4SkOkM1r3Y24eErFOCIQ0ZjWFRuaqcIPlqxjxSOhjnVi3AK629L48HDBWjSVBWs7 8JvxsKDPv6t+xzMDZEGoTkfcfc+0FS8tXZKEzY5Km4TvyHUKWfMOGSR05aSpIA== -----END CERTIFICATE-----Generated at Sat Jun 21 23:23:29 2025 by rpki-client