$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/74C64usb54oZXamcImdW-1Fi-g8.roa File: 74C64usb54oZXamcImdW-1Fi-g8.roa (raw, json) Hash identifier: g9c6MJH1Rl3euJ6FsWM8LvGhUL/h7TtQq5UOJ2T6e6c= Subject key identifier: EF:80:BA:E2:EB:1B:E7:8A:19:5D:A9:9C:22:67:56:FB:51:62:FA:0F Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 159B Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/74C64usb54oZXamcImdW-1Fi-g8.roa Signing time: Sat 13 Sep 2025 03:06:37 +0000 ROA not before: Sat 13 Sep 2025 03:06:38 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 55990 IP address blocks: 113.46.92.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5531 (0x159b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Sep 13 03:06:38 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=EF80BAE2EB1BE78A195DA99C226756FB5162FA0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:01:31:54:7f:b7:2e:6a:3b:59:f5:fd:5b:0b: 2f:14:d5:fa:ff:43:c2:06:1a:fc:fb:df:f2:d7:30: 7c:37:e8:f9:e4:5a:81:d3:ac:83:38:c7:cd:26:e5: 2c:1f:27:1f:be:c9:8b:75:f7:45:87:83:27:c4:9f: c4:f9:cf:60:d0:d4:02:26:66:b5:55:cf:1f:18:de: c1:94:02:cc:e4:bc:48:8f:b0:a6:92:de:f3:2e:98: ff:44:8d:1f:fe:51:b1:7c:f2:ec:ac:c4:3e:9b:2a: 42:2c:07:90:78:1d:82:11:12:9f:16:2a:03:30:e3: 81:9c:41:51:6b:87:76:35:95:bc:03:71:1c:f2:3c: 5e:4c:b8:6f:b5:23:8e:fe:f3:03:64:15:76:8b:01: d0:e5:bc:05:87:51:cf:01:37:42:24:22:7f:4e:7d: ab:fd:98:63:b1:ec:ad:98:df:21:53:fc:67:81:d8: 1b:29:0d:48:35:90:01:d7:34:88:2a:f8:48:5e:1c: 20:56:e8:b8:16:0f:e9:60:b6:fd:c6:84:c9:57:fc: f3:bd:0f:99:59:be:3f:11:10:1f:ac:d5:85:b9:79: 69:e1:50:1a:84:15:e7:64:15:53:f7:fb:1f:16:26: f8:ed:b9:00:b8:34:f9:57:53:03:33:8f:d7:f9:b2: d6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:80:BA:E2:EB:1B:E7:8A:19:5D:A9:9C:22:67:56:FB:51:62:FA:0F X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/74C64usb54oZXamcImdW-1Fi-g8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.46.92.0/23 Signature Algorithm: sha256WithRSAEncryption bc:ed:00:5f:cb:79:00:04:8e:d7:a1:e1:fc:c1:de:73:a7:6a: 04:86:cc:1f:19:d1:07:75:20:1f:f1:fd:af:99:92:75:e8:98: 4d:8a:1a:b1:80:ad:8d:28:58:d4:61:80:3c:67:61:7b:e0:57: 8a:b2:18:64:78:89:dd:8f:90:75:df:5c:03:13:6b:49:12:6c: a4:90:1d:b8:fa:a6:b5:8b:a2:07:b7:e9:b2:78:f7:93:e8:35: cd:e2:90:55:4e:05:07:e2:6e:79:1e:1c:a5:03:cd:76:1c:df: 92:85:38:36:af:48:14:ad:e6:56:29:3a:c9:ae:cf:c9:24:89: ff:2e:db:be:b6:37:47:6c:35:15:93:4f:92:de:11:7a:95:2a: e6:8d:f9:89:0d:08:8a:13:26:07:42:8a:83:97:a0:6a:de:93: e9:39:09:28:da:d5:41:85:2e:d5:ad:ff:07:7e:94:bc:c0:82: 6b:48:b0:2f:ec:2c:f3:d0:72:3e:d1:28:fe:d0:cd:de:dc:f7: 9c:d4:d7:4d:06:c5:79:9f:ed:f8:04:70:e3:75:d4:c0:95:50: 4a:56:c3:0a:92:eb:bd:0b:79:9e:a7:2b:51:bd:61:8d:86:a4: bc:1b:5b:8d:7a:a9:f2:fd:cf:59:bb:35:f1:d9:2f:24:81:10: 8e:21:9f:4f -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFZswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNTA5MTMw MzA2MzhaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEVGODBCQUUyRUIxQkU3 OEExOTVEQTk5QzIyNjc1NkZCNTE2MkZBMEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmATFUf7cuajtZ9f1bCy8U1fr/Q8IGGvz73/LXMHw36PnkWoHT rIM4x80m5SwfJx++yYt190WHgyfEn8T5z2DQ1AImZrVVzx8Y3sGUAszkvEiPsKaS 3vMumP9EjR/+UbF88uysxD6bKkIsB5B4HYIREp8WKgMw44GcQVFrh3Y1lbwDcRzy PF5MuG+1I47+8wNkFXaLAdDlvAWHUc8BN0IkIn9Ofav9mGOx7K2Y3yFT/GeB2Bsp DUg1kAHXNIgq+EheHCBW6LgWD+lgtv3GhMlX/PO9D5lZvj8REB+s1YW5eWnhUBqE FedkFVP3+x8WJvjtuQC4NPlXUwMzj9f5stZzAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU74C64usb54oZXamcImdW+1Fi+g8wHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvNzRDNjR1c2I1NG9a WGFtY0ltZFctMUZpLWc4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAXEuXDANBgkqhkiG9w0BAQsFAAOCAQEAvO0AX8t5AASO16Hh/MHec6dqBIbM HxnRB3UgH/H9r5mSdeiYTYoasYCtjShY1GGAPGdhe+BXirIYZHiJ3Y+Qdd9cAxNr SRJspJAduPqmtYuiB7fpsnj3k+g1zeKQVU4FB+JueR4cpQPNdhzfkoU4Nq9IFK3m Vik6ya7PySSJ/y7bvrY3R2w1FZNPkt4RepUq5o35iQ0IihMmB0KKg5egat6T6TkJ KNrVQYUu1a3/B36UvMCCa0iwL+ws89ByPtEo/tDN3tz3nNTXTQbFeZ/t+ARw43XU wJVQSlbDCpLrvQt5nqcrUb1hjYakvBtbjXqp8v3PWbs18dkvJIEQjiGfTw== -----END CERTIFICATE-----Generated at Mon Oct 20 19:21:00 2025 by rpki-client