$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/3WtxLIVrlioIfbXK6CeeQpx0qrQ.roa File: 3WtxLIVrlioIfbXK6CeeQpx0qrQ.roa (raw, json) Hash identifier: rM6PIfd/dBfvqebrdMPKiiwE3jd4ZDNb89Aam5swrVY= Subject key identifier: DD:6B:71:2C:85:6B:96:2A:08:7D:B5:CA:E8:27:9E:42:9C:74:AA:B4 Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 1593 Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/3WtxLIVrlioIfbXK6CeeQpx0qrQ.roa Signing time: Sat 13 Sep 2025 03:06:36 +0000 ROA not before: Sat 13 Sep 2025 03:06:36 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 55990 IP address blocks: 124.71.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5523 (0x1593) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Sep 13 03:06:36 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=DD6B712C856B962A087DB5CAE8279E429C74AAB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c4:cf:0c:cb:d9:42:67:08:80:e9:97:8d:d2: 08:e2:e9:2f:66:9e:d3:67:ce:d5:68:0f:a3:01:7f: 32:d0:13:50:18:a1:19:48:bd:8d:25:7c:ac:da:ab: 33:4d:6a:50:87:02:c8:d4:59:4b:de:26:86:2b:d4: 60:9c:08:c4:d5:1d:24:0b:c5:ef:b1:58:bd:d6:2e: 76:68:46:f7:ad:ae:d2:34:01:7c:20:fd:17:f6:b6: 4b:11:7b:6c:1b:03:77:8a:c0:87:11:07:1f:aa:29: 8a:93:d6:b6:ea:3f:31:98:f4:30:89:4f:50:2e:56: 63:95:8b:c4:76:64:eb:87:80:87:c8:0a:f7:64:71: 34:2c:90:a5:65:ba:64:71:fb:ed:9c:b7:ff:92:99: 03:61:8e:4e:74:0b:74:d6:09:e6:01:19:3b:a7:b1: c3:87:37:6e:f0:f0:3a:ab:82:8f:a0:3a:33:4b:83: 0c:eb:d1:ad:ea:19:a3:be:20:a5:5d:be:86:09:9b: f9:d4:96:d5:a2:5c:97:c2:a9:a6:9f:2c:22:8f:d5: d1:b1:87:6f:72:a8:22:ea:e1:52:f4:29:79:6c:1b: 7f:22:81:26:20:67:e0:8e:74:86:3b:53:ca:33:18: ee:e8:dc:b0:6d:f6:03:ac:d1:ee:66:44:35:2f:15: 89:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:6B:71:2C:85:6B:96:2A:08:7D:B5:CA:E8:27:9E:42:9C:74:AA:B4 X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/3WtxLIVrlioIfbXK6CeeQpx0qrQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.71.251.0/24 Signature Algorithm: sha256WithRSAEncryption bf:83:da:5f:da:75:23:60:a2:1a:aa:f1:1a:0d:28:1f:2f:b2: 78:f5:db:86:4e:4a:3b:15:2d:4a:90:f1:90:4e:b0:6b:e9:74: 05:1f:7c:14:4b:18:c5:8c:5d:1d:cd:09:2f:20:a1:b1:d6:e2: 18:d8:c5:98:b0:12:0d:f5:94:f8:d2:e5:9a:c8:f5:ff:84:01: cf:b4:5f:59:4b:c7:e9:c9:ca:8a:c4:b4:1a:24:91:5d:83:f8: 6a:18:88:b9:14:1f:ea:5d:15:ac:09:3e:ca:0d:b1:02:7e:41: 9a:a7:6e:b9:e9:ef:63:78:1c:37:2b:26:2a:63:fd:eb:d7:36: c1:c9:5c:70:8f:d7:3e:0e:24:bf:1e:3f:35:9a:b0:7b:5a:ef: e6:9f:e5:85:12:4a:d1:0b:72:6f:f8:99:30:a4:97:0e:fa:3d: 06:c4:3a:4f:b8:d2:b6:5d:e4:73:13:70:80:9d:01:b9:44:c4: 49:80:bb:f2:e5:37:3e:35:9f:4b:35:d7:21:98:73:22:8f:a5: 54:4d:08:37:b3:f0:47:4f:70:8c:c9:13:5a:4d:b8:4d:d1:48: df:af:2f:2f:c4:a4:5f:22:b1:b9:d1:10:11:5f:9f:dd:9a:63: 9c:1f:b5:55:f9:e4:b7:a3:8f:26:03:e1:7d:ca:7a:7b:ee:39: 09:0f:31:6e -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFZMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNTA5MTMw MzA2MzZaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKERENkI3MTJDODU2Qjk2 MkEwODdEQjVDQUU4Mjc5RTQyOUM3NEFBQjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtxM8My9lCZwiA6ZeN0gji6S9mntNnztVoD6MBfzLQE1AYoRlI vY0lfKzaqzNNalCHAsjUWUveJoYr1GCcCMTVHSQLxe+xWL3WLnZoRvetrtI0AXwg /Rf2tksRe2wbA3eKwIcRBx+qKYqT1rbqPzGY9DCJT1AuVmOVi8R2ZOuHgIfICvdk cTQskKVlumRx++2ct/+SmQNhjk50C3TWCeYBGTunscOHN27w8Dqrgo+gOjNLgwzr 0a3qGaO+IKVdvoYJm/nUltWiXJfCqaafLCKP1dGxh29yqCLq4VL0KXlsG38igSYg Z+COdIY7U8ozGO7o3LBt9gOs0e5mRDUvFYkRAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU3WtxLIVrlioIfbXK6CeeQpx0qrQwHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvM1d0eExJVnJsaW9J ZmJYSzZDZWVRcHgwcXJRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAHxH+zANBgkqhkiG9w0BAQsFAAOCAQEAv4PaX9p1I2CiGqrxGg0oHy+yePXb hk5KOxUtSpDxkE6wa+l0BR98FEsYxYxdHc0JLyChsdbiGNjFmLASDfWU+NLlmsj1 /4QBz7RfWUvH6cnKisS0GiSRXYP4ahiIuRQf6l0VrAk+yg2xAn5BmqduuenvY3gc NysmKmP969c2wclccI/XPg4kvx4/NZqwe1rv5p/lhRJK0Qtyb/iZMKSXDvo9BsQ6 T7jStl3kcxNwgJ0BuUTESYC78uU3PjWfSzXXIZhzIo+lVE0IN7PwR09wjMkTWk24 TdFI368vL8SkXyKxudEQEV+f3ZpjnB+1Vfnkt6OPJgPhfcp6e+45CQ8xbg== -----END CERTIFICATE-----Generated at Mon Oct 20 19:21:04 2025 by rpki-client