$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1232/j-0gU8paI21eMJa3hRJGYcHltcU.roa File: j-0gU8paI21eMJa3hRJGYcHltcU.roa (raw, json) Hash identifier: UCYR7FZclqfUhrSjSJG3T1WZhrNf2qylfAhzRNhGDxQ= Subject key identifier: 8F:ED:20:53:CA:5A:23:6D:5E:30:96:B7:85:12:46:61:C1:E5:B5:C5 Certificate issuer: /CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4 Certificate serial: 45 Authority key identifier: F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/j-0gU8paI21eMJa3hRJGYcHltcU.roa Signing time: Fri 22 Aug 2025 06:30:23 +0000 ROA not before: Fri 22 Aug 2025 06:30:23 +0000 ROA not after: Thu 20 Aug 2026 07:49:18 +0000 asID: 139137 IP address blocks: 2402:7d80:8888::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 04:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4 Validity Not Before: Aug 22 06:30:23 2025 GMT Not After : Aug 20 07:49:18 2026 GMT Subject: CN=8FED2053CA5A236D5E3096B785124661C1E5B5C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c4:de:47:34:77:2d:cf:48:39:f0:70:6c:7e: 5d:2a:96:67:dd:da:b4:85:4d:76:ee:48:0b:6c:7d: 2f:55:e2:24:c0:78:51:c4:1b:1a:14:0b:92:7c:29: a5:96:d6:6d:6f:b6:78:86:af:3a:ab:c5:ad:57:04: b6:0f:97:14:21:23:dc:3a:cc:df:58:7e:b1:fb:ef: 29:93:70:fd:3c:6f:05:4a:ad:95:b4:a4:b0:3d:50: 16:46:5c:cb:86:1d:03:df:63:b3:48:7f:78:d1:de: ae:4f:ae:08:ef:0e:b6:f2:4a:8c:2c:ee:bb:ca:03: a2:36:32:57:98:c1:b5:1c:4a:38:e3:0f:d7:e0:09: e1:0b:89:4a:fa:39:77:d7:cc:8e:59:50:19:3f:3f: f7:c8:5e:27:af:df:18:a1:f8:5f:0a:70:d0:c2:4e: 84:45:8e:3d:e8:32:02:a3:de:d0:5a:2f:94:7b:ca: d3:f7:3b:6b:f3:86:7e:48:43:6e:6d:79:9d:fb:4a: 5e:f5:59:8f:5c:0c:e7:39:70:a5:a8:58:7c:52:74: d0:d0:50:60:8a:b3:a8:f0:5f:41:b0:dc:f0:f2:a6: d0:43:4c:65:32:42:78:96:c0:4f:53:e5:c9:9d:60: 49:53:99:8c:33:c9:18:95:c9:ce:17:34:31:55:e6: b7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:ED:20:53:CA:5A:23:6D:5E:30:96:B7:85:12:46:61:C1:E5:B5:C5 X509v3 Authority Key Identifier: keyid:F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/j-0gU8paI21eMJa3hRJGYcHltcU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2402:7d80:8888::/48 Signature Algorithm: sha256WithRSAEncryption 51:1f:d7:36:fc:97:b1:6b:04:d7:e6:cb:1a:ae:11:2d:b9:99: 55:0a:48:0b:0f:0c:37:17:6c:0a:22:1e:75:18:38:20:85:12: a1:a8:4d:29:2e:f2:f0:31:82:47:97:42:b1:a2:89:1a:27:6f: 47:2f:82:57:f6:9d:64:d6:f1:ad:4c:b3:cf:b9:89:b4:27:6a: 59:03:63:a1:f9:74:08:3a:17:d9:93:bf:99:93:da:ca:12:85: 0f:38:e3:0e:bf:fe:1c:36:22:f9:01:1e:9e:53:c9:ef:51:cb: 78:28:3e:e8:4d:68:08:2b:91:8d:08:74:28:c6:88:e4:d6:e7: 0a:4f:cb:0d:7b:6d:bf:0e:b1:73:e3:83:a0:d0:69:55:cf:bd: ed:d1:c2:40:c0:7d:81:4a:84:8a:ea:b7:10:4c:6b:32:05:30: be:df:0f:d7:6d:10:29:9a:27:9b:c1:72:a3:d3:27:cc:e2:e0: 25:c8:90:01:c4:94:02:9e:ba:1e:72:09:6a:1e:3d:cc:66:5a: 11:3e:2f:1e:c5:fa:fa:d2:f8:68:de:da:f7:ac:ae:ab:4e:b5: 51:84:6b:40:a6:e7:56:cf:25:c2:f6:f6:0c:aa:b1:85:7f:4e: 9f:c7:27:fd:fe:ae:15:be:20:c0:cd:87:19:d9:3f:35:ab:54: 2e:67:c4:7f -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIBRTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGMTk4 OUI0MDY5MDFBREY4ODEwQjlEQ0RDNEUwRkM5RTdFODVFRUI0MB4XDTI1MDgyMjA2 MzAyM1oXDTI2MDgyMDA3NDkxOFowMzExMC8GA1UEAxMoOEZFRDIwNTNDQTVBMjM2 RDVFMzA5NkI3ODUxMjQ2NjFDMUU1QjVDNTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOPE3kc0dy3PSDnwcGx+XSqWZ93atIVNdu5IC2x9L1XiJMB4UcQb GhQLknwppZbWbW+2eIavOqvFrVcEtg+XFCEj3DrM31h+sfvvKZNw/TxvBUqtlbSk sD1QFkZcy4YdA99js0h/eNHerk+uCO8OtvJKjCzuu8oDojYyV5jBtRxKOOMP1+AJ 4QuJSvo5d9fMjllQGT8/98heJ6/fGKH4Xwpw0MJOhEWOPegyAqPe0FovlHvK0/c7 a/OGfkhDbm15nftKXvVZj1wM5zlwpahYfFJ00NBQYIqzqPBfQbDc8PKm0ENMZTJC eJbAT1PlyZ1gSVOZjDPJGJXJzhc0MVXmt90CAwEAAaOCAfYwggHyMB0GA1UdDgQW BBSP7SBTylojbV4wlreFEkZhweW1xTAfBgNVHSMEGDAWgBTxmJtAaQGt+IELnc3E 4PyefoXutDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xMjMy LzhaaWJRR2tCcmZpQkM1M054T0Q4bm42RjdyUS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOFppYlFHa0JyZmlCQzUzTnhPRDhubjZGN3JRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIzMi9qLTBnVThwYUkyMWVN SmEzaFJKR1ljSGx0Y1Uucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcAJAJ9gIiIMA0GCSqGSIb3DQEBCwUAA4IBAQBRH9c2/JexawTX5ssarhEtuZlV CkgLDww3F2wKIh51GDgghRKhqE0pLvLwMYJHl0KxookaJ29HL4JX9p1k1vGtTLPP uYm0J2pZA2Oh+XQIOhfZk7+Zk9rKEoUPOOMOv/4cNiL5AR6eU8nvUct4KD7oTWgI K5GNCHQoxojk1ucKT8sNe22/DrFz44Og0GlVz73t0cJAwH2BSoSK6rcQTGsyBTC+ 3w/XbRApmiebwXKj0yfM4uAlyJABxJQCnroecglqHj3MZloRPi8exfr60vho3tr3 rK6rTrVRhGtApudWzyXC9vYMqrGFf06fxyf9/q4VviDAzYcZ2T81q1QuZ8R/ -----END CERTIFICATE-----Generated at Sun Aug 24 02:39:41 2025 by rpki-client