$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/3C8eaI3oxmNH7zgORPuXj7XP1W8.roa File: 3C8eaI3oxmNH7zgORPuXj7XP1W8.roa (raw, json) Hash identifier: epPAuRpMKQK9iXS0IKjbfmT2UcLO7etNiJAJjvnT2Ws= Subject key identifier: DC:2F:1E:68:8D:E8:C6:63:47:EF:38:0E:44:FB:97:8F:B5:CF:D5:6F Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 14B2 Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/3C8eaI3oxmNH7zgORPuXj7XP1W8.roa Signing time: Wed 30 Jul 2025 02:48:00 +0000 ROA not before: Wed 30 Jul 2025 02:48:00 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 55990 IP address blocks: 101.245.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5298 (0x14b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Jul 30 02:48:00 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=DC2F1E688DE8C66347EF380E44FB978FB5CFD56F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:40:c7:59:e8:7e:a5:58:7b:1c:68:42:2b:01: 07:7f:8e:29:ab:53:ff:f0:77:34:c7:a3:c0:46:93: c4:fd:9b:a1:5b:28:72:76:53:e3:6d:98:d6:95:54: 6a:93:b7:52:d4:2b:06:31:c7:e3:e0:7f:80:c4:89: b7:24:5f:72:49:6f:7a:cb:c4:49:80:c5:62:2b:f2: 6e:b9:c9:7e:f5:bf:b8:fc:c2:a3:3e:85:06:31:2e: c6:f5:64:14:16:c2:7b:99:0b:7c:62:97:56:d8:22: 46:e6:04:86:25:f7:11:de:75:63:55:09:f9:82:3e: c7:7b:5c:32:cc:cf:99:47:ca:8a:3a:9b:86:4d:21: 46:4c:12:47:9f:e7:05:ea:c0:65:4d:ef:62:a7:84: 3a:77:da:ae:67:30:3c:21:c0:9f:9a:ac:cd:ef:b5: 23:49:58:f7:6b:0a:99:39:a8:d0:5a:82:e6:19:13: ed:53:29:93:15:de:87:62:d3:c2:30:1d:4d:c1:2c: f3:da:3c:73:e5:26:2a:65:20:b3:82:77:71:b2:5e: a0:25:d1:6b:4d:36:b9:2c:ef:ff:94:3e:9e:f8:ae: de:4a:6f:c4:03:ff:2d:52:04:96:90:52:f3:c4:a3: 2b:6b:82:d3:69:2a:62:2e:8c:e3:ec:dd:b6:78:ed: 35:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:2F:1E:68:8D:E8:C6:63:47:EF:38:0E:44:FB:97:8F:B5:CF:D5:6F X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/3C8eaI3oxmNH7zgORPuXj7XP1W8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 101.245.12.0/22 Signature Algorithm: sha256WithRSAEncryption 93:d1:7f:c6:c6:5f:21:01:1d:86:1d:df:95:69:69:15:10:7b: 1c:e9:dd:24:2b:ee:e6:e7:57:44:21:17:f0:fd:4f:48:e3:5e: 56:0e:3c:de:11:d2:87:0c:4d:4e:bf:ca:10:8b:1a:d9:d3:60: 69:9d:e5:a3:81:02:d3:6d:47:88:d5:f8:94:3d:ce:1b:2c:76: 93:47:0e:dc:20:f8:3b:b5:c5:76:47:e0:61:43:6e:02:de:08: c2:84:c9:7a:d1:fa:7c:12:37:42:a8:0f:f6:dc:d6:87:50:94: b2:d4:0d:1c:7e:60:63:82:29:9c:68:e1:32:04:f4:a4:fa:75: 95:5d:0a:91:0d:02:8b:51:4b:04:bb:37:d0:e2:a7:b2:46:85: 04:f3:59:10:ef:69:84:c9:ac:00:c9:9e:2f:54:37:bc:3c:83: a6:8a:24:36:31:79:8e:ec:40:48:70:e6:f9:63:88:13:d5:71: 57:e7:38:1c:86:88:4e:fa:39:48:69:6b:c8:8b:11:16:1d:70: 15:e5:85:a8:c9:d9:95:13:75:9f:ec:33:aa:7b:5f:2a:7c:b7: df:2f:1b:c3:55:db:11:f0:61:82:63:9e:11:83:82:ce:99:96: f8:92:99:69:c2:16:31:04:ac:2d:3d:bb:a4:37:bc:a3:d7:2e: a7:ac:a9:27 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFLIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNTA3MzAw MjQ4MDBaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKERDMkYxRTY4OERFOEM2 NjM0N0VGMzgwRTQ0RkI5NzhGQjVDRkQ1NkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtQMdZ6H6lWHscaEIrAQd/jimrU//wdzTHo8BGk8T9m6FbKHJ2 U+NtmNaVVGqTt1LUKwYxx+Pgf4DEibckX3JJb3rLxEmAxWIr8m65yX71v7j8wqM+ hQYxLsb1ZBQWwnuZC3xil1bYIkbmBIYl9xHedWNVCfmCPsd7XDLMz5lHyoo6m4ZN IUZMEkef5wXqwGVN72KnhDp32q5nMDwhwJ+arM3vtSNJWPdrCpk5qNBaguYZE+1T KZMV3odi08IwHU3BLPPaPHPlJiplILOCd3GyXqAl0WtNNrks7/+UPp74rt5Kb8QD /y1SBJaQUvPEoytrgtNpKmIujOPs3bZ47TUFAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU3C8eaI3oxmNH7zgORPuXj7XP1W8wHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvM0M4ZWFJM294bU5I N3pnT1JQdVhqN1hQMVc4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmX1DDANBgkqhkiG9w0BAQsFAAOCAQEAk9F/xsZfIQEdhh3flWlpFRB7HOnd JCvu5udXRCEX8P1PSONeVg483hHShwxNTr/KEIsa2dNgaZ3lo4EC021HiNX4lD3O Gyx2k0cO3CD4O7XFdkfgYUNuAt4IwoTJetH6fBI3QqgP9tzWh1CUstQNHH5gY4Ip nGjhMgT0pPp1lV0KkQ0Ci1FLBLs30OKnskaFBPNZEO9phMmsAMmeL1Q3vDyDpook NjF5juxASHDm+WOIE9VxV+c4HIaITvo5SGlryIsRFh1wFeWFqMnZlRN1n+wzqntf Kny33y8bw1XbEfBhgmOeEYOCzpmW+JKZacIWMQSsLT27pDe8o9cup6ypJw== -----END CERTIFICATE-----Generated at Mon Oct 20 19:27:30 2025 by rpki-client