$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/SuhYs9QrnmngYCNhepnj3gX2rHk.roa File: SuhYs9QrnmngYCNhepnj3gX2rHk.roa (raw, json) Hash identifier: C+y/Fs8dMoFGsDh+2hZwrBzxGXD+5WrmD2c2EnIws6g= Subject key identifier: 4A:E8:58:B3:D4:2B:9E:69:E0:60:23:61:7A:99:E3:DE:05:F6:AC:79 Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 15B5 Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/SuhYs9QrnmngYCNhepnj3gX2rHk.roa Signing time: Sat 13 Sep 2025 03:06:43 +0000 ROA not before: Sat 13 Sep 2025 03:06:43 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 55990 IP address blocks: 113.47.244.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5557 (0x15b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Sep 13 03:06:43 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=4AE858B3D42B9E69E06023617A99E3DE05F6AC79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:92:a7:22:8c:05:4d:50:94:cb:9a:74:82:d9: f6:aa:58:b8:3e:af:5c:62:dc:bf:77:8c:4b:e4:29: 29:3f:f2:01:1c:b0:34:52:40:d7:7f:a9:8b:d3:5e: 00:9b:df:73:cb:fd:5d:4d:4e:e0:2b:a9:9b:bc:10: 76:33:63:ad:94:c5:97:86:f5:8c:4a:0c:a1:2a:20: 08:78:ff:21:d7:4e:f1:92:42:c2:22:dc:7e:2e:f0: 2e:84:d9:f2:ac:33:4e:11:90:2e:28:98:11:75:f3: 62:81:e4:1c:20:1a:3d:ab:a4:ee:0d:a2:51:32:45: d8:73:1a:0c:f2:e4:7c:6d:56:25:40:79:94:6d:51: 3b:c5:ae:8a:88:00:d1:6f:51:22:63:41:77:99:1e: 7a:b1:9c:9b:9f:3a:c8:fa:ee:da:3d:3b:c5:87:40: c0:f4:a9:43:5f:49:79:be:9a:62:9d:ec:7f:fc:ff: 05:03:65:7e:f2:b2:e2:a4:3c:c2:65:8d:61:7c:b6: a7:4b:dc:70:1b:d5:8e:97:65:31:74:7f:38:8b:2c: f8:93:52:01:18:68:66:79:f4:33:08:af:f2:1b:43: 47:65:ec:25:10:60:4c:fa:68:77:ab:87:bc:75:19: 2e:3d:63:4f:3d:eb:3c:1f:b3:b5:d6:92:4c:7f:ad: ec:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:E8:58:B3:D4:2B:9E:69:E0:60:23:61:7A:99:E3:DE:05:F6:AC:79 X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/SuhYs9QrnmngYCNhepnj3gX2rHk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.47.244.0/23 Signature Algorithm: sha256WithRSAEncryption 09:3c:f8:e0:fb:5c:83:9e:3d:77:fb:26:8e:f5:2a:a9:c8:b2: 94:3a:58:c8:42:96:ff:df:55:f8:9b:eb:d2:01:f6:ca:0f:48: f5:14:53:a0:31:51:43:24:ed:f1:48:99:ac:2c:94:77:1f:13: 01:95:00:46:5f:fb:cb:43:91:fb:64:16:b8:54:a9:ca:a3:43: fa:9a:a3:5e:01:93:35:ba:b6:6d:ea:59:b3:1c:bc:c6:7a:8a: d3:9f:15:80:c4:3c:d1:de:0c:ab:e5:db:d1:e9:0e:df:ec:cc: 72:b4:b9:e8:3d:95:90:75:d8:b5:b9:dd:c0:03:a3:e7:78:d7: 29:25:6d:a6:5b:41:46:27:83:8e:4e:54:a2:33:b7:b8:9f:94: f4:66:14:6b:3d:e4:71:ff:aa:14:ec:57:8b:36:30:87:9c:ce: da:4e:14:23:91:8f:a3:23:f9:81:26:fe:e3:5f:e6:11:03:1e: 18:1d:53:63:1b:90:2c:60:9f:ef:db:73:0a:38:07:aa:af:34: 04:84:56:c0:1b:10:d8:75:96:54:c1:82:a3:20:3a:5f:5e:0b: 98:25:b9:c7:e8:e4:c9:66:55:94:66:1d:8e:93:c5:4e:b0:46: 71:b2:32:ac:12:0f:f9:48:1b:4d:f4:03:12:7e:5c:95:60:57: 5b:1b:3d:d5 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFbUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNTA5MTMw MzA2NDNaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDRBRTg1OEIzRDQyQjlF NjlFMDYwMjM2MTdBOTlFM0RFMDVGNkFDNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDqkqcijAVNUJTLmnSC2faqWLg+r1xi3L93jEvkKSk/8gEcsDRS QNd/qYvTXgCb33PL/V1NTuArqZu8EHYzY62UxZeG9YxKDKEqIAh4/yHXTvGSQsIi 3H4u8C6E2fKsM04RkC4omBF182KB5BwgGj2rpO4NolEyRdhzGgzy5HxtViVAeZRt UTvFroqIANFvUSJjQXeZHnqxnJufOsj67to9O8WHQMD0qUNfSXm+mmKd7H/8/wUD ZX7ysuKkPMJljWF8tqdL3HAb1Y6XZTF0fziLLPiTUgEYaGZ59DMIr/IbQ0dl7CUQ YEz6aHerh7x1GS49Y0896zwfs7XWkkx/rey9AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUSuhYs9QrnmngYCNhepnj3gX2rHkwHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvU3VoWXM5UXJubW5n WUNOaGVwbmozZ1gyckhrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAXEv9DANBgkqhkiG9w0BAQsFAAOCAQEACTz44Ptcg549d/smjvUqqciylDpY yEKW/99V+Jvr0gH2yg9I9RRToDFRQyTt8UiZrCyUdx8TAZUARl/7y0OR+2QWuFSp yqND+pqjXgGTNbq2bepZsxy8xnqK058VgMQ80d4Mq+Xb0ekO3+zMcrS56D2VkHXY tbndwAOj53jXKSVtpltBRieDjk5UojO3uJ+U9GYUaz3kcf+qFOxXizYwh5zO2k4U I5GPoyP5gSb+41/mEQMeGB1TYxuQLGCf79tzCjgHqq80BIRWwBsQ2HWWVMGCoyA6 X14LmCW5x+jkyWZVlGYdjpPFTrBGcbIyrBIP+UgbTfQDEn5clWBXWxs91Q== -----END CERTIFICATE-----Generated at Mon Oct 20 19:20:54 2025 by rpki-client