$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/bETfHoBRGz7N_jpDuNUhbPqrRGk.roa File: bETfHoBRGz7N_jpDuNUhbPqrRGk.roa (raw, json) Hash identifier: llcWeOCVKVRJwhVTOpj0CxGKs+pdhKdSi8C6fQrtAh8= Subject key identifier: 6C:44:DF:1E:80:51:1B:3E:CD:FE:3A:43:B8:D5:21:6C:FA:AB:44:69 Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 15B8 Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/bETfHoBRGz7N_jpDuNUhbPqrRGk.roa Signing time: Sat 13 Sep 2025 03:06:44 +0000 ROA not before: Sat 13 Sep 2025 03:06:44 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 55990 IP address blocks: 113.47.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5560 (0x15b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Sep 13 03:06:44 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=6C44DF1E80511B3ECDFE3A43B8D5216CFAAB4469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:bb:f4:da:86:a1:32:3b:c8:cb:d2:82:90:bb: a1:b2:bc:2a:d7:af:44:d8:dd:24:8f:12:9b:c8:3e: 72:2e:c1:33:ec:68:a4:6b:9c:b5:9d:a0:da:69:d1: a7:a2:d5:b7:4e:6a:76:87:97:9f:f7:47:b1:f7:28: d3:f6:05:a0:ad:39:73:4f:2f:7f:bf:56:a4:1b:10: b5:b0:71:1a:84:e0:b5:78:a8:d6:b3:05:5b:07:36: 11:a7:24:2f:38:ee:9f:ed:6e:fb:27:35:db:78:ba: a5:38:01:a8:04:f2:be:10:4f:81:a9:74:7b:63:cc: 6e:91:7f:fd:c0:a3:4c:c5:7e:70:20:cf:bb:8e:d6: d6:26:8b:45:f6:fc:7b:20:51:12:85:21:fb:2a:e0: 1f:7b:24:16:8c:66:67:14:1d:1c:ea:92:93:f5:4e: a6:b6:39:77:55:42:8f:fd:42:40:9d:f4:80:e2:04: e9:ea:6b:8f:7e:8d:59:ba:6d:ec:dc:f7:81:59:8e: 2f:c8:b1:38:d7:28:bc:fe:4f:92:ca:ed:b0:05:c7: 90:e3:23:a5:1f:ae:07:e7:02:3f:13:89:c2:7d:53: fa:12:2d:4a:26:80:4c:4f:1e:be:33:5e:80:eb:27: 5e:59:10:f5:f2:32:5e:37:a8:9c:d9:80:69:6a:f2: c5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:44:DF:1E:80:51:1B:3E:CD:FE:3A:43:B8:D5:21:6C:FA:AB:44:69 X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/bETfHoBRGz7N_jpDuNUhbPqrRGk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.47.0.0/19 Signature Algorithm: sha256WithRSAEncryption 02:83:d6:b3:14:5e:fd:29:5a:2d:3c:8f:bd:cc:ea:82:15:40: e9:a2:e6:c9:60:6e:f2:5d:83:2a:21:94:01:6f:c4:2c:22:2d: 6c:f1:f2:5b:62:1d:6e:79:1b:23:3e:84:01:83:70:85:60:c9: 02:f6:6a:2b:bd:0d:f0:70:f8:c2:6c:2f:fa:2f:34:60:9b:86: d2:bb:b3:95:7b:33:1c:88:99:31:c3:a3:8b:eb:bd:0c:02:84: 4a:1d:4e:8f:be:76:8d:f4:90:64:bf:09:22:cd:e3:b2:a9:53: c9:70:38:c6:8e:35:ec:07:a3:d2:4c:ae:0c:d9:29:22:78:8a: c5:df:20:1d:e2:f1:86:17:19:de:f9:9d:fd:9f:5a:8d:82:6b: 80:20:28:65:e7:ca:e7:b4:30:af:c0:20:d1:74:52:da:18:23: 91:50:47:fd:b1:ae:2c:85:31:85:e4:19:0d:f2:b1:f6:24:01: 9e:cd:7c:1f:09:51:2d:79:c0:c5:95:e3:bd:f9:df:86:65:d2: ac:54:c4:c4:0a:8e:9f:fa:76:65:a0:0a:de:25:7a:b2:77:dc: f9:69:b1:71:79:21:fe:a3:21:49:3d:60:7a:d0:25:ee:bd:3a: 20:b7:94:d7:0b:64:66:3b:6e:e6:43:ac:b6:33:6b:ef:7e:f8: 05:96:68:0f -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFbgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNTA5MTMw MzA2NDRaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDZDNDRERjFFODA1MTFC M0VDREZFM0E0M0I4RDUyMTZDRkFBQjQ0NjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDau/TahqEyO8jL0oKQu6GyvCrXr0TY3SSPEpvIPnIuwTPsaKRr nLWdoNpp0aei1bdOanaHl5/3R7H3KNP2BaCtOXNPL3+/VqQbELWwcRqE4LV4qNaz BVsHNhGnJC847p/tbvsnNdt4uqU4AagE8r4QT4GpdHtjzG6Rf/3Ao0zFfnAgz7uO 1tYmi0X2/HsgURKFIfsq4B97JBaMZmcUHRzqkpP1Tqa2OXdVQo/9QkCd9IDiBOnq a49+jVm6bezc94FZji/IsTjXKLz+T5LK7bAFx5DjI6UfrgfnAj8TicJ9U/oSLUom gExPHr4zXoDrJ15ZEPXyMl43qJzZgGlq8sXVAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUbETfHoBRGz7N/jpDuNUhbPqrRGkwHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvYkVUZkhvQlJHejdO X2pwRHVOVWhiUHFyUkdrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBXEvADANBgkqhkiG9w0BAQsFAAOCAQEAAoPWsxRe/SlaLTyPvczqghVA6aLm yWBu8l2DKiGUAW/ELCItbPHyW2IdbnkbIz6EAYNwhWDJAvZqK70N8HD4wmwv+i80 YJuG0ruzlXszHIiZMcOji+u9DAKESh1Oj752jfSQZL8JIs3jsqlTyXA4xo417Aej 0kyuDNkpIniKxd8gHeLxhhcZ3vmd/Z9ajYJrgCAoZefK57Qwr8Ag0XRS2hgjkVBH /bGuLIUxheQZDfKx9iQBns18HwlRLXnAxZXjvfnfhmXSrFTExAqOn/p2ZaAK3iV6 snfc+WmxcXkh/qMhST1getAl7r06ILeU1wtkZjtu5kOstjNr7374BZZoDw== -----END CERTIFICATE-----Generated at Mon Oct 20 19:21:01 2025 by rpki-client