$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3326/RSL_zN0FFnQyQVaZJF4-WKqogdY.roa File: RSL_zN0FFnQyQVaZJF4-WKqogdY.roa (raw, json) Hash identifier: DXvO675SD8xfEXc/+lnJ2lYsI41AG7WtFllLmdhVOrw= Subject key identifier: 45:22:FF:CC:DD:05:16:74:32:41:56:99:24:5E:3E:58:AA:A8:81:D6 Certificate issuer: /CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C Certificate serial: 0590 Authority key identifier: 6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/RSL_zN0FFnQyQVaZJF4-WKqogdY.roa Signing time: Fri 01 Aug 2025 06:36:57 +0000 ROA not before: Fri 01 Aug 2025 06:36:57 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 134768 IP address blocks: 2401:d0e0:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 15:03:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1424 (0x590) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C Validity Not Before: Aug 1 06:36:57 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=4522FFCCDD05167432415699245E3E58AAA881D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:db:ee:b5:65:f3:db:41:36:46:ee:78:29:0e: 05:ad:4e:fb:8b:f5:0b:6d:16:40:ef:b1:1e:b2:bf: d5:a8:e8:95:6e:0c:1a:67:b7:a2:c0:e2:c9:82:8f: 68:0a:e1:f2:ff:28:c0:0e:78:fe:14:fc:54:7b:57: a0:80:a8:3c:fa:fb:e9:f9:42:bb:9e:d2:40:b8:df: d4:3d:3c:c1:0c:ee:b3:a2:cf:0b:dd:5b:1b:42:12: 94:21:c9:9b:cd:18:bf:2c:a4:e9:ca:7e:86:24:2b: 2a:c4:9b:f3:34:bf:a3:62:a2:a3:06:7d:9b:32:77: f5:47:8b:ba:a9:c3:b3:56:09:7d:cc:10:89:9e:3a: 12:e5:fd:29:e2:5d:ae:0c:40:29:1b:a4:29:d5:dc: de:cc:56:3a:20:50:63:ca:f1:e9:eb:d7:06:21:9d: f2:41:34:ca:e8:3e:27:ab:6f:f0:dd:d7:8d:e4:83: bb:c5:e6:41:82:2d:aa:ee:dd:7f:1c:05:db:86:1b: 01:42:72:cc:df:61:43:ea:64:cf:d3:81:76:b0:c1: d7:5b:bf:bd:e5:47:51:28:24:30:4a:dc:96:9e:5f: b2:92:7e:e8:16:71:f1:4a:03:3d:c6:ae:b2:d5:b2: e4:fd:a8:bc:87:40:f3:00:20:49:b7:7e:3e:7e:dd: a9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:22:FF:CC:DD:05:16:74:32:41:56:99:24:5E:3E:58:AA:A8:81:D6 X509v3 Authority Key Identifier: keyid:6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/RSL_zN0FFnQyQVaZJF4-WKqogdY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:d0e0:3::/48 Signature Algorithm: sha256WithRSAEncryption 7d:c6:af:45:4f:2d:a9:e3:d4:16:68:bf:4d:62:fb:c7:7e:cf: 6d:42:41:94:60:a6:eb:ac:e2:da:74:21:0f:c8:f9:f4:cb:f5: 4d:60:cb:3e:8e:02:bd:28:66:08:96:d4:bb:6e:06:57:a6:d9: bf:78:20:e7:89:37:38:4a:65:b8:63:c9:93:e0:16:b2:4f:31: 10:3c:a2:1c:b3:94:7c:41:da:67:4e:ad:88:8a:54:bc:f1:07: 94:a5:68:c3:1a:21:ce:64:a0:97:bf:a5:17:64:80:e8:43:61: 43:d5:ad:4d:d3:04:b3:f3:6c:b7:5b:d5:30:23:3f:9d:48:1e: 94:90:44:7b:40:29:40:81:4e:0b:95:25:a1:ea:b9:9f:1e:5a: fa:62:28:80:52:34:ed:8c:c1:78:ed:7c:7c:4d:c3:49:31:a8: 7d:97:f7:f7:1e:3d:7e:49:50:8c:b8:e3:3e:36:7b:18:14:f4: 21:58:bb:e0:4b:b7:95:0f:31:35:d0:3e:e8:57:da:12:4c:8d: 81:05:94:b6:76:dd:5d:54:57:3b:9c:4e:8f:7d:04:62:d7:dd: 9c:3f:50:b7:c9:1e:22:88:74:1d:49:b9:72:2f:dd:43:d2:90: 28:72:4a:2e:b1:15:bf:94:58:2d:7b:28:88:42:2b:f3:08:16: cd:40:dc:e0 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICBZAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkEx MUVFNDc0MjVEMTRFQkFGMkZDRDI0RDIwNjJCMEE1MkJBMDQyQzAeFw0yNTA4MDEw NjM2NTdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDQ1MjJGRkNDREQwNTE2 NzQzMjQxNTY5OTI0NUUzRTU4QUFBODgxRDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCh2+61ZfPbQTZG7ngpDgWtTvuL9QttFkDvsR6yv9Wo6JVuDBpn t6LA4smCj2gK4fL/KMAOeP4U/FR7V6CAqDz6++n5Qrue0kC439Q9PMEM7rOizwvd WxtCEpQhyZvNGL8spOnKfoYkKyrEm/M0v6NioqMGfZsyd/VHi7qpw7NWCX3MEIme OhLl/SniXa4MQCkbpCnV3N7MVjogUGPK8enr1wYhnfJBNMroPierb/Dd143kg7vF 5kGCLaru3X8cBduGGwFCcszfYUPqZM/TgXawwddbv73lR1EoJDBK3JaeX7KSfugW cfFKAz3GrrLVsuT9qLyHQPMAIEm3fj5+3am5AgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQURSL/zN0FFnQyQVaZJF4+WKqogdYwHwYDVR0jBBgwFoAUahHuR0JdFOuvL80k 0gYrClK6BCwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy Ni9haEh1UjBKZEZPdXZMODBrMGdZckNsSzZCQ3cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2FoSHVSMEpkRk91dkw4MGswZ1lyQ2xLNkJDdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjYvUlNMX3pOMEZGblF5 UVZhWkpGNC1XS3FvZ2RZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHACQB0OAAAzANBgkqhkiG9w0BAQsFAAOCAQEAfcavRU8tqePUFmi/TWL7x37P bUJBlGCm66zi2nQhD8j59Mv1TWDLPo4CvShmCJbUu24GV6bZv3gg54k3OEpluGPJ k+AWsk8xEDyiHLOUfEHaZ06tiIpUvPEHlKVowxohzmSgl7+lF2SA6ENhQ9WtTdME s/Nst1vVMCM/nUgelJBEe0ApQIFOC5Uloeq5nx5a+mIogFI07YzBeO18fE3DSTGo fZf39x49fklQjLjjPjZ7GBT0IVi74Eu3lQ8xNdA+6FfaEkyNgQWUtnbdXVRXO5xO j30EYtfdnD9Qt8keIoh0HUm5ci/dQ9KQKHJKLrEVv5RYLXsoiEIr8wgWzUDc4A== -----END CERTIFICATE-----Generated at Mon Aug 11 10:45:33 2025 by rpki-client