$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/anYE50FB83Biwm9Cdfrin1Pdke4.roa File: anYE50FB83Biwm9Cdfrin1Pdke4.roa (raw, json) Hash identifier: H3AxRLrszvRvgNqwfmKEg+aMan4hBV5gw92ZRcjtfKI= Subject key identifier: 6A:76:04:E7:41:41:F3:70:62:C2:6F:42:75:FA:E2:9F:53:DD:91:EE Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Certificate serial: 1959 Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/anYE50FB83Biwm9Cdfrin1Pdke4.roa Signing time: Fri 17 Jan 2025 01:23:48 +0000 ROA not before: Fri 17 Jan 2025 01:23:48 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 146845 IP address blocks: 2407:9b40::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 23:37:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6489 (0x1959) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Validity Not Before: Jan 17 01:23:48 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=6A7604E74141F37062C26F4275FAE29F53DD91EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a6:f5:87:20:17:1a:0e:ef:2f:18:f1:7b:18: 8a:33:83:66:6f:3c:8d:1f:4d:52:12:f9:77:d5:77: 61:33:1b:bc:0e:51:3c:65:c6:d3:76:ca:88:1c:0c: bc:a1:71:90:3a:69:ac:87:47:cd:20:0a:16:e2:73: 50:f4:d9:b9:dd:6d:83:c7:1a:c3:a9:7c:ce:25:5e: bd:75:0b:41:9f:9d:57:db:d7:74:b5:95:22:d4:4b: 10:fc:19:e5:fb:7f:fb:df:a4:0d:e9:42:e9:a9:95: 1c:29:aa:46:60:a2:bb:56:f7:7b:3f:e7:1f:55:5a: 82:f2:dc:c9:7b:74:27:a8:68:4c:a6:3f:4f:cc:c4: 8c:af:8b:e9:a9:af:95:b9:9d:79:8d:49:ab:0c:7e: 1a:d2:e2:86:b1:87:ea:45:7c:6f:72:e6:60:88:fc: b6:75:37:9e:0d:95:fe:0e:98:fa:d7:de:1c:69:93: 6f:b2:1c:88:1c:56:15:ba:c9:28:67:b5:2d:5c:18: b1:b3:74:06:72:18:7a:01:7c:9c:f7:b2:37:a7:3d: d8:2b:55:44:ff:9a:35:dc:7b:e8:5b:d1:3d:de:29: 6e:46:c6:09:d8:70:3e:07:1f:20:c4:a1:f5:eb:dd: 87:01:22:9b:67:3f:74:56:4b:2f:98:12:e8:30:52: fe:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:76:04:E7:41:41:F3:70:62:C2:6F:42:75:FA:E2:9F:53:DD:91:EE X509v3 Authority Key Identifier: keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/anYE50FB83Biwm9Cdfrin1Pdke4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:9b40::/32 Signature Algorithm: sha256WithRSAEncryption a6:56:f0:ad:55:e6:1c:5d:06:34:e8:04:6a:96:57:7c:7f:ad: d0:fa:13:77:16:5b:70:ce:93:77:88:8d:b0:33:bf:36:34:df: 68:a4:60:ed:2b:29:57:76:70:f6:dc:03:89:70:7d:57:6c:24: 2c:64:21:de:ab:73:a8:1f:e5:cd:92:1b:63:40:0f:90:5f:de: 1c:48:4b:39:b3:97:bb:54:ef:f6:a7:1f:78:bd:7b:b4:0a:09: d8:65:27:c3:10:bf:2a:ed:37:73:dc:60:c6:5c:9c:df:06:a6: 88:57:7b:f5:88:b9:17:70:84:0c:51:4d:f0:b9:fa:99:33:3d: ca:38:3f:63:41:7a:65:a7:c7:79:48:fa:de:03:37:6b:9d:8c: 61:49:19:7b:0e:83:ef:66:11:30:e6:f5:ec:6a:f5:9b:af:8d: 7f:73:19:ef:b1:56:93:c2:7e:0f:5c:69:df:d6:6a:fa:0d:39: a7:f9:cc:13:f2:9a:24:3e:66:e2:af:51:e2:e1:3c:d6:f9:f0: 06:97:f3:30:90:9e:20:64:41:bf:38:4e:80:54:2e:28:61:b0: 39:6b:cc:0c:a1:bb:38:b4:4f:c8:b8:7d:7c:81:d3:66:ec:50: 22:47:bc:7d:33:d1:e6:d9:f8:71:98:fd:54:b5:51:18:7d:7d: b5:15:43:df -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICGVkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTAxMTcw MTIzNDhaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDZBNzYwNEU3NDE0MUYz NzA2MkMyNkY0Mjc1RkFFMjlGNTNERDkxRUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKpvWHIBcaDu8vGPF7GIozg2ZvPI0fTVIS+XfVd2EzG7wOUTxl xtN2yogcDLyhcZA6aayHR80gChbic1D02bndbYPHGsOpfM4lXr11C0GfnVfb13S1 lSLUSxD8GeX7f/vfpA3pQumplRwpqkZgortW93s/5x9VWoLy3Ml7dCeoaEymP0/M xIyvi+mpr5W5nXmNSasMfhrS4oaxh+pFfG9y5mCI/LZ1N54Nlf4OmPrX3hxpk2+y HIgcVhW6yShntS1cGLGzdAZyGHoBfJz3sjenPdgrVUT/mjXce+hb0T3eKW5GxgnY cD4HHyDEofXr3YcBIptnP3RWSy+YEugwUv6DAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUanYE50FB83Biwm9Cdfrin1Pdke4wHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR 1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5 OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvYW5ZRTUwRkI4M0Jp d205Q2RmcmluMVBka2U0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQHm0AwDQYJKoZIhvcNAQELBQADggEBAKZW8K1V5hxdBjToBGqWV3x/rdD6 E3cWW3DOk3eIjbAzvzY032ikYO0rKVd2cPbcA4lwfVdsJCxkId6rc6gf5c2SG2NA D5Bf3hxISzmzl7tU7/anH3i9e7QKCdhlJ8MQvyrtN3PcYMZcnN8GpohXe/WIuRdw hAxRTfC5+pkzPco4P2NBemWnx3lI+t4DN2udjGFJGXsOg+9mETDm9exq9ZuvjX9z Ge+xVpPCfg9cad/WavoNOaf5zBPymiQ+ZuKvUeLhPNb58AaX8zCQniBkQb84ToBU LihhsDlrzAyhuzi0T8i4fXyB02bsUCJHvH0z0ebZ+HGY/VS1URh9fbUVQ98= -----END CERTIFICATE-----Generated at Wed May 7 22:06:03 2025 by rpki-client