$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1232/sDGLtOAKlwycPJk3tw4qJkprM60.roa File: sDGLtOAKlwycPJk3tw4qJkprM60.roa (raw, json) Hash identifier: ARUnoFAGuFXpgST9vVwKhlCKK8JhNTeHORgCV/j1BK8= Subject key identifier: B0:31:8B:B4:E0:0A:97:0C:9C:3C:99:37:B7:0E:2A:26:4A:6B:33:AD Certificate issuer: /CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4 Certificate serial: 4B Authority key identifier: F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/sDGLtOAKlwycPJk3tw4qJkprM60.roa Signing time: Fri 22 Aug 2025 06:35:05 +0000 ROA not before: Fri 22 Aug 2025 06:35:05 +0000 ROA not after: Thu 20 Aug 2026 07:49:18 +0000 asID: 63583 IP address blocks: 2402:7d80:fffe::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 04:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4 Validity Not Before: Aug 22 06:35:05 2025 GMT Not After : Aug 20 07:49:18 2026 GMT Subject: CN=B0318BB4E00A970C9C3C9937B70E2A264A6B33AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b5:e4:69:26:04:c1:5a:b3:7a:20:b1:90:09: 75:43:a3:bd:17:6a:a1:fc:11:eb:02:ee:4e:2c:4a: db:8a:f5:e1:34:7c:ed:8e:37:70:4c:93:df:04:7c: d0:04:1a:92:d4:66:41:a5:36:2a:5c:ae:0c:9a:1f: 81:8b:cf:10:7e:a1:e7:2e:95:52:75:ea:5f:8f:ec: c3:a6:99:b7:c9:1f:f8:a4:f8:8b:75:b3:bd:5e:b3: 9e:90:b2:69:b3:32:9f:40:87:d4:eb:39:b9:74:f5: bb:e5:86:4c:20:23:20:47:ed:80:62:4d:2c:b7:33: 50:80:f8:eb:55:b2:d3:81:a2:35:85:26:e4:45:60: e0:27:3e:7c:38:d7:55:7c:ea:79:df:62:cd:a8:7c: 6b:61:e8:1f:f9:82:cb:3f:11:03:6f:1e:96:d9:a5: b7:bc:80:65:0d:00:57:6a:b6:91:3b:64:73:21:c5: 41:78:06:b5:cc:a9:0b:d5:44:2e:c6:18:a3:a5:4e: 68:95:74:11:1d:06:de:ae:5b:ce:ed:9a:6f:92:12: 84:40:10:14:fd:32:04:11:83:ad:70:c5:02:8c:92: e4:1b:c9:e9:2c:fa:fc:15:f9:a1:de:99:90:46:43: 86:16:66:f6:eb:67:5f:b3:a9:4d:d8:60:67:fd:a8: 5a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:31:8B:B4:E0:0A:97:0C:9C:3C:99:37:B7:0E:2A:26:4A:6B:33:AD X509v3 Authority Key Identifier: keyid:F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/sDGLtOAKlwycPJk3tw4qJkprM60.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2402:7d80:fffe::/48 Signature Algorithm: sha256WithRSAEncryption 40:ec:2e:a8:62:fa:48:7d:db:d1:2b:7b:2f:2a:23:da:d5:70: 94:26:04:d6:d6:1e:89:93:13:8c:ae:7c:91:b4:5b:d1:35:43: 89:60:d3:cb:03:d1:9a:21:d4:84:63:44:70:80:6a:23:db:95: bc:8d:05:ab:fd:37:f3:e8:da:45:86:ec:46:e3:57:31:48:ea: e7:ad:78:11:15:51:11:94:55:d7:61:23:79:ec:b6:19:f5:84: e2:d6:16:57:9a:89:29:d4:e2:17:27:77:e0:e6:6f:a5:8a:83: f0:a5:ae:a7:81:0a:62:93:5d:67:67:7f:53:ca:02:01:0a:98: c7:23:8c:69:ea:80:d9:72:ca:27:dc:ea:a0:74:ba:ff:52:97: 58:42:7f:a2:4b:5d:3e:5f:bc:82:1a:e8:de:bf:24:a4:e7:3c: 05:c9:f7:e9:b6:3d:09:53:fc:e4:04:b2:f0:e2:e7:93:67:ef: ce:65:3c:6f:6c:77:10:79:6d:40:f7:93:bb:16:f1:62:2c:3c: 0c:60:40:8d:c5:8c:4d:3a:b0:78:2e:6a:86:85:87:07:28:88: 95:17:71:4b:ac:ac:ed:f0:99:bb:f2:51:66:e8:91:04:e9:6f: de:60:25:f1:8e:52:26:8f:67:0a:ac:0f:18:ae:76:cf:8b:0f: 62:0e:c8:4d -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIBSzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGMTk4 OUI0MDY5MDFBREY4ODEwQjlEQ0RDNEUwRkM5RTdFODVFRUI0MB4XDTI1MDgyMjA2 MzUwNVoXDTI2MDgyMDA3NDkxOFowMzExMC8GA1UEAxMoQjAzMThCQjRFMDBBOTcw QzlDM0M5OTM3QjcwRTJBMjY0QTZCMzNBRDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALW15GkmBMFas3ogsZAJdUOjvRdqofwR6wLuTixK24r14TR87Y43 cEyT3wR80AQaktRmQaU2KlyuDJofgYvPEH6h5y6VUnXqX4/sw6aZt8kf+KT4i3Wz vV6znpCyabMyn0CH1Os5uXT1u+WGTCAjIEftgGJNLLczUID461Wy04GiNYUm5EVg 4Cc+fDjXVXzqed9izah8a2HoH/mCyz8RA28eltmlt7yAZQ0AV2q2kTtkcyHFQXgG tcypC9VELsYYo6VOaJV0ER0G3q5bzu2ab5IShEAQFP0yBBGDrXDFAoyS5BvJ6Sz6 /BX5od6ZkEZDhhZm9utnX7OpTdhgZ/2oWusCAwEAAaOCAfYwggHyMB0GA1UdDgQW BBSwMYu04AqXDJw8mTe3DiomSmszrTAfBgNVHSMEGDAWgBTxmJtAaQGt+IELnc3E 4PyefoXutDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xMjMy LzhaaWJRR2tCcmZpQkM1M054T0Q4bm42RjdyUS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOFppYlFHa0JyZmlCQzUzTnhPRDhubjZGN3JRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIzMi9zREdMdE9BS2x3eWNQ SmszdHc0cUprcHJNNjAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcAJAJ9gP/+MA0GCSqGSIb3DQEBCwUAA4IBAQBA7C6oYvpIfdvRK3svKiPa1XCU JgTW1h6JkxOMrnyRtFvRNUOJYNPLA9GaIdSEY0RwgGoj25W8jQWr/Tfz6NpFhuxG 41cxSOrnrXgRFVERlFXXYSN57LYZ9YTi1hZXmokp1OIXJ3fg5m+lioPwpa6ngQpi k11nZ39TygIBCpjHI4xp6oDZcson3OqgdLr/UpdYQn+iS10+X7yCGujevySk5zwF yffptj0JU/zkBLLw4ueTZ+/OZTxvbHcQeW1A95O7FvFiLDwMYECNxYxNOrB4LmqG hYcHKIiVF3FLrKzt8Jm78lFm6JEE6W/eYCXxjlImj2cKrA8YrnbPiw9iDshN -----END CERTIFICATE-----Generated at Sun Aug 24 02:41:21 2025 by rpki-client