$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/JwMROxBOzUpMBRJtv0oVqEOy0N8.roa File: JwMROxBOzUpMBRJtv0oVqEOy0N8.roa (raw, json) Hash identifier: iri99aIFHiiOaeLbrRDGUe0qgIpdMfPKUnh2WWhKwbA= Subject key identifier: 27:03:11:3B:10:4E:CD:4A:4C:05:12:6D:BF:4A:15:A8:43:B2:D0:DF Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Certificate serial: CD Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/JwMROxBOzUpMBRJtv0oVqEOy0N8.roa Signing time: Fri 06 Jun 2025 02:32:42 +0000 ROA not before: Fri 06 Jun 2025 02:32:42 +0000 ROA not after: Wed 27 May 2026 07:38:41 +0000 asID: 134810 IP address blocks: 240a:40c1:4010::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 23:42:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Validity Not Before: Jun 6 02:32:42 2025 GMT Not After : May 27 07:38:41 2026 GMT Subject: CN=2703113B104ECD4A4C05126DBF4A15A843B2D0DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:86:eb:dc:e5:81:87:75:42:4f:1d:76:6d:8f: 23:ca:96:f5:3b:73:fc:14:fe:ef:c8:90:f7:78:d2: 52:98:17:3c:43:77:97:47:62:98:7c:40:bc:35:ce: 5c:05:2c:1b:85:28:e1:5b:ca:dc:e9:db:9c:87:dd: ae:6b:84:f4:ee:5d:83:52:7a:68:20:39:36:da:23: a5:69:12:e4:ee:89:f9:44:4a:0d:bf:33:4c:3a:cc: dc:0e:6e:aa:5e:10:06:c2:ca:c8:1d:eb:d9:75:7f: 61:8d:4a:f0:59:b9:b1:82:e1:f3:ff:81:57:f3:00: b9:23:64:4a:af:77:b3:94:ba:d8:ef:98:6d:3e:5c: 80:a0:f6:cf:54:d0:ee:4c:0a:a9:58:bb:ea:5c:41: fa:bb:50:b6:79:10:cd:fd:86:be:6b:a2:d4:89:cc: 1b:17:9a:af:d9:17:e7:b9:77:73:bb:a6:3c:ea:e6: 59:4f:25:9f:e4:a9:5b:0a:89:51:78:20:24:48:8a: 97:b5:f5:57:14:88:dc:81:02:5b:47:b8:8b:ba:1b: 2c:fe:1f:73:15:d9:31:b3:29:da:b3:72:21:cb:27: 16:cf:11:9e:2b:0b:02:3a:15:23:da:43:f1:a2:b1: d4:a0:0a:e7:a2:76:0f:84:3e:81:5d:2e:b8:34:5f: be:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:03:11:3B:10:4E:CD:4A:4C:05:12:6D:BF:4A:15:A8:43:B2:D0:DF X509v3 Authority Key Identifier: keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/JwMROxBOzUpMBRJtv0oVqEOy0N8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 240a:40c1:4010::/44 Signature Algorithm: sha256WithRSAEncryption d7:dd:93:38:05:e3:5f:af:2b:5d:ca:e7:2e:fe:8f:94:33:dc: 04:3c:de:ef:07:d9:ba:82:3d:e4:de:f8:7d:2a:10:14:4e:2a: 7c:fc:29:17:8d:e0:27:be:7a:36:35:56:10:c2:9f:e2:c4:6a: ae:d3:3a:59:7e:1c:9c:29:39:74:ac:0b:18:78:be:4e:5f:d2: c5:ac:45:a5:4d:5d:bf:88:4a:d2:ee:f3:cd:3b:e5:68:0a:95: d2:8e:72:43:c1:31:f1:60:f5:77:62:61:ba:1e:bb:98:51:ec: dd:ff:b7:97:5e:bc:ca:a4:d9:38:43:8c:4f:84:ef:82:be:0c: f9:47:f0:5b:6b:eb:c8:15:97:3c:94:d9:e5:36:e8:e5:be:8c: d9:7c:a8:9c:29:03:3a:df:14:d8:d1:29:38:ed:a8:dd:00:4b: 4c:c8:a1:d7:14:55:c8:cc:3c:8e:7a:07:c8:d3:ca:f3:22:e3: ea:6d:36:0a:34:26:2a:3f:7f:4e:6c:9c:cb:ea:0a:24:85:67: 47:2f:62:f5:dc:d2:77:dd:69:da:3f:d5:0d:43:bd:7f:55:f5: 7f:6d:3d:29:e0:6a:9c:d4:90:1e:75:c2:58:f1:26:cf:f3:0d: 68:8e:4b:8e:d4:9d:3c:f6:d4:88:6d:e1:ee:ed:6c:a1:5e:93: b0:3c:90:48 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTRF RkY3MzkyRTFFREMxMjI1RkM0Q0ZCOEZBQjZFQjYxN0E5RDI0RDAeFw0yNTA2MDYw MjMyNDJaFw0yNjA1MjcwNzM4NDFaMDMxMTAvBgNVBAMTKDI3MDMxMTNCMTA0RUNE NEE0QzA1MTI2REJGNEExNUE4NDNCMkQwREYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXhuvc5YGHdUJPHXZtjyPKlvU7c/wU/u/IkPd40lKYFzxDd5dH Yph8QLw1zlwFLBuFKOFbytzp25yH3a5rhPTuXYNSemggOTbaI6VpEuTuiflESg2/ M0w6zNwObqpeEAbCysgd69l1f2GNSvBZubGC4fP/gVfzALkjZEqvd7OUutjvmG0+ XICg9s9U0O5MCqlYu+pcQfq7ULZ5EM39hr5rotSJzBsXmq/ZF+e5d3O7pjzq5llP JZ/kqVsKiVF4ICRIipe19VcUiNyBAltHuIu6Gyz+H3MV2TGzKdqzciHLJxbPEZ4r CwI6FSPaQ/GisdSgCueidg+EPoFdLrg0X77BAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUJwMROxBOzUpMBRJtv0oVqEOy0N8wHwYDVR0jBBgwFoAUlO/3OS4e3BIl/Ez7 j6tuthep0k0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3 Mi9sT18zT1M0ZTNCSWxfRXo3ajZ0dXRoZXAwazAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2xPXzNPUzRlM0JJbF9FejdqNnR1dGhlcDBrMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2NzIvSndNUk94Qk96VXBN QlJKdHYwb1ZxRU95ME44LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHBCQKQMFAEDANBgkqhkiG9w0BAQsFAAOCAQEA192TOAXjX68rXcrnLv6PlDPc BDze7wfZuoI95N74fSoQFE4qfPwpF43gJ756NjVWEMKf4sRqrtM6WX4cnCk5dKwL GHi+Tl/SxaxFpU1dv4hK0u7zzTvlaAqV0o5yQ8Ex8WD1d2Jhuh67mFHs3f+3l168 yqTZOEOMT4Tvgr4M+UfwW2vryBWXPJTZ5Tbo5b6M2XyonCkDOt8U2NEpOO2o3QBL TMih1xRVyMw8jnoHyNPK8yLj6m02CjQmKj9/Tmycy+oKJIVnRy9i9dzSd91p2j/V DUO9f1X1f209KeBqnNSQHnXCWPEmz/MNaI5LjtSdPPbUiG3h7u1soV6TsDyQSA== -----END CERTIFICATE-----Generated at Fri Jul 4 23:27:24 2025 by rpki-client