$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/tKPSyn098yyLad3VWBH7o_LOMNo.roa File: tKPSyn098yyLad3VWBH7o_LOMNo.roa (raw, json) Hash identifier: NHLddQ9OMPMleabtOG+dh2pBljmlW3C87twJ1u+D24k= Subject key identifier: B4:A3:D2:CA:7D:3D:F3:2C:8B:69:DD:D5:58:11:FB:A3:F2:CE:30:DA Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Certificate serial: D1 Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/tKPSyn098yyLad3VWBH7o_LOMNo.roa Signing time: Fri 06 Jun 2025 02:32:43 +0000 ROA not before: Fri 06 Jun 2025 02:32:43 +0000 ROA not after: Wed 27 May 2026 07:38:41 +0000 asID: 132525 IP address blocks: 240a:40c1:6010::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 23:42:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Validity Not Before: Jun 6 02:32:43 2025 GMT Not After : May 27 07:38:41 2026 GMT Subject: CN=B4A3D2CA7D3DF32C8B69DDD55811FBA3F2CE30DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6e:ff:14:03:c6:93:fa:4a:b3:dd:74:fc:3b: 52:1f:40:dd:3e:04:16:e5:0d:06:5a:e0:7d:6e:d1: 1c:1f:72:c7:28:82:8f:f3:df:90:77:ca:45:43:e5: 59:45:2a:ec:c6:13:fd:86:19:84:76:2c:8e:99:40: 9c:ee:d1:79:20:cb:30:f4:a4:2d:21:fb:5b:af:84: 1b:02:98:3f:1c:43:b0:7c:84:a5:f7:94:eb:bb:3a: 48:74:80:98:a1:58:1f:21:f6:b8:81:dd:29:3c:4b: d3:a4:7c:ea:c6:02:ca:7d:ba:3f:8d:fc:82:65:a8: 54:5c:3f:ea:7f:ab:b5:09:67:14:13:4b:a8:04:f1: b9:1b:cd:9a:4a:a6:77:51:28:4c:7c:cd:97:84:0f: 1c:7b:27:a9:ec:0b:33:a1:d2:88:1b:a9:28:93:24: 0a:51:9c:01:a9:a3:d5:56:78:8a:6d:6a:1a:db:74: 97:be:98:59:ea:d8:48:cb:06:36:db:3c:4a:0d:86: b7:4e:fe:01:17:db:cd:fb:c2:4e:f4:f3:42:f2:a3: 15:a3:64:8c:48:d8:70:d5:5d:e8:e2:70:e0:41:fe: fb:ae:41:cb:6c:6a:17:99:7c:17:9b:f3:39:61:46: ba:fe:65:8a:1b:88:a8:06:01:8c:c2:79:a4:65:f6: d4:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:A3:D2:CA:7D:3D:F3:2C:8B:69:DD:D5:58:11:FB:A3:F2:CE:30:DA X509v3 Authority Key Identifier: keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/tKPSyn098yyLad3VWBH7o_LOMNo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 240a:40c1:6010::/44 Signature Algorithm: sha256WithRSAEncryption 01:70:31:d2:e6:ac:49:44:02:40:4c:10:e2:94:a9:ac:25:73: 12:19:73:ba:7c:95:b3:26:3c:a1:51:ff:e3:23:bc:7a:b2:4f: 65:2e:1b:2a:3d:bd:0f:8c:b0:e8:88:d3:1d:29:8a:bc:41:e9: c9:d8:7d:a5:ea:ea:63:9f:92:fa:f8:92:81:22:e6:01:ee:d7: 3d:2f:a9:bd:7d:5a:b0:10:c5:ab:99:99:85:22:48:03:61:1c: 95:69:3d:59:96:36:9d:c0:7b:18:4d:1c:db:ad:4b:ba:8d:9d: 5c:09:38:1f:18:62:f6:9f:f8:b1:3f:c8:f2:b2:0f:36:79:e0: ed:b8:35:2b:9a:8c:2f:bd:4d:81:a2:57:cf:2c:a5:ea:58:0c: 58:ea:67:35:89:34:60:9d:8f:58:e2:54:bc:22:03:f6:37:e8: 1e:98:b7:ea:64:8a:94:7b:d9:fc:74:17:46:dc:a9:79:73:73: 5b:ca:ed:7c:3f:64:90:56:46:a3:f8:6a:8c:c5:6e:c2:cb:ba: 22:c7:41:5e:93:15:21:df:b6:3e:c1:0d:92:df:37:f7:2e:f5: 39:04:45:d8:2c:2d:da:1b:dd:e5:73:68:95:b2:a7:26:7c:f2: d5:71:d2:80:38:ff:ae:61:cf:7f:b7:1f:11:8e:93:01:37:3b: e0:e9:ae:4b -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICANEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTRF RkY3MzkyRTFFREMxMjI1RkM0Q0ZCOEZBQjZFQjYxN0E5RDI0RDAeFw0yNTA2MDYw MjMyNDNaFw0yNjA1MjcwNzM4NDFaMDMxMTAvBgNVBAMTKEI0QTNEMkNBN0QzREYz MkM4QjY5RERENTU4MTFGQkEzRjJDRTMwREEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCebv8UA8aT+kqz3XT8O1IfQN0+BBblDQZa4H1u0Rwfcscogo/z 35B3ykVD5VlFKuzGE/2GGYR2LI6ZQJzu0XkgyzD0pC0h+1uvhBsCmD8cQ7B8hKX3 lOu7Okh0gJihWB8h9riB3Sk8S9OkfOrGAsp9uj+N/IJlqFRcP+p/q7UJZxQTS6gE 8bkbzZpKpndRKEx8zZeEDxx7J6nsCzOh0ogbqSiTJApRnAGpo9VWeIptahrbdJe+ mFnq2EjLBjbbPEoNhrdO/gEX2837wk7080LyoxWjZIxI2HDVXejicOBB/vuuQcts aheZfBeb8zlhRrr+ZYobiKgGAYzCeaRl9tTTAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUtKPSyn098yyLad3VWBH7o/LOMNowHwYDVR0jBBgwFoAUlO/3OS4e3BIl/Ez7 j6tuthep0k0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3 Mi9sT18zT1M0ZTNCSWxfRXo3ajZ0dXRoZXAwazAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2xPXzNPUzRlM0JJbF9FejdqNnR1dGhlcDBrMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2NzIvdEtQU3luMDk4eXlM YWQzVldCSDdvX0xPTU5vLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHBCQKQMFgEDANBgkqhkiG9w0BAQsFAAOCAQEAAXAx0uasSUQCQEwQ4pSprCVz EhlzunyVsyY8oVH/4yO8erJPZS4bKj29D4yw6IjTHSmKvEHpydh9perqY5+S+viS gSLmAe7XPS+pvX1asBDFq5mZhSJIA2EclWk9WZY2ncB7GE0c261Luo2dXAk4Hxhi 9p/4sT/I8rIPNnng7bg1K5qML71NgaJXzyyl6lgMWOpnNYk0YJ2PWOJUvCID9jfo Hpi36mSKlHvZ/HQXRtypeXNzW8rtfD9kkFZGo/hqjMVuwsu6IsdBXpMVId+2PsEN kt839y71OQRF2Cwt2hvd5XNolbKnJnzy1XHSgDj/rmHPf7cfEY6TATc74OmuSw== -----END CERTIFICATE-----Generated at Fri Jul 4 23:16:20 2025 by rpki-client