$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/2T70_NZVzykunlbfMU7wZT0gl6Y.roa File: 2T70_NZVzykunlbfMU7wZT0gl6Y.roa (raw, json) Hash identifier: hZFeJWM1apjIhXzAB0KdgK0LQf9Gfun0ofWh9dC6RKI= Subject key identifier: D9:3E:F4:FC:D6:55:CF:29:2E:9E:56:DF:31:4E:F0:65:3D:20:97:A6 Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 15D1 Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/2T70_NZVzykunlbfMU7wZT0gl6Y.roa Signing time: Sat 13 Sep 2025 03:06:49 +0000 ROA not before: Sat 13 Sep 2025 03:06:49 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 55990 IP address blocks: 113.45.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5585 (0x15d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Sep 13 03:06:49 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=D93EF4FCD655CF292E9E56DF314EF0653D2097A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c9:0b:c4:1f:ef:bf:bd:fa:be:17:60:2f:05: 4b:90:74:76:2e:9a:9c:69:06:45:69:bc:f1:f8:9b: 66:e5:a0:97:32:b7:64:82:be:8a:dd:a9:2f:2c:32: 29:89:55:e2:ce:a7:1f:f6:36:77:72:20:02:9f:34: 56:55:93:c5:15:e5:ab:fa:21:22:78:83:42:d2:3c: 2c:21:64:d4:3d:86:87:f3:1f:27:63:c2:77:e7:3d: 28:37:be:b2:8e:8d:af:a2:dd:90:2d:2f:e2:86:fa: 97:94:4d:8c:b5:db:d0:ab:d8:20:30:a0:30:42:d9: b2:9c:b7:9d:cc:f9:7f:89:43:e7:58:0c:69:04:a4: 9d:cd:08:d8:c7:cf:6a:7a:1f:4e:44:f3:37:7a:93: f5:4e:78:2e:dd:89:18:87:93:60:46:aa:1a:da:97: 45:ee:ae:14:d3:b3:23:a4:c0:cc:74:d6:05:1e:b4: d5:77:bb:b9:a8:5f:ff:01:52:f1:1d:2f:6b:07:be: bb:a2:2a:d9:42:49:15:06:d4:c2:f3:c4:fa:fb:3c: ea:9d:00:dc:8d:bd:8b:9e:e8:a4:33:1e:64:c8:f2: 1d:86:81:69:fb:37:ec:c6:ff:02:da:1f:68:5a:5c: e0:7f:a5:b7:5a:c4:5d:7a:73:19:6b:a8:4e:47:33: ab:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:3E:F4:FC:D6:55:CF:29:2E:9E:56:DF:31:4E:F0:65:3D:20:97:A6 X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/2T70_NZVzykunlbfMU7wZT0gl6Y.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.45.104.0/21 Signature Algorithm: sha256WithRSAEncryption 3b:4e:36:ce:f5:61:89:6e:5c:3e:cf:5e:b7:de:61:09:99:2a: 8a:fc:a0:c7:c4:46:2b:72:aa:17:62:ce:6a:18:ce:e4:16:95: 2b:eb:34:c4:ff:59:80:6f:2f:79:90:c1:2a:91:09:bd:29:6b: 12:8e:e9:f0:69:36:b3:13:8a:fc:bd:b0:50:27:fa:80:3c:f4: 9b:98:21:af:26:1f:9b:5d:ff:a5:e4:2f:c5:68:ea:ed:98:48: 1c:de:92:66:17:3a:70:c1:a4:49:f3:e0:13:b6:d2:c8:8d:ce: 11:1d:c2:5e:8a:47:79:f1:29:aa:a0:f9:c1:39:2e:74:41:e4: 57:56:ff:23:b9:c0:68:00:e6:30:e3:25:a2:4b:29:fc:15:2c: 27:b1:70:c1:86:29:49:41:e0:cf:bc:81:4b:9e:81:23:ae:a1: af:f4:b9:fd:60:fd:58:29:e9:e3:31:26:3f:ae:98:24:5c:11: ea:03:82:c2:2d:e6:07:ad:ac:5b:6a:68:e2:82:bc:82:69:f0: 4d:0e:df:a9:32:ce:50:de:98:d6:03:57:3d:76:eb:a6:9a:8a: 91:dc:c0:59:29:4d:19:4b:c9:38:70:2c:9e:6c:30:86:76:14: 28:6a:b3:31:f6:e2:f1:49:03:42:b8:7f:45:ce:1d:49:ba:c8: 6e:cc:7d:b7 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFdEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNTA5MTMw MzA2NDlaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEQ5M0VGNEZDRDY1NUNG MjkyRTlFNTZERjMxNEVGMDY1M0QyMDk3QTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhyQvEH++/vfq+F2AvBUuQdHYumpxpBkVpvPH4m2bloJcyt2SC vordqS8sMimJVeLOpx/2NndyIAKfNFZVk8UV5av6ISJ4g0LSPCwhZNQ9hofzHydj wnfnPSg3vrKOja+i3ZAtL+KG+peUTYy129Cr2CAwoDBC2bKct53M+X+JQ+dYDGkE pJ3NCNjHz2p6H05E8zd6k/VOeC7diRiHk2BGqhral0XurhTTsyOkwMx01gUetNV3 u7moX/8BUvEdL2sHvruiKtlCSRUG1MLzxPr7POqdANyNvYue6KQzHmTI8h2GgWn7 N+zG/wLaH2haXOB/pbdaxF16cxlrqE5HM6sRAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU2T70/NZVzykunlbfMU7wZT0gl6YwHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvMlQ3MF9OWlZ6eWt1 bmxiZk1VN3daVDBnbDZZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA3EtaDANBgkqhkiG9w0BAQsFAAOCAQEAO042zvVhiW5cPs9et95hCZkqivyg x8RGK3KqF2LOahjO5BaVK+s0xP9ZgG8veZDBKpEJvSlrEo7p8Gk2sxOK/L2wUCf6 gDz0m5ghryYfm13/peQvxWjq7ZhIHN6SZhc6cMGkSfPgE7bSyI3OER3CXopHefEp qqD5wTkudEHkV1b/I7nAaADmMOMloksp/BUsJ7FwwYYpSUHgz7yBS56BI66hr/S5 /WD9WCnp4zEmP66YJFwR6gOCwi3mB62sW2po4oK8gmnwTQ7fqTLOUN6Y1gNXPXbr ppqKkdzAWSlNGUvJOHAsnmwwhnYUKGqzMfbi8UkDQrh/Rc4dSbrIbsx9tw== -----END CERTIFICATE-----Generated at Mon Oct 20 19:21:00 2025 by rpki-client