$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/1wIhsgVZKQhFeCpq8H2rp5TG2so.roa File: 1wIhsgVZKQhFeCpq8H2rp5TG2so.roa (raw, json) Hash identifier: DNq3PqYwRc1IkcOdQLRFRgMbELe3hDTc7N56dy+qfqs= Subject key identifier: D7:02:21:B2:05:59:29:08:45:78:2A:6A:F0:7D:AB:A7:94:C6:DA:CA Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 14B1 Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/1wIhsgVZKQhFeCpq8H2rp5TG2so.roa Signing time: Wed 30 Jul 2025 02:48:00 +0000 ROA not before: Wed 30 Jul 2025 02:48:00 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 55990 IP address blocks: 101.245.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:03:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5297 (0x14b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Jul 30 02:48:00 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=D70221B20559290845782A6AF07DABA794C6DACA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:09:87:93:3f:8b:f8:e7:b0:cf:5e:fc:02:93: fa:06:b3:a0:04:76:9c:fb:a2:fd:76:55:37:88:87: d7:3a:4e:f2:6b:eb:25:7d:b7:ab:28:32:96:5e:1d: 8f:24:6e:35:11:50:f7:ff:1e:a8:06:1f:7c:89:88: 12:19:10:bd:0d:4d:f0:5e:39:da:28:02:c9:4c:0b: 2d:23:7c:b6:cd:95:84:9f:07:d9:ae:72:d0:47:c4: 7d:47:e5:97:17:3e:d1:7b:d1:49:02:aa:aa:7f:66: f0:82:93:a9:a4:5e:df:ad:39:48:15:54:2d:34:8e: 3b:a2:98:cd:07:6c:32:99:59:70:78:5a:33:b1:88: 5e:03:ab:34:62:63:07:0f:e7:b9:00:8c:6a:fd:3a: 0e:31:ec:63:e3:b3:94:0d:a0:87:af:1b:6b:f1:b8: bc:95:71:b3:0d:b6:6b:11:90:b6:30:fe:8e:06:5b: 07:94:f7:45:1e:57:19:eb:6c:f9:6e:fa:0b:8a:ce: e4:44:1f:73:88:59:76:0d:08:bd:0b:67:1a:c3:e8: 85:84:94:b9:d5:01:1d:c1:55:a3:8c:0b:01:76:2d: ae:45:9f:c7:fa:0e:02:e5:d1:9e:9a:e4:32:fc:78: bb:e2:e4:60:ab:94:ce:2e:1c:03:7c:12:c9:80:71: 6c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:02:21:B2:05:59:29:08:45:78:2A:6A:F0:7D:AB:A7:94:C6:DA:CA X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/1wIhsgVZKQhFeCpq8H2rp5TG2so.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 101.245.20.0/22 Signature Algorithm: sha256WithRSAEncryption 23:ad:f2:f9:55:5d:a7:ff:be:c1:15:5a:6b:16:96:3f:be:ff: e9:58:6f:72:17:8c:08:3e:8f:64:5e:07:91:f9:18:0a:d1:0b: 43:e2:b2:da:dd:23:46:12:7f:95:bf:eb:ec:65:8b:13:81:7c: 40:cb:45:a3:1a:42:49:23:7a:e3:b2:6c:dd:20:61:83:0c:b5: 20:b0:3c:87:c8:f2:34:67:ee:63:16:5a:f7:47:89:e9:9b:52: 65:e3:c1:0c:f1:cc:31:71:ca:3b:91:d3:d1:a1:52:eb:56:65: 4f:97:2d:b7:e3:4f:11:e3:b1:62:93:b2:be:cb:2d:6e:95:db: 65:68:e4:26:3c:58:ad:12:c4:4d:3d:99:27:ff:a0:ad:3b:12: ff:d9:cd:00:a8:61:66:16:28:2f:19:6f:ff:c4:87:2d:99:f4: 84:02:01:48:6a:d4:55:b5:08:43:57:38:f2:79:00:5d:72:33: 1a:22:a3:64:4a:0b:96:de:61:8e:93:9a:69:d5:c8:3a:74:25: 61:c4:c2:ef:c3:6f:46:42:5f:3d:64:b5:5c:0c:91:cf:0f:5c: 9d:d5:7c:8a:91:d7:ab:ca:57:4c:2c:ad:d8:95:fc:62:d8:94: 56:89:40:ed:67:21:ac:c9:fe:5d:75:7f:3a:48:d9:1b:e4:f5: 12:b2:29:ec -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFLEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNTA3MzAw MjQ4MDBaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEQ3MDIyMUIyMDU1OTI5 MDg0NTc4MkE2QUYwN0RBQkE3OTRDNkRBQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDqCYeTP4v457DPXvwCk/oGs6AEdpz7ov12VTeIh9c6TvJr6yV9 t6soMpZeHY8kbjURUPf/HqgGH3yJiBIZEL0NTfBeOdooAslMCy0jfLbNlYSfB9mu ctBHxH1H5ZcXPtF70UkCqqp/ZvCCk6mkXt+tOUgVVC00jjuimM0HbDKZWXB4WjOx iF4DqzRiYwcP57kAjGr9Og4x7GPjs5QNoIevG2vxuLyVcbMNtmsRkLYw/o4GWweU 90UeVxnrbPlu+guKzuREH3OIWXYNCL0LZxrD6IWElLnVAR3BVaOMCwF2La5Fn8f6 DgLl0Z6a5DL8eLvi5GCrlM4uHAN8EsmAcWxvAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU1wIhsgVZKQhFeCpq8H2rp5TG2sowHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvMXdJaHNnVlpLUWhG ZUNwcThIMnJwNVRHMnNvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmX1FDANBgkqhkiG9w0BAQsFAAOCAQEAI63y+VVdp/++wRVaaxaWP77/6Vhv cheMCD6PZF4HkfkYCtELQ+Ky2t0jRhJ/lb/r7GWLE4F8QMtFoxpCSSN647Js3SBh gwy1ILA8h8jyNGfuYxZa90eJ6ZtSZePBDPHMMXHKO5HT0aFS61ZlT5ctt+NPEeOx YpOyvsstbpXbZWjkJjxYrRLETT2ZJ/+grTsS/9nNAKhhZhYoLxlv/8SHLZn0hAIB SGrUVbUIQ1c48nkAXXIzGiKjZEoLlt5hjpOaadXIOnQlYcTC78NvRkJfPWS1XAyR zw9cndV8ipHXq8pXTCyt2JX8YtiUVolA7WchrMn+XXV/OkjZG+T1ErIp7A== -----END CERTIFICATE-----Generated at Sun Aug 24 13:01:21 2025 by rpki-client