$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/Bi18dOmDeZQNDtNGVo5byrnswKY.roa File: Bi18dOmDeZQNDtNGVo5byrnswKY.roa (raw, json) Hash identifier: knpVfGhOj1Ecw9ryrPsK/VbChIWJEvb4evNkjf5bECk= Subject key identifier: 06:2D:7C:74:E9:83:79:94:0D:0E:D3:46:56:8E:5B:CA:B9:EC:C0:A6 Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 15D2 Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Bi18dOmDeZQNDtNGVo5byrnswKY.roa Signing time: Sat 13 Sep 2025 03:06:50 +0000 ROA not before: Sat 13 Sep 2025 03:06:50 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 55990 IP address blocks: 113.47.238.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5586 (0x15d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Sep 13 03:06:50 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=062D7C74E98379940D0ED346568E5BCAB9ECC0A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:77:8b:59:b8:ac:24:d3:81:28:d8:a3:84:d1: ae:e6:84:ab:10:de:0a:87:22:57:0f:4e:74:64:a8: fd:c2:78:a1:05:a7:e2:77:13:95:f2:d7:8a:0b:89: 05:a1:b6:6c:24:84:84:3b:ba:87:c7:a4:c6:c8:db: d9:30:69:be:4b:0c:0d:a7:dd:95:05:e7:ba:91:12: 34:4f:d7:8e:8e:e6:1d:ab:c9:1f:dd:b3:b5:df:0f: dc:60:4b:0f:51:b0:e5:13:5f:ba:2a:0b:79:11:d9: 48:65:90:72:94:46:fa:88:28:08:1c:81:ff:30:f6: aa:9a:24:9a:f4:e0:c9:8c:51:02:11:f5:37:a4:6d: 12:df:06:f6:52:cb:dc:f7:d8:da:b9:78:a7:ad:87: e6:ea:6f:6b:6d:d2:de:aa:e0:60:2b:67:25:0c:33: d3:fe:06:11:3e:51:d0:37:12:64:3c:66:8b:b2:9d: c5:8b:95:d4:84:21:6a:43:dc:5b:9d:43:c9:a6:42: 98:e0:99:91:11:b7:32:3b:83:76:a8:6f:27:e7:5a: 90:f6:9b:fa:06:90:c7:34:9e:d1:63:5b:be:f7:7e: a6:e3:be:f1:0d:ec:a5:56:a2:04:eb:32:f3:d2:03: 74:01:a6:88:05:ce:9d:e5:df:3b:d1:7b:87:37:cd: 9c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:2D:7C:74:E9:83:79:94:0D:0E:D3:46:56:8E:5B:CA:B9:EC:C0:A6 X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Bi18dOmDeZQNDtNGVo5byrnswKY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.47.238.0/23 Signature Algorithm: sha256WithRSAEncryption 65:0e:e9:d2:e5:19:72:32:ba:28:7f:58:ef:08:1b:cd:00:80: f1:4c:f6:a3:b9:48:af:e3:4c:6c:17:4b:91:4d:37:f0:a8:a7: 84:92:2e:72:53:1a:6b:a3:d6:04:01:d4:49:93:db:e6:43:2c: c2:d1:bf:c8:e8:9c:28:7c:6a:7f:97:ec:2b:d5:d6:df:b2:0a: 46:e5:f9:e2:97:a3:16:29:ed:9e:bc:14:98:54:bd:62:22:66: 43:3c:90:32:7f:71:9a:a4:b4:45:0a:0b:f8:2a:e2:3b:cf:03: 4c:5e:72:be:6a:f9:7b:e7:cc:66:c7:45:f7:d2:83:cb:c7:ed: 0c:d9:04:b4:ac:6e:14:30:d9:5a:74:52:f6:a2:5f:cb:87:33: 08:98:8a:5e:d3:cd:8c:a9:ae:9b:9f:d4:41:03:36:e3:e5:94: c7:9b:aa:bf:b6:e7:5d:94:ff:95:e1:e4:b5:40:0d:e7:3d:9d: 22:29:fb:c9:71:fa:5b:00:cf:99:8b:c1:c3:49:c5:ca:b0:24: 52:71:ee:f7:3b:e0:f8:24:ff:39:0b:6f:1f:13:ec:6f:26:28: 91:97:e6:bf:95:8a:ff:09:f5:49:a4:65:cb:b8:81:a1:20:4e: be:11:a5:7f:db:70:1e:12:0f:4a:fd:8a:3f:48:7b:d3:15:ae: b3:be:a2:32 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFdIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNTA5MTMw MzA2NTBaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDA2MkQ3Qzc0RTk4Mzc5 OTQwRDBFRDM0NjU2OEU1QkNBQjlFQ0MwQTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbd4tZuKwk04Eo2KOE0a7mhKsQ3gqHIlcPTnRkqP3CeKEFp+J3 E5Xy14oLiQWhtmwkhIQ7uofHpMbI29kwab5LDA2n3ZUF57qREjRP146O5h2ryR/d s7XfD9xgSw9RsOUTX7oqC3kR2UhlkHKURvqIKAgcgf8w9qqaJJr04MmMUQIR9Tek bRLfBvZSy9z32Nq5eKeth+bqb2tt0t6q4GArZyUMM9P+BhE+UdA3EmQ8ZouyncWL ldSEIWpD3FudQ8mmQpjgmZERtzI7g3aobyfnWpD2m/oGkMc0ntFjW773fqbjvvEN 7KVWogTrMvPSA3QBpogFzp3l3zvRe4c3zZxFAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUBi18dOmDeZQNDtNGVo5byrnswKYwHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvQmkxOGRPbURlWlFO RHROR1ZvNWJ5cm5zd0tZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAXEv7jANBgkqhkiG9w0BAQsFAAOCAQEAZQ7p0uUZcjK6KH9Y7wgbzQCA8Uz2 o7lIr+NMbBdLkU038KinhJIuclMaa6PWBAHUSZPb5kMswtG/yOicKHxqf5fsK9XW 37IKRuX54pejFintnrwUmFS9YiJmQzyQMn9xmqS0RQoL+CriO88DTF5yvmr5e+fM ZsdF99KDy8ftDNkEtKxuFDDZWnRS9qJfy4czCJiKXtPNjKmum5/UQQM24+WUx5uq v7bnXZT/leHktUAN5z2dIin7yXH6WwDPmYvBw0nFyrAkUnHu9zvg+CT/OQtvHxPs byYokZfmv5WK/wn1SaRly7iBoSBOvhGlf9twHhIPSv2KP0h70xWus76iMg== -----END CERTIFICATE-----Generated at Mon Oct 20 19:21:01 2025 by rpki-client