$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/fZA68yy0BkjrNMq6zPc7Qv4XO-s.roa File: fZA68yy0BkjrNMq6zPc7Qv4XO-s.roa (raw, json) Hash identifier: SypzzBNTFNU7eM4tw6rJlxpeGRFnH/alaCPf4ai0Jss= Subject key identifier: 7D:90:3A:F3:2C:B4:06:48:EB:34:CA:BA:CC:F7:3B:42:FE:17:3B:EB Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Certificate serial: DE Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/fZA68yy0BkjrNMq6zPc7Qv4XO-s.roa Signing time: Fri 06 Jun 2025 02:36:23 +0000 ROA not before: Fri 06 Jun 2025 02:36:23 +0000 ROA not after: Wed 27 May 2026 07:38:41 +0000 asID: 9808 IP address blocks: 240a:40c3:8000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 18:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 222 (0xde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Validity Not Before: Jun 6 02:36:23 2025 GMT Not After : May 27 07:38:41 2026 GMT Subject: CN=7D903AF32CB40648EB34CABACCF73B42FE173BEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:47:56:8f:2f:8c:8b:fc:38:7d:a3:1a:4c:c6: de:ee:e9:9e:dc:82:03:85:1f:4b:0c:42:4f:c6:ed: a4:6e:60:d3:64:08:f7:92:ef:0b:8d:8e:64:f2:a9: f6:ab:34:20:4c:18:82:8e:13:1a:40:89:e4:ef:0f: 67:69:8a:d1:e2:43:0e:67:88:81:4f:58:4a:35:ae: 34:44:45:58:72:8d:4f:78:1e:43:7c:ef:d2:43:f9: 04:fd:7b:f9:79:b9:7b:e4:0d:56:ee:b5:ec:78:a8: b9:82:97:51:23:8d:c3:91:11:a3:5a:7c:90:a6:c6: cc:1f:56:e0:ee:35:53:df:f4:ca:39:78:6b:f4:9f: f2:e5:3e:03:5f:81:7d:70:26:13:86:2e:da:42:a7: c7:05:80:b9:d0:b8:55:9e:ab:97:c3:0b:a4:7c:dd: a1:9d:f8:30:51:7c:ab:8f:da:b6:fc:77:0b:fd:ee: f4:39:71:18:a6:cc:3c:80:61:4d:09:d5:dd:e8:6c: c6:de:0b:d6:ee:bc:5f:05:82:75:d0:7b:9f:fd:d0: c9:3e:89:35:ef:b8:4d:63:02:06:d5:5d:58:8d:5a: c2:ab:2f:63:be:22:22:7b:91:ec:d2:8a:03:0c:83: 32:d9:11:0b:9f:99:6f:24:ba:09:5e:df:35:c1:96: da:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:90:3A:F3:2C:B4:06:48:EB:34:CA:BA:CC:F7:3B:42:FE:17:3B:EB X509v3 Authority Key Identifier: keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/fZA68yy0BkjrNMq6zPc7Qv4XO-s.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 240a:40c3:8000::/44 Signature Algorithm: sha256WithRSAEncryption 9f:92:37:1a:0e:12:b2:df:8d:44:4a:83:6e:29:20:ef:04:c1: 03:24:aa:a5:bc:01:57:43:f3:6e:e6:14:f8:2a:54:bf:0e:09: 32:2f:da:a6:ee:cc:3d:75:8d:1a:9a:ca:c6:1f:5a:e8:96:5e: c2:bd:01:ae:08:8b:1c:1e:a2:a3:23:f9:9f:29:e0:f3:e6:55: 23:ef:5c:b3:20:f9:97:8b:3f:d7:b1:74:ec:16:16:1c:ee:fa: 39:83:19:e7:e3:18:18:1d:9e:bc:56:49:82:40:6a:cb:28:d9: 89:22:66:50:99:f8:05:6b:73:d9:72:c6:b1:e7:65:78:53:96: f0:91:da:8a:cb:35:b9:04:3c:6e:32:dd:ba:9c:f7:72:cd:62: 2f:5a:13:88:96:b4:24:07:43:3f:d6:76:8b:25:5f:96:fd:3d: bf:7b:d6:61:01:8e:b4:dc:ba:e1:48:7b:19:05:7c:10:33:95: 19:f1:ff:05:76:42:13:36:cb:8b:65:d8:c2:2d:d6:9f:93:2d: 88:e1:0b:9b:cc:80:d5:22:27:c4:2b:08:27:c4:79:58:ac:59: ad:e8:00:53:7e:0e:e8:e9:44:7a:1a:f1:84:bb:8e:b5:7d:9f: 45:86:62:c9:e5:c8:b4:9f:18:80:35:02:35:7e:ea:38:ad:c9: b3:f9:f5:20 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTRF RkY3MzkyRTFFREMxMjI1RkM0Q0ZCOEZBQjZFQjYxN0E5RDI0RDAeFw0yNTA2MDYw MjM2MjNaFw0yNjA1MjcwNzM4NDFaMDMxMTAvBgNVBAMTKDdEOTAzQUYzMkNCNDA2 NDhFQjM0Q0FCQUNDRjczQjQyRkUxNzNCRUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCR1aPL4yL/Dh9oxpMxt7u6Z7cggOFH0sMQk/G7aRuYNNkCPeS 7wuNjmTyqfarNCBMGIKOExpAieTvD2dpitHiQw5niIFPWEo1rjRERVhyjU94HkN8 79JD+QT9e/l5uXvkDVbutex4qLmCl1EjjcOREaNafJCmxswfVuDuNVPf9Mo5eGv0 n/LlPgNfgX1wJhOGLtpCp8cFgLnQuFWeq5fDC6R83aGd+DBRfKuP2rb8dwv97vQ5 cRimzDyAYU0J1d3obMbeC9buvF8FgnXQe5/90Mk+iTXvuE1jAgbVXViNWsKrL2O+ IiJ7kezSigMMgzLZEQufmW8kugle3zXBltrjAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUfZA68yy0BkjrNMq6zPc7Qv4XO+swHwYDVR0jBBgwFoAUlO/3OS4e3BIl/Ez7 j6tuthep0k0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3 Mi9sT18zT1M0ZTNCSWxfRXo3ajZ0dXRoZXAwazAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2xPXzNPUzRlM0JJbF9FejdqNnR1dGhlcDBrMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2NzIvZlpBNjh5eTBCa2py Tk1xNnpQYzdRdjRYTy1zLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHBCQKQMOAADANBgkqhkiG9w0BAQsFAAOCAQEAn5I3Gg4Sst+NREqDbikg7wTB AySqpbwBV0PzbuYU+CpUvw4JMi/apu7MPXWNGprKxh9a6JZewr0BrgiLHB6ioyP5 nyng8+ZVI+9csyD5l4s/17F07BYWHO76OYMZ5+MYGB2evFZJgkBqyyjZiSJmUJn4 BWtz2XLGsedleFOW8JHaiss1uQQ8bjLdupz3cs1iL1oTiJa0JAdDP9Z2iyVflv09 v3vWYQGOtNy64Uh7GQV8EDOVGfH/BXZCEzbLi2XYwi3Wn5MtiOELm8yA1SInxCsI J8R5WKxZregAU34O6OlEehrxhLuOtX2fRYZiyeXItJ8YgDUCNX7qOK3Js/n1IA== -----END CERTIFICATE-----Generated at Fri Jul 4 16:49:55 2025 by rpki-client