$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/dOUfdz0rfeiF041JQ5M6Ltl1MaI.roa File: dOUfdz0rfeiF041JQ5M6Ltl1MaI.roa (raw, json) Hash identifier: vvm+UpTNz/AtKJKr596ndjL9hzs6qVxLCGWgu64bItk= Subject key identifier: 74:E5:1F:77:3D:2B:7D:E8:85:D3:8D:49:43:93:3A:2E:D9:75:31:A2 Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Certificate serial: 4F Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/dOUfdz0rfeiF041JQ5M6Ltl1MaI.roa Signing time: Tue 27 May 2025 08:36:31 +0000 ROA not before: Tue 27 May 2025 08:36:31 +0000 ROA not after: Wed 27 May 2026 07:38:41 +0000 asID: 9808 IP address blocks: 240a:42f8::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 09:12:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Validity Not Before: May 27 08:36:31 2025 GMT Not After : May 27 07:38:41 2026 GMT Subject: CN=74E51F773D2B7DE885D38D4943933A2ED97531A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:92:ae:f0:a3:e4:73:fd:48:ce:d7:56:f4:b1: 2b:57:4d:00:d5:e2:17:cb:64:6b:27:05:a6:25:7c: 4f:6a:fe:e9:dc:2e:97:79:75:c8:c6:36:3b:0a:76: eb:ad:14:d5:f2:02:b9:07:ca:ec:88:3f:0b:ca:7b: 5a:26:b9:3f:a9:d6:e3:f2:fa:ed:5a:4b:5a:3e:5d: f1:7d:d2:1a:83:74:24:94:cb:97:d2:31:b1:8f:3e: 37:6f:5e:dc:3b:9c:34:10:99:6f:89:1e:69:93:9f: 3e:92:e5:ae:56:5e:c9:58:f9:b6:17:0d:85:ba:f7: a4:4f:8b:34:de:f4:bd:ac:61:cd:5f:42:5b:d6:c6: 8e:25:11:ca:10:2e:99:ee:f1:bc:e4:31:38:75:af: 5b:a8:c5:67:b2:3c:62:f1:ef:a6:00:7f:72:7e:a1: 69:6a:78:e8:4b:4e:b6:ab:e5:9a:ff:8b:da:e7:2e: 32:95:be:31:e0:cf:c2:2d:11:bf:15:60:fa:89:8f: 58:e9:bb:19:5d:5c:ba:4c:89:ce:9a:c4:46:ce:04: a0:74:64:80:87:ff:6c:99:76:f6:32:40:bd:5b:27: ce:73:8e:a4:2c:ed:d6:fd:f6:45:55:76:24:e2:33: e3:f4:39:9d:7c:a5:ee:b2:31:b7:4b:11:59:70:b7: c9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E5:1F:77:3D:2B:7D:E8:85:D3:8D:49:43:93:3A:2E:D9:75:31:A2 X509v3 Authority Key Identifier: keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/dOUfdz0rfeiF041JQ5M6Ltl1MaI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 240a:42f8::/31 Signature Algorithm: sha256WithRSAEncryption 1e:34:28:2d:9a:54:d1:d3:b1:e8:6c:dd:80:62:84:f1:e8:7e: dc:41:55:12:f9:aa:5f:a6:b7:13:72:3f:8f:9a:f3:6a:48:bc: d0:4b:95:cb:4f:43:95:5b:5d:ed:0d:2d:d1:b8:15:5f:37:d2: b1:32:9c:09:d6:1c:48:fc:cb:3a:38:d4:d2:54:a9:2b:5c:ef: 36:bd:1f:02:cc:51:98:29:e7:83:46:74:99:bf:80:e2:a1:24: de:63:f2:87:43:fa:58:9b:8e:d2:34:19:67:4c:6c:ba:52:3e: 2f:78:3e:85:bb:40:0c:51:02:c2:4d:41:61:b2:23:c5:ee:1c: 3b:24:1b:2b:c4:36:24:ee:0e:df:69:d5:9f:d7:fa:3f:2d:2b: 85:79:10:6c:ea:22:7e:0c:22:95:0e:07:ed:ac:f8:56:fe:b4: 2f:24:e0:87:a9:f9:6f:04:af:ea:73:5a:24:7e:9c:99:8f:16: 38:0d:da:b3:4b:8f:bb:c1:70:e0:f9:53:db:25:5d:3d:de:dd: 46:7a:1b:eb:eb:1c:89:22:3c:b4:a4:a9:05:30:14:05:b3:2f: 7b:62:87:14:7c:e8:49:69:5c:37:e8:c8:74:e3:0c:4c:02:15: da:73:db:b7:b8:33:22:68:cf:41:3f:7a:be:c4:0d:50:45:5b: af:53:e7:56 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgIBTzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NEVG RjczOTJFMUVEQzEyMjVGQzRDRkI4RkFCNkVCNjE3QTlEMjREMB4XDTI1MDUyNzA4 MzYzMVoXDTI2MDUyNzA3Mzg0MVowMzExMC8GA1UEAxMoNzRFNTFGNzczRDJCN0RF ODg1RDM4RDQ5NDM5MzNBMkVEOTc1MzFBMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKmSrvCj5HP9SM7XVvSxK1dNANXiF8tkaycFpiV8T2r+6dwul3l1 yMY2Owp2660U1fICuQfK7Ig/C8p7Wia5P6nW4/L67VpLWj5d8X3SGoN0JJTLl9Ix sY8+N29e3DucNBCZb4keaZOfPpLlrlZeyVj5thcNhbr3pE+LNN70vaxhzV9CW9bG jiURyhAume7xvOQxOHWvW6jFZ7I8YvHvpgB/cn6haWp46EtOtqvlmv+L2ucuMpW+ MeDPwi0RvxVg+omPWOm7GV1cukyJzprERs4EoHRkgIf/bJl29jJAvVsnznOOpCzt 1v32RVV2JOIz4/Q5nXyl7rIxt0sRWXC3yd8CAwEAAaOCAfQwggHwMB0GA1UdDgQW BBR05R93PSt96IXTjUlDkzou2XUxojAfBgNVHSMEGDAWgBSU7/c5Lh7cEiX8TPuP q262F6nSTTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNjcy L2xPXzNPUzRlM0JJbF9FejdqNnR1dGhlcDBrMC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvbE9fM09TNGUzQklsX0V6N2o2dHV0aGVwMGswLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3Mi9kT1VmZHowcmZlaUYw NDFKUTVNNkx0bDFNYUkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH AwUBJApC+DANBgkqhkiG9w0BAQsFAAOCAQEAHjQoLZpU0dOx6GzdgGKE8eh+3EFV EvmqX6a3E3I/j5rzaki80EuVy09DlVtd7Q0t0bgVXzfSsTKcCdYcSPzLOjjU0lSp K1zvNr0fAsxRmCnng0Z0mb+A4qEk3mPyh0P6WJuO0jQZZ0xsulI+L3g+hbtADFEC wk1BYbIjxe4cOyQbK8Q2JO4O32nVn9f6Py0rhXkQbOoifgwilQ4H7az4Vv60LyTg h6n5bwSv6nNaJH6cmY8WOA3as0uPu8Fw4PlT2yVdPd7dRnob6+sciSI8tKSpBTAU BbMve2KHFHzoSWlcN+jIdOMMTAIV2nPbt7gzImjPQT96vsQNUEVbr1PnVg== -----END CERTIFICATE-----Generated at Fri Jul 4 08:19:45 2025 by rpki-client