$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2358/mdm9wYL2tVbnpTZmNgRIQ2yHK6M.roa File: mdm9wYL2tVbnpTZmNgRIQ2yHK6M.roa (raw, json) Hash identifier: ZrEAdpoVCNctVRbTxo9U8dnLeO6B+qrscOutZSSo1gU= Subject key identifier: 99:D9:BD:C1:82:F6:B5:56:E7:A5:36:66:36:04:48:43:6C:87:2B:A3 Certificate issuer: /CN=4C0430E3518A5AF51BC0DF62567E0D157CA523C1 Certificate serial: 5C Authority key identifier: 4C:04:30:E3:51:8A:5A:F5:1B:C0:DF:62:56:7E:0D:15:7C:A5:23:C1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TAQw41GKWvUbwN9iVn4NFXylI8E.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2358/mdm9wYL2tVbnpTZmNgRIQ2yHK6M.roa Signing time: Mon 29 Sep 2025 01:20:57 +0000 ROA not before: Mon 29 Sep 2025 01:20:57 +0000 ROA not after: Tue 15 Sep 2026 07:06:43 +0000 asID: 131539 IP address blocks: 110.42.2.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2358/TAQw41GKWvUbwN9iVn4NFXylI8E.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2358/TAQw41GKWvUbwN9iVn4NFXylI8E.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TAQw41GKWvUbwN9iVn4NFXylI8E.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 08:34:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C0430E3518A5AF51BC0DF62567E0D157CA523C1 Validity Not Before: Sep 29 01:20:57 2025 GMT Not After : Sep 15 07:06:43 2026 GMT Subject: CN=99D9BDC182F6B556E7A53666360448436C872BA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:61:e3:c5:94:c4:6d:b1:0f:32:5f:13:fb:b4: 80:00:5b:8d:78:bb:de:56:26:5a:bc:52:ef:14:c3: de:f2:c2:03:7f:6f:d1:48:36:78:3c:e4:a3:c9:b3: b7:80:1d:9c:05:00:99:36:7e:a8:58:54:c3:aa:b6: dd:af:7e:b5:d2:a0:2f:c4:29:54:2b:69:47:ac:5d: e8:46:19:07:22:54:f8:ce:47:72:82:ff:ae:e2:ee: a8:5b:53:76:44:5e:7f:a2:aa:ba:39:3d:f1:a7:12: 1b:03:02:27:4e:f5:4b:51:6e:e5:ef:bf:ad:58:0d: 14:8a:01:5b:ed:84:ac:f4:8b:2c:05:9b:9d:99:f5: 3e:71:4c:34:d4:0f:ff:50:c0:fa:8b:b9:89:e5:08: 77:11:1e:a8:12:e9:05:0b:45:43:89:bb:93:fc:f6: fa:82:4d:91:65:f0:32:64:28:90:a9:19:c4:e0:44: 34:4e:5d:a0:a1:ec:db:8b:62:54:29:b7:e1:70:28: bc:c9:76:a8:40:81:84:b3:70:9b:3d:7b:90:74:57: 35:1b:8a:b0:1b:46:99:cc:04:bb:3b:05:cb:e7:c6: f9:90:99:33:32:01:f0:71:3e:ae:1a:05:39:03:65: ae:97:13:04:7c:f2:6a:4e:69:5a:33:1a:07:32:a9: 4f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D9:BD:C1:82:F6:B5:56:E7:A5:36:66:36:04:48:43:6C:87:2B:A3 X509v3 Authority Key Identifier: keyid:4C:04:30:E3:51:8A:5A:F5:1B:C0:DF:62:56:7E:0D:15:7C:A5:23:C1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2358/TAQw41GKWvUbwN9iVn4NFXylI8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TAQw41GKWvUbwN9iVn4NFXylI8E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2358/mdm9wYL2tVbnpTZmNgRIQ2yHK6M.