$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/vPclrXRfPv8Id4he8utYQ4ofH0Q.roa File: vPclrXRfPv8Id4he8utYQ4ofH0Q.roa (raw, json) Hash identifier: pEOJzOAPgMrZbn3rdvIatv7m5K1xmggkzGMAAK+I6RI= Subject key identifier: BC:F7:25:AD:74:5F:3E:FF:08:77:88:5E:F2:EB:58:43:8A:1F:1F:44 Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Certificate serial: 12 Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/vPclrXRfPv8Id4he8utYQ4ofH0Q.roa Signing time: Tue 27 May 2025 08:11:29 +0000 ROA not before: Tue 27 May 2025 08:11:29 +0000 ROA not after: Wed 27 May 2026 07:38:41 +0000 asID: 56048 IP address blocks: 240a:4090:1100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 23:42:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Validity Not Before: May 27 08:11:29 2025 GMT Not After : May 27 07:38:41 2026 GMT Subject: CN=BCF725AD745F3EFF0877885EF2EB58438A1F1F44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:02:3f:30:f3:3f:1f:fb:c1:61:94:0a:e8:c9: a7:c0:5b:95:8d:75:28:ee:24:d9:2d:d4:d8:b4:b2: 85:36:7d:d7:76:b4:64:19:61:e6:68:13:4c:fa:9f: e1:d9:07:1c:dc:30:75:47:f6:44:e3:be:a0:01:9c: c3:57:93:70:52:2f:c5:ca:04:f2:72:88:09:d3:47: 42:00:a1:2c:7d:8f:8b:a3:7a:e5:a8:20:42:d5:b3: d5:ba:c2:f8:86:81:ef:a8:89:7c:33:3e:33:0f:5c: 18:35:2c:78:79:6b:db:65:7f:33:88:e2:eb:99:f2: 64:ed:75:7a:89:26:b5:ce:ae:02:be:fd:6d:11:e4: 5b:25:d4:5c:db:09:98:33:4e:1e:01:51:1c:b0:1d: 54:76:7a:c1:5d:94:fb:88:c6:4e:10:b2:09:89:39: d9:3d:50:ce:35:49:78:02:30:ce:e7:36:78:ee:70: 98:de:98:1f:d8:ab:7e:0a:96:70:88:52:70:4b:33: ea:6a:1d:4f:89:42:85:c3:7f:34:51:a9:2a:53:a4: 8c:d8:90:56:69:74:6e:66:43:82:de:10:81:ef:c1: 85:a8:5e:70:14:49:98:b7:70:09:b9:5d:11:fc:ac: bc:04:8f:9e:87:75:c1:5e:84:63:f5:40:89:ad:f4: fd:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F7:25:AD:74:5F:3E:FF:08:77:88:5E:F2:EB:58:43:8A:1F:1F:44 X509v3 Authority Key Identifier: keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/vPclrXRfPv8Id4he8utYQ4ofH0Q.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 240a:4090:1100::/40 Signature Algorithm: sha256WithRSAEncryption 01:46:86:89:5a:87:64:c8:e4:27:da:09:e2:44:51:82:64:92: 7f:78:7f:79:58:f5:d5:c9:77:3d:95:27:61:c4:f2:13:54:84: 77:4c:86:1e:2c:55:f8:3b:0b:1d:96:04:4d:07:24:96:34:af: af:0a:23:9c:50:db:03:91:7d:77:06:b6:3e:16:08:66:18:5e: e8:03:5d:8d:7e:d0:f1:09:d8:1c:5c:63:a7:a5:2d:79:97:34: 0e:71:e6:75:db:95:44:cf:81:f2:64:e0:97:2b:aa:8f:cb:3b: cb:ab:60:d1:98:93:7b:32:95:f5:56:de:1e:b2:15:77:c6:1c: e2:0c:00:92:db:a7:b8:45:40:26:49:bb:47:fc:5d:21:a1:58: d2:c3:20:5f:ae:3d:a6:04:18:24:f6:20:66:21:86:bc:fb:be: 27:78:03:f4:3b:9e:af:12:1c:ad:ab:96:22:db:01:fd:b5:9b: 75:3f:71:86:25:6c:e4:0d:e0:4e:20:e5:48:04:7b:db:3d:02: a1:e7:43:d0:8c:b8:b1:83:9e:70:1e:91:fd:f6:44:50:6c:84: 97:fa:18:91:c7:b1:c2:e8:54:d9:46:b3:96:11:ea:0a:ec:50: 6a:d6:91:4e:b3:f9:26:d3:a2:59:8e:76:2b:91:a3:d4:94:7a: 8a:b4:e4:a7 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIBEjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NEVG RjczOTJFMUVEQzEyMjVGQzRDRkI4RkFCNkVCNjE3QTlEMjREMB4XDTI1MDUyNzA4 MTEyOVoXDTI2MDUyNzA3Mzg0MVowMzExMC8GA1UEAxMoQkNGNzI1QUQ3NDVGM0VG RjA4Nzc4ODVFRjJFQjU4NDM4QTFGMUY0NDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKQCPzDzPx/7wWGUCujJp8BblY11KO4k2S3U2LSyhTZ913a0ZBlh 5mgTTPqf4dkHHNwwdUf2ROO+oAGcw1eTcFIvxcoE8nKICdNHQgChLH2Pi6N65agg QtWz1brC+IaB76iJfDM+Mw9cGDUseHlr22V/M4ji65nyZO11eokmtc6uAr79bRHk WyXUXNsJmDNOHgFRHLAdVHZ6wV2U+4jGThCyCYk52T1QzjVJeAIwzuc2eO5wmN6Y H9irfgqWcIhScEsz6modT4lChcN/NFGpKlOkjNiQVml0bmZDgt4Qge/BhahecBRJ mLdwCbldEfysvASPnod1wV6EY/VAia30/fkCAwEAAaOCAfUwggHxMB0GA1UdDgQW BBS89yWtdF8+/wh3iF7y61hDih8fRDAfBgNVHSMEGDAWgBSU7/c5Lh7cEiX8TPuP q262F6nSTTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNjcy L2xPXzNPUzRlM0JJbF9FejdqNnR1dGhlcDBrMC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvbE9fM09TNGUzQklsX0V6N2o2dHV0aGVwMGswLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3Mi92UGNsclhSZlB2OElk NGhlOHV0WVE0b2ZIMFEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI AwYAJApAkBEwDQYJKoZIhvcNAQELBQADggEBAAFGholah2TI5CfaCeJEUYJkkn94 f3lY9dXJdz2VJ2HE8hNUhHdMhh4sVfg7Cx2WBE0HJJY0r68KI5xQ2wORfXcGtj4W CGYYXugDXY1+0PEJ2BxcY6elLXmXNA5x5nXblUTPgfJk4Jcrqo/LO8urYNGYk3sy lfVW3h6yFXfGHOIMAJLbp7hFQCZJu0f8XSGhWNLDIF+uPaYEGCT2IGYhhrz7vid4 A/Q7nq8SHK2rliLbAf21m3U/cYYlbOQN4E4g5UgEe9s9AqHnQ9CMuLGDnnAekf32 RFBshJf6GJHHscLoVNlGs5YR6grsUGrWkU6z+SbTolmOdiuRo9SUeoq05Kc= -----END CERTIFICATE-----Generated at Fri Jul 4 23:21:26 2025 by rpki-client