$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/YCr3QJhZVtuTYmqmJMGvpg9mdHs.roa File: YCr3QJhZVtuTYmqmJMGvpg9mdHs.roa (raw, json) Hash identifier: knZ5rYImrKaMcIvEPnm9YBA54HhjoJpcOrWcaRXlzls= Subject key identifier: 60:2A:F7:40:98:59:56:DB:93:62:6A:A6:24:C1:AF:A6:0F:66:74:7B Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Certificate serial: D9 Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/YCr3QJhZVtuTYmqmJMGvpg9mdHs.roa Signing time: Fri 06 Jun 2025 02:36:22 +0000 ROA not before: Fri 06 Jun 2025 02:36:22 +0000 ROA not after: Wed 27 May 2026 07:38:41 +0000 asID: 9808 IP address blocks: 240a:40c3:2010::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 09:12:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Validity Not Before: Jun 6 02:36:22 2025 GMT Not After : May 27 07:38:41 2026 GMT Subject: CN=602AF740985956DB93626AA624C1AFA60F66747B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:85:7d:4d:2a:d5:db:8c:9c:ed:56:1d:4e:dc: 67:5e:73:f9:f1:38:53:cd:df:8a:ec:20:2a:ce:8c: de:68:1f:b0:b5:99:7a:60:c1:a3:0a:bd:b9:ff:73: 37:67:e4:2d:81:dc:d3:de:97:39:5c:7a:b6:82:69: a0:50:79:ab:88:21:57:51:89:8c:50:f1:6a:6a:ef: d0:9e:80:ae:7a:06:94:af:3a:a6:60:45:cd:1f:ab: 1c:8a:55:c6:c2:5e:29:bc:17:77:0a:f2:6a:10:61: b2:e6:90:ab:d4:09:08:bb:eb:5e:79:34:68:36:fb: a3:13:7e:b4:5d:5b:d2:65:58:dd:d4:03:71:f7:a3: 0d:61:5f:13:5e:6b:66:1b:35:07:5f:ea:ad:8d:7f: aa:6f:20:fd:1a:16:4b:21:d5:6a:11:ad:93:79:44: 49:e5:87:c6:0e:eb:6f:e6:05:3c:72:a5:f5:29:14: 06:1c:fb:d2:a3:09:fb:c1:78:e3:11:0c:f2:e2:10: cc:82:a9:3e:f1:af:e4:ac:8e:ff:17:4f:0a:7e:fd: 0a:1c:3e:d1:73:5b:90:43:8a:46:a5:05:14:a1:64: ab:e1:65:a0:da:67:78:c8:ae:aa:6e:78:04:ef:07: 7f:f8:0f:fc:6d:d3:26:5a:fd:7c:f2:92:6d:df:64: db:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:2A:F7:40:98:59:56:DB:93:62:6A:A6:24:C1:AF:A6:0F:66:74:7B X509v3 Authority Key Identifier: keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/YCr3QJhZVtuTYmqmJMGvpg9mdHs.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 240a:40c3:2010::/44 Signature Algorithm: sha256WithRSAEncryption 93:88:b5:0b:54:0a:6e:c4:29:b1:0e:8d:74:29:51:1c:0c:d9: e6:b9:7e:8f:05:c8:71:70:f4:94:25:ed:49:6d:40:45:25:02: 4c:a7:b3:4d:77:12:fe:fa:9a:c6:d9:56:06:e6:46:e0:1a:90: 3c:9b:b3:59:7d:8f:73:c0:cf:89:8e:66:23:c6:13:75:c5:6e: 25:9e:8c:23:68:d0:1a:69:a1:57:f2:d3:17:15:4b:45:10:6a: cc:73:2c:43:8f:da:28:25:1e:44:35:c5:22:4e:bc:07:b6:40: 21:3e:f1:ac:65:8c:02:71:c7:63:36:c7:ab:36:b2:3f:89:bc: 72:eb:e1:7e:57:79:d9:5a:e1:2c:52:e0:2a:97:65:d3:8d:25: 51:2b:b6:46:be:f7:d1:e8:fc:ce:57:5e:64:68:c0:cf:84:48: bb:96:75:71:ad:e8:8a:ec:2d:64:be:9a:42:52:c4:d6:2d:1f: ff:ae:68:c1:48:2a:4d:3c:58:29:6b:5d:a4:7d:e1:e6:e2:77: 3e:57:04:64:b3:2c:55:9c:0c:bd:f1:34:a0:10:fb:60:46:32: b6:74:b7:3f:30:02:65:47:08:b8:5a:09:71:2a:02:bf:ee:47: ce:98:84:3a:a8:8f:92:7a:e9:ca:33:4d:d3:86:be:2f:c6:74: 14:93:39:57 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICANkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTRF RkY3MzkyRTFFREMxMjI1RkM0Q0ZCOEZBQjZFQjYxN0E5RDI0RDAeFw0yNTA2MDYw MjM2MjJaFw0yNjA1MjcwNzM4NDFaMDMxMTAvBgNVBAMTKDYwMkFGNzQwOTg1OTU2 REI5MzYyNkFBNjI0QzFBRkE2MEY2Njc0N0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHhX1NKtXbjJztVh1O3Gdec/nxOFPN34rsICrOjN5oH7C1mXpg waMKvbn/czdn5C2B3NPelzlceraCaaBQeauIIVdRiYxQ8Wpq79CegK56BpSvOqZg Rc0fqxyKVcbCXim8F3cK8moQYbLmkKvUCQi76155NGg2+6MTfrRdW9JlWN3UA3H3 ow1hXxNea2YbNQdf6q2Nf6pvIP0aFksh1WoRrZN5REnlh8YO62/mBTxypfUpFAYc +9KjCfvBeOMRDPLiEMyCqT7xr+Ssjv8XTwp+/QocPtFzW5BDikalBRShZKvhZaDa Z3jIrqpueATvB3/4D/xt0yZa/Xzykm3fZNsDAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUYCr3QJhZVtuTYmqmJMGvpg9mdHswHwYDVR0jBBgwFoAUlO/3OS4e3BIl/Ez7 j6tuthep0k0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3 Mi9sT18zT1M0ZTNCSWxfRXo3ajZ0dXRoZXAwazAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2xPXzNPUzRlM0JJbF9FejdqNnR1dGhlcDBrMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2NzIvWUNyM1FKaFpWdHVU WW1xbUpNR3ZwZzltZEhzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHBCQKQMMgEDANBgkqhkiG9w0BAQsFAAOCAQEAk4i1C1QKbsQpsQ6NdClRHAzZ 5rl+jwXIcXD0lCXtSW1ARSUCTKezTXcS/vqaxtlWBuZG4BqQPJuzWX2Pc8DPiY5m I8YTdcVuJZ6MI2jQGmmhV/LTFxVLRRBqzHMsQ4/aKCUeRDXFIk68B7ZAIT7xrGWM AnHHYzbHqzayP4m8cuvhfld52VrhLFLgKpdl040lUSu2Rr730ej8zldeZGjAz4RI u5Z1ca3oiuwtZL6aQlLE1i0f/65owUgqTTxYKWtdpH3h5uJ3PlcEZLMsVZwMvfE0 oBD7YEYytnS3PzACZUcIuFoJcSoCv+5HzpiEOqiPknrpyjNN04a+L8Z0FJM5Vw== -----END CERTIFICATE-----Generated at Fri Jul 4 08:45:17 2025 by rpki-client