$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/OfvtK6UGD_bVKz8pj9fgFWb6zgM.roa File: OfvtK6UGD_bVKz8pj9fgFWb6zgM.roa (raw, json) Hash identifier: 40esanXG/apJXlFMV+hzoWKw+5KjI8h/fUEMtsSTOfI= Subject key identifier: 39:FB:ED:2B:A5:06:0F:F6:D5:2B:3F:29:8F:D7:E0:15:66:FA:CE:03 Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Certificate serial: 5D06 Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/OfvtK6UGD_bVKz8pj9fgFWb6zgM.roa Signing time: Sat 13 Sep 2025 03:06:32 +0000 ROA not before: Sat 13 Sep 2025 03:06:32 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 134762 IP address blocks: 43.226.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 18:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23814 (0x5d06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Validity Not Before: Sep 13 03:06:32 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=39FBED2BA5060FF6D52B3F298FD7E01566FACE03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c5:09:04:87:d9:a5:15:84:a1:9d:07:ab:7c: d3:8f:47:de:91:48:3d:dc:ee:8a:c1:b4:2d:1a:2c: fd:7e:0d:01:5d:32:74:61:fc:fb:37:fa:24:d2:69: 70:fd:46:f0:db:fc:71:e9:c4:bd:46:f5:15:8a:15: 45:af:af:73:ca:33:c8:83:f2:89:70:0a:33:cc:9f: 89:a6:a6:01:f9:06:19:8d:7e:02:79:6e:35:87:36: d0:8c:df:6a:99:77:9d:03:6a:53:ce:f0:fd:fa:66: a2:20:9d:5a:a5:e5:1d:3a:83:91:a9:80:96:2f:d2: 8b:14:20:3d:b0:83:e0:30:e5:aa:4b:e7:1f:f6:28: e7:10:9a:4e:27:2a:4a:26:18:6d:0a:f4:ca:86:4a: c2:ca:f6:65:3c:4c:c6:24:1d:55:6c:5f:2a:d4:78: a1:39:a8:7e:08:ec:41:5b:55:82:db:e4:9d:0a:f4: 15:3b:59:b5:1b:32:ad:2c:df:06:83:2c:93:22:ba: 6d:8b:42:ab:66:6f:9e:1a:48:6a:08:79:54:8f:b2: 25:c2:a8:5f:a7:9c:10:b1:d3:19:87:16:79:cc:e6: 00:56:48:e2:0f:76:70:fc:64:3c:0d:c7:8e:f7:f7: d0:d2:a5:cd:a3:a5:66:e7:c3:8a:f6:1c:eb:5f:e2: eb:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:FB:ED:2B:A5:06:0F:F6:D5:2B:3F:29:8F:D7:E0:15:66:FA:CE:03 X509v3 Authority Key Identifier: keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/OfvtK6UGD_bVKz8pj9fgFWb6zgM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.226.53.0/24 Signature Algorithm: sha256WithRSAEncryption 94:92:47:49:7e:30:67:fb:1f:70:03:a8:71:ba:52:b7:cd:72: 31:eb:8f:ec:0b:3a:e5:6d:a6:bc:0e:0d:cf:f6:71:5b:5f:f8: 82:bf:d1:7e:06:ec:85:6e:3a:a1:a6:aa:f1:64:6d:d8:1b:94: 4c:07:2c:53:25:ef:ea:28:d8:e2:37:e3:5d:d0:37:7f:91:ee: bd:01:5b:3f:66:c6:5f:c8:c0:63:ee:23:2f:45:8f:ac:dd:f4: f9:e5:a4:7a:a0:46:e9:1f:bb:62:fb:5b:55:d0:c5:13:da:31: 31:7f:8b:d9:d1:70:f5:c4:02:a2:76:84:f0:91:13:27:36:af: 97:57:3f:f3:11:fc:7f:c4:5c:8e:6c:80:94:48:bf:e4:4f:fa: b1:0d:cb:44:1e:43:02:47:69:40:b0:a3:48:0f:ca:43:19:26: a1:7e:ea:a7:ed:96:21:55:49:c9:9f:87:f1:fb:d7:38:a1:0b: c6:0b:81:70:68:af:3a:3a:f8:0f:e7:de:cc:51:a6:21:ac:38: d7:dd:fc:79:c8:91:28:31:4c:0a:5e:df:01:9b:6d:50:8b:05: 87:a7:39:49:e5:6a:d6:20:d0:fa:25:ca:b6:9f:b6:1b:3b:59: 81:b0:ea:3e:9e:87:2c:2f:ba:17:f5:e1:b1:a6:36:07:fb:b1: e5:09:46:5b -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICXQYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEFF NENGNzhCNDlERjBCMkMxRDI5RDMyRTQ4QTk0M0FFNEY0MUFDQzAeFw0yNTA5MTMw MzA2MzJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDM5RkJFRDJCQTUwNjBG RjZENTJCM0YyOThGRDdFMDE1NjZGQUNFMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDmxQkEh9mlFYShnQerfNOPR96RSD3c7orBtC0aLP1+DQFdMnRh /Ps3+iTSaXD9RvDb/HHpxL1G9RWKFUWvr3PKM8iD8olwCjPMn4mmpgH5BhmNfgJ5 bjWHNtCM32qZd50DalPO8P36ZqIgnVql5R06g5GpgJYv0osUID2wg+Aw5apL5x/2 KOcQmk4nKkomGG0K9MqGSsLK9mU8TMYkHVVsXyrUeKE5qH4I7EFbVYLb5J0K9BU7 WbUbMq0s3waDLJMium2LQqtmb54aSGoIeVSPsiXCqF+nnBCx0xmHFnnM5gBWSOIP dnD8ZDwNx47399DSpc2jpWbnw4r2HOtf4usRAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUOfvtK6UGD/bVKz8pj9fgFWb6zgMwHwYDVR0jBBgwFoAUiuTPeLSd8LLB0p0y 5IqUOuT0GswwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTY2 My9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2l1VFBlTFNkOExMQjBwMHk1SXFVT3VUMEdzdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2NjMvT2Z2dEs2VUdEX2JW S3o4cGo5ZmdGV2I2emdNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEACviNTANBgkqhkiG9w0BAQsFAAOCAQEAlJJHSX4wZ/sfcAOocbpSt81yMeuP 7As65W2mvA4Nz/ZxW1/4gr/RfgbshW46oaaq8WRt2BuUTAcsUyXv6ijY4jfjXdA3 f5HuvQFbP2bGX8jAY+4jL0WPrN30+eWkeqBG6R+7YvtbVdDFE9oxMX+L2dFw9cQC onaE8JETJzavl1c/8xH8f8RcjmyAlEi/5E/6sQ3LRB5DAkdpQLCjSA/KQxkmoX7q p+2WIVVJyZ+H8fvXOKELxguBcGivOjr4D+fezFGmIaw41938eciRKDFMCl7fAZtt UIsFh6c5SeVq1iDQ+iXKtp+2GztZgbDqPp6HLC+6F/XhsaY2B/ux5QlGWw== -----END CERTIFICATE-----Generated at Mon Oct 20 16:29:10 2025 by rpki-client