$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/xeVaT29WvFejpElpyFsQ71-iRuQ.roa File: xeVaT29WvFejpElpyFsQ71-iRuQ.roa (raw, json) Hash identifier: anhf44qRs/xIdJZiyCpgKkDhYQ/oPBvlUB5TkhW498U= Subject key identifier: C5:E5:5A:4F:6F:56:BC:57:A3:A4:49:69:C8:5B:10:EF:5F:A2:46:E4 Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Certificate serial: 92 Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/xeVaT29WvFejpElpyFsQ71-iRuQ.roa Signing time: Fri 06 Jun 2025 01:44:53 +0000 ROA not before: Fri 06 Jun 2025 01:44:53 +0000 ROA not after: Wed 27 May 2026 07:38:41 +0000 asID: 56041 IP address blocks: 240a:42aa::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 19:13:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Validity Not Before: Jun 6 01:44:53 2025 GMT Not After : May 27 07:38:41 2026 GMT Subject: CN=C5E55A4F6F56BC57A3A44969C85B10EF5FA246E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6e:b9:0b:8c:ce:9c:b4:d7:33:d6:f3:97:c2: 10:59:92:67:73:33:dd:ac:2b:08:23:94:47:e3:e9: 5f:5a:ac:aa:aa:e9:6e:a7:5d:31:75:f8:31:0d:c4: 89:98:68:52:f8:ce:a7:e3:72:91:78:bd:55:dd:58: 46:f3:43:a5:1b:8f:8b:34:69:4f:cd:2b:16:76:fa: 68:dc:9d:70:f0:93:93:e5:c3:dd:3a:40:cd:60:ce: 30:48:4d:a8:63:e1:d8:42:b6:d5:61:8b:f9:32:5a: 3e:51:44:ba:ec:15:c4:22:ce:9a:37:da:d1:54:b6: 9d:fe:52:7f:20:4d:39:6b:7c:80:4c:ad:10:fb:7c: ff:6b:df:71:0b:19:10:0b:ba:e3:a1:90:c2:f0:51: b3:08:20:fb:76:94:ea:40:d6:41:04:3d:50:93:98: 33:c0:82:25:e0:19:21:19:b9:6b:85:e9:4c:9f:44: ff:b5:6a:ff:11:53:eb:e4:4e:cb:45:6b:cb:f8:df: 09:fa:a5:9d:15:c2:22:60:33:4c:50:07:cb:c4:9b: 25:cc:dc:5b:c0:40:1b:94:c5:28:ac:46:9a:d9:a0: c9:46:d7:c3:70:c1:5d:7d:b4:1f:50:06:1e:8c:c6: c9:37:29:fd:af:1e:cd:98:fa:f1:a3:ee:18:61:f9: 34:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E5:5A:4F:6F:56:BC:57:A3:A4:49:69:C8:5B:10:EF:5F:A2:46:E4 X509v3 Authority Key Identifier: keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/xeVaT29WvFejpElpyFsQ71-iRuQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 240a:42aa::/31 Signature Algorithm: sha256WithRSAEncryption 33:b1:39:46:ab:ce:8c:e0:3c:a8:0f:3b:68:56:36:7a:05:f9: 22:ed:d1:1b:49:69:79:81:ac:66:08:8b:8a:a2:a2:8d:2f:6f: e1:e3:3b:f2:da:45:d6:a4:0b:e8:61:3a:a9:7c:a2:d5:de:0d: e3:84:d9:30:c6:18:df:b9:44:6d:aa:bd:c1:af:1d:ca:06:34: 1b:c2:a0:40:0d:6e:4c:c7:40:df:65:38:25:3d:b2:37:7a:73: d0:8f:f5:03:52:e5:02:54:ef:a0:ea:73:2c:16:58:ed:e2:fb: d6:e6:75:b5:be:79:b9:02:69:90:dc:3c:5a:c8:31:27:c8:33: 82:90:68:97:0e:8a:98:ce:d3:f8:4f:e8:20:2c:27:92:84:a0: 41:9a:de:db:ef:3f:60:b8:85:f3:4d:24:28:80:56:18:20:4b: e2:d7:d8:ed:30:c3:12:4f:c4:c2:a0:81:f0:f9:e9:1b:7c:45: 51:b2:b5:69:42:cd:77:4e:3f:78:cc:d7:d9:9a:7d:d7:d7:14: f1:f5:58:e8:6d:bc:c1:5b:d7:a9:c9:c0:52:61:03:6f:c8:52: b0:fd:28:bc:f6:37:3c:06:92:37:58:03:57:75:3d:ac:c6:3e: 7d:64:85:c7:95:ac:28:96:72:01:2b:60:5b:3c:b7:b8:d0:f1: fa:01:32:2e -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTRF RkY3MzkyRTFFREMxMjI1RkM0Q0ZCOEZBQjZFQjYxN0E5RDI0RDAeFw0yNTA2MDYw MTQ0NTNaFw0yNjA1MjcwNzM4NDFaMDMxMTAvBgNVBAMTKEM1RTU1QTRGNkY1NkJD NTdBM0E0NDk2OUM4NUIxMEVGNUZBMjQ2RTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9brkLjM6ctNcz1vOXwhBZkmdzM92sKwgjlEfj6V9arKqq6W6n XTF1+DENxImYaFL4zqfjcpF4vVXdWEbzQ6Ubj4s0aU/NKxZ2+mjcnXDwk5Plw906 QM1gzjBITahj4dhCttVhi/kyWj5RRLrsFcQizpo32tFUtp3+Un8gTTlrfIBMrRD7 fP9r33ELGRALuuOhkMLwUbMIIPt2lOpA1kEEPVCTmDPAgiXgGSEZuWuF6UyfRP+1 av8RU+vkTstFa8v43wn6pZ0VwiJgM0xQB8vEmyXM3FvAQBuUxSisRprZoMlG18Nw wV19tB9QBh6Mxsk3Kf2vHs2Y+vGj7hhh+TQbAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUxeVaT29WvFejpElpyFsQ71+iRuQwHwYDVR0jBBgwFoAUlO/3OS4e3BIl/Ez7 j6tuthep0k0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3 Mi9sT18zT1M0ZTNCSWxfRXo3ajZ0dXRoZXAwazAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2xPXzNPUzRlM0JJbF9FejdqNnR1dGhlcDBrMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2NzIveGVWYVQyOVd2RmVq cEVscHlGc1E3MS1pUnVRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFASQKQqowDQYJKoZIhvcNAQELBQADggEBADOxOUarzozgPKgPO2hWNnoF+SLt 0RtJaXmBrGYIi4qioo0vb+HjO/LaRdakC+hhOql8otXeDeOE2TDGGN+5RG2qvcGv HcoGNBvCoEANbkzHQN9lOCU9sjd6c9CP9QNS5QJU76DqcywWWO3i+9bmdbW+ebkC aZDcPFrIMSfIM4KQaJcOipjO0/hP6CAsJ5KEoEGa3tvvP2C4hfNNJCiAVhggS+LX 2O0wwxJPxMKggfD56Rt8RVGytWlCzXdOP3jM19mafdfXFPH1WOhtvMFb16nJwFJh A2/IUrD9KLz2NzwGkjdYA1d1PazGPn1khceVrCiWcgErYFs8t7jQ8foBMi4= -----END CERTIFICATE-----Generated at Sat Jun 21 18:38:32 2025 by rpki-client