$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/KNirltEkqj4tDEBAiDzpJGbvBSg.roa File: KNirltEkqj4tDEBAiDzpJGbvBSg.roa (raw, json) Hash identifier: J61E136Vkhznu7NDsKVSiYdgQtqDHL3NxZzQs21IzSA= Subject key identifier: 28:D8:AB:96:D1:24:AA:3E:2D:0C:40:40:88:3C:E9:24:66:EF:05:28 Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Certificate serial: B3 Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/KNirltEkqj4tDEBAiDzpJGbvBSg.roa Signing time: Fri 06 Jun 2025 02:22:22 +0000 ROA not before: Fri 06 Jun 2025 02:22:22 +0000 ROA not after: Wed 27 May 2026 07:38:41 +0000 asID: 9808 IP address blocks: 240a:40c1::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 09:12:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 179 (0xb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Validity Not Before: Jun 6 02:22:22 2025 GMT Not After : May 27 07:38:41 2026 GMT Subject: CN=28D8AB96D124AA3E2D0C4040883CE92466EF0528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ae:61:cb:2e:80:69:e4:cc:60:53:47:e2:6c: e3:c9:52:b5:53:91:1c:c0:1a:2c:81:03:60:dd:06: 21:91:58:23:95:bc:cd:b6:42:a2:88:a0:6a:d2:2f: 06:d3:bf:b2:54:70:29:74:d7:16:45:03:75:a2:3c: 4f:7a:4f:90:de:b6:55:11:6f:e3:4b:fa:b1:11:1c: c5:7c:f8:82:82:97:38:cf:b4:94:7b:0b:a3:04:07: 06:d0:28:e4:8e:92:25:bc:de:97:02:27:84:ef:cc: ed:f6:9f:74:a1:0b:9d:c5:ff:bb:03:99:0a:d4:90: 55:f2:c8:5a:17:50:e2:ea:62:5d:64:a0:c8:de:65: 77:a0:17:d9:f6:3f:a7:21:a5:26:63:28:d5:89:96: 04:79:e0:3b:ae:ea:4c:27:2e:cb:9a:33:1d:24:56: 60:8c:ee:e8:f4:a1:d2:11:62:3f:77:97:d6:cf:2c: f9:aa:ad:b0:79:f6:35:9c:22:1d:65:1b:7f:de:9e: f0:66:84:ff:60:0b:fd:08:6d:3e:d5:05:89:ce:11: e4:99:7e:83:08:42:29:65:ea:c5:e1:60:fb:b1:0c: da:ee:46:24:74:23:22:d1:e8:aa:04:4b:57:7f:3c: 9a:7c:b0:de:3b:6b:3e:f6:9d:f3:6d:7f:6a:84:a6: 8e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:D8:AB:96:D1:24:AA:3E:2D:0C:40:40:88:3C:E9:24:66:EF:05:28 X509v3 Authority Key Identifier: keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/KNirltEkqj4tDEBAiDzpJGbvBSg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 240a:40c1::/44 Signature Algorithm: sha256WithRSAEncryption b9:30:8c:6f:82:d4:fb:9d:39:00:25:5c:1b:4b:e9:31:2a:ee: cf:50:f9:ce:82:4c:55:e7:00:e3:fa:3b:5b:67:7f:1e:d2:7d: 9f:37:a3:79:f8:10:26:1f:01:22:d0:33:91:6c:9f:4f:f5:5b: 19:a2:df:99:38:a7:0d:60:3c:e0:34:64:73:38:17:99:a7:e4: dd:ea:c8:73:cd:60:31:2f:f2:4b:48:5d:d9:90:12:0b:e9:60: f2:c0:e2:24:b5:34:30:73:c4:7e:e3:7e:14:cd:b6:f1:a5:b9: dd:66:00:8c:44:2f:e8:10:16:18:1c:cd:8c:33:e8:50:2e:41: b6:f9:76:a3:df:96:ea:cb:e0:1c:8d:2a:07:02:0a:ea:e7:19: ce:dd:53:b2:72:a3:7c:73:02:1d:75:76:67:c3:cc:72:ae:1f: 92:55:ac:45:02:b8:98:17:46:69:f7:17:98:d2:ec:ce:17:e6: 2d:79:10:d5:14:c4:25:4b:ab:06:96:92:07:7f:81:65:ea:bd: 49:ee:a4:cc:8b:ca:35:a0:4d:ea:32:05:4d:e7:12:ea:d7:d2: c7:63:ed:22:0a:2a:ed:cb:8a:04:7f:3f:8f:68:75:73:b7:a5: 11:88:b4:0a:b4:f2:0e:08:a4:ea:03:00:d3:fe:ff:9c:f8:4b: 15:e7:cb:f9 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICALMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTRF RkY3MzkyRTFFREMxMjI1RkM0Q0ZCOEZBQjZFQjYxN0E5RDI0RDAeFw0yNTA2MDYw MjIyMjJaFw0yNjA1MjcwNzM4NDFaMDMxMTAvBgNVBAMTKDI4RDhBQjk2RDEyNEFB M0UyRDBDNDA0MDg4M0NFOTI0NjZFRjA1MjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDermHLLoBp5MxgU0fibOPJUrVTkRzAGiyBA2DdBiGRWCOVvM22 QqKIoGrSLwbTv7JUcCl01xZFA3WiPE96T5DetlURb+NL+rERHMV8+IKClzjPtJR7 C6MEBwbQKOSOkiW83pcCJ4TvzO32n3ShC53F/7sDmQrUkFXyyFoXUOLqYl1koMje ZXegF9n2P6chpSZjKNWJlgR54Duu6kwnLsuaMx0kVmCM7uj0odIRYj93l9bPLPmq rbB59jWcIh1lG3/envBmhP9gC/0IbT7VBYnOEeSZfoMIQill6sXhYPuxDNruRiR0 IyLR6KoES1d/PJp8sN47az72nfNtf2qEpo4hAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUKNirltEkqj4tDEBAiDzpJGbvBSgwHwYDVR0jBBgwFoAUlO/3OS4e3BIl/Ez7 j6tuthep0k0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3 Mi9sT18zT1M0ZTNCSWxfRXo3ajZ0dXRoZXAwazAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2xPXzNPUzRlM0JJbF9FejdqNnR1dGhlcDBrMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2NzIvS05pcmx0RWtxajR0 REVCQWlEenBKR2J2QlNnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHBCQKQMEAADANBgkqhkiG9w0BAQsFAAOCAQEAuTCMb4LU+505ACVcG0vpMSru z1D5zoJMVecA4/o7W2d/HtJ9nzejefgQJh8BItAzkWyfT/VbGaLfmTinDWA84DRk czgXmafk3erIc81gMS/yS0hd2ZASC+lg8sDiJLU0MHPEfuN+FM228aW53WYAjEQv 6BAWGBzNjDPoUC5Btvl2o9+W6svgHI0qBwIK6ucZzt1TsnKjfHMCHXV2Z8PMcq4f klWsRQK4mBdGafcXmNLszhfmLXkQ1RTEJUurBpaSB3+BZeq9Se6kzIvKNaBN6jIF TecS6tfSx2PtIgoq7cuKBH8/j2h1c7elEYi0CrTyDgik6gMA0/7/nPhLFefL+Q== -----END CERTIFICATE-----Generated at Fri Jul 4 08:30:50 2025 by rpki-client