$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2564/j_kpTNBSK3t7GObLuJuO84r6yXg.roa File: j_kpTNBSK3t7GObLuJuO84r6yXg.roa (raw, json) Hash identifier: 92qu/6Pnh10gXsJpooRaqzuk+tEHFKZQlp45GGTTNME= Subject key identifier: 8F:F9:29:4C:D0:52:2B:7B:7B:18:E6:CB:B8:9B:8E:F3:8A:FA:C9:78 Certificate issuer: /CN=6A21A11AAC4EAE0A630659B31A230B08D6B58177 Certificate serial: 1D6C Authority key identifier: 6A:21:A1:1A:AC:4E:AE:0A:63:06:59:B3:1A:23:0B:08:D6:B5:81:77 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/aiGhGqxOrgpjBlmzGiMLCNa1gXc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2564/j_kpTNBSK3t7GObLuJuO84r6yXg.roa Signing time: Tue 08 Apr 2025 01:43:53 +0000 ROA not before: Tue 08 Apr 2025 01:43:53 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 131530 IP address blocks: 2403:fc0::/32 maxlen: 38 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2564/aiGhGqxOrgpjBlmzGiMLCNa1gXc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2564/aiGhGqxOrgpjBlmzGiMLCNa1gXc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/aiGhGqxOrgpjBlmzGiMLCNa1gXc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7532 (0x1d6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A21A11AAC4EAE0A630659B31A230B08D6B58177 Validity Not Before: Apr 8 01:43:53 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=8FF9294CD0522B7B7B18E6CBB89B8EF38AFAC978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7a:b9:4d:15:a1:93:00:08:b9:70:19:8c:b3: 4c:c8:7a:dd:6a:aa:e6:35:38:60:ae:4e:ec:2e:84: f1:fe:10:e1:21:db:87:38:41:b1:78:c9:f7:55:90: 67:99:81:f3:02:3e:07:cc:75:3f:ae:c7:03:08:c1: f3:c4:c1:2d:ca:7f:f3:4a:7f:6d:8b:9c:e9:13:f8: 83:83:2c:c0:12:0c:f4:da:78:91:18:cf:cc:ad:60: 96:95:9d:92:49:75:39:0f:cc:16:83:83:b5:d0:8d: c4:95:f1:44:87:05:27:c6:f4:c7:4f:73:4f:96:c7: 6e:8f:01:df:ca:3e:63:4a:f8:7b:ea:6b:36:d5:a1: b8:80:98:17:8e:9f:7c:92:6d:f9:cb:88:b2:51:f3: 61:d1:e6:25:e9:c7:7c:61:14:9c:ba:da:0b:6e:00: 28:ff:71:c1:e9:f6:f9:79:75:71:35:9f:c0:ac:ca: d4:f1:78:4c:fc:ab:b8:27:45:35:f7:ff:88:f5:f1: aa:7d:11:c2:ef:43:dd:7a:a1:08:2c:47:c1:da:52: ed:cc:ed:24:f1:d4:26:a4:26:ed:81:84:c5:d4:7d: df:48:aa:48:3b:f5:47:80:78:60:c8:f3:ad:bf:c9: 4a:7e:f8:fc:fd:b4:c1:be:21:04:44:38:31:cb:72: 3d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F9:29:4C:D0:52:2B:7B:7B:18:E6:CB:B8:9B:8E:F3:8A:FA:C9:78 X509v3 Authority Key Identifier: keyid:6A:21:A1:1A:AC:4E:AE:0A:63:06:59:B3:1A:23:0B:08:D6:B5:81:77 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2564/aiGhGqxOrgpjBlmzGiMLCNa1gXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/aiGhGqxOrgpjBlmzGiMLCNa1gXc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2564/j_kpTNBSK3t7GObLuJuO84r6yXg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2403:fc0::/32 