$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/8TjnHz2fU4VUNaMQrKLy7aGg7Y0.roa File: 8TjnHz2fU4VUNaMQrKLy7aGg7Y0.roa (raw, json) Hash identifier: cex9vARX9aOIfkkNCFidmI/SdPQqZFr42+59S+CGL1g= Subject key identifier: F1:38:E7:1F:3D:9F:53:85:54:35:A3:10:AC:A2:F2:ED:A1:A0:ED:8D Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Certificate serial: 90 Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/8TjnHz2fU4VUNaMQrKLy7aGg7Y0.roa Signing time: Fri 06 Jun 2025 01:44:52 +0000 ROA not before: Fri 06 Jun 2025 01:44:52 +0000 ROA not after: Wed 27 May 2026 07:38:41 +0000 asID: 56041 IP address blocks: 240a:42a8::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 23:42:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Validity Not Before: Jun 6 01:44:52 2025 GMT Not After : May 27 07:38:41 2026 GMT Subject: CN=F138E71F3D9F53855435A310ACA2F2EDA1A0ED8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c0:71:8e:de:97:ff:2b:f6:cc:9d:9a:07:c5: 1b:c5:e6:38:a0:4d:89:58:78:8a:94:d8:25:d3:01: d1:43:67:14:93:c0:db:f7:d7:1f:88:93:da:a8:4e: e9:34:5c:f6:60:d9:0b:55:3f:8f:d2:42:f5:8d:93: 74:fc:55:af:dd:1d:4c:65:4c:50:9e:cc:b8:a8:ec: 4b:39:5d:f1:9d:e8:29:d3:e6:dc:9f:ee:82:29:5d: 5d:01:4b:d7:0a:84:f4:13:36:d3:27:ae:1f:1d:02: 70:86:eb:f7:ce:21:64:90:96:98:dd:cf:70:ca:f9: 57:a0:a2:7d:87:2d:a0:b6:46:41:3e:62:6e:57:8c: 72:e8:d0:74:25:2c:09:8d:b8:5e:f9:69:5b:cb:da: fa:9d:0a:a0:81:e1:22:eb:05:1d:54:ab:5e:d8:f1: 30:51:eb:3e:c5:59:3f:d7:7a:9e:fd:e3:5c:34:9a: 48:81:9d:26:d6:4a:6c:8e:77:22:d0:09:36:ae:e5: 8e:8c:8d:71:37:96:cd:39:6d:d3:87:8f:2c:8c:3d: b5:00:ff:80:cc:2c:6e:5c:a4:bc:c7:d6:48:74:25: 24:48:41:d6:ff:d9:06:af:3b:30:8b:2f:66:0b:78: 3d:4b:fb:ef:00:b1:18:71:2d:ef:5b:1c:c3:22:f3: 37:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:38:E7:1F:3D:9F:53:85:54:35:A3:10:AC:A2:F2:ED:A1:A0:ED:8D X509v3 Authority Key Identifier: keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/8TjnHz2fU4VUNaMQrKLy7aGg7Y0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 240a:42a8::/31 Signature Algorithm: sha256WithRSAEncryption 63:3c:85:24:82:35:21:a4:7f:64:eb:69:9e:d0:94:da:76:6d: d9:3c:92:3d:51:07:2e:ea:99:70:58:98:d5:86:a3:02:98:ee: 7c:6f:da:66:2a:d2:6d:04:09:13:80:8b:94:76:60:76:69:bc: a8:b9:f4:0e:1f:93:83:a2:3f:31:22:6b:a3:6b:a9:b6:6c:77: 78:83:92:2d:91:2f:2b:bd:4a:e9:d4:66:42:d3:7e:77:8f:5b: 22:6c:33:44:55:1c:05:d8:6a:eb:bc:b0:e4:4e:39:55:58:13: 6e:d6:3d:84:03:c2:a5:46:2c:00:bd:98:92:be:1f:f9:e2:e5: 9b:09:eb:5b:db:49:2e:c0:24:03:2a:09:fe:13:9e:56:12:8d: 4e:56:ac:da:00:57:76:d3:2a:95:31:55:67:54:a0:2b:cf:61: 8e:18:ee:75:8d:26:57:84:0c:95:9e:5c:be:dd:df:96:ad:c6: 8a:33:b0:e5:36:1b:81:89:92:07:f1:a5:a1:4a:62:67:a6:9b: ab:b2:38:c4:e5:04:0f:70:98:b8:aa:70:80:75:19:46:19:91: c6:88:de:95:a4:94:b8:89:72:22:77:6c:36:0e:45:db:0d:56: 5a:d8:f5:0e:bb:d1:6c:ca:6f:ab:cf:18:c0:93:a5:cb:e9:d9: ea:59:48:7c -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTRF RkY3MzkyRTFFREMxMjI1RkM0Q0ZCOEZBQjZFQjYxN0E5RDI0RDAeFw0yNTA2MDYw MTQ0NTJaFw0yNjA1MjcwNzM4NDFaMDMxMTAvBgNVBAMTKEYxMzhFNzFGM0Q5RjUz ODU1NDM1QTMxMEFDQTJGMkVEQTFBMEVEOEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMwHGO3pf/K/bMnZoHxRvF5jigTYlYeIqU2CXTAdFDZxSTwNv3 1x+Ik9qoTuk0XPZg2QtVP4/SQvWNk3T8Va/dHUxlTFCezLio7Es5XfGd6CnT5tyf 7oIpXV0BS9cKhPQTNtMnrh8dAnCG6/fOIWSQlpjdz3DK+Vegon2HLaC2RkE+Ym5X jHLo0HQlLAmNuF75aVvL2vqdCqCB4SLrBR1Uq17Y8TBR6z7FWT/Xep7941w0mkiB nSbWSmyOdyLQCTau5Y6MjXE3ls05bdOHjyyMPbUA/4DMLG5cpLzH1kh0JSRIQdb/ 2QavOzCLL2YLeD1L++8AsRhxLe9bHMMi8zdjAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQU8TjnHz2fU4VUNaMQrKLy7aGg7Y0wHwYDVR0jBBgwFoAUlO/3OS4e3BIl/Ez7 j6tuthep0k0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3 Mi9sT18zT1M0ZTNCSWxfRXo3ajZ0dXRoZXAwazAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2xPXzNPUzRlM0JJbF9FejdqNnR1dGhlcDBrMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2NzIvOFRqbkh6MmZVNFZV TmFNUXJLTHk3YUdnN1kwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFASQKQqgwDQYJKoZIhvcNAQELBQADggEBAGM8hSSCNSGkf2TraZ7QlNp2bdk8 kj1RBy7qmXBYmNWGowKY7nxv2mYq0m0ECROAi5R2YHZpvKi59A4fk4OiPzEia6Nr qbZsd3iDki2RLyu9SunUZkLTfnePWyJsM0RVHAXYauu8sOROOVVYE27WPYQDwqVG LAC9mJK+H/ni5ZsJ61vbSS7AJAMqCf4TnlYSjU5WrNoAV3bTKpUxVWdUoCvPYY4Y 7nWNJleEDJWeXL7d35atxoozsOU2G4GJkgfxpaFKYmemm6uyOMTlBA9wmLiqcIB1 GUYZkcaI3pWklLiJciJ3bDYORdsNVlrY9Q670WzKb6vPGMCTpcvp2epZSHw= -----END CERTIFICATE-----Generated at Fri Jul 4 23:29:53 2025 by rpki-client