$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/erhGueUQaLTNAloUG6uJ49ipXEg.roa File: erhGueUQaLTNAloUG6uJ49ipXEg.roa (raw, json) Hash identifier: RHu3PBKYmhTG14PC3dhJcePX+4CpR1YL5/rLlhGDO+k= Subject key identifier: 7A:B8:46:B9:E5:10:68:B4:CD:02:5A:14:1B:AB:89:E3:D8:A9:5C:48 Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 15D4 Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/erhGueUQaLTNAloUG6uJ49ipXEg.roa Signing time: Sat 13 Sep 2025 03:06:50 +0000 ROA not before: Sat 13 Sep 2025 03:06:50 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 55990 IP address blocks: 113.47.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5588 (0x15d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Sep 13 03:06:50 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=7AB846B9E51068B4CD025A141BAB89E3D8A95C48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:37:5a:62:fc:6e:ab:31:1c:78:59:ea:c4:4d: e1:26:82:91:3e:7a:84:ee:20:b8:2e:0e:46:c6:cd: f4:34:e4:08:53:84:b3:8a:e3:66:7d:0b:cf:fe:bf: 19:8d:b6:a4:7d:8f:cb:47:4c:f4:b1:80:f1:47:5b: ce:07:20:3e:c9:59:05:ea:3f:36:23:e5:c7:bb:dc: 57:c6:b2:0f:ac:6b:ae:0c:3c:df:7c:a9:8a:14:ae: 8c:d3:6f:de:da:8a:e8:dc:0e:7b:5c:11:a8:f9:d8: 38:02:ed:c2:4e:22:a6:db:3a:37:24:a7:42:a1:58: 96:35:ab:9c:fe:64:41:a0:0f:75:ed:88:d7:b6:10: 53:01:fd:ba:fd:65:51:76:86:8c:85:ab:af:7d:05: d7:25:e6:35:80:c6:c9:34:85:11:33:c3:ea:fb:ec: 40:c5:26:70:5c:49:dd:da:88:25:3f:a5:ba:69:73: 3a:89:df:27:8d:f1:97:5a:7e:bd:16:0c:68:cb:ff: d8:08:2b:53:24:3f:6e:86:c0:4a:d0:ae:9c:53:de: da:a1:3a:f8:9b:68:ec:d8:1b:6a:57:95:93:8e:d9: 63:db:9f:7b:b9:62:cb:81:33:95:45:14:04:7e:1a: d3:76:c8:55:53:3f:8d:bd:cb:c3:8b:93:6c:71:ab: 3f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B8:46:B9:E5:10:68:B4:CD:02:5A:14:1B:AB:89:E3:D8:A9:5C:48 X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/erhGueUQaLTNAloUG6uJ49ipXEg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.47.248.0/23 Signature Algorithm: sha256WithRSAEncryption 70:b5:52:66:7d:dc:67:c2:77:e2:e3:5b:b0:c7:b8:b5:0e:1d: 59:dc:83:14:c4:8e:ed:d8:06:7b:3a:a7:f4:dc:0f:f7:81:7c: c8:7c:6e:c1:29:59:02:4e:14:06:1d:d1:32:c0:6e:1f:c4:d3: 53:ef:b8:92:5c:7f:35:de:f7:5c:70:e9:d1:c2:4d:47:23:25: cd:39:07:ef:c3:ac:a1:b9:b7:0e:60:7c:69:e3:6b:80:c4:e0: 5a:61:8c:5a:1e:3b:96:a6:80:bb:42:7c:26:60:75:8a:c3:f0: 61:06:74:fa:b9:43:fd:f7:f6:5b:6b:78:10:69:3d:d8:d0:2b: 3f:21:36:b1:1b:b6:9b:2f:de:2e:90:9d:5a:a1:d5:eb:28:95: 0c:6d:fd:9e:cc:bb:fb:f6:dd:90:79:ac:f0:b9:c7:86:88:38: 7c:b7:70:48:43:42:42:27:b2:fd:1f:f7:c1:da:5e:dc:ae:30: ba:c7:74:37:c1:80:1e:d9:9c:91:43:49:f3:c2:ed:94:46:8e: b9:5f:d7:c9:f7:3b:75:6f:17:08:bc:34:f0:9c:42:e9:35:ed: 93:cf:aa:ea:f3:6d:2e:8a:6c:2e:9a:16:62:99:c4:5a:29:24: 53:85:70:1a:d4:40:30:65:fa:e8:61:d7:3a:b0:c1:a6:95:f0: ea:2d:1e:4d -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFdQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNTA5MTMw MzA2NTBaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDdBQjg0NkI5RTUxMDY4 QjRDRDAyNUExNDFCQUI4OUUzRDhBOTVDNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCsN1pi/G6rMRx4WerETeEmgpE+eoTuILguDkbGzfQ05AhThLOK 42Z9C8/+vxmNtqR9j8tHTPSxgPFHW84HID7JWQXqPzYj5ce73FfGsg+sa64MPN98 qYoUrozTb97aiujcDntcEaj52DgC7cJOIqbbOjckp0KhWJY1q5z+ZEGgD3XtiNe2 EFMB/br9ZVF2hoyFq699Bdcl5jWAxsk0hREzw+r77EDFJnBcSd3aiCU/pbppczqJ 3yeN8Zdafr0WDGjL/9gIK1MkP26GwErQrpxT3tqhOvibaOzYG2pXlZOO2WPbn3u5 YsuBM5VFFAR+GtN2yFVTP429y8OLk2xxqz//AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUerhGueUQaLTNAloUG6uJ49ipXEgwHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvZXJoR3VlVVFhTFRO QWxvVUc2dUo0OWlwWEVnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAXEv+DANBgkqhkiG9w0BAQsFAAOCAQEAcLVSZn3cZ8J34uNbsMe4tQ4dWdyD FMSO7dgGezqn9NwP94F8yHxuwSlZAk4UBh3RMsBuH8TTU++4klx/Nd73XHDp0cJN RyMlzTkH78Osobm3DmB8aeNrgMTgWmGMWh47lqaAu0J8JmB1isPwYQZ0+rlD/ff2 W2t4EGk92NArPyE2sRu2my/eLpCdWqHV6yiVDG39nsy7+/bdkHms8LnHhog4fLdw SENCQiey/R/3wdpe3K4wusd0N8GAHtmckUNJ88LtlEaOuV/Xyfc7dW8XCLw08JxC 6TXtk8+q6vNtLopsLpoWYpnEWikkU4VwGtRAMGX66GHXOrDBppXw6i0eTQ== -----END CERTIFICATE-----Generated at Mon Oct 20 19:21:00 2025 by rpki-client