$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/VYaGeWkZ2DPxnfOizvMWLQkC8Bs.roa File: VYaGeWkZ2DPxnfOizvMWLQkC8Bs.roa (raw, json) Hash identifier: YtPvCpqQdoG9zygKvWA8vSnxvAEK+WI8Z0IFX1LMOyI= Subject key identifier: 55:86:86:79:69:19:D8:33:F1:9D:F3:A2:CE:F3:16:2D:09:02:F0:1B Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Certificate serial: 9F Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/VYaGeWkZ2DPxnfOizvMWLQkC8Bs.roa Signing time: Fri 06 Jun 2025 01:46:35 +0000 ROA not before: Fri 06 Jun 2025 01:46:35 +0000 ROA not after: Wed 27 May 2026 07:38:41 +0000 asID: 134810 IP address blocks: 240a:429c::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 22:44:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Validity Not Before: Jun 6 01:46:35 2025 GMT Not After : May 27 07:38:41 2026 GMT Subject: CN=558686796919D833F19DF3A2CEF3162D0902F01B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a3:b6:aa:d4:ea:a1:64:66:fa:c7:82:bf:b0: 0f:d0:b6:f9:67:d9:2f:98:ca:5c:6f:c8:7f:10:8e: 51:1f:0d:1c:99:d1:76:24:6b:73:00:cf:a5:6c:8f: 70:f6:24:22:2a:90:de:57:ee:e7:f1:e2:4d:28:eb: 28:b7:22:f2:09:d6:1f:48:4d:ff:ad:2d:00:3c:6c: 34:f0:e6:39:9f:a3:c9:1d:44:33:a4:48:98:ac:fb: c3:d6:26:64:f8:b3:ac:68:13:ae:86:9e:0e:8a:3d: 62:d4:14:03:c3:21:32:34:94:e1:a6:53:fe:0b:a9: 5b:f0:2f:50:a9:f7:a1:fa:49:e5:d7:25:67:37:c8: d4:86:2c:ea:9a:8a:63:d7:73:3c:0e:70:fe:6a:48: ad:ef:6b:f8:59:5d:57:58:69:b8:86:d7:a6:c5:dc: a6:6c:d4:33:35:fc:dc:49:4e:a4:4f:23:b5:2b:5b: ee:9f:8b:f0:b3:8f:7a:7e:77:06:45:0c:e4:43:72: de:3d:8e:e8:dd:8b:00:13:cd:74:95:67:54:38:10: d3:65:65:1a:60:11:88:e3:52:24:67:d6:7d:6e:23: e1:ca:94:77:7a:59:5c:cf:0d:cc:7b:83:c2:4a:25: 18:2f:49:a1:60:76:c9:c1:24:76:cc:61:79:d7:83: ac:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:86:86:79:69:19:D8:33:F1:9D:F3:A2:CE:F3:16:2D:09:02:F0:1B X509v3 Authority Key Identifier: keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/VYaGeWkZ2DPxnfOizvMWLQkC8Bs.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 240a:429c::/31 Signature Algorithm: sha256WithRSAEncryption 69:7f:d7:d1:a5:fb:26:65:0b:0b:2f:05:59:25:5b:07:d9:97: 7e:14:c5:3c:92:56:79:18:e0:ca:b5:f3:82:e5:63:cb:72:1c: a1:1f:3f:38:98:0f:53:c0:a0:ea:ba:38:7f:ea:f1:be:d1:89: a3:f1:18:bb:6b:6e:1e:aa:b0:24:b9:58:c7:3f:2b:11:13:cd: 1d:9d:01:36:9c:61:be:39:bd:a7:80:8c:3d:5c:f6:43:a2:6e: e4:60:99:de:2a:ca:f0:6e:b7:b4:9a:47:ac:85:c2:cc:1e:e9: 34:f4:ae:c3:63:f2:d5:35:10:2c:02:c5:c1:19:21:e1:a2:76: 85:a8:fc:48:9a:1b:84:eb:c0:09:22:e1:7f:49:cf:06:fb:66: cd:41:07:b4:7c:3c:6b:a3:be:da:2f:2b:8e:89:39:a9:4e:2d: 0f:73:40:d7:9f:09:92:b1:1e:d5:14:0c:b0:78:bf:9c:10:8e: c7:f8:d7:77:94:0f:8a:02:b6:04:49:86:d3:92:aa:0b:7c:4e: d9:15:63:9c:1d:d8:3a:39:79:fb:06:23:33:35:b7:a4:8a:9a: 30:dc:2a:9b:a9:70:e7:cb:01:6b:dc:33:85:5f:e2:e3:fe:8c: 8c:87:b8:be:df:f5:55:4f:9f:ce:08:a8:45:51:48:fc:4c:14: d0:ac:25:9c -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTRF RkY3MzkyRTFFREMxMjI1RkM0Q0ZCOEZBQjZFQjYxN0E5RDI0RDAeFw0yNTA2MDYw MTQ2MzVaFw0yNjA1MjcwNzM4NDFaMDMxMTAvBgNVBAMTKDU1ODY4Njc5NjkxOUQ4 MzNGMTlERjNBMkNFRjMxNjJEMDkwMkYwMUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGo7aq1OqhZGb6x4K/sA/Qtvln2S+YylxvyH8QjlEfDRyZ0XYk a3MAz6Vsj3D2JCIqkN5X7ufx4k0o6yi3IvIJ1h9ITf+tLQA8bDTw5jmfo8kdRDOk SJis+8PWJmT4s6xoE66Gng6KPWLUFAPDITI0lOGmU/4LqVvwL1Cp96H6SeXXJWc3 yNSGLOqaimPXczwOcP5qSK3va/hZXVdYabiG16bF3KZs1DM1/NxJTqRPI7UrW+6f i/Czj3p+dwZFDORDct49jujdiwATzXSVZ1Q4ENNlZRpgEYjjUiRn1n1uI+HKlHd6 WVzPDcx7g8JKJRgvSaFgdsnBJHbMYXnXg6xbAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUVYaGeWkZ2DPxnfOizvMWLQkC8BswHwYDVR0jBBgwFoAUlO/3OS4e3BIl/Ez7 j6tuthep0k0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3 Mi9sT18zT1M0ZTNCSWxfRXo3ajZ0dXRoZXAwazAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2xPXzNPUzRlM0JJbF9FejdqNnR1dGhlcDBrMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2NzIvVllhR2VXa1oyRFB4 bmZPaXp2TVdMUWtDOEJzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFASQKQpwwDQYJKoZIhvcNAQELBQADggEBAGl/19Gl+yZlCwsvBVklWwfZl34U xTySVnkY4Mq184LlY8tyHKEfPziYD1PAoOq6OH/q8b7RiaPxGLtrbh6qsCS5WMc/ KxETzR2dATacYb45vaeAjD1c9kOibuRgmd4qyvBut7SaR6yFwswe6TT0rsNj8tU1 ECwCxcEZIeGidoWo/EiaG4TrwAki4X9Jzwb7Zs1BB7R8PGujvtovK46JOalOLQ9z QNefCZKxHtUUDLB4v5wQjsf413eUD4oCtgRJhtOSqgt8TtkVY5wd2Do5efsGIzM1 t6SKmjDcKpupcOfLAWvcM4Vf4uP+jIyHuL7f9VVPn84IqEVRSPxMFNCsJZw= -----END CERTIFICATE-----Generated at Fri Jul 4 22:24:08 2025 by rpki-client