$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/XUdhSB33gcGkxGdPueRyoNTUx1M.roa File: XUdhSB33gcGkxGdPueRyoNTUx1M.roa (raw, json) Hash identifier: 0el+reVik78/paEHgy0LmEqnEmu87SHd0zpd+HoMaW0= Subject key identifier: 5D:47:61:48:1D:F7:81:C1:A4:C4:67:4F:B9:E4:72:A0:D4:D4:C7:53 Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Certificate serial: 22 Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/XUdhSB33gcGkxGdPueRyoNTUx1M.roa Signing time: Tue 27 May 2025 08:19:35 +0000 ROA not before: Tue 27 May 2025 08:19:35 +0000 ROA not after: Wed 27 May 2026 07:38:41 +0000 asID: 9808 IP address blocks: 240a:42b2::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 09:12:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Validity Not Before: May 27 08:19:35 2025 GMT Not After : May 27 07:38:41 2026 GMT Subject: CN=5D4761481DF781C1A4C4674FB9E472A0D4D4C753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:27:38:9d:cd:72:cb:2f:79:c5:2f:b5:14:24: 3a:59:b1:22:5c:72:b6:bc:66:14:23:8c:3a:e9:75: 5b:9a:79:8a:e2:00:72:44:18:b8:89:fa:16:8e:da: 20:dc:20:97:89:4c:6b:dc:d6:48:1f:b2:e6:2b:63: 10:ac:8e:7c:d5:60:34:d2:93:68:1a:a7:1f:1f:a3: b3:67:19:55:72:6f:ed:f9:cc:55:6d:5e:26:1b:c1: 03:b3:a8:cb:89:52:a2:57:56:8d:77:0c:10:77:f6: 6a:25:60:fe:7f:6c:ff:40:80:c8:e7:7f:08:4f:b4: f4:1a:71:91:6f:6e:46:91:16:99:85:bb:36:44:32: 59:ef:56:dc:71:86:78:d1:1e:95:71:7f:0d:c2:bb: cd:f8:9b:37:0f:d9:2e:29:7b:78:f9:6e:e7:d8:f2: 0e:c5:f4:f5:68:e3:4a:79:e8:2d:af:8a:27:3f:53: 36:b9:2c:c8:6d:0d:31:6f:fc:28:26:c3:83:9a:d6: e6:87:82:07:47:ab:50:a2:c1:1f:6b:d5:4a:6f:1c: df:c3:91:09:6e:de:37:f3:2f:f5:3a:f4:f6:77:1d: c7:1d:c2:9e:3e:f1:22:44:0c:aa:a2:c7:fc:09:25: d9:07:d1:14:0c:71:c2:98:e0:61:95:1e:7d:11:92: 2e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:47:61:48:1D:F7:81:C1:A4:C4:67:4F:B9:E4:72:A0:D4:D4:C7:53 X509v3 Authority Key Identifier: keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/XUdhSB33gcGkxGdPueRyoNTUx1M.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 240a:42b2::/31 Signature Algorithm: sha256WithRSAEncryption 43:24:a6:0a:06:ae:70:f6:b1:77:12:7a:be:66:2f:8e:bd:fa: 71:43:99:ae:c9:7b:b4:24:78:a0:a8:ff:fd:ba:d3:fb:80:15: c1:ce:02:b1:f1:cf:53:fa:0c:75:6f:d6:ea:e9:56:86:b7:7b: 22:b7:74:95:89:d3:b0:1e:d1:f9:86:1e:34:82:2a:0c:c1:1d: 9f:ca:7b:d9:00:16:a7:cb:d2:91:39:66:56:7a:09:7a:e7:b7: ec:72:87:9e:31:7e:33:3d:be:34:ef:47:ed:9e:70:fa:14:31: d2:fe:c5:3d:45:0d:38:31:39:e5:5d:5b:56:f4:80:02:62:c8: a3:79:2b:f6:5c:25:c8:ba:29:69:6a:52:7f:5f:2c:ef:8f:dc: cc:81:de:d7:ee:ad:db:a4:96:17:7a:c2:4b:92:53:77:94:62: 85:9e:66:f6:45:54:93:31:7a:bf:ce:b6:30:6a:ba:1f:53:69: 16:39:9a:e0:65:79:a9:9c:eb:5b:d0:5c:d0:a2:87:f5:a5:4c: cf:b5:7f:db:4e:68:73:61:64:e6:f7:5d:b8:a0:80:6f:ce:d4: 02:a5:4c:c9:0b:f6:53:67:86:c2:c0:b7:92:28:e5:76:a1:d3: d1:ee:a9:23:cc:00:ff:7b:ea:81:56:24:7e:f8:8a:f7:9f:73: f2:75:09:82 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgIBIjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NEVG RjczOTJFMUVEQzEyMjVGQzRDRkI4RkFCNkVCNjE3QTlEMjREMB4XDTI1MDUyNzA4 MTkzNVoXDTI2MDUyNzA3Mzg0MVowMzExMC8GA1UEAxMoNUQ0NzYxNDgxREY3ODFD MUE0QzQ2NzRGQjlFNDcyQTBENEQ0Qzc1MzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKYnOJ3NcssvecUvtRQkOlmxIlxytrxmFCOMOul1W5p5iuIAckQY uIn6Fo7aINwgl4lMa9zWSB+y5itjEKyOfNVgNNKTaBqnHx+js2cZVXJv7fnMVW1e JhvBA7Ooy4lSoldWjXcMEHf2aiVg/n9s/0CAyOd/CE+09BpxkW9uRpEWmYW7NkQy We9W3HGGeNEelXF/DcK7zfibNw/ZLil7ePlu59jyDsX09WjjSnnoLa+KJz9TNrks yG0NMW/8KCbDg5rW5oeCB0erUKLBH2vVSm8c38ORCW7eN/Mv9Tr09ncdxx3Cnj7x IkQMqqLH/Akl2QfRFAxxwpjgYZUefRGSLh8CAwEAAaOCAfQwggHwMB0GA1UdDgQW BBRdR2FIHfeBwaTEZ0+55HKg1NTHUzAfBgNVHSMEGDAWgBSU7/c5Lh7cEiX8TPuP q262F6nSTTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNjcy L2xPXzNPUzRlM0JJbF9FejdqNnR1dGhlcDBrMC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvbE9fM09TNGUzQklsX0V6N2o2dHV0aGVwMGswLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3Mi9YVWRoU0IzM2djR2t4 R2RQdWVSeW9OVFV4MU0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH AwUBJApCsjANBgkqhkiG9w0BAQsFAAOCAQEAQySmCgaucPaxdxJ6vmYvjr36cUOZ rsl7tCR4oKj//brT+4AVwc4CsfHPU/oMdW/W6ulWhrd7Ird0lYnTsB7R+YYeNIIq DMEdn8p72QAWp8vSkTlmVnoJeue37HKHnjF+Mz2+NO9H7Z5w+hQx0v7FPUUNODE5 5V1bVvSAAmLIo3kr9lwlyLopaWpSf18s74/czIHe1+6t26SWF3rCS5JTd5RihZ5m 9kVUkzF6v862MGq6H1NpFjma4GV5qZzrW9Bc0KKH9aVMz7V/205oc2Fk5vdduKCA b87UAqVMyQv2U2eGwsC3kijldqHT0e6pI8wA/3vqgVYkfviK959z8nUJgg== -----END CERTIFICATE-----Generated at Fri Jul 4 08:24:27 2025 by rpki-client