$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/pb62fShEFcOETQHKgsV_skGK4VI.roa File: pb62fShEFcOETQHKgsV_skGK4VI.roa (raw, json) Hash identifier: bwXdmVodMEYOisR9ueO4csC0lWc/Gvg3yVnl//ROzDc= Subject key identifier: A5:BE:B6:7D:28:44:15:C3:84:4D:01:CA:82:C5:7F:B2:41:8A:E1:52 Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 15CE Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/pb62fShEFcOETQHKgsV_skGK4VI.roa Signing time: Sat 13 Sep 2025 03:06:49 +0000 ROA not before: Sat 13 Sep 2025 03:06:49 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 55990 IP address blocks: 113.47.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5582 (0x15ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Sep 13 03:06:49 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=A5BEB67D284415C3844D01CA82C57FB2418AE152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:be:d6:be:f9:fc:00:6e:07:8d:40:4d:68:22: b9:5d:e2:2e:d3:04:83:92:b3:1e:98:6f:c1:ee:72: b1:55:8e:70:03:8d:77:3b:ff:05:44:61:a6:3a:cf: b7:a4:db:06:b0:cb:75:47:7c:36:b1:3a:66:89:62: 62:03:48:d2:28:a3:8d:2d:2b:a5:19:ef:62:de:91: 8c:b9:17:c1:fd:35:30:08:bf:67:7c:83:31:d8:fc: c9:0b:47:8c:8b:3d:5e:ea:2c:e3:03:50:2a:91:cc: 4d:a1:fe:5e:74:c4:32:56:6a:eb:dd:a3:10:51:51: c8:26:27:1e:07:84:b2:01:60:2d:82:be:75:a8:2e: 98:4c:46:e4:b9:b7:ee:42:9a:b1:75:2a:7e:90:02: 91:6e:42:ce:71:14:96:7b:b5:fb:45:7f:a3:09:16: 16:b8:37:ad:96:f3:cf:81:ac:42:e7:1e:3b:dc:1b: 91:90:6f:49:37:c5:c3:a7:00:0c:0d:64:ba:ad:19: 24:a7:43:c7:95:59:0e:01:74:f0:cf:a1:b2:2d:da: f1:01:72:cb:4f:af:90:b0:42:07:d3:a7:93:fc:70: 33:e2:2b:c1:a1:f2:c8:7e:89:05:38:3e:a1:68:fd: b2:8f:22:35:0d:c2:49:57:e1:a5:9e:d2:1d:f8:a5: 50:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:BE:B6:7D:28:44:15:C3:84:4D:01:CA:82:C5:7F:B2:41:8A:E1:52 X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/pb62fShEFcOETQHKgsV_skGK4VI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.47.254.0/23 Signature Algorithm: sha256WithRSAEncryption 5b:b4:dc:ab:1a:0c:50:66:f3:6c:ea:f0:08:c8:27:1d:26:49: b9:ee:25:68:4b:47:f9:55:95:e3:c9:52:3f:ff:e0:2e:3b:cb: 17:36:02:50:45:90:42:c6:d8:87:07:b7:ed:e3:94:b8:22:7d: f1:70:53:6a:61:bc:f2:ba:ab:7d:ad:33:4a:f2:57:4b:74:dc: 72:af:9c:08:b8:79:bd:ba:94:3c:ee:eb:56:df:20:91:4e:d2: b2:63:c5:7d:8a:4c:cb:d7:e5:e8:ba:b7:97:4b:53:0b:6c:ba: 15:87:82:6c:ad:5b:ae:6c:f6:bf:e3:7a:39:c0:17:0f:a3:89: 83:ad:70:c5:b1:6f:86:7f:32:04:ec:a6:6b:59:04:2b:30:f9: a7:3e:33:d0:df:05:16:ee:74:51:7d:87:82:43:32:97:44:a5: 46:9a:ed:9d:88:30:7e:73:81:86:10:7b:87:c0:53:36:e9:38: 05:6c:06:e3:e2:eb:f2:c6:45:94:7a:a9:eb:2d:7b:65:52:30: c0:cc:cf:a3:69:af:b6:48:7e:81:98:c9:06:7c:db:3a:78:fb: 1c:3f:5d:7f:ef:ae:03:9d:87:1f:e0:92:6b:39:4d:9f:d7:05: 80:9b:d3:8d:a0:33:fb:1c:d3:2f:7a:77:2e:d3:5c:5d:6c:e6: 5f:e5:95:a1 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFc4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNTA5MTMw MzA2NDlaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEE1QkVCNjdEMjg0NDE1 QzM4NDREMDFDQTgyQzU3RkIyNDE4QUUxNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpvta++fwAbgeNQE1oIrld4i7TBIOSsx6Yb8HucrFVjnADjXc7 /wVEYaY6z7ek2wawy3VHfDaxOmaJYmIDSNIoo40tK6UZ72LekYy5F8H9NTAIv2d8 gzHY/MkLR4yLPV7qLOMDUCqRzE2h/l50xDJWauvdoxBRUcgmJx4HhLIBYC2CvnWo LphMRuS5t+5CmrF1Kn6QApFuQs5xFJZ7tftFf6MJFha4N62W88+BrELnHjvcG5GQ b0k3xcOnAAwNZLqtGSSnQ8eVWQ4BdPDPobIt2vEBcstPr5CwQgfTp5P8cDPiK8Gh 8sh+iQU4PqFo/bKPIjUNwklX4aWe0h34pVA5AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUpb62fShEFcOETQHKgsV/skGK4VIwHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvcGI2MmZTaEVGY09F VFFIS2dzVl9za0dLNFZJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAXEv/jANBgkqhkiG9w0BAQsFAAOCAQEAW7TcqxoMUGbzbOrwCMgnHSZJue4l aEtH+VWV48lSP//gLjvLFzYCUEWQQsbYhwe37eOUuCJ98XBTamG88rqrfa0zSvJX S3Tccq+cCLh5vbqUPO7rVt8gkU7SsmPFfYpMy9fl6Lq3l0tTC2y6FYeCbK1brmz2 v+N6OcAXD6OJg61wxbFvhn8yBOyma1kEKzD5pz4z0N8FFu50UX2HgkMyl0SlRprt nYgwfnOBhhB7h8BTNuk4BWwG4+Lr8sZFlHqp6y17ZVIwwMzPo2mvtkh+gZjJBnzb Onj7HD9df++uA52HH+CSazlNn9cFgJvTjaAz+xzTL3p3LtNcXWzmX+WVoQ== -----END CERTIFICATE-----Generated at Mon Oct 20 19:21:02 2025 by rpki-client