$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/9Dh-CAnjxfIXTpByOevRUoejWjg.roa File: 9Dh-CAnjxfIXTpByOevRUoejWjg.roa (raw, json) Hash identifier: rtV+E04PKS5dj6gzsb6GjOxgllves1sucZlR/B4SUf8= Subject key identifier: F4:38:7E:08:09:E3:C5:F2:17:4E:90:72:39:EB:D1:52:87:A3:5A:38 Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 15B3 Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/9Dh-CAnjxfIXTpByOevRUoejWjg.roa Signing time: Sat 13 Sep 2025 03:06:42 +0000 ROA not before: Sat 13 Sep 2025 03:06:42 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 55990 IP address blocks: 113.47.220.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5555 (0x15b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Sep 13 03:06:42 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=F4387E0809E3C5F2174E907239EBD15287A35A38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:23:88:ae:65:9e:35:11:f3:8b:b8:12:83:ec: 87:c3:a3:f3:4d:d8:a6:c0:28:68:f5:e1:b8:4a:c7: 8c:37:64:89:e6:fc:c7:b4:b2:f7:3d:47:ea:2b:f6: 97:51:25:24:d7:7e:87:9a:58:30:ef:3e:44:11:4b: 28:e9:bf:a4:8a:aa:89:07:bd:3f:69:72:83:d7:4d: 0a:2f:33:59:ac:8b:10:70:22:e0:57:8a:7e:20:6f: 44:a8:42:f4:ac:3a:5f:80:bb:56:3c:01:23:53:d7: e9:40:57:07:6c:66:0f:17:0b:35:65:5e:c3:f8:81: 7f:c9:1c:dc:88:d8:01:2f:8c:50:05:2f:0c:65:e9: 62:ee:b1:12:22:a0:71:79:2b:20:68:44:01:d0:69: 0a:75:22:43:86:80:a7:85:aa:a5:be:fa:82:03:cd: 54:8d:86:e5:67:8c:0b:03:b6:b8:55:32:84:79:9a: b2:93:3d:1e:bf:e3:06:74:1a:00:2c:c8:a7:b2:40: f9:25:88:66:aa:44:1f:7b:55:be:2d:96:76:4a:6b: 1b:24:76:66:dd:e5:d6:f7:bf:a3:92:60:2b:ed:7e: e0:25:33:f9:36:8d:09:f0:c1:4d:9d:9d:ec:39:66: 46:04:b3:8d:e2:94:26:41:0a:21:66:d7:b1:c5:7e: 5a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:38:7E:08:09:E3:C5:F2:17:4E:90:72:39:EB:D1:52:87:A3:5A:38 X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/9Dh-CAnjxfIXTpByOevRUoejWjg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.47.220.0/23 Signature Algorithm: sha256WithRSAEncryption 99:c9:46:72:cd:a9:02:a0:c6:b2:74:55:a1:d1:70:0b:a6:a2: 20:10:80:4f:7c:b5:34:5e:87:19:60:3a:a6:ae:da:6b:db:51: 9c:f2:3c:49:73:f1:8f:6b:04:89:e0:71:98:8a:6f:da:9d:6b: 63:b1:e7:ce:66:f1:42:65:8c:a8:40:4b:f7:9c:1c:51:3e:92: b4:51:dd:da:c6:5d:8e:5f:cf:d8:f5:11:6b:d1:3b:4b:f6:4b: e5:69:c6:67:b9:51:77:4d:9a:d4:f4:d3:6f:ec:68:c0:fe:1b: 3d:80:d4:e1:eb:4f:ab:e2:36:d4:53:65:cd:8b:76:32:82:81: 53:a0:5d:1a:a3:91:12:17:19:27:a2:85:fb:d8:6a:99:eb:11: 7e:c1:87:b0:42:1a:4f:71:e6:09:a4:e7:d6:d9:8d:d4:61:c6: b1:2f:e6:11:40:47:d4:96:86:37:29:ec:82:74:98:f3:9a:1a: 84:4f:b5:00:61:4a:27:3d:aa:c5:78:35:e2:a5:bc:28:91:58: 94:ac:87:f5:c0:8c:f9:1d:66:09:66:73:36:ef:f6:ca:2b:3d: 4c:30:3e:57:6e:b8:73:04:7b:d5:8d:b7:06:d8:59:1f:eb:50: c6:bd:b2:fb:a2:08:95:f6:25:a2:65:28:df:84:b9:ef:d9:a6: 12:0d:7a:6f -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFbMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNTA5MTMw MzA2NDJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEY0Mzg3RTA4MDlFM0M1 RjIxNzRFOTA3MjM5RUJEMTUyODdBMzVBMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpI4iuZZ41EfOLuBKD7IfDo/NN2KbAKGj14bhKx4w3ZInm/Me0 svc9R+or9pdRJSTXfoeaWDDvPkQRSyjpv6SKqokHvT9pcoPXTQovM1msixBwIuBX in4gb0SoQvSsOl+Au1Y8ASNT1+lAVwdsZg8XCzVlXsP4gX/JHNyI2AEvjFAFLwxl 6WLusRIioHF5KyBoRAHQaQp1IkOGgKeFqqW++oIDzVSNhuVnjAsDtrhVMoR5mrKT PR6/4wZ0GgAsyKeyQPkliGaqRB97Vb4tlnZKaxskdmbd5db3v6OSYCvtfuAlM/k2 jQnwwU2dnew5ZkYEs43ilCZBCiFm17HFflqtAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU9Dh+CAnjxfIXTpByOevRUoejWjgwHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvOURoLUNBbmp4ZklY VHBCeU9ldlJVb2VqV2pnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAXEv3DANBgkqhkiG9w0BAQsFAAOCAQEAmclGcs2pAqDGsnRVodFwC6aiIBCA T3y1NF6HGWA6pq7aa9tRnPI8SXPxj2sEieBxmIpv2p1rY7HnzmbxQmWMqEBL95wc UT6StFHd2sZdjl/P2PURa9E7S/ZL5WnGZ7lRd02a1PTTb+xowP4bPYDU4etPq+I2 1FNlzYt2MoKBU6BdGqOREhcZJ6KF+9hqmesRfsGHsEIaT3HmCaTn1tmN1GHGsS/m EUBH1JaGNynsgnSY85oahE+1AGFKJz2qxXg14qW8KJFYlKyH9cCM+R1mCWZzNu/2 yis9TDA+V264cwR71Y23BthZH+tQxr2y+6IIlfYlomUo34S579mmEg16bw== -----END CERTIFICATE-----Generated at Mon Oct 20 19:20:54 2025 by rpki-client