$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2122/W98XK345iXi_GQGlLeABKmQzilI.roa File: W98XK345iXi_GQGlLeABKmQzilI.roa (raw, json) Hash identifier: dyYkjnImtgdbOR4iunRxMTD0LY24wk4FCvjY4hLxfRA= Subject key identifier: 5B:DF:17:2B:7E:39:89:78:BF:19:01:A5:2D:E0:01:2A:64:33:8A:52 Certificate issuer: /CN=88884D4D4A75F17F08DD44CBA9592FE70F539D97 Certificate serial: 20AA Authority key identifier: 88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/W98XK345iXi_GQGlLeABKmQzilI.roa Signing time: Sat 13 Sep 2025 03:05:49 +0000 ROA not before: Sat 13 Sep 2025 03:05:49 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 4515 IP address blocks: 123.49.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/iIhNTUp18X8I3UTLqVkv5w9TnZc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/iIhNTUp18X8I3UTLqVkv5w9TnZc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 13:35:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8362 (0x20aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88884D4D4A75F17F08DD44CBA9592FE70F539D97 Validity Not Before: Sep 13 03:05:49 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=5BDF172B7E398978BF1901A52DE0012A64338A52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f6:72:cb:b4:ae:2f:5c:93:ad:c4:01:fa:f6: 0a:10:88:0b:67:3f:00:70:67:dd:49:f7:12:62:c8: c9:8e:8c:8e:3c:df:6f:8e:3f:5a:ca:0d:33:b6:e5: e5:43:1f:ce:4a:d0:2f:a5:48:75:df:21:03:0b:b2: 0f:91:4f:bd:a6:6e:4e:7c:36:fa:ab:b7:12:61:dd: c7:a2:91:35:4f:7a:8b:dc:e9:9b:5c:bb:cb:35:49: 9e:23:1e:bc:8e:a7:8d:8d:ca:44:00:4f:0f:93:93: d9:d4:8d:53:64:47:0c:95:16:ea:5e:06:fa:e7:bd: cc:e5:11:ad:57:54:ca:2e:24:aa:51:5c:bd:e8:41: c6:4d:76:66:4f:1a:9c:d8:9d:35:84:2c:28:c5:99: eb:88:7b:46:bb:9d:ac:2f:71:5d:6d:7b:95:9a:6b: de:1a:b1:68:0b:f2:4d:93:5d:aa:26:16:34:41:7d: 57:df:5c:d3:41:87:38:a7:0e:bd:d1:c2:8e:0c:16: b1:0e:23:e3:86:e6:94:a9:45:e6:49:e5:4c:82:ee: 54:27:34:89:29:7d:22:58:bc:5c:69:23:ea:7c:7a: f3:98:52:4a:1c:a6:7b:0b:de:4a:76:0d:60:57:ec: a7:13:ca:d2:37:26:8f:cf:7f:87:44:ad:14:85:02: 7b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:DF:17:2B:7E:39:89:78:BF:19:01:A5:2D:E0:01:2A:64:33:8A:52 X509v3 Authority Key Identifier: keyid:88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/iIhNTUp18X8I3UTLqVkv5w9TnZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/W98XK345iXi_GQGlLeABKmQzilI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.49.242.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:dd:5d:26:29:55:e2:74:16:12:46:7d:d7:3c:ab:4a:47:35: 8d:b8:a5:2f:93:e7:3f:d5:6b:48:43:25:be:84:6f:31:c4:ff: ac:29:92:ab:be:9a:5c:ad:02:ac:b7:e3:4a:56:94:1a:84:73: b1:ef:cf:fb:2d:5e:15:6a:48:73:6e:d0:0c:fc:11:79:58:87: b9:fd:f6:2f:5f:a7:6e:93:54:ae:31:3a:56:db:a0:02:b8:69: d8:2e:ab:2a:46:93:b2:91:35:e9:4d:c2:a6:c0:83:f1:1f:69: 16:4f:05:0e:df:ce:52:df:5d:e3:86:45:e3:62:22:a6:86:e4: 35:1d:3d:b0:0d:12:12:83:a2:08:54:ea:dc:53:8d:63:77:16: bb:70:c2:66:d5:a5:58:94:33:cc:0d:20:3b:c7:98:e4:57:c9: e5:4b:fa:3c:ca:de:3c:50:23:b3:f7:7d:aa:35:ca:c2:38:26: 21:43:bf:2a:1a:ee:51:d5:38:ca:f6:04:2e:30:40:ea:65:b9: 67:12:fc:df:90:d1:1f:ab:b2:7e:59:28:dd:26:8f:bb:80:26: 79:3f:11:f4:ce:f9:23:df:ca:a8:ee:33:f8:55:1c:24:fe:d3: 78:86:6a:6b:67:c0:85:a5:40:f6:15:70:d6:fa:e5:3f:17:75: a0:8d:9b:7d -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIKowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODg4 ODRENEQ0QTc1RjE3RjA4REQ0NENCQTk1OTJGRTcwRjUzOUQ5NzAeFw0yNTA5MTMw MzA1NDlaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDVCREYxNzJCN0UzOTg5 NzhCRjE5MDFBNTJERTAwMTJBNjQzMzhBNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+9nLLtK4vXJOtxAH69goQiAtnPwBwZ91J9xJiyMmOjI4832+O P1rKDTO25eVDH85K0C+lSHXfIQMLsg+RT72mbk58NvqrtxJh3ceikTVPeovc6Ztc u8s1SZ4jHryOp42NykQATw+Tk9nUjVNkRwyVFupeBvrnvczlEa1XVMouJKpRXL3o QcZNdmZPGpzYnTWELCjFmeuIe0a7nawvcV1te5Waa94asWgL8k2TXaomFjRBfVff XNNBhzinDr3Rwo4MFrEOI+OG5pSpReZJ5UyC7lQnNIkpfSJYvFxpI+p8evOYUkoc pnsL3kp2DWBX7KcTytI3Jo/Pf4dErRSFAntrAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUW98XK345iXi/GQGlLeABKmQzilIwHwYDVR0jBBgwFoAUiIhNTUp18X8I3UTL qVkv5w9TnZcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjEy Mi9pSWhOVFVwMThYOEkzVVRMcVZrdjV3OVRuWmMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2lJaE5UVXAxOFg4STNVVExxVmt2NXc5VG5aYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIxMjIvVzk4WEszNDVpWGlf R1FHbExlQUJLbVF6aWxJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAHsx8jANBgkqhkiG9w0BAQsFAAOCAQEALN1dJilV4nQWEkZ91zyrSkc1jbil L5PnP9VrSEMlvoRvMcT/rCmSq76aXK0CrLfjSlaUGoRzse/P+y1eFWpIc27QDPwR eViHuf32L1+nbpNUrjE6VtugArhp2C6rKkaTspE16U3CpsCD8R9pFk8FDt/OUt9d 44ZF42IipobkNR09sA0SEoOiCFTq3FONY3cWu3DCZtWlWJQzzA0gO8eY5FfJ5Uv6 PMrePFAjs/d9qjXKwjgmIUO/KhruUdU4yvYELjBA6mW5ZxL835DRH6uyflko3SaP u4AmeT8R9M75I9/KqO4z+FUcJP7TeIZqa2fAhaVA9hVw1vrlPxd1oI2bfQ== -----END CERTIFICATE-----Generated at Mon Oct 20 11:19:10 2025 by rpki-client