$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/l6KbWrW0rGE5he4xw9YvZxZmx-c.roa File: l6KbWrW0rGE5he4xw9YvZxZmx-c.roa (raw, json) Hash identifier: ybhoH35r8yt0uzV/JLEB5O7w5eNvELr3Y/wqG7v5bD4= Subject key identifier: 97:A2:9B:5A:B5:B4:AC:61:39:85:EE:31:C3:D6:2F:67:16:66:C7:E7 Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Certificate serial: DF Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/l6KbWrW0rGE5he4xw9YvZxZmx-c.roa Signing time: Fri 06 Jun 2025 02:36:23 +0000 ROA not before: Fri 06 Jun 2025 02:36:23 +0000 ROA not after: Wed 27 May 2026 07:38:41 +0000 asID: 9808 IP address blocks: 240a:40c3:a000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 18:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Validity Not Before: Jun 6 02:36:23 2025 GMT Not After : May 27 07:38:41 2026 GMT Subject: CN=97A29B5AB5B4AC613985EE31C3D62F671666C7E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:aa:59:53:34:71:43:96:34:4b:30:34:0a:73: 9a:a8:a3:90:28:e6:04:e0:84:99:17:a8:c5:69:1e: cb:b1:78:35:42:23:c1:2c:9f:fc:39:5e:ce:fb:40: 92:d9:a6:29:5d:96:aa:d9:3f:a4:29:9d:af:57:d1: 07:f4:2b:d7:a1:af:54:cb:fc:a7:81:49:e2:76:e4: 4f:1a:95:e1:68:4d:2d:c5:75:91:2a:8e:6d:97:71: cd:74:59:51:ff:ac:f8:1c:b9:61:10:82:24:ff:16: 65:33:63:59:92:f4:a0:fa:6f:77:b1:64:3d:1e:35: 1b:bd:f8:31:08:95:4f:69:b0:a0:38:a5:73:c4:bf: 98:ab:50:e1:c7:f9:23:b0:b6:c3:00:01:f8:6d:e6: f7:0d:53:b9:5a:d6:e2:82:7d:81:01:d6:4b:6e:7a: be:20:22:b7:24:46:a2:50:e9:df:35:82:7d:ff:9e: d1:f2:df:d4:14:0d:f8:96:6f:d8:e1:a8:06:36:47: 36:07:ba:34:15:4e:b4:65:96:bb:ac:4b:74:8b:cc: 0f:52:1d:5e:f5:ca:f3:eb:9c:c6:66:6d:09:49:4a: fa:91:86:02:f4:1b:fe:9d:0d:a8:63:1e:be:8d:7a: d0:df:54:0d:72:5c:96:fb:8d:ac:bd:77:9d:03:aa: 56:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:A2:9B:5A:B5:B4:AC:61:39:85:EE:31:C3:D6:2F:67:16:66:C7:E7 X509v3 Authority Key Identifier: keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/l6KbWrW0rGE5he4xw9YvZxZmx-c.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 240a:40c3:a000::/44 Signature Algorithm: sha256WithRSAEncryption 8e:c7:1c:07:09:f3:d7:9b:93:4d:86:a2:62:b1:5e:7a:35:54: d7:d7:e9:15:cd:2e:db:c4:89:ca:1a:a3:9b:26:fe:99:ee:f1: 9f:46:83:1f:60:36:44:36:07:68:ba:5a:64:31:21:4c:95:33: f4:fc:51:67:9c:c8:2a:85:09:3f:b1:74:c2:95:fb:55:e4:8c: 2a:9f:ad:96:f6:2f:84:a9:90:02:80:54:d6:db:65:58:19:e8: 41:98:d1:f2:ce:f5:41:d6:2b:e5:6b:2b:a1:b0:98:ba:52:bd: f5:64:81:c4:df:94:36:9d:2d:c4:5d:87:da:44:ef:79:3a:c5: 59:bd:73:0c:5d:56:83:de:cf:46:45:78:c1:b9:d9:ae:a0:5d: 81:c4:39:c8:dc:5b:1f:87:c7:08:a8:3b:30:6c:68:b6:4d:97: 66:b5:dd:6d:f1:e8:f7:fa:16:34:36:2a:fb:c0:d0:f3:e0:e6: ae:e4:39:39:42:54:9e:0f:57:3b:b7:54:4e:48:33:31:7a:b2: c5:62:c5:3d:b4:db:1e:b1:14:53:1c:ac:be:bd:46:85:99:93: d9:fa:77:3e:ae:d7:51:67:c4:e3:2e:b2:9b:06:75:3b:ea:f4: 7b:45:65:8f:39:d1:6e:47:f8:a5:fa:88:26:21:fb:5e:01:a7: 53:32:ad:41 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTRF RkY3MzkyRTFFREMxMjI1RkM0Q0ZCOEZBQjZFQjYxN0E5RDI0RDAeFw0yNTA2MDYw MjM2MjNaFw0yNjA1MjcwNzM4NDFaMDMxMTAvBgNVBAMTKDk3QTI5QjVBQjVCNEFD NjEzOTg1RUUzMUMzRDYyRjY3MTY2NkM3RTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCcqllTNHFDljRLMDQKc5qoo5Ao5gTghJkXqMVpHsuxeDVCI8Es n/w5Xs77QJLZpildlqrZP6Qpna9X0Qf0K9ehr1TL/KeBSeJ25E8aleFoTS3FdZEq jm2Xcc10WVH/rPgcuWEQgiT/FmUzY1mS9KD6b3exZD0eNRu9+DEIlU9psKA4pXPE v5irUOHH+SOwtsMAAfht5vcNU7la1uKCfYEB1ktuer4gIrckRqJQ6d81gn3/ntHy 39QUDfiWb9jhqAY2RzYHujQVTrRllrusS3SLzA9SHV71yvPrnMZmbQlJSvqRhgL0 G/6dDahjHr6NetDfVA1yXJb7jay9d50DqlbNAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUl6KbWrW0rGE5he4xw9YvZxZmx+cwHwYDVR0jBBgwFoAUlO/3OS4e3BIl/Ez7 j6tuthep0k0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3 Mi9sT18zT1M0ZTNCSWxfRXo3ajZ0dXRoZXAwazAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2xPXzNPUzRlM0JJbF9FejdqNnR1dGhlcDBrMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2NzIvbDZLYldyVzByR0U1 aGU0eHc5WXZaeFpteC1jLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHBCQKQMOgADANBgkqhkiG9w0BAQsFAAOCAQEAjsccBwnz15uTTYaiYrFeejVU 19fpFc0u28SJyhqjmyb+me7xn0aDH2A2RDYHaLpaZDEhTJUz9PxRZ5zIKoUJP7F0 wpX7VeSMKp+tlvYvhKmQAoBU1ttlWBnoQZjR8s71QdYr5WsrobCYulK99WSBxN+U Np0txF2H2kTveTrFWb1zDF1Wg97PRkV4wbnZrqBdgcQ5yNxbH4fHCKg7MGxotk2X ZrXdbfHo9/oWNDYq+8DQ8+DmruQ5OUJUng9XO7dUTkgzMXqyxWLFPbTbHrEUUxys vr1GhZmT2fp3Pq7XUWfE4y6ymwZ1O+r0e0VljznRbkf4pfqIJiH7XgGnUzKtQQ== -----END CERTIFICATE-----Generated at Fri Jul 4 14:32:36 2025 by rpki-client