$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/oJ-VdqXAEK1csAUKxqb3bHcbQKs.roa File: oJ-VdqXAEK1csAUKxqb3bHcbQKs.roa (raw, json) Hash identifier: E6XVmgppcaTjs+7JFW/1rAN0L3YnvjMQ+Age3LHAgOQ= Subject key identifier: A0:9F:95:76:A5:C0:10:AD:5C:B0:05:0A:C6:A6:F7:6C:77:1B:40:AB Certificate issuer: /CN=4911CB6D544B3B6905532964C8E1A472BDCBC267 Certificate serial: 24EE Authority key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/oJ-VdqXAEK1csAUKxqb3bHcbQKs.roa Signing time: Sat 13 Sep 2025 03:08:50 +0000 ROA not before: Sat 13 Sep 2025 03:08:50 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 212237 IP address blocks: 2403:6380:11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Oct 2025 23:37:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9454 (0x24ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267 Validity Not Before: Sep 13 03:08:50 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=A09F9576A5C010AD5CB0050AC6A6F76C771B40AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1a:bf:8b:8c:06:51:3f:64:ac:1e:49:d7:d8: 87:12:b9:02:90:04:c4:69:d1:73:00:d2:d6:db:76: 8f:89:03:f8:b6:7c:86:9b:e9:0c:fa:09:a5:b0:9d: 39:e1:c5:fb:26:51:28:e8:ed:c9:a4:6e:5e:bb:0e: 71:f9:f5:da:81:fc:94:1f:eb:f2:3d:91:9d:a5:4e: 0f:c6:3e:f7:ef:7f:e3:87:a5:c5:93:38:c1:62:0b: 9d:0d:c2:11:9e:3b:42:ca:a5:70:cd:c7:6b:b1:f8: 16:17:44:2a:f4:7d:1f:ec:af:84:ee:3a:b6:59:68: 3b:1b:0c:ba:9f:09:ab:88:73:75:27:2b:24:16:cb: 71:66:0b:1c:61:2b:b8:dd:79:42:68:11:04:d8:8a: 3b:d7:60:d8:39:24:2e:60:96:33:77:a7:bf:78:46: 19:6b:df:18:7f:1f:c7:98:35:f2:47:0a:75:38:6c: 2c:e6:d2:61:2d:85:4c:1e:a7:90:11:b1:c7:dd:e8: 1a:49:7c:5c:d0:58:ba:ac:f1:02:94:ea:80:6e:ac: 9a:c3:4e:cb:da:e9:82:88:65:d2:b1:b9:a5:61:98: 44:89:04:68:de:8d:f9:19:bb:99:da:1e:c9:6a:4d: 65:00:5e:85:f5:3c:e5:a0:ed:bc:36:c3:ff:ce:4d: c1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:9F:95:76:A5:C0:10:AD:5C:B0:05:0A:C6:A6:F7:6C:77:1B:40:AB X509v3 Authority Key Identifier: keyid:49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/oJ-VdqXAEK1csAUKxqb3bHcbQKs.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2403:6380:11::/48 Signature Algorithm: sha256WithRSAEncryption 1f:07:05:95:bc:95:85:c4:39:11:46:4b:e3:d2:af:5f:ac:a1: 89:8c:f1:d7:bb:32:a2:8d:cf:c2:82:48:55:82:17:9c:08:4e: f3:20:7b:83:c0:0a:69:08:07:90:8b:6a:39:6b:d9:74:35:3a: d4:b2:91:3d:3d:d5:10:73:5b:92:79:3f:17:35:7f:3b:cf:7c: c0:e4:31:93:d7:03:fb:ab:64:9d:61:9a:1e:0e:84:46:a9:f7: ef:80:aa:2e:e1:2c:88:95:77:b0:67:bf:48:ab:b8:04:d9:0f: cf:83:af:e2:9b:99:81:2d:fd:81:13:7b:26:61:64:bd:8a:63: dd:19:86:07:cd:bd:7d:cb:ea:1b:19:95:fa:f9:34:66:6d:ac: 31:f7:7f:b6:f8:20:7f:4f:58:1a:ea:2e:16:8c:8f:1e:a2:78: 07:b7:6e:b7:bf:1d:2b:23:0c:7b:ca:48:f0:3b:48:af:a3:00: 05:07:e0:a6:1b:9a:e6:f7:ab:89:d2:1c:bd:3c:e0:9b:29:af: c8:db:48:9e:27:0b:f1:2c:5c:ce:6a:66:7d:c9:61:55:20:91: 25:f4:0f:e6:88:86:a8:f6:02:8f:4b:eb:35:44:f4:da:c7:0b: 62:5b:f5:f9:d1:0b:ff:8b:e2:50:9d:03:c3:01:1b:15:21:01: 7d:8c:2f:3d -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICJO4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDkx MUNCNkQ1NDRCM0I2OTA1NTMyOTY0QzhFMUE0NzJCRENCQzI2NzAeFw0yNTA5MTMw MzA4NTBaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEEwOUY5NTc2QTVDMDEw QUQ1Q0IwMDUwQUM2QTZGNzZDNzcxQjQwQUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnGr+LjAZRP2SsHknX2IcSuQKQBMRp0XMA0tbbdo+JA/i2fIab 6Qz6CaWwnTnhxfsmUSjo7cmkbl67DnH59dqB/JQf6/I9kZ2lTg/GPvfvf+OHpcWT OMFiC50NwhGeO0LKpXDNx2ux+BYXRCr0fR/sr4TuOrZZaDsbDLqfCauIc3UnKyQW y3FmCxxhK7jdeUJoEQTYijvXYNg5JC5gljN3p794Rhlr3xh/H8eYNfJHCnU4bCzm 0mEthUwep5ARscfd6BpJfFzQWLqs8QKU6oBurJrDTsva6YKIZdKxuaVhmESJBGje jfkZu5naHslqTWUAXoX1POWg7bw2w//OTcG7AgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUoJ+VdqXAEK1csAUKxqb3bHcbQKswHwYDVR0jBBgwFoAUSRHLbVRLO2kFUylk yOGkcr3LwmcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTQx MS9TUkhMYlZSTE8ya0ZVeWxreU9Ha2NyM0x3bWMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NSSExiVlJMTzJrRlV5bGt5T0drY3IzTHdtYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE0MTEvb0otVmRxWEFFSzFj c0FVS3hxYjNiSGNiUUtzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHACQDY4AAETANBgkqhkiG9w0BAQsFAAOCAQEAHwcFlbyVhcQ5EUZL49KvX6yh iYzx17syoo3PwoJIVYIXnAhO8yB7g8AKaQgHkItqOWvZdDU61LKRPT3VEHNbknk/ FzV/O898wOQxk9cD+6tknWGaHg6ERqn374CqLuEsiJV3sGe/SKu4BNkPz4Ov4puZ gS39gRN7JmFkvYpj3RmGB829fcvqGxmV+vk0Zm2sMfd/tvggf09YGuouFoyPHqJ4 B7dut78dKyMMe8pI8DtIr6MABQfgphua5veridIcvTzgmymvyNtInicL8Sxczmpm fclhVSCRJfQP5oiGqPYCj0vrNUT02scLYlv1+dEL/4viUJ0DwwEbFSEBfYwvPQ== -----END CERTIFICATE-----Generated at Sun Oct 19 20:11:12 2025 by rpki-client