$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/LShRcLy9tnMlHkSDU_gie6ZsXKs.roa File: LShRcLy9tnMlHkSDU_gie6ZsXKs.roa (raw, json) Hash identifier: OqfM4dzcvmPU+McpbaxX66bnwaMR8MQjlqVlog/R4f0= Subject key identifier: 2D:28:51:70:BC:BD:B6:73:25:1E:44:83:53:F8:22:7B:A6:6C:5C:AB Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 1598 Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/LShRcLy9tnMlHkSDU_gie6ZsXKs.roa Signing time: Sat 13 Sep 2025 03:06:37 +0000 ROA not before: Sat 13 Sep 2025 03:06:37 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 136907 IP address blocks: 110.41.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5528 (0x1598) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Sep 13 03:06:37 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=2D285170BCBDB673251E448353F8227BA66C5CAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:2c:34:bf:03:a0:bb:f1:e0:3d:05:38:13:29: 2f:be:ed:72:15:be:d5:9b:4e:e6:23:a8:5a:bf:d5: 1a:52:9b:91:ba:61:97:0d:35:fc:b7:b5:c1:d7:b5: 74:a1:f2:30:b4:ff:9e:f2:63:c1:1a:86:95:43:ad: 1c:75:84:0a:8b:bf:93:ea:f4:4b:34:ba:e5:18:82: 61:71:e5:6f:4f:29:ac:5b:00:09:a3:d8:af:f1:c4: 86:74:33:e7:2a:44:4e:0d:7c:0a:d7:5e:9a:3b:ae: 4a:9b:28:6c:d6:6c:db:56:8b:b6:e1:c6:cd:9a:aa: 8b:3a:c5:48:b6:51:27:5d:21:59:29:86:ab:32:e4: 79:ae:de:8d:7e:f2:b3:94:19:43:01:43:f2:ea:db: 1f:91:ff:c3:aa:32:f8:c3:11:43:a8:b7:4f:ee:a1: bf:14:42:da:07:a9:a4:09:81:40:82:b9:cc:cc:d3: 6a:87:a8:77:09:7d:64:4b:a3:7f:8e:06:38:9d:34: 0d:cc:3b:00:d4:bc:df:13:1c:aa:d1:32:45:ef:ca: 8c:7c:4e:1c:44:46:be:05:15:e9:73:1d:3b:a1:a3: 1b:a0:7c:de:0c:27:5e:fb:fb:db:45:bc:87:f3:d9: 84:13:9e:ef:db:e3:97:4c:e8:6d:87:bf:4e:3e:2e: f4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:28:51:70:BC:BD:B6:73:25:1E:44:83:53:F8:22:7B:A6:6C:5C:AB X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/LShRcLy9tnMlHkSDU_gie6ZsXKs.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 110.41.208.0/24 Signature Algorithm: sha256WithRSAEncryption 91:6e:4c:88:2f:44:1e:6b:76:89:8e:2f:ad:e9:db:29:50:2f: 46:c5:ef:46:43:4e:a5:be:b8:30:77:29:03:26:10:30:06:86: 66:ac:ba:98:4f:1d:ab:87:d7:20:87:51:7d:c3:58:db:bc:f7: 9d:5b:66:4f:18:1c:26:2e:82:ef:52:87:6b:90:bd:c0:4f:14: 43:03:9a:fb:e9:f2:5e:a0:ee:58:16:7b:78:9c:55:d1:49:11: 81:80:66:2d:76:7d:5b:46:62:e0:96:a9:d7:93:5e:28:f3:b9: fe:8c:08:77:a0:88:ef:15:6b:c3:8d:38:b3:f2:8c:69:5a:2d: 9c:01:1f:39:c8:43:cf:bd:de:1b:24:e5:86:9c:3b:e7:83:1d: b3:40:3b:f2:60:d4:8d:77:8e:ad:50:05:e4:f8:31:89:a9:aa: 29:21:5b:e7:9d:bf:d8:57:52:e9:a7:99:c8:fd:10:47:37:91: d4:e2:84:16:81:ec:85:e7:58:8f:48:1b:5d:70:63:7b:77:86: 4e:9b:0b:4b:ae:41:1e:f5:95:0a:7c:fb:21:f6:c7:5a:0e:71: 8e:72:42:ec:25:0a:98:61:f1:53:c6:7e:86:bb:4d:67:63:c2: 9f:e4:ff:1b:c5:39:c7:c6:83:c4:2d:74:ec:9b:00:7a:a9:45: 30:09:e5:d8 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFZgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNTA5MTMw MzA2MzdaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDJEMjg1MTcwQkNCREI2 NzMyNTFFNDQ4MzUzRjgyMjdCQTY2QzVDQUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDlLDS/A6C78eA9BTgTKS++7XIVvtWbTuYjqFq/1RpSm5G6YZcN Nfy3tcHXtXSh8jC0/57yY8EahpVDrRx1hAqLv5Pq9Es0uuUYgmFx5W9PKaxbAAmj 2K/xxIZ0M+cqRE4NfArXXpo7rkqbKGzWbNtWi7bhxs2aqos6xUi2USddIVkphqsy 5Hmu3o1+8rOUGUMBQ/Lq2x+R/8OqMvjDEUOot0/uob8UQtoHqaQJgUCCuczM02qH qHcJfWRLo3+OBjidNA3MOwDUvN8THKrRMkXvyox8ThxERr4FFelzHTuhoxugfN4M J177+9tFvIfz2YQTnu/b45dM6G2Hv04+LvSDAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQULShRcLy9tnMlHkSDU/gie6ZsXKswHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvTFNoUmNMeTl0bk1s SGtTRFVfZ2llNlpzWEtzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAG4p0DANBgkqhkiG9w0BAQsFAAOCAQEAkW5MiC9EHmt2iY4vrenbKVAvRsXv RkNOpb64MHcpAyYQMAaGZqy6mE8dq4fXIIdRfcNY27z3nVtmTxgcJi6C71KHa5C9 wE8UQwOa++nyXqDuWBZ7eJxV0UkRgYBmLXZ9W0Zi4Jap15NeKPO5/owId6CI7xVr w404s/KMaVotnAEfOchDz73eGyTlhpw754Mds0A78mDUjXeOrVAF5PgxiamqKSFb 552/2FdS6aeZyP0QRzeR1OKEFoHshedYj0gbXXBje3eGTpsLS65BHvWVCnz7IfbH Wg5xjnJC7CUKmGHxU8Z+hrtNZ2PCn+T/G8U5x8aDxC107JsAeqlFMAnl2A== -----END CERTIFICATE-----Generated at Mon Oct 20 19:55:12 2025 by rpki-client