$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/AvIoBSrNnMcpnZyXaLY_B_COOqM.roa File: AvIoBSrNnMcpnZyXaLY_B_COOqM.roa (raw, json) Hash identifier: tfuTWBj8mqfIFWkntrseawjOrEIi0ukcaV24gqQhJUE= Subject key identifier: 02:F2:28:05:2A:CD:9C:C7:29:9D:9C:97:68:B6:3F:07:F0:8E:3A:A3 Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Certificate serial: 5CF3 Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/AvIoBSrNnMcpnZyXaLY_B_COOqM.roa Signing time: Sat 13 Sep 2025 03:06:27 +0000 ROA not before: Sat 13 Sep 2025 03:06:27 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 134762 IP address blocks: 43.227.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 13:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23795 (0x5cf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Validity Not Before: Sep 13 03:06:27 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=02F228052ACD9CC7299D9C9768B63F07F08E3AA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:44:84:cd:bb:17:e3:4f:89:32:92:0b:dc:bb: e5:31:b8:14:59:b1:06:fb:78:84:98:e6:0d:69:1e: 39:cd:62:ff:aa:3a:7f:cc:d4:e2:a6:b7:5f:46:0b: 34:51:88:96:97:0c:90:cf:15:45:d1:cf:c8:e5:0b: 09:52:6e:54:7f:fb:78:aa:a7:17:ca:e7:3a:75:38: 3d:bf:1a:b7:ff:73:eb:bd:20:28:2f:8a:7a:db:95: 7e:d2:e6:bf:b8:a7:01:62:2e:08:f1:73:12:23:a1: 27:81:09:29:b7:b2:6c:ad:d9:48:de:e8:cb:f1:ff: 43:22:5c:bf:7c:1a:76:d4:31:e0:e2:5d:5a:f0:87: 53:21:12:a0:3a:f4:0e:8e:cf:68:b3:a8:3d:34:7d: 81:1a:18:19:8e:0a:50:5f:54:a5:f1:4a:0d:6b:e7: 1b:78:6a:d8:61:0a:8e:29:6d:dd:64:9f:22:51:a0: ab:27:ed:d4:2a:07:f2:40:e9:e7:e6:48:48:af:84: aa:06:84:85:50:9a:6f:08:0a:0b:fa:7b:a3:73:ce: 9c:99:89:61:42:71:c6:eb:2a:db:9a:46:31:05:56: ad:ba:37:c0:78:3d:72:a1:d4:c3:9a:36:45:00:4d: c9:b4:25:99:a1:ba:02:dd:e3:15:61:45:46:8a:c7: 3a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F2:28:05:2A:CD:9C:C7:29:9D:9C:97:68:B6:3F:07:F0:8E:3A:A3 X509v3 Authority Key Identifier: keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/AvIoBSrNnMcpnZyXaLY_B_COOqM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.227.64.0/22 Signature Algorithm: sha256WithRSAEncryption 83:dd:b5:d4:f9:fb:c4:57:18:2e:58:33:24:5e:17:ba:91:06: b6:a8:0d:e8:68:19:c5:72:23:b8:ac:d8:7e:80:d3:e4:b4:78: b9:6a:05:19:92:01:8f:24:da:2f:75:bc:5b:7b:ea:ca:75:1b: ba:74:e9:6b:65:3c:ee:3c:ab:66:c6:b8:fa:89:3b:e9:13:ce: 83:a1:12:49:b5:b4:55:fa:3f:cd:58:7e:4a:bb:66:93:3a:1d: ed:db:90:b8:0d:da:c3:88:d6:af:68:23:d4:78:21:0d:f7:8f: 17:7b:cb:48:ac:a5:8a:cb:62:94:5e:74:8e:e9:c6:58:4c:53: bf:bd:92:ab:44:32:6e:dc:4d:90:9b:b7:ff:7c:bd:98:ec:39: 55:b6:f3:99:ed:aa:16:e6:6c:98:9f:05:0c:6e:b5:ff:ae:9a: 24:db:8a:c0:6d:91:99:1e:e6:6c:2f:ca:d1:31:e2:fa:f9:a6: 92:9c:05:ab:c0:08:35:53:09:d7:62:c3:e0:af:59:f4:6b:1b: e2:84:7d:b3:d3:02:c3:47:a2:6e:31:b7:c4:9f:e0:02:21:f2: d0:0e:21:61:f2:27:00:63:e7:df:32:82:ff:b3:c8:c8:f3:cd: 7a:93:a9:1e:56:5c:4e:24:d1:56:12:12:07:58:2c:14:cf:af: 2c:9a:cf:b5 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICXPMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEFF NENGNzhCNDlERjBCMkMxRDI5RDMyRTQ4QTk0M0FFNEY0MUFDQzAeFw0yNTA5MTMw MzA2MjdaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDAyRjIyODA1MkFDRDlD QzcyOTlEOUM5NzY4QjYzRjA3RjA4RTNBQTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDiRITNuxfjT4kykgvcu+UxuBRZsQb7eISY5g1pHjnNYv+qOn/M 1OKmt19GCzRRiJaXDJDPFUXRz8jlCwlSblR/+3iqpxfK5zp1OD2/Grf/c+u9ICgv inrblX7S5r+4pwFiLgjxcxIjoSeBCSm3smyt2Uje6Mvx/0MiXL98GnbUMeDiXVrw h1MhEqA69A6Oz2izqD00fYEaGBmOClBfVKXxSg1r5xt4athhCo4pbd1knyJRoKsn 7dQqB/JA6efmSEivhKoGhIVQmm8ICgv6e6NzzpyZiWFCccbrKtuaRjEFVq26N8B4 PXKh1MOaNkUATcm0JZmhugLd4xVhRUaKxzohAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUAvIoBSrNnMcpnZyXaLY/B/COOqMwHwYDVR0jBBgwFoAUiuTPeLSd8LLB0p0y 5IqUOuT0GswwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTY2 My9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2l1VFBlTFNkOExMQjBwMHk1SXFVT3VUMEdzdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2NjMvQXZJb0JTck5uTWNw blp5WGFMWV9CX0NPT3FNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAivjQDANBgkqhkiG9w0BAQsFAAOCAQEAg9211Pn7xFcYLlgzJF4XupEGtqgN 6GgZxXIjuKzYfoDT5LR4uWoFGZIBjyTaL3W8W3vqynUbunTpa2U87jyrZsa4+ok7 6RPOg6ESSbW0Vfo/zVh+Srtmkzod7duQuA3aw4jWr2gj1HghDfePF3vLSKylisti lF50junGWExTv72Sq0QybtxNkJu3/3y9mOw5Vbbzme2qFuZsmJ8FDG61/66aJNuK wG2RmR7mbC/K0THi+vmmkpwFq8AINVMJ12LD4K9Z9Gsb4oR9s9MCw0eibjG3xJ/g AiHy0A4hYfInAGPn3zKC/7PIyPPNepOpHlZcTiTRVhISB1gsFM+vLJrPtQ== -----END CERTIFICATE-----Generated at Mon Oct 20 11:19:08 2025 by rpki-client