$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/HsxuWSvUGxrf9KiYXolad1ZJKg4.roa File: HsxuWSvUGxrf9KiYXolad1ZJKg4.roa (raw, json) Hash identifier: l2LFKEJetEXovS+r1PvovOg8iuD0B1For1jNHC9A/4Q= Subject key identifier: 1E:CC:6E:59:2B:D4:1B:1A:DF:F4:A8:98:5E:89:5A:77:56:49:2A:0E Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 15B9 Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/HsxuWSvUGxrf9KiYXolad1ZJKg4.roa Signing time: Sat 13 Sep 2025 03:06:44 +0000 ROA not before: Sat 13 Sep 2025 03:06:44 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 55990 IP address blocks: 2409:2002::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5561 (0x15b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Sep 13 03:06:44 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=1ECC6E592BD41B1ADFF4A8985E895A7756492A0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:44:7a:53:c5:ca:fb:14:58:df:d2:1f:35:cb: 7e:fa:5d:ec:4c:b6:4e:70:6e:ac:3f:75:ac:ef:94: 3f:39:4d:5e:fd:13:2d:b7:40:e8:51:f4:fe:52:1c: 3d:ca:b7:dd:28:17:7d:a3:4d:cc:70:5b:9f:da:86: 02:7d:a8:91:c7:1f:ec:49:1d:dc:80:64:6d:bf:31: ee:3a:8d:0c:6c:7c:83:1d:a4:bb:b1:cc:27:0e:b1: 31:83:ae:32:cb:3c:f7:1b:e2:c2:a2:5d:bd:1a:75: 7b:43:dd:1f:6c:3b:dd:cd:b1:61:fc:ef:37:ab:bd: e4:d6:8c:52:5b:1a:77:1b:ce:cc:ad:4b:0b:59:cf: 81:26:e9:30:90:e7:97:17:3e:cf:95:ab:c6:d7:60: 5c:67:7f:0d:4c:1c:76:84:c2:2a:34:9b:62:3c:ea: a6:f1:63:c4:01:92:58:7b:37:c0:1c:36:c4:75:c7: b6:eb:31:98:38:b9:aa:ac:9e:9e:a9:c6:ac:6f:5b: c9:e8:7e:bd:72:50:20:71:f8:d2:8d:2b:82:b9:95: fa:b4:bf:f8:f2:48:77:da:a9:0f:eb:ba:0b:3f:d1: ec:fe:12:57:cf:db:53:04:6a:7f:78:27:c1:11:0c: 9d:27:62:2f:4b:63:6f:2b:ae:4b:7d:b0:9c:b4:03: 93:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:CC:6E:59:2B:D4:1B:1A:DF:F4:A8:98:5E:89:5A:77:56:49:2A:0E X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/HsxuWSvUGxrf9KiYXolad1ZJKg4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2409:2002::/32 Signature Algorithm: sha256WithRSAEncryption 12:2e:68:74:31:78:59:a1:8c:b8:77:17:d2:fd:e4:71:43:9e: 6d:2d:06:60:55:d6:bd:cb:14:d7:05:6b:dd:d6:78:db:ab:69: 28:23:e0:a6:40:ed:0f:16:40:f8:36:27:a8:0c:d6:05:5f:d8: 27:6b:fa:3d:c6:c8:52:a4:46:15:47:c6:27:14:7d:63:93:00: dd:98:5e:66:c7:d3:1e:9a:2c:5d:6d:8b:72:b0:03:f5:b5:59: 03:6f:47:d2:4a:4e:a1:02:df:b5:34:0e:28:8b:db:5c:1c:21: 49:48:59:e8:a9:3c:0f:7b:3c:b8:2b:55:f7:66:98:56:c5:41: 87:97:ee:80:fa:98:66:e0:27:7a:04:8a:04:af:76:05:4f:af: b2:fe:62:0d:12:94:8d:c6:81:a4:0c:3e:b7:07:ac:2f:5b:fd: e2:e1:54:ad:15:0e:5e:b0:c6:00:7e:9f:bf:c0:18:b1:dd:99: c7:e3:9a:fb:6c:1f:9b:55:67:9e:41:19:d4:47:2f:52:5d:52: e9:52:2e:8d:4e:ae:ba:1c:5e:36:4d:27:4f:b5:02:a4:1c:e9: 26:8f:ae:56:bd:f2:1a:6d:10:4d:53:90:74:29:ca:6d:98:3e: f1:48:6e:db:e7:6d:61:00:48:3a:e0:54:a4:10:81:27:6d:6d: b6:5d:4a:d8 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICFbkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNTA5MTMw MzA2NDRaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDFFQ0M2RTU5MkJENDFC MUFERkY0QTg5ODVFODk1QTc3NTY0OTJBMEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4RHpTxcr7FFjf0h81y376XexMtk5wbqw/dazvlD85TV79Ey23 QOhR9P5SHD3Kt90oF32jTcxwW5/ahgJ9qJHHH+xJHdyAZG2/Me46jQxsfIMdpLux zCcOsTGDrjLLPPcb4sKiXb0adXtD3R9sO93NsWH87zerveTWjFJbGncbzsytSwtZ z4Em6TCQ55cXPs+Vq8bXYFxnfw1MHHaEwio0m2I86qbxY8QBklh7N8AcNsR1x7br MZg4uaqsnp6pxqxvW8nofr1yUCBx+NKNK4K5lfq0v/jySHfaqQ/rugs/0ez+ElfP 21MEan94J8ERDJ0nYi9LY28rrkt9sJy0A5NpAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUHsxuWSvUGxrf9KiYXolad1ZJKg4wHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvSHN4dVdTdlVHeHJm OUtpWVhvbGFkMVpKS2c0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQJIAIwDQYJKoZIhvcNAQELBQADggEBABIuaHQxeFmhjLh3F9L95HFDnm0t BmBV1r3LFNcFa93WeNuraSgj4KZA7Q8WQPg2J6gM1gVf2Cdr+j3GyFKkRhVHxicU fWOTAN2YXmbH0x6aLF1ti3KwA/W1WQNvR9JKTqEC37U0DiiL21wcIUlIWeipPA97 PLgrVfdmmFbFQYeX7oD6mGbgJ3oEigSvdgVPr7L+Yg0SlI3GgaQMPrcHrC9b/eLh VK0VDl6wxgB+n7/AGLHdmcfjmvtsH5tVZ55BGdRHL1JdUulSLo1OrrocXjZNJ0+1 AqQc6SaPrla98hptEE1TkHQpym2YPvFIbtvnbWEASDrgVKQQgSdtbbZdStg= -----END CERTIFICATE-----Generated at Mon Oct 20 19:21:12 2025 by rpki-client