$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3040/v3P2a1Pa0DQP8E1DSBIGjv-ZBoU.roa File: v3P2a1Pa0DQP8E1DSBIGjv-ZBoU.roa (raw, json) Hash identifier: /IT0ukCR0RQKPUiDl/F0eageakvuhpSm9Qj8BoZVK20= Subject key identifier: BF:73:F6:6B:53:DA:D0:34:0F:F0:4D:43:48:12:06:8E:FF:99:06:85 Certificate issuer: /CN=03F075D9C6F18DC09BDA62B7087EA80DC5B711C5 Certificate serial: 1F74 Authority key identifier: 03:F0:75:D9:C6:F1:8D:C0:9B:DA:62:B7:08:7E:A8:0D:C5:B7:11:C5 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A_B12cbxjcCb2mK3CH6oDcW3EcU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/v3P2a1Pa0DQP8E1DSBIGjv-ZBoU.roa Signing time: Fri 17 Jan 2025 01:29:11 +0000 ROA not before: Fri 17 Jan 2025 01:29:11 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 49544 IP address blocks: 2406:d140::/32 maxlen: 48 2406:d140:8000::/34 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/A_B12cbxjcCb2mK3CH6oDcW3EcU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/A_B12cbxjcCb2mK3CH6oDcW3EcU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A_B12cbxjcCb2mK3CH6oDcW3EcU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 14:39:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8052 (0x1f74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03F075D9C6F18DC09BDA62B7087EA80DC5B711C5 Validity Not Before: Jan 17 01:29:11 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=BF73F66B53DAD0340FF04D434812068EFF990685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:cc:ba:84:79:7a:22:0f:9c:64:5f:2f:9d:38: 89:03:e2:ca:8d:17:6f:b9:b6:f8:d0:78:9c:67:15: af:28:81:65:cc:0d:31:16:07:66:0c:28:ce:34:1e: 2c:74:63:90:3a:60:c1:78:06:0d:f0:9e:06:f6:b3: 82:2b:61:45:5b:0b:d6:dc:3a:e4:0c:7a:ec:f1:69: 0b:21:93:7c:dc:cb:6e:89:9f:01:2b:ed:dd:08:00: 36:67:4d:2b:3e:13:af:0b:d2:da:ed:51:43:65:ae: 2f:df:e7:8c:9e:aa:38:7c:c6:e8:38:1b:f1:1a:73: cb:a7:af:4d:b0:59:04:81:49:5e:2e:fd:29:1b:04: 06:6d:0e:f2:76:4d:cf:ac:9a:76:65:b0:ac:9c:ff: 4f:ba:9c:36:e0:b1:a6:e8:73:6a:d0:67:82:ea:4d: c9:eb:1b:3a:72:8a:83:35:53:7b:89:46:99:53:a7: 9d:42:bb:f8:0f:02:6c:77:b4:71:08:d9:a2:d0:3f: 97:2a:31:c0:31:59:20:a5:7b:4e:17:0b:05:91:f4: a4:39:33:51:58:1e:ee:94:25:7c:66:76:a7:0d:00: 42:7b:20:df:38:07:a3:80:1c:a9:0a:c9:1f:62:e7: cb:33:81:bd:73:de:41:cf:97:49:59:81:04:3b:ea: 44:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:73:F6:6B:53:DA:D0:34:0F:F0:4D:43:48:12:06:8E:FF:99:06:85 X509v3 Authority Key Identifier: keyid:03:F0:75:D9:C6:F1:8D:C0:9B:DA:62:B7:08:7E:A8:0D:C5:B7:11:C5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/A_B12cbxjcCb2mK3CH6oDcW3EcU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A_B12cbxjcCb2mK3CH6oDcW3EcU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/v3P2a1Pa0DQP8E1DSBIGjv-ZBoU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2406:d140::/32 