$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/9mN3E6EcMQ4uVRcHgQCmGNoFuTo.roa File: 9mN3E6EcMQ4uVRcHgQCmGNoFuTo.roa (raw, json) Hash identifier: AOg3+H0mcoNitD+ryf7HpKk/hRZj9wBvIEcHUQiOtkI= Subject key identifier: F6:63:77:13:A1:1C:31:0E:2E:55:17:07:81:00:A6:18:DA:05:B9:3A Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 15D7 Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/9mN3E6EcMQ4uVRcHgQCmGNoFuTo.roa Signing time: Sat 13 Sep 2025 03:06:51 +0000 ROA not before: Sat 13 Sep 2025 03:06:51 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 55990 IP address blocks: 113.47.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5591 (0x15d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Sep 13 03:06:51 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=F6637713A11C310E2E5517078100A618DA05B93A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7b:e5:3e:cc:b9:f2:18:a5:6c:e5:44:b1:8a: 24:dd:c4:ef:a4:45:03:32:93:aa:44:da:52:a1:78: 97:1e:54:9f:d3:de:8c:c5:a8:86:f3:15:43:b2:9c: 9e:97:1c:99:a2:53:8c:e2:49:b3:ee:a0:a3:d2:07: 81:98:9e:ce:9c:d6:40:e7:e1:da:f6:47:53:68:6e: 39:e7:01:94:26:b5:b0:aa:1a:ad:d8:e4:a8:d6:09: 2b:0f:34:93:28:26:7d:45:ed:ef:5d:16:ee:47:4b: 54:18:7e:b9:f2:e3:c8:8b:6c:6b:f8:8b:43:eb:b1: 3e:c1:66:dc:b0:a5:83:b2:18:88:66:ec:bd:f9:45: a8:47:cf:03:63:7b:f0:5a:b6:18:b1:f1:da:dc:27: 5e:f8:e6:90:a7:4d:10:04:cd:80:ca:8e:48:2d:99: 21:63:d0:6f:3e:7b:bd:88:66:84:c9:76:25:fa:d2: 6d:c8:94:c2:13:32:89:f0:32:eb:87:47:8f:72:7c: cb:70:11:49:d8:85:c5:3d:27:48:17:93:6b:fb:a3: 88:81:5d:07:2c:7d:b2:83:2f:3b:ea:03:66:9b:2b: 3e:ae:89:b9:57:a2:23:34:0e:88:7e:8f:fa:fa:85: 3d:b7:2c:5a:16:18:81:5c:4c:f2:05:9d:b0:9e:85: 09:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:63:77:13:A1:1C:31:0E:2E:55:17:07:81:00:A6:18:DA:05:B9:3A X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/9mN3E6EcMQ4uVRcHgQCmGNoFuTo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.47.228.0/23 Signature Algorithm: sha256WithRSAEncryption 57:7f:65:bd:b3:c5:30:8d:4b:c6:15:a8:b1:ef:54:cc:77:8a: 31:23:54:03:f7:74:bb:73:f2:40:6e:e0:c9:ca:6e:1f:58:1d: f6:69:f7:2f:df:d0:9f:37:6b:70:37:fd:7b:d4:bd:d3:d2:ed: 2a:4f:9b:12:89:df:92:ea:62:a7:fa:78:e3:3d:86:a5:b4:4e: 8c:17:43:7b:2d:d7:e7:32:ae:fb:3e:9b:8b:2e:b3:10:6b:b1: 84:3b:a2:93:9e:ce:e3:70:9e:0e:28:d6:7c:78:55:51:18:cc: 18:3a:47:c8:d5:f2:b4:be:d0:c3:88:3a:bd:e4:a2:c3:68:13: 67:7c:1e:36:89:6d:67:c0:86:a4:b9:01:b8:60:66:dc:0f:c3: e7:7b:8c:b9:d2:ef:6c:32:85:ce:12:d0:39:fc:fe:17:0c:db: 2a:db:7a:a8:33:12:fb:f6:63:fd:e1:b0:99:5d:4d:2c:00:72: 86:00:59:e2:ff:e3:1a:20:f1:26:d3:c5:04:76:7f:7d:93:72: c3:18:ee:e3:f7:1f:4f:bb:8e:c2:94:56:e0:6c:ab:16:6b:43: 6c:be:62:5f:4d:b5:1a:e6:d1:0a:af:70:40:aa:de:04:92:46: d3:4f:88:5e:62:c0:2c:ee:87:19:3c:de:91:fa:e8:a0:99:a4: 0c:c5:72:d2 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFdcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNTA5MTMw MzA2NTFaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEY2NjM3NzEzQTExQzMx MEUyRTU1MTcwNzgxMDBBNjE4REEwNUI5M0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLe+U+zLnyGKVs5USxiiTdxO+kRQMyk6pE2lKheJceVJ/T3ozF qIbzFUOynJ6XHJmiU4ziSbPuoKPSB4GYns6c1kDn4dr2R1NobjnnAZQmtbCqGq3Y 5KjWCSsPNJMoJn1F7e9dFu5HS1QYfrny48iLbGv4i0PrsT7BZtywpYOyGIhm7L35 RahHzwNje/Bathix8drcJ1745pCnTRAEzYDKjkgtmSFj0G8+e72IZoTJdiX60m3I lMITMonwMuuHR49yfMtwEUnYhcU9J0gXk2v7o4iBXQcsfbKDLzvqA2abKz6uiblX oiM0Doh+j/r6hT23LFoWGIFcTPIFnbCehQlzAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU9mN3E6EcMQ4uVRcHgQCmGNoFuTowHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvOW1OM0U2RWNNUTR1 VlJjSGdRQ21HTm9GdVRvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAXEv5DANBgkqhkiG9w0BAQsFAAOCAQEAV39lvbPFMI1LxhWose9UzHeKMSNU A/d0u3PyQG7gycpuH1gd9mn3L9/QnzdrcDf9e9S909LtKk+bEonfkupip/p44z2G pbROjBdDey3X5zKu+z6biy6zEGuxhDuik57O43CeDijWfHhVURjMGDpHyNXytL7Q w4g6veSiw2gTZ3weNoltZ8CGpLkBuGBm3A/D53uMudLvbDKFzhLQOfz+FwzbKtt6 qDMS+/Zj/eGwmV1NLAByhgBZ4v/jGiDxJtPFBHZ/fZNywxju4/cfT7uOwpRW4Gyr FmtDbL5iX021GubRCq9wQKreBJJG00+IXmLALO6HGTzekfrooJmkDMVy0g== -----END CERTIFICATE-----Generated at Mon Oct 20 19:21:19 2025 by rpki-client