$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2988/8UazvGr8myutsZuYchfmJiGlpPU.roa File: 8UazvGr8myutsZuYchfmJiGlpPU.roa (raw, json) Hash identifier: dwAzogItaSJiR8s2XycaBfjUY/ztu1XyATE78EINMAs= Subject key identifier: F1:46:B3:BC:6A:FC:9B:2B:AD:B1:9B:98:72:17:E6:26:21:A5:A4:F5 Certificate issuer: /CN=012D4317BCA1660F88066F890F8C04AF557000CB Certificate serial: 267C Authority key identifier: 01:2D:43:17:BC:A1:66:0F:88:06:6F:89:0F:8C:04:AF:55:70:00:CB Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/8UazvGr8myutsZuYchfmJiGlpPU.roa Signing time: Sat 13 Sep 2025 03:08:53 +0000 ROA not before: Sat 13 Sep 2025 03:08:53 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 139139 IP address blocks: 2406:3340::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 04:07:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9852 (0x267c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=012D4317BCA1660F88066F890F8C04AF557000CB Validity Not Before: Sep 13 03:08:53 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=F146B3BC6AFC9B2BADB19B987217E62621A5A4F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c4:67:eb:7d:9c:da:e7:ee:6a:a7:be:49:89: f3:51:d4:d2:53:1a:98:4a:d9:19:f4:2d:87:4a:b3: 99:69:18:0e:f4:58:81:4c:c8:84:40:66:74:65:ee: 22:4b:9b:9f:a6:bf:85:17:bc:24:61:7d:44:e0:a4: 0e:d7:06:94:93:1e:bf:be:d8:a6:dc:cb:98:a8:80: 91:c0:49:ef:b6:b4:1d:b6:90:7f:62:78:74:10:f1: 3a:82:68:05:0e:82:6c:20:41:bb:2e:b6:ea:6a:fe: 9a:2d:42:ff:76:87:0c:f2:a4:74:9d:27:87:f5:5c: ea:7e:a9:db:4d:c7:f0:1f:e7:eb:fc:af:c7:7c:6c: 66:80:e3:7a:d1:b6:1d:39:33:a1:9e:6b:c6:86:7b: 8d:de:e9:ac:1c:b0:85:eb:18:bd:84:67:4b:ec:0b: 6e:70:ea:ae:5a:e9:c9:e6:7a:d6:80:5d:25:eb:14: 7a:ba:2f:d0:e0:ed:5a:df:4b:33:93:8e:54:c9:e9: e8:76:a0:8a:f6:32:b3:28:64:2b:81:a2:26:73:6d: 9f:c3:6d:39:ce:ae:f0:ec:e1:d1:6e:78:2e:3b:d1: 48:0f:12:0d:84:85:4d:ca:e5:6e:db:59:9a:cd:a2: 72:22:21:4d:11:de:af:3f:00:78:05:96:13:03:71: 5b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:46:B3:BC:6A:FC:9B:2B:AD:B1:9B:98:72:17:E6:26:21:A5:A4:F5 X509v3 Authority Key Identifier: keyid:01:2D:43:17:BC:A1:66:0F:88:06:6F:89:0F:8C:04:AF:55:70:00:CB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/8UazvGr8myutsZuYchfmJiGlpPU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2406:3340::/32 Signature Algorithm: sha256WithRSAEncryption 13:81:a5:64:62:08:51:17:59:77:c7:4f:96:eb:1f:50:54:e1: 5a:bd:29:50:b0:95:1b:69:74:54:f1:a5:41:91:db:7c:38:4e: 73:26:1f:2d:dd:c9:18:e3:d6:d4:58:bb:e8:c5:35:6d:a5:a2: 4a:63:89:93:d2:13:a9:4a:22:ed:09:1d:a9:8e:7c:9f:42:ac: 8a:71:3c:5c:28:be:3b:c2:0f:ee:46:ab:cf:ac:65:5a:87:41: 6f:ef:82:d1:11:96:ac:83:c1:d1:c7:f3:99:c7:b5:7d:0f:81: ec:54:b2:8b:6b:0c:89:49:c6:24:01:1f:54:52:b5:33:37:e1: 7b:93:52:49:5f:7d:ce:dd:1a:98:f5:9d:db:64:a0:50:42:92: 97:76:03:5d:fb:bd:15:82:b6:4e:1d:10:0d:1b:e7:f1:6e:93: 55:f6:48:8c:80:e3:54:8e:be:5d:de:81:0b:5c:a3:15:f7:f2: 62:c6:a3:a7:83:d2:68:df:41:68:cb:72:53:67:67:46:95:88: e8:56:6c:3f:30:97:b6:a2:12:84:c9:d0:1e:0a:f5:fd:bb:e7: b7:e2:47:f6:7e:de:7b:90:c1:fc:20:09:11:89:eb:ca:7d:08: 28:ea:b5:5d:da:59:99:a2:ed:e4:33:cc:33:99:13:cc:b7:ae: 28:b8:c4:df -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICJnwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDEy RDQzMTdCQ0ExNjYwRjg4MDY2Rjg5MEY4QzA0QUY1NTcwMDBDQjAeFw0yNTA5MTMw MzA4NTNaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEYxNDZCM0JDNkFGQzlC MkJBREIxOUI5ODcyMTdFNjI2MjFBNUE0RjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFxGfrfZza5+5qp75JifNR1NJTGphK2Rn0LYdKs5lpGA70WIFM yIRAZnRl7iJLm5+mv4UXvCRhfUTgpA7XBpSTHr++2Kbcy5iogJHASe+2tB22kH9i eHQQ8TqCaAUOgmwgQbsutupq/potQv92hwzypHSdJ4f1XOp+qdtNx/Af5+v8r8d8 bGaA43rRth05M6Gea8aGe43e6awcsIXrGL2EZ0vsC25w6q5a6cnmetaAXSXrFHq6 L9Dg7VrfSzOTjlTJ6eh2oIr2MrMoZCuBoiZzbZ/DbTnOrvDs4dFueC470UgPEg2E hU3K5W7bWZrNonIiIU0R3q8/AHgFlhMDcVuhAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQU8UazvGr8myutsZuYchfmJiGlpPUwHwYDVR0jBBgwFoAUAS1DF7yhZg+IBm+J D4wEr1VwAMswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjk4 OC9BUzFERjd5aFpnLUlCbS1KRDR3RXIxVndBTXMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0FTMURGN3loWmctSUJtLUpENHdFcjFWd0FNcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI5ODgvOFVhenZHcjhteXV0 c1p1WWNoZm1KaUdscFBVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQGM0AwDQYJKoZIhvcNAQELBQADggEBABOBpWRiCFEXWXfHT5brH1BU4Vq9 KVCwlRtpdFTxpUGR23w4TnMmHy3dyRjj1tRYu+jFNW2lokpjiZPSE6lKIu0JHamO fJ9CrIpxPFwovjvCD+5Gq8+sZVqHQW/vgtERlqyDwdHH85nHtX0PgexUsotrDIlJ xiQBH1RStTM34XuTUklffc7dGpj1ndtkoFBCkpd2A137vRWCtk4dEA0b5/Fuk1X2 SIyA41SOvl3egQtcoxX38mLGo6eD0mjfQWjLclNnZ0aViOhWbD8wl7aiEoTJ0B4K 9f2757fiR/Z+3nuQwfwgCRGJ68p9CCjqtV3aWZmi7eQzzDOZE8y3rii4xN8= -----END CERTIFICATE-----Generated at Tue Oct 21 02:18:23 2025 by rpki-client