$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2122/B9wpTbA-_zQioAzF3OhotCIRADI.roa File: B9wpTbA-_zQioAzF3OhotCIRADI.roa (raw, json) Hash identifier: lMuei/nxd5nqJzzIDT85SCWEZvI0ijntN+PRQoRVMSI= Subject key identifier: 07:DC:29:4D:B0:3E:FF:34:22:A0:0C:C5:DC:E8:68:B4:22:11:00:32 Certificate issuer: /CN=88884D4D4A75F17F08DD44CBA9592FE70F539D97 Certificate serial: 20B3 Authority key identifier: 88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/B9wpTbA-_zQioAzF3OhotCIRADI.roa Signing time: Sat 13 Sep 2025 03:05:51 +0000 ROA not before: Sat 13 Sep 2025 03:05:51 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 63641 IP address blocks: 123.49.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/iIhNTUp18X8I3UTLqVkv5w9TnZc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/iIhNTUp18X8I3UTLqVkv5w9TnZc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8371 (0x20b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88884D4D4A75F17F08DD44CBA9592FE70F539D97 Validity Not Before: Sep 13 03:05:51 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=07DC294DB03EFF3422A00CC5DCE868B422110032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:20:f0:e4:64:3a:ea:36:9a:9e:7c:2b:37:60: 87:fd:c9:21:f7:7d:e7:57:c3:d3:7e:43:4c:f9:38: 5d:7e:9e:32:89:4a:c0:17:ce:9f:cf:a7:cb:cc:8e: d9:71:ae:3e:b6:90:4d:6e:39:2f:32:72:70:ea:92: 52:3a:d7:ae:57:c0:2d:e7:a4:4b:5f:48:c2:bf:97: 58:f3:d0:a5:e2:ac:de:a1:b2:9c:61:09:89:73:a9: 8b:d8:bb:db:50:ef:22:bf:37:7f:d9:d4:c7:b1:6a: 21:13:a9:37:d9:97:f4:de:e8:1f:34:75:12:c2:41: b6:06:84:ab:d5:18:b6:fa:6b:a1:48:a5:4a:38:ee: 5b:6e:79:27:02:66:7f:83:27:ab:5c:b3:14:fd:90: 32:b8:df:b1:c8:3e:5b:84:9e:31:35:5b:fc:f9:36: cd:74:fb:3f:a8:7f:22:54:23:ee:dd:68:d2:b6:7b: 5b:28:67:54:a4:e4:d6:ac:48:c5:8a:94:9c:82:4a: 55:00:0d:fe:17:65:d8:74:bf:f4:c4:f8:d3:c9:5a: 43:b9:83:cc:a2:28:e7:c4:0a:1a:0f:01:6e:94:88: ae:44:fd:97:7d:76:db:39:ca:7c:d7:92:43:aa:99: 97:e9:10:b3:53:31:af:19:4a:65:54:60:49:57:94: 3a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:DC:29:4D:B0:3E:FF:34:22:A0:0C:C5:DC:E8:68:B4:22:11:00:32 X509v3 Authority Key Identifier: keyid:88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/iIhNTUp18X8I3UTLqVkv5w9TnZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/B9wpTbA-_zQioAzF3OhotCIRADI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.49.241.0/24 Signature Algorithm: sha256WithRSAEncryption 26:b2:be:92:72:83:d3:e8:e0:4e:f7:d4:f4:ea:20:e5:98:37: 42:2a:ed:3f:40:8f:5a:f7:d1:22:05:05:00:82:7d:6b:96:28: b6:89:f8:2b:c8:d8:3e:f0:ed:6d:8f:f1:72:09:17:7e:06:e4: 61:ef:89:be:5e:35:2e:b8:88:14:c0:25:ea:e0:b1:a8:a9:84: ee:bf:2b:06:c4:94:c7:4f:f9:b3:15:38:f5:a7:cd:af:8d:12: 24:9b:66:15:a7:4a:3e:5b:ea:8f:24:ae:f0:db:0d:48:35:3f: e1:13:4e:d0:05:24:2e:97:42:02:af:4c:0e:ed:dd:6d:20:6a: cb:92:99:79:89:a5:65:90:28:d7:e4:2f:d0:70:e9:36:26:6a: 5f:87:2c:25:61:81:0c:6c:90:06:c6:a5:ac:7c:5d:5c:d2:57: 19:9e:65:ac:cc:55:66:83:bf:f2:8c:1d:fd:7e:10:a4:2d:25: ec:13:17:67:f4:4b:ba:dd:26:08:b0:ff:96:2a:16:56:09:f0: d9:36:57:9d:7d:29:4c:f7:65:a0:cb:b2:7e:49:e6:a7:b0:45: be:31:9d:db:d7:72:9b:7c:39:72:3c:04:db:e3:43:32:dc:8f: ac:7e:34:ee:90:7a:ae:3e:99:59:d7:ea:c3:3b:00:35:1c:5c: d2:92:e0:32 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICILMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODg4 ODRENEQ0QTc1RjE3RjA4REQ0NENCQTk1OTJGRTcwRjUzOUQ5NzAeFw0yNTA5MTMw MzA1NTFaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDA3REMyOTREQjAzRUZG MzQyMkEwMENDNURDRTg2OEI0MjIxMTAwMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1IPDkZDrqNpqefCs3YIf9ySH3fedXw9N+Q0z5OF1+njKJSsAX zp/Pp8vMjtlxrj62kE1uOS8ycnDqklI6165XwC3npEtfSMK/l1jz0KXirN6hspxh CYlzqYvYu9tQ7yK/N3/Z1MexaiETqTfZl/Te6B80dRLCQbYGhKvVGLb6a6FIpUo4 7ltueScCZn+DJ6tcsxT9kDK437HIPluEnjE1W/z5Ns10+z+ofyJUI+7daNK2e1so Z1Sk5NasSMWKlJyCSlUADf4XZdh0v/TE+NPJWkO5g8yiKOfEChoPAW6UiK5E/Zd9 dts5ynzXkkOqmZfpELNTMa8ZSmVUYElXlDqFAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUB9wpTbA+/zQioAzF3OhotCIRADIwHwYDVR0jBBgwFoAUiIhNTUp18X8I3UTL qVkv5w9TnZcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjEy Mi9pSWhOVFVwMThYOEkzVVRMcVZrdjV3OVRuWmMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2lJaE5UVXAxOFg4STNVVExxVmt2NXc5VG5aYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIxMjIvQjl3cFRiQS1felFp b0F6RjNPaG90Q0lSQURJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAHsx8TANBgkqhkiG9w0BAQsFAAOCAQEAJrK+knKD0+jgTvfU9Oog5Zg3Qirt P0CPWvfRIgUFAIJ9a5Yoton4K8jYPvDtbY/xcgkXfgbkYe+Jvl41LriIFMAl6uCx qKmE7r8rBsSUx0/5sxU49afNr40SJJtmFadKPlvqjySu8NsNSDU/4RNO0AUkLpdC Aq9MDu3dbSBqy5KZeYmlZZAo1+Qv0HDpNiZqX4csJWGBDGyQBsalrHxdXNJXGZ5l rMxVZoO/8owd/X4QpC0l7BMXZ/RLut0mCLD/lioWVgnw2TZXnX0pTPdloMuyfknm p7BFvjGd29dym3w5cjwE2+NDMtyPrH407pB6rj6ZWdfqwzsANRxc0pLgMg== -----END CERTIFICATE-----Generated at Mon Oct 20 22:35:36 2025 by rpki-client