$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/vVR3IlQeeu2c7CmzlfefqhLOHtE.roa File: vVR3IlQeeu2c7CmzlfefqhLOHtE.roa (raw, json) Hash identifier: kaaoAT5vhU9u9lGqGojABvuvZCzpJaQ9ynxiXdhdexg= Subject key identifier: BD:54:77:22:54:1E:7A:ED:9C:EC:29:B3:95:F7:9F:AA:12:CE:1E:D1 Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 15A2 Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/vVR3IlQeeu2c7CmzlfefqhLOHtE.roa Signing time: Sat 13 Sep 2025 03:06:39 +0000 ROA not before: Sat 13 Sep 2025 03:06:39 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 55990 IP address blocks: 113.47.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5538 (0x15a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Sep 13 03:06:39 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=BD547722541E7AED9CEC29B395F79FAA12CE1ED1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fb:0f:b5:26:91:61:d6:9b:1e:8a:06:c0:b4: fc:78:9c:b7:9d:c4:89:d3:7b:4e:33:d9:65:f5:64: 51:8b:86:62:21:a8:9c:4a:c8:b1:4d:c8:27:c0:b0: d7:3c:51:b6:20:80:2d:19:fa:fc:6a:66:a2:13:e2: 74:a7:e4:e9:0a:c1:9e:31:18:40:2a:6f:0e:d5:a6: 78:46:cc:9e:0a:5f:9d:3f:55:f1:13:6d:f8:79:d1: e8:03:0f:c1:72:15:ff:2b:ab:dc:28:28:ec:d4:c4: b2:ba:31:a6:cc:bc:29:ac:db:03:c2:31:31:e3:06: d8:5b:6b:c7:47:d5:bf:fa:5b:47:b7:8c:7a:0c:ba: 38:e8:9a:a9:28:f7:7b:90:be:61:48:ad:8d:ce:68: 76:33:92:43:db:66:20:d7:69:58:f1:06:37:47:a5: cc:70:93:3f:97:f1:7d:96:11:6e:72:fc:df:88:d8: b8:a3:e7:5e:d9:20:46:d8:b6:23:df:f2:80:3a:e1: fc:02:f5:b9:74:4e:a3:94:8d:bd:6d:69:cb:17:f0: 6a:79:27:6d:ce:7b:9b:ce:6f:60:44:a3:1f:7b:35: 7f:67:d2:22:cf:6e:d8:02:46:19:83:6e:b0:34:77: 27:46:b7:ff:92:45:f2:c3:b5:c0:89:45:1a:b7:ed: 07:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:54:77:22:54:1E:7A:ED:9C:EC:29:B3:95:F7:9F:AA:12:CE:1E:D1 X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/vVR3IlQeeu2c7CmzlfefqhLOHtE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.47.242.0/23 Signature Algorithm: sha256WithRSAEncryption 9e:69:d0:64:90:97:5b:bb:f0:54:29:d3:42:2e:d9:e6:ce:fe: 27:2c:10:d5:2c:8b:7f:5a:3a:1d:e5:62:46:65:a1:b7:98:59: 7f:f5:72:35:1f:1d:a1:fc:f2:b9:e8:3e:25:4f:86:0c:44:ce: d5:b1:f3:96:63:c4:70:bb:a2:82:d2:f2:db:87:3a:1b:ea:77: 71:ff:22:6a:5e:6f:b6:1d:8c:57:0d:56:ae:df:99:9d:bb:48: a4:18:b8:dd:3a:f5:40:d0:ea:c0:bc:06:fd:b0:bc:b1:a7:27: 52:bb:22:6a:96:d4:1a:88:3c:d4:15:a1:19:20:b7:5f:98:c8: f5:e9:23:84:b6:53:27:5b:6d:3b:8e:b7:12:63:08:bb:b0:9b: a5:38:07:a8:c6:d5:a7:2f:00:21:af:5a:9f:01:c9:6d:6f:4b: 72:3c:26:93:fb:08:09:93:9b:b5:f5:c8:fc:17:77:b1:18:34: 66:a0:c4:7f:c0:08:7a:84:3d:a0:44:3e:25:9f:31:22:cb:76: 1c:7e:80:6f:50:52:64:d0:d0:dd:c9:fa:0d:df:61:0d:21:7e: 8f:53:a2:23:7d:16:9a:b5:59:bd:f6:a6:d8:74:ec:22:dc:03: d5:fc:d7:0a:5d:ae:25:b1:8c:06:c8:7c:03:71:fd:41:47:c2: f8:c1:c9:89 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFaIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNTA5MTMw MzA2MzlaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEJENTQ3NzIyNTQxRTdB RUQ5Q0VDMjlCMzk1Rjc5RkFBMTJDRTFFRDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDL+w+1JpFh1pseigbAtPx4nLedxInTe04z2WX1ZFGLhmIhqJxK yLFNyCfAsNc8UbYggC0Z+vxqZqIT4nSn5OkKwZ4xGEAqbw7VpnhGzJ4KX50/VfET bfh50egDD8FyFf8rq9woKOzUxLK6MabMvCms2wPCMTHjBthba8dH1b/6W0e3jHoM ujjomqko93uQvmFIrY3OaHYzkkPbZiDXaVjxBjdHpcxwkz+X8X2WEW5y/N+I2Lij 517ZIEbYtiPf8oA64fwC9bl0TqOUjb1tacsX8Gp5J23Oe5vOb2BEox97NX9n0iLP btgCRhmDbrA0dydGt/+SRfLDtcCJRRq37QftAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUvVR3IlQeeu2c7CmzlfefqhLOHtEwHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvdlZSM0lsUWVldTJj N0NtemxmZWZxaExPSHRFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAXEv8jANBgkqhkiG9w0BAQsFAAOCAQEAnmnQZJCXW7vwVCnTQi7Z5s7+JywQ 1SyLf1o6HeViRmWht5hZf/VyNR8dofzyueg+JU+GDETO1bHzlmPEcLuigtLy24c6 G+p3cf8ial5vth2MVw1Wrt+ZnbtIpBi43Tr1QNDqwLwG/bC8sacnUrsiapbUGog8 1BWhGSC3X5jI9ekjhLZTJ1ttO463EmMIu7CbpTgHqMbVpy8AIa9anwHJbW9Lcjwm k/sICZObtfXI/Bd3sRg0ZqDEf8AIeoQ9oEQ+JZ8xIst2HH6Ab1BSZNDQ3cn6Dd9h DSF+j1OiI30WmrVZvfam2HTsItwD1fzXCl2uJbGMBsh8A3H9QUfC+MHJiQ== -----END CERTIFICATE-----Generated at Mon Oct 20 19:21:05 2025 by rpki-client