$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/Nk2Q4rOKtjfV0JH-uEShV4JLCVc.roa File: Nk2Q4rOKtjfV0JH-uEShV4JLCVc.roa (raw, json) Hash identifier: wRIoziJHgWcSiSM0A667hiliuwoNgonAxTXXcg7B0gQ= Subject key identifier: 36:4D:90:E2:B3:8A:B6:37:D5:D0:91:FE:B8:44:A1:57:82:4B:09:57 Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 15AC Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Nk2Q4rOKtjfV0JH-uEShV4JLCVc.roa Signing time: Sat 13 Sep 2025 03:06:41 +0000 ROA not before: Sat 13 Sep 2025 03:06:41 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 55990 IP address blocks: 113.45.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5548 (0x15ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Sep 13 03:06:41 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=364D90E2B38AB637D5D091FEB844A157824B0957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ea:39:99:58:b6:90:dd:01:f1:4c:f5:53:5d: a0:ac:e2:91:86:a1:f1:a9:32:00:41:db:b4:ee:e9: 1d:c5:a0:f8:6d:03:50:9d:57:fe:56:83:26:45:ed: 2c:51:3b:e3:7b:8b:74:05:3b:1b:eb:13:9a:a0:bc: f1:17:30:a7:3e:58:53:96:c9:ca:48:65:f7:d4:ca: 93:c3:ba:71:c3:3c:8c:dc:ad:aa:3a:97:ed:9c:b3: df:15:85:7c:df:f6:e4:1e:66:ce:7a:ca:e1:ce:20: 16:07:44:1f:10:13:64:84:27:25:34:f6:5c:4b:7c: 4d:20:b7:57:75:a2:16:3c:66:c1:5e:3a:ef:c5:1b: 3e:fc:c1:2f:59:b6:0d:49:76:3b:fc:db:7a:80:cc: c3:ac:c9:e6:4f:06:f9:ad:04:c9:e0:e6:bb:2d:07: 34:e2:66:30:30:3c:92:1c:f7:d4:16:9a:b8:cb:f9: c3:6e:57:c5:04:da:37:9b:cf:00:c7:fb:ad:5b:91: b9:b4:47:97:b5:f1:32:cd:70:8f:a0:0a:78:e6:24: 3d:67:a0:81:fd:02:3e:d9:f9:c9:27:2f:37:fe:e1: 41:af:de:78:ed:83:41:68:80:cb:c6:70:e2:58:56: d0:6b:6e:ae:e3:0e:a6:b8:de:c1:f5:65:d5:a2:0a: 07:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:4D:90:E2:B3:8A:B6:37:D5:D0:91:FE:B8:44:A1:57:82:4B:09:57 X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Nk2Q4rOKtjfV0JH-uEShV4JLCVc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.45.127.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:99:e0:a3:07:b8:a3:39:4e:ad:e6:18:de:b3:5c:03:b1:bf: ab:f5:b2:f6:ae:86:f9:5a:92:6b:d2:25:67:d1:c1:74:24:67: 9d:9d:de:53:68:d2:29:00:ce:6d:89:fe:79:51:20:3d:d9:b5: 3b:31:bd:75:0f:5d:83:48:a1:ab:1b:cb:84:fc:56:fb:2b:0b: c6:26:09:47:57:55:96:ef:16:ba:8d:19:6c:bb:20:85:63:e6: 85:b9:88:0b:e3:f5:7d:2b:23:5f:ef:94:2f:69:84:0a:bc:ed: cb:65:11:42:a8:58:bb:c3:4e:ae:9b:d8:80:13:63:f4:51:60: 20:9c:9c:07:dc:3c:6e:f1:1b:65:6b:2a:b2:fd:ab:bc:0d:33: 30:e2:55:af:d1:79:fd:2c:44:bd:48:e1:42:0a:9f:07:d6:0a: 28:2e:5b:e3:fd:7f:1b:2c:2a:8b:a3:48:f3:f6:1e:73:f2:1b: 76:91:c1:f6:c8:0b:d1:b4:55:93:97:08:c5:00:8b:2e:0d:35: 2d:58:a6:d0:7e:ee:d2:00:de:d0:ac:9f:45:da:c0:f6:39:69: f7:92:66:7d:7b:ae:82:60:e4:17:be:81:e1:90:fa:ab:b8:6a: 7b:cb:26:5e:03:a1:d3:68:18:5b:a9:6f:b5:7f:3c:dd:1d:69: e9:d8:c5:4a -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFawwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNTA5MTMw MzA2NDFaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDM2NEQ5MEUyQjM4QUI2 MzdENUQwOTFGRUI4NDRBMTU3ODI0QjA5NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDf6jmZWLaQ3QHxTPVTXaCs4pGGofGpMgBB27Tu6R3FoPhtA1Cd V/5WgyZF7SxRO+N7i3QFOxvrE5qgvPEXMKc+WFOWycpIZffUypPDunHDPIzcrao6 l+2cs98VhXzf9uQeZs56yuHOIBYHRB8QE2SEJyU09lxLfE0gt1d1ohY8ZsFeOu/F Gz78wS9Ztg1Jdjv823qAzMOsyeZPBvmtBMng5rstBzTiZjAwPJIc99QWmrjL+cNu V8UE2jebzwDH+61bkbm0R5e18TLNcI+gCnjmJD1noIH9Aj7Z+cknLzf+4UGv3njt g0FogMvGcOJYVtBrbq7jDqa43sH1ZdWiCgd/AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUNk2Q4rOKtjfV0JH+uEShV4JLCVcwHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvTmsyUTRyT0t0amZW MEpILXVFU2hWNEpMQ1ZjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAHEtfzANBgkqhkiG9w0BAQsFAAOCAQEATpngowe4ozlOreYY3rNcA7G/q/Wy 9q6G+VqSa9IlZ9HBdCRnnZ3eU2jSKQDObYn+eVEgPdm1OzG9dQ9dg0ihqxvLhPxW +ysLxiYJR1dVlu8Wuo0ZbLsghWPmhbmIC+P1fSsjX++UL2mECrzty2URQqhYu8NO rpvYgBNj9FFgIJycB9w8bvEbZWsqsv2rvA0zMOJVr9F5/SxEvUjhQgqfB9YKKC5b 4/1/Gywqi6NI8/Yec/IbdpHB9sgL0bRVk5cIxQCLLg01LVim0H7u0gDe0KyfRdrA 9jlp95JmfXuugmDkF76B4ZD6q7hqe8smXgOh02gYW6lvtX883R1p6djFSg== -----END CERTIFICATE-----Generated at Mon Oct 20 19:20:55 2025 by rpki-client