Signature Algorithm: sha256WithRSAEncryption 9a:0b:63:ca:85:9e:9f:ef:5c:cf:99:90:de:e1:4e:d3:a5:d0: 82:3e:37:9a:82:77:c0:ae:3a:18:57:8b:09:27:46:33:f1:c7: 3c:f2:3e:2e:02:cd:eb:50:b1:55:5c:7e:ef:ce:04:3e:43:dc: 25:c3:28:28:d0:61:13:c3:1c:15:5f:3c:23:89:0b:48:81:c6: 58:08:86:40:8f:7d:88:8c:77:09:c8:84:37:37:29:11:15:2f: a5:69:1e:89:c7:be:9b:70:6d:de:15:3c:06:d5:e5:d4:ef:6e: b7:56:cc:62:10:d9:2f:a1:95:0c:59:f2:86:b6:c8:b3:91:95: 70:ef:e3:02:c2:38:ad:dc:45:bd:a4:59:cb:79:69:01:18:b0: cf:f9:f6:4e:22:3a:02:f0:f5:b3:f9:e3:98:49:3c:39:bc:4b: a3:e3:6a:ef:5d:65:a7:79:02:ff:ed:4a:28:2b:97:bc:7d:15: d2:08:76:24:54:40:98:18:ee:09:6d:12:e4:09:62:9d:a5:51: fe:d0:ef:ec:ca:69:03:5d:62:81:d6:8f:60:78:ff:48:19:ca: 6e:48:af:5b:c7:07:72:c6:1e:27:b4:28:80:52:83:2e:e2:b6: fb:17:6c:29:e0:36:46:19:10:c9:18:25:db:b3:37:7f:e7:94: 27:53:47:c0 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICH3QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDNG MDc1RDlDNkYxOERDMDlCREE2MkI3MDg3RUE4MERDNUI3MTFDNTAeFw0yNTAxMTcw MTI5MTFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEJGNzNGNjZCNTNEQUQw MzQwRkYwNEQ0MzQ4MTIwNjhFRkY5OTA2ODUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqzLqEeXoiD5xkXy+dOIkD4sqNF2+5tvjQeJxnFa8ogWXMDTEW B2YMKM40Hix0Y5A6YMF4Bg3wngb2s4IrYUVbC9bcOuQMeuzxaQshk3zcy26JnwEr 7d0IADZnTSs+E68L0trtUUNlri/f54yeqjh8xug4G/Eac8unr02wWQSBSV4u/Skb BAZtDvJ2Tc+smnZlsKyc/0+6nDbgsaboc2rQZ4LqTcnrGzpyioM1U3uJRplTp51C u/gPAmx3tHEI2aLQP5cqMcAxWSCle04XCwWR9KQ5M1FYHu6UJXxmdqcNAEJ7IN84 B6OAHKkKyR9i58szgb1z3kHPl0lZgQQ76kT9AgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUv3P2a1Pa0DQP8E1DSBIGjv+ZBoUwHwYDVR0jBBgwFoAUA/B12cbxjcCb2mK3 CH6oDcW3EcUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 MC9BX0IxMmNieGpjQ2IybUszQ0g2b0RjVzNFY1UuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0FfQjEyY2J4amNDYjJtSzNDSDZvRGNXM0VjVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDAvdjNQMmExUGEwRFFQ OEUxRFNCSUdqdi1aQm9VLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQG0UAwDQYJKoZIhvcNAQELBQADggEBAJoLY8qFnp/vXM+ZkN7hTtOl0II+ N5qCd8CuOhhXiwknRjPxxzzyPi4CzetQsVVcfu/OBD5D3CXDKCjQYRPDHBVfPCOJ C0iBxlgIhkCPfYiMdwnIhDc3KREVL6VpHonHvptwbd4VPAbV5dTvbrdWzGIQ2S+h lQxZ8oa2yLORlXDv4wLCOK3cRb2kWct5aQEYsM/59k4iOgLw9bP545hJPDm8S6Pj au9dZad5Av/tSigrl7x9FdIIdiRUQJgY7gltEuQJYp2lUf7Q7+zKaQNdYoHWj2B4 /0gZym5Ir1vHB3LGHie0KIBSgy7itvsXbCngNkYZEMkYJduzN3/nlCdTR8A= -----END CERTIFICATE-----Generated at Sat Apr 26 13:12:46 2025 by rpki-client