$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/0gbmlyAVWCwfJVFLsVZB5B11dEc.roa File: 0gbmlyAVWCwfJVFLsVZB5B11dEc.roa (raw, json) Hash identifier: vsfTSGmfiod4GLzKID0JpoMEU7+ZmyIxg6AT8LBWFNk= Subject key identifier: D2:06:E6:97:20:15:58:2C:1F:25:51:4B:B1:56:41:E4:1D:75:74:47 Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Certificate serial: 3C Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/0gbmlyAVWCwfJVFLsVZB5B11dEc.roa Signing time: Tue 27 May 2025 08:25:29 +0000 ROA not before: Tue 27 May 2025 08:25:29 +0000 ROA not after: Wed 27 May 2026 07:38:41 +0000 asID: 9808 IP address blocks: 240a:42c4::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 09:12:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Validity Not Before: May 27 08:25:29 2025 GMT Not After : May 27 07:38:41 2026 GMT Subject: CN=D206E6972015582C1F25514BB15641E41D757447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6b:fb:a8:e4:50:9c:aa:b6:21:91:4b:b1:b6: 9b:2d:a8:44:ee:d1:d7:07:2b:cc:da:90:40:02:66: 6b:c1:66:c6:c5:e7:74:b7:4d:a3:69:b5:62:a4:59: 8d:d7:09:8f:06:22:c7:da:c7:86:42:c2:0e:18:94: 59:da:d1:ec:b7:04:26:a7:b8:d8:28:dc:1d:d7:59: 05:df:d2:79:ec:3b:80:24:c4:ad:ab:90:77:e8:15: a7:69:4e:52:67:d1:77:c9:b8:53:00:5b:bb:8a:e5: 79:e1:36:28:a3:65:5b:1d:44:9e:02:dd:c1:11:75: 1d:10:75:ee:a2:dd:62:c6:5a:45:2b:7f:7e:31:cc: 2a:77:24:dc:f5:ad:c1:67:67:60:a9:54:ce:2b:8a: 72:62:7b:f7:27:c7:7e:09:88:93:f5:d9:41:79:7c: 48:ce:d0:b3:b8:04:26:29:e1:38:70:6d:4f:d1:77: 7a:d0:60:2f:8c:e9:86:00:b6:81:64:77:12:62:8c: 86:9c:4b:36:d1:c8:04:f8:78:41:92:e6:b3:a2:d4: a9:b3:2b:54:e8:62:34:76:53:6f:ce:6a:c3:ec:c9: 42:94:37:b7:9d:3a:0e:4a:ba:3e:51:cd:92:a3:9b: b8:34:93:a1:f0:0b:9d:8c:98:4e:9c:4a:48:51:8f: a8:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:06:E6:97:20:15:58:2C:1F:25:51:4B:B1:56:41:E4:1D:75:74:47 X509v3 Authority Key Identifier: keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/0gbmlyAVWCwfJVFLsVZB5B11dEc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 240a:42c4::/31 Signature Algorithm: sha256WithRSAEncryption 30:23:aa:ed:ca:d9:23:3f:0a:f3:6c:da:ac:1a:af:2e:af:a2: be:94:d0:a6:7f:53:34:9e:9a:d4:eb:b9:2e:81:e9:64:7b:d1: 24:c6:35:9d:0a:46:77:22:29:2d:85:48:7e:41:64:d1:f2:bf: 7c:b9:69:8e:a5:5e:59:06:ee:65:de:35:20:59:a8:68:e6:3e: 4e:bc:a0:21:46:e3:2c:ec:81:ae:e7:45:fb:5e:7d:f5:65:f8: 13:a1:a9:6a:f6:22:9e:2c:be:55:b9:f3:8e:09:ea:d2:e0:ad: f4:7a:02:de:93:3d:2f:19:15:cb:e6:24:45:0e:31:f3:4f:0a: 0e:42:47:b1:66:08:09:ab:97:62:74:12:a4:8d:24:69:75:04: 8a:c1:df:aa:0b:2e:08:fe:1d:81:e0:6e:f9:93:16:ab:6e:9e: 1f:17:28:7b:06:0d:e5:7a:00:3a:78:b8:d5:30:43:20:a9:b5: 1f:d8:94:b7:75:f9:04:86:4b:3f:25:09:8a:b9:cd:d9:a0:4b: 22:c7:28:44:2a:11:19:b9:7e:ca:03:c5:0a:95:36:ff:6e:07: e7:74:88:b9:16:87:86:ac:54:45:7b:ae:9b:2a:3f:dc:b8:4a: ff:40:39:6c:43:62:ca:d2:fc:f1:45:c7:65:37:60:19:64:f3: 64:5b:7e:51 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgIBPDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NEVG RjczOTJFMUVEQzEyMjVGQzRDRkI4RkFCNkVCNjE3QTlEMjREMB4XDTI1MDUyNzA4 MjUyOVoXDTI2MDUyNzA3Mzg0MVowMzExMC8GA1UEAxMoRDIwNkU2OTcyMDE1NTgy QzFGMjU1MTRCQjE1NjQxRTQxRDc1NzQ0NzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL5r+6jkUJyqtiGRS7G2my2oRO7R1wcrzNqQQAJma8FmxsXndLdN o2m1YqRZjdcJjwYix9rHhkLCDhiUWdrR7LcEJqe42CjcHddZBd/Seew7gCTErauQ d+gVp2lOUmfRd8m4UwBbu4rleeE2KKNlWx1EngLdwRF1HRB17qLdYsZaRSt/fjHM Knck3PWtwWdnYKlUziuKcmJ79yfHfgmIk/XZQXl8SM7Qs7gEJinhOHBtT9F3etBg L4zphgC2gWR3EmKMhpxLNtHIBPh4QZLms6LUqbMrVOhiNHZTb85qw+zJQpQ3t506 Dkq6PlHNkqObuDSTofALnYyYTpxKSFGPqDkCAwEAAaOCAfQwggHwMB0GA1UdDgQW BBTSBuaXIBVYLB8lUUuxVkHkHXV0RzAfBgNVHSMEGDAWgBSU7/c5Lh7cEiX8TPuP q262F6nSTTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNjcy L2xPXzNPUzRlM0JJbF9FejdqNnR1dGhlcDBrMC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvbE9fM09TNGUzQklsX0V6N2o2dHV0aGVwMGswLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3Mi8wZ2JtbHlBVldDd2ZK VkZMc1ZaQjVCMTFkRWMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH AwUBJApCxDANBgkqhkiG9w0BAQsFAAOCAQEAMCOq7crZIz8K82zarBqvLq+ivpTQ pn9TNJ6a1Ou5LoHpZHvRJMY1nQpGdyIpLYVIfkFk0fK/fLlpjqVeWQbuZd41IFmo aOY+TrygIUbjLOyBrudF+1599WX4E6GpavYiniy+Vbnzjgnq0uCt9HoC3pM9LxkV y+YkRQ4x808KDkJHsWYICauXYnQSpI0kaXUEisHfqgsuCP4dgeBu+ZMWq26eHxco ewYN5XoAOni41TBDIKm1H9iUt3X5BIZLPyUJirnN2aBLIscoRCoRGbl+ygPFCpU2 /24H53SIuRaHhqxURXuumyo/3LhK/0A5bENiytL88UXHZTdgGWTzZFt+UQ== -----END CERTIFICATE-----Generated at Fri Jul 4 08:04:03 2025 by rpki-client