$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/K97GW7Z3yYfpS2EbhPkPpvsCypY.roa File: K97GW7Z3yYfpS2EbhPkPpvsCypY.roa (raw, json) Hash identifier: tdL6fBNASuSmwqKhMeVdk2w33yRLpmC7kCsz7wN9gu4= Subject key identifier: 2B:DE:C6:5B:B6:77:C9:87:E9:4B:61:1B:84:F9:0F:A6:FB:02:CA:96 Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 15B2 Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/K97GW7Z3yYfpS2EbhPkPpvsCypY.roa Signing time: Sat 13 Sep 2025 03:06:42 +0000 ROA not before: Sat 13 Sep 2025 03:06:42 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 55990 IP address blocks: 113.45.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5554 (0x15b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Sep 13 03:06:42 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=2BDEC65BB677C987E94B611B84F90FA6FB02CA96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:62:5b:ce:c5:b1:b7:b6:64:2e:10:68:08:2b: f1:d1:8c:2c:a6:72:50:6b:9b:aa:6c:5b:55:b2:d7: b2:b7:17:b7:f1:c6:f6:96:6a:b4:f1:5b:8a:1b:41: c4:b5:13:01:8b:c3:62:19:3e:22:b2:0d:96:88:f2: 45:9a:b4:1d:56:71:5b:c0:f7:6b:7b:42:1c:c3:8e: bf:6b:3a:f4:d9:c9:38:47:b7:59:18:85:70:8b:e5: d7:13:1b:f9:4c:1c:e9:95:8b:f6:0a:52:61:a3:a8: e8:90:29:2b:5c:33:18:5b:72:59:21:a8:5a:50:7f: 67:c7:b4:96:30:e5:ca:7f:7d:43:57:29:fc:8b:62: f9:e0:e0:bc:20:84:bf:7d:83:42:eb:95:ac:ae:c0: 46:f1:73:dc:3c:f0:5b:dd:80:a6:1c:d5:51:c6:3a: 43:b6:97:05:0d:02:a3:b2:e2:26:c3:82:f3:7a:ae: 18:83:7d:25:b8:df:35:a7:52:d2:f3:c4:45:41:b5: 9e:8a:0b:c3:54:d1:43:e2:42:4b:4f:55:f9:ec:27: 6f:f1:5f:27:c9:52:c8:d6:59:0c:f5:70:e5:bf:a7: 30:40:4e:a5:80:45:38:73:52:01:e0:65:6e:43:a8: 3c:a1:30:7b:d2:93:f8:e5:91:31:9f:65:15:bf:80: e3:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:DE:C6:5B:B6:77:C9:87:E9:4B:61:1B:84:F9:0F:A6:FB:02:CA:96 X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/K97GW7Z3yYfpS2EbhPkPpvsCypY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.45.98.0/23 Signature Algorithm: sha256WithRSAEncryption 60:b0:85:10:48:6e:ee:e3:eb:29:39:ee:c2:97:db:89:df:cb: e3:be:ec:e8:5b:2d:b1:63:9a:5f:55:71:a4:1f:80:94:96:2c: c9:7d:d8:7c:1e:5f:ec:78:bc:ad:b4:ab:ab:53:19:35:da:d8: 17:1e:b9:ab:74:13:40:7d:4d:9b:67:5b:52:31:0b:7e:49:16: 55:81:f5:c2:14:5a:79:17:a9:49:3f:1b:4d:90:63:e7:f8:6d: 87:7e:13:1d:6e:f9:b0:a0:43:c3:ff:22:53:33:3e:1c:a1:5a: 83:5f:f2:b2:0d:8f:c6:86:f7:c0:46:87:29:58:2c:f4:39:59: 79:b6:d2:78:6a:be:e7:d2:0c:a6:ea:0f:41:11:6f:b2:8b:96: 3a:81:40:5a:8d:38:96:13:da:9b:ec:55:e4:89:da:f9:e8:90: 8a:bc:b9:7a:d9:d3:a7:ba:a1:44:01:1c:58:18:ca:53:71:00: af:57:f3:75:24:a2:c8:68:95:6a:53:06:bf:f0:d9:d8:69:13: a7:76:8c:c3:50:af:17:3c:45:30:2b:a9:e7:b4:4a:15:be:ab: 63:93:d6:34:9a:c1:ac:ea:a2:42:5b:bd:3d:8d:20:c0:57:b5: 77:b2:5e:08:cb:92:b6:7a:6d:e6:f3:cc:0a:56:6c:90:19:03: 75:5a:22:ed -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFbIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNTA5MTMw MzA2NDJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDJCREVDNjVCQjY3N0M5 ODdFOTRCNjExQjg0RjkwRkE2RkIwMkNBOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCYlvOxbG3tmQuEGgIK/HRjCymclBrm6psW1Wy17K3F7fxxvaW arTxW4obQcS1EwGLw2IZPiKyDZaI8kWatB1WcVvA92t7QhzDjr9rOvTZyThHt1kY hXCL5dcTG/lMHOmVi/YKUmGjqOiQKStcMxhbclkhqFpQf2fHtJYw5cp/fUNXKfyL Yvng4LwghL99g0LrlayuwEbxc9w88FvdgKYc1VHGOkO2lwUNAqOy4ibDgvN6rhiD fSW43zWnUtLzxEVBtZ6KC8NU0UPiQktPVfnsJ2/xXyfJUsjWWQz1cOW/pzBATqWA RThzUgHgZW5DqDyhMHvSk/jlkTGfZRW/gONLAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUK97GW7Z3yYfpS2EbhPkPpvsCypYwHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvSzk3R1c3WjN5WWZw UzJFYmhQa1BwdnNDeXBZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAXEtYjANBgkqhkiG9w0BAQsFAAOCAQEAYLCFEEhu7uPrKTnuwpfbid/L477s 6FstsWOaX1VxpB+AlJYsyX3YfB5f7Hi8rbSrq1MZNdrYFx65q3QTQH1Nm2dbUjEL fkkWVYH1whRaeRepST8bTZBj5/hth34THW75sKBDw/8iUzM+HKFag1/ysg2Pxob3 wEaHKVgs9DlZebbSeGq+59IMpuoPQRFvsouWOoFAWo04lhPam+xV5Ina+eiQiry5 etnTp7qhRAEcWBjKU3EAr1fzdSSiyGiValMGv/DZ2GkTp3aMw1CvFzxFMCup57RK Fb6rY5PWNJrBrOqiQlu9PY0gwFe1d7JeCMuStnpt5vPMClZskBkDdVoi7Q== -----END CERTIFICATE-----Generated at Mon Oct 20 19:21:18 2025 by rpki-client