$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/NX1s2Fv-X3qCo5sa2CEi2Ashpqo.roa File: NX1s2Fv-X3qCo5sa2CEi2Ashpqo.roa (raw, json) Hash identifier: p4ZEqYSJ/MK81C1ol4yFf6GT298KK0rwx56W62Yjp4Y= Subject key identifier: 35:7D:6C:D8:5B:FE:5F:7A:82:A3:9B:1A:D8:21:22:D8:0B:21:A6:AA Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 1590 Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/NX1s2Fv-X3qCo5sa2CEi2Ashpqo.roa Signing time: Sat 13 Sep 2025 03:06:36 +0000 ROA not before: Sat 13 Sep 2025 03:06:36 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 55990 IP address blocks: 113.47.234.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5520 (0x1590) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Sep 13 03:06:36 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=357D6CD85BFE5F7A82A39B1AD82122D80B21A6AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:98:65:09:09:1f:fb:77:f2:27:f6:84:c2:ee: 65:ba:24:a8:3f:55:7b:2d:81:7f:32:63:38:9a:72: 43:63:e3:80:e1:25:ce:df:64:7d:f4:5f:91:d4:a6: 0c:af:31:38:06:07:a9:81:86:e1:65:f4:00:d0:10: 71:d1:c1:4d:96:b0:ab:97:b3:f7:0c:41:35:f1:5a: c7:28:27:8c:e3:d4:a1:90:99:f2:45:7a:c4:f8:1e: 7f:b0:8d:77:73:e3:71:2b:ec:b6:7e:b8:d4:b9:da: 06:54:82:60:11:e9:50:5e:3c:2c:79:b1:0e:5a:51: fd:15:c9:e9:8c:b2:47:a6:e3:05:3f:42:a8:55:33: 79:37:f8:c6:79:ab:94:0e:52:ca:2b:db:85:fe:5f: f7:f4:34:01:b7:c5:8a:ea:c7:f9:bb:0f:bd:c9:7d: 49:24:54:bc:69:1f:4c:44:04:aa:71:3f:ea:39:ff: a3:28:55:38:ab:f6:82:7b:10:01:a6:8d:3e:b7:43: 02:f9:45:63:06:9f:3e:c8:c1:a5:13:99:c8:3a:7d: b1:c4:1c:4c:08:8f:93:e3:d6:d2:f2:0b:92:fc:54: c5:90:2e:7b:06:a5:4c:fa:59:74:f5:5a:a6:2f:fd: 9b:de:aa:eb:5a:51:b5:d9:bf:f1:e6:a9:cf:61:ff: 63:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:7D:6C:D8:5B:FE:5F:7A:82:A3:9B:1A:D8:21:22:D8:0B:21:A6:AA X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/NX1s2Fv-X3qCo5sa2CEi2Ashpqo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.47.234.0/23 Signature Algorithm: sha256WithRSAEncryption 50:bd:d1:54:97:db:16:e5:95:20:30:64:e9:e8:e4:07:65:36: 1a:2b:ef:79:fb:a1:41:2d:4e:1d:09:5d:72:a0:69:33:be:e8: 27:68:53:96:7c:0c:c8:6b:27:26:fa:ac:80:da:5c:08:13:be: ba:79:aa:3f:1b:72:02:bc:0a:10:eb:5b:16:12:38:42:d8:a3: 7d:f9:bf:71:71:0b:ad:7a:42:94:13:c9:c8:d8:55:27:5e:5a: 92:b3:e3:f5:99:eb:0a:f3:d5:1e:77:c6:33:63:14:c2:8e:65: a3:93:f6:66:84:ec:9d:cb:57:79:4a:b2:ac:bf:20:8d:fa:f6: d9:95:33:b6:19:57:35:94:43:55:2a:b8:e6:35:83:c6:39:89: 6e:66:c9:b6:b5:80:bc:e1:fe:9d:20:c0:9f:76:74:ad:30:64: 1f:42:e8:0e:b1:98:21:5f:ee:fc:b5:47:87:b5:89:47:33:fe: d3:42:3a:07:e4:95:71:16:b4:e5:00:18:a4:44:81:c8:aa:bf: 04:6e:28:0b:75:b5:2a:32:78:32:f1:02:60:16:18:25:7e:1b: e9:9f:17:e1:b9:2c:3c:b9:21:b0:4b:ef:47:96:75:83:74:e3: 60:0e:02:27:06:3f:b1:74:33:ca:be:c4:fa:e7:ba:39:6d:64: 89:8b:d5:0c -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFZAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNTA5MTMw MzA2MzZaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDM1N0Q2Q0Q4NUJGRTVG N0E4MkEzOUIxQUQ4MjEyMkQ4MEIyMUE2QUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDImGUJCR/7d/In9oTC7mW6JKg/VXstgX8yYziackNj44DhJc7f ZH30X5HUpgyvMTgGB6mBhuFl9ADQEHHRwU2WsKuXs/cMQTXxWscoJ4zj1KGQmfJF esT4Hn+wjXdz43Er7LZ+uNS52gZUgmAR6VBePCx5sQ5aUf0VyemMskem4wU/QqhV M3k3+MZ5q5QOUsor24X+X/f0NAG3xYrqx/m7D73JfUkkVLxpH0xEBKpxP+o5/6Mo VTir9oJ7EAGmjT63QwL5RWMGnz7IwaUTmcg6fbHEHEwIj5Pj1tLyC5L8VMWQLnsG pUz6WXT1WqYv/ZvequtaUbXZv/Hmqc9h/2OLAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUNX1s2Fv+X3qCo5sa2CEi2AshpqowHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvTlgxczJGdi1YM3FD bzVzYTJDRWkyQXNocHFvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAXEv6jANBgkqhkiG9w0BAQsFAAOCAQEAUL3RVJfbFuWVIDBk6ejkB2U2Givv efuhQS1OHQldcqBpM77oJ2hTlnwMyGsnJvqsgNpcCBO+unmqPxtyArwKEOtbFhI4 Qtijffm/cXELrXpClBPJyNhVJ15akrPj9ZnrCvPVHnfGM2MUwo5lo5P2ZoTsnctX eUqyrL8gjfr22ZUzthlXNZRDVSq45jWDxjmJbmbJtrWAvOH+nSDAn3Z0rTBkH0Lo DrGYIV/u/LVHh7WJRzP+00I6B+SVcRa05QAYpESByKq/BG4oC3W1KjJ4MvECYBYY JX4b6Z8X4bksPLkhsEvvR5Z1g3TjYA4CJwY/sXQzyr7E+ue6OW1kiYvVDA== -----END CERTIFICATE-----Generated at Mon Oct 20 19:21:16 2025 by rpki-client