$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/knNnEP7NBq1WUi_AowD2df0XCgM.roa File: knNnEP7NBq1WUi_AowD2df0XCgM.roa (raw, json) Hash identifier: GTzLXW7uXXlk2J6viEx+OXb2UnlcuGhyN9plVfKS/xY= Subject key identifier: 92:73:67:10:FE:CD:06:AD:56:52:2F:C0:A3:00:F6:75:FD:17:0A:03 Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Certificate serial: B8 Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/knNnEP7NBq1WUi_AowD2df0XCgM.roa Signing time: Fri 06 Jun 2025 02:24:56 +0000 ROA not before: Fri 06 Jun 2025 02:24:56 +0000 ROA not after: Wed 27 May 2026 07:38:41 +0000 asID: 9808 IP address blocks: 240a:40c1:e000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 09:12:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 184 (0xb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Validity Not Before: Jun 6 02:24:56 2025 GMT Not After : May 27 07:38:41 2026 GMT Subject: CN=92736710FECD06AD56522FC0A300F675FD170A03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:eb:84:55:59:cf:de:31:d2:cb:d0:30:98:89: e0:26:43:fb:58:cc:2f:1b:27:3c:68:1a:80:90:7f: d3:a9:8c:7f:34:7f:2a:bb:43:ab:87:86:0a:69:e7: bf:b1:3a:8a:0b:63:5f:ab:6c:41:e7:58:66:2a:2f: 91:52:f2:8f:e8:20:37:14:d6:b7:0f:67:e5:60:6a: 71:36:18:38:9b:f1:da:0d:7f:d6:76:54:3c:6b:13: 8e:ec:20:42:95:4c:3b:32:0f:80:68:b2:38:a9:7e: 97:a8:9c:22:c0:58:46:7e:cd:21:1b:d5:69:c5:34: 57:85:ab:63:e5:cf:c5:2e:c9:26:d1:db:53:72:82: e6:7b:26:b8:04:5b:71:f9:b5:1a:30:ee:8e:0c:f8: bf:ab:16:ff:fb:59:4b:25:0e:12:fa:2e:89:d6:d4: 3d:cb:af:d7:71:e9:1a:56:72:f9:05:87:db:c1:d2: 47:77:8c:be:bf:20:2f:3d:50:27:db:f7:5e:df:cc: ae:8b:68:92:8b:db:e8:a0:fe:2f:05:d2:5e:08:49: 84:8e:b4:00:bd:cf:25:90:fe:93:c1:8c:47:01:b4: c2:b2:e1:bf:c6:15:df:47:08:21:06:0b:73:b6:8d: d6:63:19:b2:69:53:84:66:22:39:2d:ab:29:d2:38: ab:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:73:67:10:FE:CD:06:AD:56:52:2F:C0:A3:00:F6:75:FD:17:0A:03 X509v3 Authority Key Identifier: keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/knNnEP7NBq1WUi_AowD2df0XCgM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 240a:40c1:e000::/44 Signature Algorithm: sha256WithRSAEncryption 60:a8:b4:e7:12:dc:06:01:a7:36:46:8e:a1:a6:52:63:77:33: 05:94:46:09:46:90:8d:0c:23:7a:ee:13:b3:b9:f6:c1:d1:64: 42:5a:33:54:0f:a6:d2:5e:34:2f:02:f8:24:0c:f6:ad:43:a6: 5e:5e:0d:11:d4:a8:b7:d6:64:51:f3:47:ee:68:3c:44:be:43: 2a:85:5e:7d:ed:30:0c:50:e2:bc:2b:de:e8:67:ce:3d:0f:33: b3:44:30:f9:bd:98:78:5c:f2:6e:46:25:95:2f:e9:bc:ce:2e: 98:86:9e:f6:38:f0:31:6a:c6:a2:b6:fe:b2:ab:77:70:f2:55: a0:c0:e0:e7:11:a7:6e:f9:5f:71:ec:d6:34:83:83:c6:84:2b: 11:20:ae:63:92:ea:a1:7f:c4:45:d0:54:36:3f:10:c8:7a:7c: d0:00:a3:b7:41:89:9a:8d:12:99:cd:84:3e:e1:2d:49:41:89: 26:b6:79:4f:63:fc:61:d8:d1:83:5f:99:16:cc:0e:37:98:f3: 69:5a:69:1e:60:ce:14:75:c6:31:51:e9:f1:ff:15:d3:3a:a3: 87:70:3a:39:80:3d:9f:d6:0d:9a:1d:02:64:a4:82:7c:e8:5c: f7:55:1e:b5:04:f6:da:7d:19:b5:a2:30:b6:e8:b2:f3:2b:68: 15:8a:cb:57 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICALgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTRF RkY3MzkyRTFFREMxMjI1RkM0Q0ZCOEZBQjZFQjYxN0E5RDI0RDAeFw0yNTA2MDYw MjI0NTZaFw0yNjA1MjcwNzM4NDFaMDMxMTAvBgNVBAMTKDkyNzM2NzEwRkVDRDA2 QUQ1NjUyMkZDMEEzMDBGNjc1RkQxNzBBMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC164RVWc/eMdLL0DCYieAmQ/tYzC8bJzxoGoCQf9OpjH80fyq7 Q6uHhgpp57+xOooLY1+rbEHnWGYqL5FS8o/oIDcU1rcPZ+VganE2GDib8doNf9Z2 VDxrE47sIEKVTDsyD4BosjipfpeonCLAWEZ+zSEb1WnFNFeFq2Plz8UuySbR21Ny guZ7JrgEW3H5tRow7o4M+L+rFv/7WUslDhL6LonW1D3Lr9dx6RpWcvkFh9vB0kd3 jL6/IC89UCfb917fzK6LaJKL2+ig/i8F0l4ISYSOtAC9zyWQ/pPBjEcBtMKy4b/G Fd9HCCEGC3O2jdZjGbJpU4RmIjktqynSOKvXAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUknNnEP7NBq1WUi/AowD2df0XCgMwHwYDVR0jBBgwFoAUlO/3OS4e3BIl/Ez7 j6tuthep0k0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3 Mi9sT18zT1M0ZTNCSWxfRXo3ajZ0dXRoZXAwazAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2xPXzNPUzRlM0JJbF9FejdqNnR1dGhlcDBrMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2NzIva25ObkVQN05CcTFX VWlfQW93RDJkZjBYQ2dNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHBCQKQMHgADANBgkqhkiG9w0BAQsFAAOCAQEAYKi05xLcBgGnNkaOoaZSY3cz BZRGCUaQjQwjeu4Ts7n2wdFkQlozVA+m0l40LwL4JAz2rUOmXl4NEdSot9ZkUfNH 7mg8RL5DKoVefe0wDFDivCve6GfOPQ8zs0Qw+b2YeFzybkYllS/pvM4umIae9jjw MWrGorb+sqt3cPJVoMDg5xGnbvlfcezWNIODxoQrESCuY5LqoX/ERdBUNj8QyHp8 0ACjt0GJmo0Smc2EPuEtSUGJJrZ5T2P8YdjRg1+ZFswON5jzaVppHmDOFHXGMVHp 8f8V0zqjh3A6OYA9n9YNmh0CZKSCfOhc91UetQT22n0ZtaIwtuiy8ytoFYrLVw== -----END CERTIFICATE-----Generated at Fri Jul 4 08:28:01 2025 by rpki-client