$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/0wxNw_B7YmnWWo3Et4oXz3A6oqM.roa File: 0wxNw_B7YmnWWo3Et4oXz3A6oqM.roa (raw, json) Hash identifier: Jj47zB+DFmw0nLz8QC9JEVEJ5tR1ZVygHHCmpIH/4ag= Subject key identifier: D3:0C:4D:C3:F0:7B:62:69:D6:5A:8D:C4:B7:8A:17:CF:70:3A:A2:A3 Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 159D Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/0wxNw_B7YmnWWo3Et4oXz3A6oqM.roa Signing time: Sat 13 Sep 2025 03:06:38 +0000 ROA not before: Sat 13 Sep 2025 03:06:38 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 55990 IP address blocks: 113.47.246.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5533 (0x159d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Sep 13 03:06:38 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=D30C4DC3F07B6269D65A8DC4B78A17CF703AA2A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e5:04:a8:b6:88:90:d3:23:0d:2b:ed:2d:87: b6:58:7d:3c:23:41:0e:16:5d:67:b2:1d:cd:a8:d3: 7a:98:3e:31:83:8c:68:52:d5:26:9b:d8:3d:09:60: 76:0a:cb:ca:39:77:eb:99:38:1a:ec:5c:73:08:03: e1:eb:6f:6c:9c:be:52:6e:27:2d:d7:d7:15:5d:72: dd:b8:a7:49:50:07:71:07:52:50:63:0f:d2:71:ad: 19:e9:da:f7:cf:23:8d:c7:b2:f3:22:e1:d5:b7:77: ce:51:a6:a1:cb:5b:27:d2:ac:89:b0:74:a4:b5:e5: 28:02:9c:44:1b:79:24:60:2b:f6:f4:5d:d9:6b:6f: 88:30:c0:d8:45:95:66:a7:d8:14:25:e2:65:46:63: 94:7b:b0:a3:06:35:bb:8c:d5:89:7d:14:f8:c8:11: 9b:a3:3c:a3:7f:d2:c8:d0:9a:7e:22:81:0b:87:32: 45:5d:07:38:11:58:2c:41:49:b7:7d:2b:33:c9:74: b7:d7:c3:bc:60:36:6c:5a:81:fd:e2:0d:98:85:e7: a8:15:00:ae:07:7e:ea:d5:cb:68:80:65:78:bf:c5: db:6b:95:ec:51:37:95:0c:4f:a7:12:08:b7:e0:59: 83:4d:1f:46:b2:cb:6f:65:80:0e:37:cc:c9:78:10: ad:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:0C:4D:C3:F0:7B:62:69:D6:5A:8D:C4:B7:8A:17:CF:70:3A:A2:A3 X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/0wxNw_B7YmnWWo3Et4oXz3A6oqM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.47.246.0/23 Signature Algorithm: sha256WithRSAEncryption 59:5b:d1:71:60:1b:6f:6e:ee:7a:43:cb:df:c3:e1:7a:ee:da: e0:70:89:c4:ec:81:ff:0f:6a:eb:9d:1a:4d:b9:d8:09:83:ab: fd:ba:71:a2:ba:4c:f3:db:90:5c:92:ed:c7:8b:7d:5e:18:b0: 47:fe:65:6e:fb:60:c4:d5:b0:77:42:29:e2:ae:72:b2:0e:a5: d7:6d:12:7b:7d:db:93:da:fb:d4:5a:18:e0:35:df:49:c4:50: 6a:3e:d8:57:5b:eb:fe:98:72:c3:28:10:a1:b5:a3:31:43:97: 2a:70:a4:65:b2:4a:79:5c:e9:7d:58:be:a7:64:a8:3a:21:af: 13:3a:10:88:0a:a8:8d:02:15:db:62:7e:01:a1:67:ac:dc:01: 80:fe:fd:4f:00:4e:5a:8d:0e:1d:9c:71:4f:f4:6e:26:af:05: 00:b1:67:70:27:a6:4e:59:78:d8:85:c8:8c:61:80:cf:50:9f: 35:a7:ee:91:39:4e:c2:01:85:f7:53:1b:3b:34:30:27:84:1c: 0f:b1:96:65:fd:83:c7:e9:4b:91:b8:8d:9d:63:90:34:08:ff: e2:db:6c:1e:38:5a:73:74:21:d4:11:1c:e9:17:c4:4f:b2:db: 9a:a8:53:d9:11:d0:d5:b1:ea:07:f4:a8:a2:51:0b:a5:ca:df: 1b:06:a2:ae -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFZ0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNTA5MTMw MzA2MzhaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEQzMEM0REMzRjA3QjYy NjlENjVBOERDNEI3OEExN0NGNzAzQUEyQTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDC5QSotoiQ0yMNK+0th7ZYfTwjQQ4WXWeyHc2o03qYPjGDjGhS 1Sab2D0JYHYKy8o5d+uZOBrsXHMIA+Hrb2ycvlJuJy3X1xVdct24p0lQB3EHUlBj D9JxrRnp2vfPI43HsvMi4dW3d85RpqHLWyfSrImwdKS15SgCnEQbeSRgK/b0Xdlr b4gwwNhFlWan2BQl4mVGY5R7sKMGNbuM1Yl9FPjIEZujPKN/0sjQmn4igQuHMkVd BzgRWCxBSbd9KzPJdLfXw7xgNmxagf3iDZiF56gVAK4HfurVy2iAZXi/xdtrlexR N5UMT6cSCLfgWYNNH0ayy29lgA43zMl4EK2HAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU0wxNw/B7YmnWWo3Et4oXz3A6oqMwHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvMHd4TndfQjdZbW5X V28zRXQ0b1h6M0E2b3FNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAXEv9jANBgkqhkiG9w0BAQsFAAOCAQEAWVvRcWAbb27uekPL38Pheu7a4HCJ xOyB/w9q650aTbnYCYOr/bpxorpM89uQXJLtx4t9XhiwR/5lbvtgxNWwd0Ip4q5y sg6l120Se33bk9r71FoY4DXfScRQaj7YV1vr/phywygQobWjMUOXKnCkZbJKeVzp fVi+p2SoOiGvEzoQiAqojQIV22J+AaFnrNwBgP79TwBOWo0OHZxxT/RuJq8FALFn cCemTll42IXIjGGAz1CfNafukTlOwgGF91MbOzQwJ4QcD7GWZf2Dx+lLkbiNnWOQ NAj/4ttsHjhac3Qh1BEc6RfET7LbmqhT2RHQ1bHqB/SoolELpcrfGwairg== -----END CERTIFICATE-----Generated at Mon Oct 20 19:21:04 2025 by rpki-client