$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/0Nu-ogMGfw1_oT15S_chU1f3EeA.roa File: 0Nu-ogMGfw1_oT15S_chU1f3EeA.roa (raw, json) Hash identifier: AfC84XvODNHB4U5eO/Hypy3Dp8k/4VmY8iSjyNXpxDY= Subject key identifier: D0:DB:BE:A2:03:06:7F:0D:7F:A1:3D:79:4B:F7:21:53:57:F7:11:E0 Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Certificate serial: E2 Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/0Nu-ogMGfw1_oT15S_chU1f3EeA.roa Signing time: Fri 06 Jun 2025 02:36:24 +0000 ROA not before: Fri 06 Jun 2025 02:36:24 +0000 ROA not after: Wed 27 May 2026 07:38:41 +0000 asID: 9808 IP address blocks: 240a:40c3:6010::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 09:12:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Validity Not Before: Jun 6 02:36:24 2025 GMT Not After : May 27 07:38:41 2026 GMT Subject: CN=D0DBBEA203067F0D7FA13D794BF7215357F711E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2e:0c:7b:a9:51:98:14:6f:9e:8f:69:c1:18: e4:76:c5:3b:89:c4:63:a0:77:45:48:5b:80:40:e7: 2b:b0:03:5c:94:95:5e:3b:ff:b5:6d:88:f8:9f:e1: fb:5b:bf:e0:7a:18:59:68:8e:33:9e:82:08:82:bf: 45:f3:7c:07:63:d0:8a:18:84:e9:a2:70:bc:21:f7: 44:71:a0:08:ac:06:b0:8e:67:d2:a8:06:f6:fc:a9: 6c:f3:c0:d1:7c:73:88:e2:15:02:73:11:e1:57:fe: d0:24:dc:2d:87:01:02:fd:67:0c:41:4c:c3:a7:de: 9f:e7:59:5d:e9:fc:29:1c:da:8a:1e:8f:2b:7f:1f: d0:26:b5:04:d2:74:fe:2f:b6:3a:58:5f:5a:79:30: f9:e8:d6:5c:ed:76:8e:e7:fd:15:4c:ab:4c:bc:0e: 07:c5:e0:42:1a:24:f9:ac:e2:cc:38:34:2f:9b:ef: d4:81:3c:ef:8d:77:73:88:ef:b7:95:30:88:c5:c4: ba:d9:41:4d:40:e5:48:be:c9:85:67:46:00:40:eb: bc:e6:a1:51:63:73:02:d0:1f:60:8a:a4:5c:cb:ac: 82:be:71:0a:f4:3a:ee:f1:c1:53:a3:18:3e:cd:33: ae:c5:68:f7:10:25:67:36:1e:ed:36:1c:32:79:7a: fc:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:DB:BE:A2:03:06:7F:0D:7F:A1:3D:79:4B:F7:21:53:57:F7:11:E0 X509v3 Authority Key Identifier: keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/0Nu-ogMGfw1_oT15S_chU1f3EeA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 240a:40c3:6010::/44 Signature Algorithm: sha256WithRSAEncryption 2f:53:59:e5:70:bb:2f:ef:1e:74:40:f8:f6:36:c2:51:60:37: e9:98:54:8c:f3:29:eb:68:a2:bc:e1:01:79:e4:71:cd:81:44: d9:4c:c3:a4:af:92:26:50:19:87:56:59:fd:f5:35:de:44:1d: 0f:00:a7:92:c7:1e:11:08:08:b0:b6:93:3c:b8:a3:ff:b9:40: de:f1:cd:0e:98:de:1c:eb:05:fd:05:a4:22:03:b8:59:73:37: 82:4e:23:c1:1b:42:04:96:ba:62:a3:1b:7c:71:f0:41:1d:51: cb:a2:19:f6:2d:79:7a:98:d1:2c:24:ee:d3:7a:7c:60:11:90: cb:cf:ba:9b:da:85:cb:d2:87:b6:82:38:76:94:33:0b:41:35: 4f:0f:26:c1:1e:6f:7d:35:15:8e:73:5f:16:7f:2c:60:04:1e: f5:96:40:db:a6:61:0e:9b:ed:12:9f:a2:aa:9f:8f:82:e7:34: 10:0e:e3:ff:ae:3d:98:82:18:2d:07:1e:10:76:22:7a:b6:d4: 5a:0a:bb:b0:dc:3d:81:84:7f:04:44:dc:60:03:a1:98:b2:d5: ab:72:a6:6b:ad:fd:3d:be:ac:94:25:ce:8e:2c:c5:34:6f:f9: 93:95:cd:aa:f2:23:54:f3:85:e1:66:75:97:d8:30:38:b5:67: 06:99:0a:cd -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTRF RkY3MzkyRTFFREMxMjI1RkM0Q0ZCOEZBQjZFQjYxN0E5RDI0RDAeFw0yNTA2MDYw MjM2MjRaFw0yNjA1MjcwNzM4NDFaMDMxMTAvBgNVBAMTKEQwREJCRUEyMDMwNjdG MEQ3RkExM0Q3OTRCRjcyMTUzNTdGNzExRTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2Lgx7qVGYFG+ej2nBGOR2xTuJxGOgd0VIW4BA5yuwA1yUlV47 /7VtiPif4ftbv+B6GFlojjOeggiCv0XzfAdj0IoYhOmicLwh90RxoAisBrCOZ9Ko Bvb8qWzzwNF8c4jiFQJzEeFX/tAk3C2HAQL9ZwxBTMOn3p/nWV3p/Ckc2ooejyt/ H9AmtQTSdP4vtjpYX1p5MPno1lztdo7n/RVMq0y8DgfF4EIaJPms4sw4NC+b79SB PO+Nd3OI77eVMIjFxLrZQU1A5Ui+yYVnRgBA67zmoVFjcwLQH2CKpFzLrIK+cQr0 Ou7xwVOjGD7NM67FaPcQJWc2Hu02HDJ5evwJAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQU0Nu+ogMGfw1/oT15S/chU1f3EeAwHwYDVR0jBBgwFoAUlO/3OS4e3BIl/Ez7 j6tuthep0k0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3 Mi9sT18zT1M0ZTNCSWxfRXo3ajZ0dXRoZXAwazAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2xPXzNPUzRlM0JJbF9FejdqNnR1dGhlcDBrMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2NzIvME51LW9nTUdmdzFf b1QxNVNfY2hVMWYzRWVBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHBCQKQMNgEDANBgkqhkiG9w0BAQsFAAOCAQEAL1NZ5XC7L+8edED49jbCUWA3 6ZhUjPMp62iivOEBeeRxzYFE2UzDpK+SJlAZh1ZZ/fU13kQdDwCnksceEQgIsLaT PLij/7lA3vHNDpjeHOsF/QWkIgO4WXM3gk4jwRtCBJa6YqMbfHHwQR1Ry6IZ9i15 epjRLCTu03p8YBGQy8+6m9qFy9KHtoI4dpQzC0E1Tw8mwR5vfTUVjnNfFn8sYAQe 9ZZA26ZhDpvtEp+iqp+Pguc0EA7j/649mIIYLQceEHYierbUWgq7sNw9gYR/BETc YAOhmLLVq3Kma639Pb6slCXOjizFNG/5k5XNqvIjVPOF4WZ1l9gwOLVnBpkKzQ== -----END CERTIFICATE-----Generated at Fri Jul 4 08:19:44 2025 by rpki-client