$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/jlnK3OiC8FEcR6J_9EWl8zMYsWs.roa File: jlnK3OiC8FEcR6J_9EWl8zMYsWs.roa (raw, json) Hash identifier: rBAM+PNNQaehki8g6sOU8uepcEi2evR9HuQ6XCxC4L4= Subject key identifier: 8E:59:CA:DC:E8:82:F0:51:1C:47:A2:7F:F4:45:A5:F3:33:18:B1:6B Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 160B Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/jlnK3OiC8FEcR6J_9EWl8zMYsWs.roa Signing time: Mon 22 Sep 2025 09:57:15 +0000 ROA not before: Mon 22 Sep 2025 09:57:15 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 55990 IP address blocks: 101.245.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5643 (0x160b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Sep 22 09:57:15 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=8E59CADCE882F0511C47A27FF445A5F33318B16B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:9d:1d:48:89:98:8e:f9:ac:ca:6e:fd:5a:51: 6b:a7:e5:52:b0:a1:10:af:07:93:23:3d:54:4a:eb: c6:d5:b7:4d:dd:9e:61:cf:7e:34:34:f7:38:49:c0: 92:fd:34:b9:f1:45:48:2f:59:bf:db:4b:b9:12:e0: ba:57:8b:4c:5b:32:c6:0f:e7:a4:9f:52:e9:58:1d: 93:a5:c8:63:e4:13:8d:d6:13:f1:7f:f0:7f:87:16: 12:b8:4c:dd:3f:ce:fe:33:71:3c:1b:17:16:0c:40: ab:06:aa:9f:aa:9e:0e:ad:f1:dc:cc:73:bc:52:a1: 25:ee:0f:de:8f:98:c3:ce:66:1b:fc:cb:6a:df:0e: 8d:44:55:00:70:6a:91:53:75:b7:e6:57:b7:17:88: 6c:e9:f8:30:4c:34:b4:2a:55:50:5d:1b:a9:eb:07: 5f:ea:1c:3c:67:af:55:c6:3c:72:23:ac:0c:f8:88: 06:0b:4a:9f:81:e4:d0:2f:99:cb:b0:1f:d2:dd:13: cf:7f:d3:0d:b6:2d:ac:d2:eb:6f:9b:80:eb:2f:33: 4c:3e:44:5b:8f:10:a6:5d:a4:61:30:2a:e7:4c:55: d1:61:c5:da:c1:7d:f5:0f:92:1a:f0:02:9f:d9:f4: ef:e4:fc:bf:3f:d9:0f:fc:ac:11:33:e7:ee:9b:84: 3f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:59:CA:DC:E8:82:F0:51:1C:47:A2:7F:F4:45:A5:F3:33:18:B1:6B X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/jlnK3OiC8FEcR6J_9EWl8zMYsWs.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 101.245.128.0/20 Signature Algorithm: sha256WithRSAEncryption 6e:25:be:51:9d:fd:cd:62:ca:51:bc:80:a0:04:6d:66:f4:75: 4f:bd:15:f6:75:49:27:df:f3:57:8e:c1:ad:66:01:74:44:45: 7f:73:de:4a:1d:67:4b:dc:42:7e:05:ac:6e:c0:66:5b:1d:cf: d2:f1:61:aa:4b:fb:f6:bb:66:d4:04:c9:23:1c:f4:ca:4d:8e: ad:66:58:fa:7e:c7:3b:85:d5:bf:09:71:30:27:02:d6:e4:06: 78:34:b4:a1:ed:c0:a9:54:d9:aa:e3:2d:d1:8d:91:ad:5e:c0: 9e:9d:68:6c:39:0f:1a:d4:ee:27:69:93:03:87:90:e4:c2:3e: d1:c4:d5:21:25:91:c9:71:3f:3a:e0:03:33:82:21:10:b5:0a: 1f:46:28:29:99:ef:3b:db:7f:c8:f7:c9:94:27:6d:2f:d0:c9: 3f:45:73:63:85:09:aa:28:6b:fc:a9:5d:05:80:96:b7:2c:b9: 31:6c:86:7a:4f:d1:8e:e2:d6:56:21:38:73:f3:5a:2b:48:ca: be:f7:a6:4d:7f:c0:2a:09:82:4d:a3:48:5c:47:d1:31:0d:d0: 2a:68:e6:12:33:6e:ab:81:20:70:5c:ad:9f:71:c3:cf:4f:e2: 92:a4:97:8b:ba:58:9f:f3:71:de:2f:ae:50:af:5e:b0:d0:fa: ae:6c:9e:4d -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFgswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNTA5MjIw OTU3MTVaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDhFNTlDQURDRTg4MkYw NTExQzQ3QTI3RkY0NDVBNUYzMzMxOEIxNkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDonR1IiZiO+azKbv1aUWun5VKwoRCvB5MjPVRK68bVt03dnmHP fjQ09zhJwJL9NLnxRUgvWb/bS7kS4LpXi0xbMsYP56SfUulYHZOlyGPkE43WE/F/ 8H+HFhK4TN0/zv4zcTwbFxYMQKsGqp+qng6t8dzMc7xSoSXuD96PmMPOZhv8y2rf Do1EVQBwapFTdbfmV7cXiGzp+DBMNLQqVVBdG6nrB1/qHDxnr1XGPHIjrAz4iAYL Sp+B5NAvmcuwH9LdE89/0w22LazS62+bgOsvM0w+RFuPEKZdpGEwKudMVdFhxdrB ffUPkhrwAp/Z9O/k/L8/2Q/8rBEz5+6bhD/BAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUjlnK3OiC8FEcR6J/9EWl8zMYsWswHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvamxuSzNPaUM4RkVj UjZKXzlFV2w4ek1Zc1dzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBGX1gDANBgkqhkiG9w0BAQsFAAOCAQEAbiW+UZ39zWLKUbyAoARtZvR1T70V 9nVJJ9/zV47BrWYBdERFf3PeSh1nS9xCfgWsbsBmWx3P0vFhqkv79rtm1ATJIxz0 yk2OrWZY+n7HO4XVvwlxMCcC1uQGeDS0oe3AqVTZquMt0Y2RrV7Anp1obDkPGtTu J2mTA4eQ5MI+0cTVISWRyXE/OuADM4IhELUKH0YoKZnvO9t/yPfJlCdtL9DJP0Vz Y4UJqihr/KldBYCWtyy5MWyGek/RjuLWViE4c/NaK0jKvvemTX/AKgmCTaNIXEfR MQ3QKmjmEjNuq4EgcFytn3HDz0/ikqSXi7pYn/Nx3i+uUK9esND6rmyeTQ== -----END CERTIFICATE-----Generated at Mon Oct 20 19:21:01 2025 by rpki-client