$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/KFiSgiNzwWBNZ_TwfQc6dj8zxSw.roa File: KFiSgiNzwWBNZ_TwfQc6dj8zxSw.roa (raw, json) Hash identifier: TQIikSWPmXOkQWx+pRcKAeNfiHkBQeFOkunziKZ3r3c= Subject key identifier: 28:58:92:82:23:73:C1:60:4D:67:F4:F0:7D:07:3A:76:3F:33:C5:2C Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Certificate serial: 58 Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/KFiSgiNzwWBNZ_TwfQc6dj8zxSw.roa Signing time: Tue 27 May 2025 08:36:33 +0000 ROA not before: Tue 27 May 2025 08:36:33 +0000 ROA not after: Wed 27 May 2026 07:38:41 +0000 asID: 9808 IP address blocks: 240a:42f4::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 03:44:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Validity Not Before: May 27 08:36:33 2025 GMT Not After : May 27 07:38:41 2026 GMT Subject: CN=285892822373C1604D67F4F07D073A763F33C52C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b7:9b:c1:f2:5d:29:f0:ff:f6:96:91:95:78: cf:85:2d:a7:75:a8:3c:3d:5b:28:2c:c1:09:04:a7: bf:38:55:40:8d:b7:21:b9:cf:be:7c:da:1f:70:44: a4:48:cd:d7:61:ea:21:00:ec:63:bd:7e:3e:de:a9: f7:6a:59:49:89:b5:ef:eb:25:45:5e:81:29:0d:9d: e0:73:1e:10:17:2f:fc:b0:03:18:62:c2:a2:ff:14: 03:ca:7d:32:b5:21:b6:ac:52:4c:c5:e1:ff:da:7a: bb:8b:dc:a7:06:68:58:c4:e9:df:61:6d:22:c2:20: f9:76:27:14:94:41:be:26:c5:01:f0:4d:78:8e:02: 6f:dd:14:7d:7b:ae:72:13:05:f3:a7:cc:6c:81:ec: 2a:36:cb:85:fd:5b:67:84:22:0f:ba:bf:29:21:ac: f3:17:ff:43:04:cf:5e:ba:a9:d1:4b:bc:f8:28:6b: 5f:55:c9:a9:4c:c9:73:7d:03:88:fd:95:4a:a0:3e: 1a:16:c6:cb:e1:58:49:b7:51:f8:17:d6:57:18:d8: 40:b6:b8:cd:1a:e3:6b:84:2f:92:3a:a7:82:52:93: 79:3a:c8:6d:64:c5:84:4f:e3:9b:9c:19:34:ec:04: f5:30:4c:f9:d6:3f:be:c3:25:a1:7e:fb:db:59:d8: ee:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:58:92:82:23:73:C1:60:4D:67:F4:F0:7D:07:3A:76:3F:33:C5:2C X509v3 Authority Key Identifier: keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/KFiSgiNzwWBNZ_TwfQc6dj8zxSw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 240a:42f4::/31 Signature Algorithm: sha256WithRSAEncryption ab:5d:f1:0a:89:71:50:0c:56:b7:b5:3d:0a:7b:33:ce:52:a1: 99:17:95:c2:6e:94:76:90:f8:94:f0:3d:a4:bb:fe:56:58:31: d7:ec:16:ef:c0:eb:63:ac:a6:f5:d7:41:7d:f3:e2:6b:da:9c: 2b:96:45:82:25:18:fe:1f:20:81:90:b0:00:c6:b3:1e:a0:5d: 63:0e:42:ad:c7:aa:ef:62:03:70:72:0d:be:61:c6:c6:e2:7a: 69:51:fb:26:d9:3d:01:18:3b:ec:c9:ef:7f:b2:4f:a7:7e:29: d1:7a:84:c0:22:fb:8a:71:ca:12:77:c0:b4:45:08:cb:34:7b: a1:b8:c1:35:9b:17:7e:24:9d:3b:33:cb:1b:cd:61:82:ed:e0: 32:7b:66:64:5d:77:ce:34:91:df:d6:86:49:9e:48:6b:6f:fe: 0a:38:74:f9:8d:32:27:b6:c6:88:d0:f6:39:5a:7f:85:a7:5e: e5:ed:dc:c7:a3:52:57:bc:92:ea:f9:dc:3a:4b:18:79:6c:c5: 89:de:1b:9a:33:b5:10:b3:ae:ac:ec:4e:1c:9e:65:2b:05:51: fe:23:f2:ed:2c:f3:d2:85:94:93:87:02:a5:55:00:bc:18:a7: 62:99:47:a1:9d:2f:e7:e5:c5:35:da:82:4d:ac:b1:4f:47:6a: dc:e1:42:c2 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgIBWDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NEVG RjczOTJFMUVEQzEyMjVGQzRDRkI4RkFCNkVCNjE3QTlEMjREMB4XDTI1MDUyNzA4 MzYzM1oXDTI2MDUyNzA3Mzg0MVowMzExMC8GA1UEAxMoMjg1ODkyODIyMzczQzE2 MDRENjdGNEYwN0QwNzNBNzYzRjMzQzUyQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJ63m8HyXSnw//aWkZV4z4Utp3WoPD1bKCzBCQSnvzhVQI23IbnP vnzaH3BEpEjN12HqIQDsY71+Pt6p92pZSYm17+slRV6BKQ2d4HMeEBcv/LADGGLC ov8UA8p9MrUhtqxSTMXh/9p6u4vcpwZoWMTp32FtIsIg+XYnFJRBvibFAfBNeI4C b90UfXuuchMF86fMbIHsKjbLhf1bZ4QiD7q/KSGs8xf/QwTPXrqp0Uu8+ChrX1XJ qUzJc30DiP2VSqA+GhbGy+FYSbdR+BfWVxjYQLa4zRrja4QvkjqnglKTeTrIbWTF hE/jm5wZNOwE9TBM+dY/vsMloX7721nY7lMCAwEAAaOCAfQwggHwMB0GA1UdDgQW BBQoWJKCI3PBYE1n9PB9Bzp2PzPFLDAfBgNVHSMEGDAWgBSU7/c5Lh7cEiX8TPuP q262F6nSTTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNjcy L2xPXzNPUzRlM0JJbF9FejdqNnR1dGhlcDBrMC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvbE9fM09TNGUzQklsX0V6N2o2dHV0aGVwMGswLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3Mi9LRmlTZ2lOendXQk5a X1R3ZlFjNmRqOHp4U3cucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH AwUBJApC9DANBgkqhkiG9w0BAQsFAAOCAQEAq13xColxUAxWt7U9CnszzlKhmReV wm6UdpD4lPA9pLv+Vlgx1+wW78DrY6ym9ddBffPia9qcK5ZFgiUY/h8ggZCwAMaz HqBdYw5Crceq72IDcHINvmHGxuJ6aVH7Jtk9ARg77Mnvf7JPp34p0XqEwCL7inHK EnfAtEUIyzR7objBNZsXfiSdOzPLG81hgu3gMntmZF13zjSR39aGSZ5Ia2/+Cjh0 +Y0yJ7bGiND2OVp/hade5e3cx6NSV7yS6vncOksYeWzFid4bmjO1ELOurOxOHJ5l KwVR/iPy7Szz0oWUk4cCpVUAvBinYplHoZ0v5+XFNdqCTayxT0dq3OFCwg== -----END CERTIFICATE-----Generated at Fri Jul 4 23:49:58 2025 by rpki-client