Signature Algorithm: sha256WithRSAEncryption 11:88:f4:6a:88:97:35:31:99:e6:19:d6:4a:80:1d:22:be:e0: c7:c1:e2:12:c6:15:44:46:c6:9d:7b:83:bf:30:cb:b6:31:0b: 1b:63:7e:28:d8:e4:3c:06:22:83:78:b1:fc:c9:88:4f:75:23: 32:24:ef:fa:0d:2c:ac:b1:97:f5:8b:e3:27:41:a6:00:21:fa: c2:f1:b7:14:2e:b5:20:8f:c4:37:6d:bf:5d:b9:16:1b:a1:0d: 79:77:f1:a3:d3:73:0c:b3:4b:db:04:b2:99:4e:f1:f7:ff:02: bb:6a:9d:7a:03:e4:5d:6e:6c:c8:79:74:4d:8a:8a:bc:0d:68: 08:9e:08:55:c4:bf:91:71:a4:f3:21:4d:a7:62:71:04:5b:6a: 92:04:e2:d1:54:6b:62:9b:53:1c:d2:c9:a5:f5:da:ff:a5:e0: 94:a2:73:45:1d:61:d3:86:b6:8f:83:db:73:e8:25:bd:69:e2: 3c:9a:5c:bc:70:13:6f:26:66:fe:05:83:ae:48:8b:8d:dc:95: ea:b4:0f:65:f9:9e:fa:c9:3e:03:34:cd:ab:3c:f9:18:4c:4a: ea:97:79:ac:ff:4f:93:73:80:e1:d2:10:54:75:16:f7:0e:f3: 40:8e:82:f6:5d:64:de:46:b5:63:c0:0c:b0:30:49:e1:73:2c: 0e:e0:39:f2 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICHWwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkEy MUExMUFBQzRFQUUwQTYzMDY1OUIzMUEyMzBCMDhENkI1ODE3NzAeFw0yNTA0MDgw MTQzNTNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDhGRjkyOTRDRDA1MjJC N0I3QjE4RTZDQkI4OUI4RUYzOEFGQUM5NzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBerlNFaGTAAi5cBmMs0zIet1qquY1OGCuTuwuhPH+EOEh24c4 QbF4yfdVkGeZgfMCPgfMdT+uxwMIwfPEwS3Kf/NKf22LnOkT+IODLMASDPTaeJEY z8ytYJaVnZJJdTkPzBaDg7XQjcSV8USHBSfG9MdPc0+Wx26PAd/KPmNK+HvqazbV obiAmBeOn3ySbfnLiLJR82HR5iXpx3xhFJy62gtuACj/ccHp9vl5dXE1n8CsytTx eEz8q7gnRTX3/4j18ap9EcLvQ916oQgsR8HaUu3M7STx1CakJu2BhMXUfd9Iqkg7 9UeAeGDI862/yUp++Pz9tMG+IQREODHLcj0FAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUj/kpTNBSK3t7GObLuJuO84r6yXgwHwYDVR0jBBgwFoAUaiGhGqxOrgpjBlmz GiMLCNa1gXcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjU2 NC9haUdoR3F4T3JncGpCbG16R2lNTENOYTFnWGMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2FpR2hHcXhPcmdwakJsbXpHaU1MQ05hMWdYYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI1NjQval9rcFROQlNLM3Q3 R09iTHVKdU84NHI2eVhnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQDD8AwDQYJKoZIhvcNAQELBQADggEBABGI9GqIlzUxmeYZ1kqAHSK+4MfB 4hLGFURGxp17g78wy7YxCxtjfijY5DwGIoN4sfzJiE91IzIk7/oNLKyxl/WL4ydB pgAh+sLxtxQutSCPxDdtv125FhuhDXl38aPTcwyzS9sEsplO8ff/ArtqnXoD5F1u bMh5dE2KirwNaAieCFXEv5FxpPMhTadicQRbapIE4tFUa2KbUxzSyaX12v+l4JSi c0UdYdOGto+D23PoJb1p4jyaXLxwE28mZv4Fg65Ii43cleq0D2X5nvrJPgM0zas8 +RhMSuqXeaz/T5NzgOHSEFR1FvcO80COgvZdZN5GtWPADLAwSeFzLA7gOfI= -----END CERTIFICATE-----Generated at Sun May 18 01:59:44 2025 by rpki-client