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 110.42.2.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:9b:9c:3a:10:8c:71:46:46:39:cd:41:16:0d:74:22:63:c1: 59:c0:df:62:49:6e:56:a6:29:a6:d6:9d:4b:95:e8:f1:84:09: 4c:c9:9e:e2:16:ea:d8:16:d8:7a:8d:2d:a9:68:95:75:b1:1f: 8f:f6:a4:9c:1c:52:56:20:80:c6:7e:a7:7b:f8:95:e0:54:df: 01:00:95:c6:5d:aa:51:e3:a7:29:99:4e:55:f6:69:19:41:de: d4:43:1e:77:a7:43:78:57:f3:59:4a:d8:4b:6a:ad:25:57:66: b2:26:8a:c1:c0:29:2b:a3:48:de:9f:06:32:b2:e4:8d:19:02: 83:6b:76:79:a1:0b:e6:81:59:4d:9c:a9:c5:06:3d:c1:f0:9f: d1:ec:36:0e:c7:91:95:06:a4:85:7b:69:94:ad:f1:05:38:de: cd:2b:25:ca:fa:0f:16:02:06:c0:ae:70:dc:87:8d:c5:36:1f: d4:a1:8d:16:65:49:f0:bf:49:82:9b:6d:e3:fe:64:82:78:d3: ec:3e:7c:c3:3e:b5:b5:a0:3f:26:64:d8:95:ec:02:5b:58:79: 8e:70:07:a0:d3:50:16:a7:4f:4c:86:5a:1c:7a:45:27:e8:e7: 59:ef:8c:ab:94:81:04:cd:84:aa:d6:5b:4e:ca:fa:c5:37:36: 0e:ae:73:87 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBXDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0QzA0 MzBFMzUxOEE1QUY1MUJDMERGNjI1NjdFMEQxNTdDQTUyM0MxMB4XDTI1MDkyOTAx MjA1N1oXDTI2MDkxNTA3MDY0M1owMzExMC8GA1UEAxMoOTlEOUJEQzE4MkY2QjU1 NkU3QTUzNjY2MzYwNDQ4NDM2Qzg3MkJBMzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANNh48WUxG2xDzJfE/u0gABbjXi73lYmWrxS7xTD3vLCA39v0Ug2 eDzko8mzt4AdnAUAmTZ+qFhUw6q23a9+tdKgL8QpVCtpR6xd6EYZByJU+M5HcoL/ ruLuqFtTdkRef6Kqujk98acSGwMCJ071S1Fu5e+/rVgNFIoBW+2ErPSLLAWbnZn1 PnFMNNQP/1DA+ou5ieUIdxEeqBLpBQtFQ4m7k/z2+oJNkWXwMmQokKkZxOBENE5d oKHs24tiVCm34XAovMl2qECBhLNwmz17kHRXNRuKsBtGmcwEuzsFy+fG+ZCZMzIB 8HE+rhoFOQNlrpcTBHzyak5pWjMaBzKpTw8CAwEAAaOCAfMwggHvMB0GA1UdDgQW BBSZ2b3Bgva1VuelNmY2BEhDbIcrozAfBgNVHSMEGDAWgBRMBDDjUYpa9RvA32JW fg0VfKUjwTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yMzU4 L1RBUXc0MUdLV3ZVYndOOWlWbjRORlh5bEk4RS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvVEFRdzQxR0tXdlVid045aVZuNE5GWHlsSThFLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM1OC9tZG05d1lMMnRWYm5w VFptTmdSSVEyeUhLNk0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAbioCMA0GCSqGSIb3DQEBCwUAA4IBAQBNm5w6EIxxRkY5zUEWDXQiY8FZwN9i SW5Wpimm1p1LlejxhAlMyZ7iFurYFth6jS2paJV1sR+P9qScHFJWIIDGfqd7+JXg VN8BAJXGXapR46cpmU5V9mkZQd7UQx53p0N4V/NZSthLaq0lV2ayJorBwCkro0je nwYysuSNGQKDa3Z5oQvmgVlNnKnFBj3B8J/R7DYOx5GVBqSFe2mUrfEFON7NKyXK +g8WAgbArnDch43FNh/UoY0WZUnwv0mCm23j/mSCeNPsPnzDPrW1oD8mZNiV7AJb WHmOcAeg01AWp09MhlocekUn6OdZ74yrlIEEzYSq1ltOyvrFNzYOrnOH -----END CERTIFICATE-----Generated at Mon Oct 20 05:45:29 2025 by rpki-client