$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/2cJoua_1H9g3xx7wrPsIsvGgSYk.roa File: 2cJoua_1H9g3xx7wrPsIsvGgSYk.roa (raw, json) Hash identifier: 7agL3fJ7xCXpdMilZBE+caHsjIU5iXVZsNisqQjvHb0= Subject key identifier: D9:C2:68:B9:AF:F5:1F:D8:37:C7:1E:F0:AC:FB:08:B2:F1:A0:49:89 Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 14AE Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/2cJoua_1H9g3xx7wrPsIsvGgSYk.roa Signing time: Wed 30 Jul 2025 02:47:59 +0000 ROA not before: Wed 30 Jul 2025 02:47:59 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 55990 IP address blocks: 115.32.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 11:04:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5294 (0x14ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Jul 30 02:47:59 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=D9C268B9AFF51FD837C71EF0ACFB08B2F1A04989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:90:1a:42:bc:13:b8:cd:a2:53:64:a0:07:40: 1f:0c:48:de:23:c1:1f:a8:02:f6:58:15:47:f9:ea: 4e:67:28:9d:94:8c:fd:4c:62:cf:ae:2f:f5:f2:04: d5:b3:6d:85:69:3f:68:3c:26:16:16:c4:66:02:1f: bc:30:ff:c3:12:49:9c:03:ba:26:75:59:9e:15:ea: 96:df:71:e0:8d:37:d8:02:41:ee:1a:47:5c:13:32: 0c:c8:e6:e1:48:03:0f:ec:f2:52:d4:41:d6:b7:68: aa:40:31:d5:98:81:dc:61:24:2b:a2:7c:94:dc:f4: 84:7f:0f:1a:bc:17:77:d2:86:30:b2:9c:5a:ca:8e: 81:76:fd:76:71:a7:5e:de:e0:c6:8b:4f:96:be:50: ff:b4:0b:bf:7b:44:8f:1e:f1:d2:ea:0a:fe:5d:30: be:4c:4f:a1:57:43:02:a8:8d:90:6d:62:12:d8:75: 12:17:dd:8d:5e:15:0f:5b:e4:05:a4:e0:c3:40:91: 6b:a6:b3:33:9c:b5:d0:3f:3f:42:50:ff:5d:d9:11: 9a:ab:79:47:24:c8:05:17:47:98:cf:1b:15:8a:d9: 8f:13:f2:5f:3b:fb:05:ee:4a:19:53:97:63:e1:88: 00:22:8c:e6:41:5b:eb:36:60:81:65:77:7e:02:88: e4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:C2:68:B9:AF:F5:1F:D8:37:C7:1E:F0:AC:FB:08:B2:F1:A0:49:89 X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/2cJoua_1H9g3xx7wrPsIsvGgSYk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 115.32.48.0/21 Signature Algorithm: sha256WithRSAEncryption 22:2b:f9:fb:18:e6:18:30:d7:01:81:a1:ed:75:56:ca:89:a2: 35:34:1a:e7:76:0f:69:f3:c3:ec:14:3d:cb:48:e7:9d:94:c1: 70:98:dd:1d:d6:d7:fd:fd:20:0e:4f:af:61:9b:f6:c5:72:43: 55:45:e3:65:0f:26:2a:4e:02:8e:d7:03:1b:c8:aa:94:f0:63: 59:1d:be:53:f4:e9:b3:b8:ae:57:6d:07:e2:91:cf:6e:94:fe: 0a:60:96:3d:20:25:33:1a:73:f9:47:f3:7e:ba:d1:08:bd:38: ee:d7:03:90:0e:81:cd:b2:3e:67:92:1b:d6:93:8d:de:e3:22: 4d:83:85:c3:4f:9d:99:37:96:1b:0d:ba:6c:71:5a:12:9c:fe: 77:7c:76:fe:85:e5:65:02:c0:62:88:5e:b0:4c:ff:e8:dc:a4: 86:df:f1:ae:8d:84:c1:76:49:19:d2:2a:1a:f5:27:d5:4a:74: b3:30:db:16:f1:4d:ac:28:62:65:1c:2a:91:02:a2:19:59:42: f4:30:49:54:1c:83:06:13:89:56:f0:14:1b:5b:68:49:b6:f5: 0b:55:bc:68:85:1b:1c:59:99:26:fb:d6:cc:1c:be:3d:8f:d2: f4:37:56:43:b5:cb:b2:61:78:20:fc:af:20:2c:9f:f0:07:01: be:c1:42:bc -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFK4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNTA3MzAw MjQ3NTlaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEQ5QzI2OEI5QUZGNTFG RDgzN0M3MUVGMEFDRkIwOEIyRjFBMDQ5ODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDrkBpCvBO4zaJTZKAHQB8MSN4jwR+oAvZYFUf56k5nKJ2UjP1M Ys+uL/XyBNWzbYVpP2g8JhYWxGYCH7ww/8MSSZwDuiZ1WZ4V6pbfceCNN9gCQe4a R1wTMgzI5uFIAw/s8lLUQda3aKpAMdWYgdxhJCuifJTc9IR/Dxq8F3fShjCynFrK joF2/XZxp17e4MaLT5a+UP+0C797RI8e8dLqCv5dML5MT6FXQwKojZBtYhLYdRIX 3Y1eFQ9b5AWk4MNAkWumszOctdA/P0JQ/13ZEZqreUckyAUXR5jPGxWK2Y8T8l87 +wXuShlTl2PhiAAijOZBW+s2YIFld34CiOQxAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU2cJoua/1H9g3xx7wrPsIsvGgSYkwHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvMmNKb3VhXzFIOWcz eHg3d3JQc0lzdkdnU1lrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA3MgMDANBgkqhkiG9w0BAQsFAAOCAQEAIiv5+xjmGDDXAYGh7XVWyomiNTQa 53YPafPD7BQ9y0jnnZTBcJjdHdbX/f0gDk+vYZv2xXJDVUXjZQ8mKk4CjtcDG8iq lPBjWR2+U/Tps7iuV20H4pHPbpT+CmCWPSAlMxpz+UfzfrrRCL047tcDkA6BzbI+ Z5Ib1pON3uMiTYOFw0+dmTeWGw26bHFaEpz+d3x2/oXlZQLAYohesEz/6Nykht/x ro2EwXZJGdIqGvUn1Up0szDbFvFNrChiZRwqkQKiGVlC9DBJVByDBhOJVvAUG1to Sbb1C1W8aIUbHFmZJvvWzBy+PY/S9DdWQ7XLsmF4IPyvICyf8AcBvsFCvA== -----END CERTIFICATE-----Generated at Sun Aug 24 09:05:58 2025 by rpki-client