$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/gKAbgFF8MfWnhfFqBZLEu1JwopE.roa File: gKAbgFF8MfWnhfFqBZLEu1JwopE.roa (raw, json) Hash identifier: fB5pmc7bEnt1ilCruFSHSO95d7pSqdyB+JeS8jJ4mtA= Subject key identifier: 80:A0:1B:80:51:7C:31:F5:A7:85:F1:6A:05:92:C4:BB:52:70:A2:91 Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Certificate serial: EA Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/gKAbgFF8MfWnhfFqBZLEu1JwopE.roa Signing time: Fri 06 Jun 2025 02:37:04 +0000 ROA not before: Fri 06 Jun 2025 02:37:04 +0000 ROA not after: Wed 27 May 2026 07:38:41 +0000 asID: 9808 IP address blocks: 240a:40c4:4010::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 09:12:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Validity Not Before: Jun 6 02:37:04 2025 GMT Not After : May 27 07:38:41 2026 GMT Subject: CN=80A01B80517C31F5A785F16A0592C4BB5270A291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:76:88:3a:8a:ef:24:e4:05:d2:a8:c8:4b:c5: 9f:cf:b9:6b:99:9c:81:65:af:bb:a8:f2:a9:b2:b7: 7c:f8:0f:b1:4b:6a:69:b3:f3:04:93:e9:84:34:91: fb:82:bc:8a:ae:ce:53:95:48:71:5e:ec:7b:f0:f9: c7:19:ef:46:cf:9d:6c:ac:5c:76:86:53:ce:e6:c2: ef:31:9d:e0:90:ae:0f:d4:3c:d5:f0:5a:34:d7:c0: e4:1f:77:3a:ba:e9:91:74:ee:2e:4b:18:7d:6e:1a: 63:5a:ea:00:3b:5f:91:21:3c:fa:95:2f:01:12:63: f2:bf:4e:15:80:cf:5b:31:ed:b3:51:7b:41:18:28: 87:f9:10:6b:e7:2a:96:34:f1:d1:7a:0a:53:f8:ff: a7:d4:0c:18:52:48:e6:b7:36:d4:45:df:05:f1:77: bb:a4:e5:df:08:35:b6:87:fd:33:01:51:bf:aa:ab: 9f:01:d8:3f:81:e1:12:76:1d:fb:cc:02:76:ef:55: be:81:c0:dc:f9:8d:6f:28:6d:a7:f1:d7:9e:f3:e8: bb:f2:f4:d5:31:fa:8e:c1:f9:44:ca:63:c0:73:85: 71:73:f3:86:d0:65:2d:8c:ab:30:9c:3a:61:5c:06: 0c:07:99:d8:f1:67:08:cd:c4:f9:f1:2d:71:7f:5f: a9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:A0:1B:80:51:7C:31:F5:A7:85:F1:6A:05:92:C4:BB:52:70:A2:91 X509v3 Authority Key Identifier: keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/gKAbgFF8MfWnhfFqBZLEu1JwopE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 240a:40c4:4010::/44 Signature Algorithm: sha256WithRSAEncryption 17:bd:f1:da:e7:4c:66:ac:17:54:2a:34:a5:39:7b:21:39:46: ab:fd:23:6c:3b:a8:70:87:a5:38:4a:50:d0:1c:88:76:1b:e5: 73:79:c7:ec:c3:0a:a3:b1:3e:1f:c5:f0:34:50:30:75:41:29: 5b:83:04:68:51:1f:2f:d9:c6:66:e5:4a:9e:db:b4:e4:04:20: 16:69:d1:c1:e7:7c:0a:78:77:fc:bd:f0:fc:f9:0e:da:27:ff: e2:e5:44:38:ed:82:c2:95:2a:06:e3:ba:34:b4:a5:9a:70:b6: dc:37:a1:80:66:44:44:78:a0:15:00:46:41:75:3c:d9:61:b9: 49:1b:76:8c:4b:8b:67:f9:d9:85:20:80:9c:dc:9b:bc:37:71: fb:ed:fa:1c:16:db:b3:5b:5e:ef:12:54:60:22:f3:b9:54:07: b8:69:29:e5:d4:26:35:9c:6e:f1:31:9e:d8:01:6a:bc:9a:c3: 19:82:3d:40:14:20:a3:4f:e1:22:6d:91:ed:45:c2:0c:ff:d2: 36:24:a6:8e:95:68:04:f8:8d:6e:4f:ad:26:7a:d2:34:2d:72: ae:a3:ce:44:ef:38:3c:fc:58:ce:42:b4:62:d5:84:e7:cd:58: 0a:fb:6b:23:b6:58:5c:ef:5a:d5:e0:3a:94:ad:31:57:fb:c4: bf:58:3d:11 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICAOowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTRF RkY3MzkyRTFFREMxMjI1RkM0Q0ZCOEZBQjZFQjYxN0E5RDI0RDAeFw0yNTA2MDYw MjM3MDRaFw0yNjA1MjcwNzM4NDFaMDMxMTAvBgNVBAMTKDgwQTAxQjgwNTE3QzMx RjVBNzg1RjE2QTA1OTJDNEJCNTI3MEEyOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJdog6iu8k5AXSqMhLxZ/PuWuZnIFlr7uo8qmyt3z4D7FLammz 8wST6YQ0kfuCvIquzlOVSHFe7Hvw+ccZ70bPnWysXHaGU87mwu8xneCQrg/UPNXw WjTXwOQfdzq66ZF07i5LGH1uGmNa6gA7X5EhPPqVLwESY/K/ThWAz1sx7bNRe0EY KIf5EGvnKpY08dF6ClP4/6fUDBhSSOa3NtRF3wXxd7uk5d8INbaH/TMBUb+qq58B 2D+B4RJ2HfvMAnbvVb6BwNz5jW8obafx157z6Lvy9NUx+o7B+UTKY8BzhXFz84bQ ZS2MqzCcOmFcBgwHmdjxZwjNxPnxLXF/X6kdAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUgKAbgFF8MfWnhfFqBZLEu1JwopEwHwYDVR0jBBgwFoAUlO/3OS4e3BIl/Ez7 j6tuthep0k0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3 Mi9sT18zT1M0ZTNCSWxfRXo3ajZ0dXRoZXAwazAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2xPXzNPUzRlM0JJbF9FejdqNnR1dGhlcDBrMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2NzIvZ0tBYmdGRjhNZldu aGZGcUJaTEV1MUp3b3BFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHBCQKQMRAEDANBgkqhkiG9w0BAQsFAAOCAQEAF73x2udMZqwXVCo0pTl7ITlG q/0jbDuocIelOEpQ0ByIdhvlc3nH7MMKo7E+H8XwNFAwdUEpW4MEaFEfL9nGZuVK ntu05AQgFmnRwed8Cnh3/L3w/PkO2if/4uVEOO2CwpUqBuO6NLSlmnC23DehgGZE RHigFQBGQXU82WG5SRt2jEuLZ/nZhSCAnNybvDdx++36HBbbs1te7xJUYCLzuVQH uGkp5dQmNZxu8TGe2AFqvJrDGYI9QBQgo0/hIm2R7UXCDP/SNiSmjpVoBPiNbk+t JnrSNC1yrqPORO84PPxYzkK0YtWE581YCvtrI7ZYXO9a1eA6lK0xV/vEv1g9EQ== -----END CERTIFICATE-----Generated at Fri Jul 4 08:36:27 2025 by rpki-client