$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/vke24Sa_hmJAaqcGruox8ln0XMU.roa File: vke24Sa_hmJAaqcGruox8ln0XMU.roa (raw, json) Hash identifier: cBGkhs0zwyeEd5260Ee6wP72TX7UFmEUYe82HT+zbe4= Subject key identifier: BE:47:B6:E1:26:BF:86:62:40:6A:A7:06:AE:EA:31:F2:59:F4:5C:C5 Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 15A1 Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/vke24Sa_hmJAaqcGruox8ln0XMU.roa Signing time: Sat 13 Sep 2025 03:06:39 +0000 ROA not before: Sat 13 Sep 2025 03:06:39 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 55990 IP address blocks: 113.45.114.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5537 (0x15a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Sep 13 03:06:39 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=BE47B6E126BF8662406AA706AEEA31F259F45CC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e6:b3:bc:5a:5c:3c:7d:11:8b:94:28:1d:74: 1f:1e:7a:8a:66:a1:cb:f3:ad:2d:6f:8d:b3:58:2a: 6e:7f:5f:8e:99:09:81:50:5b:4a:6b:a3:82:58:1a: ab:a8:e3:b9:01:37:1a:1f:1e:aa:e1:22:88:e7:7a: 1e:86:09:78:6a:18:2d:60:02:0e:f6:01:0c:d3:bd: 3c:e4:2d:b6:53:07:dc:6b:63:1c:a9:e6:b9:07:85: d7:97:fd:b5:9b:af:bf:db:a2:ea:e2:17:77:7f:c5: 56:29:fe:27:81:fe:df:e9:d7:f3:d5:d8:23:a8:c9: 98:80:d8:bd:3e:8d:c4:11:1f:48:ba:b1:06:3f:27: 4a:0f:49:d0:2a:45:a2:48:fb:e1:92:b9:99:53:e2: eb:9c:43:fc:47:e7:33:c3:9e:a4:c2:b2:8a:a9:4d: 0f:cd:38:9f:19:38:07:32:a7:a3:bb:38:26:9d:3f: c8:d0:06:be:ec:5e:a7:87:51:36:5e:0b:cd:94:2f: 5a:f2:e8:2e:20:cc:4a:1d:ab:dd:b8:5e:c3:bb:ab: 59:04:c9:7e:20:77:12:c6:8c:7d:a6:99:5a:10:9c: 2b:d3:6c:f6:0d:74:3e:13:66:61:09:7c:7a:3d:fd: 0a:3e:ff:a4:4f:5a:25:61:34:e6:d3:80:65:83:7c: d3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:47:B6:E1:26:BF:86:62:40:6A:A7:06:AE:EA:31:F2:59:F4:5C:C5 X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/vke24Sa_hmJAaqcGruox8ln0XMU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.45.114.0/23 Signature Algorithm: sha256WithRSAEncryption bc:a6:85:5a:a3:0e:7a:40:5b:a7:7f:d0:2d:09:59:0f:ba:b4: 2b:88:a7:4f:f9:d4:cb:03:ba:96:3b:35:30:77:db:99:cd:bd: 32:dc:2f:d2:a1:3c:91:3a:89:a9:83:68:ee:b8:cb:7a:f8:fc: 28:e9:09:2a:da:d0:d4:16:56:f7:8f:ba:9e:c1:72:30:87:a2: a4:63:db:e5:59:d1:d2:64:f0:b7:05:88:9d:30:23:85:f7:bd: 84:c5:17:ca:cc:72:5c:e4:da:0c:ac:0a:70:ce:c6:63:68:2a: 72:40:1c:92:c5:7c:44:e5:51:0a:1c:10:0d:77:6a:93:00:d3: 10:ca:71:0c:d6:a4:88:e8:55:a4:6c:63:6a:c4:6e:53:ea:cb: be:97:81:f4:3e:5a:1b:4f:d7:fb:cc:3f:b5:3d:63:2d:d7:15: 85:b5:12:a6:b0:f8:5f:58:16:51:22:f0:1d:ac:11:be:e7:d6: bb:25:36:9b:47:67:2c:9f:a2:f2:e6:37:ff:36:bc:31:e4:9a: 7d:17:ed:0d:cd:26:63:2b:f4:7d:ff:18:ae:0b:1c:a2:62:51: cd:f5:0b:bf:e5:8b:f0:2e:4a:26:82:3f:ea:5e:c3:b9:06:81: b8:1f:8d:c5:15:9d:ec:75:c4:db:be:b6:11:c5:1a:44:20:af: d2:65:69:f8 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFaEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNTA5MTMw MzA2MzlaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEJFNDdCNkUxMjZCRjg2 NjI0MDZBQTcwNkFFRUEzMUYyNTlGNDVDQzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDU5rO8Wlw8fRGLlCgddB8eeopmocvzrS1vjbNYKm5/X46ZCYFQ W0pro4JYGquo47kBNxofHqrhIojneh6GCXhqGC1gAg72AQzTvTzkLbZTB9xrYxyp 5rkHhdeX/bWbr7/bouriF3d/xVYp/ieB/t/p1/PV2COoyZiA2L0+jcQRH0i6sQY/ J0oPSdAqRaJI++GSuZlT4uucQ/xH5zPDnqTCsoqpTQ/NOJ8ZOAcyp6O7OCadP8jQ Br7sXqeHUTZeC82UL1ry6C4gzEodq924XsO7q1kEyX4gdxLGjH2mmVoQnCvTbPYN dD4TZmEJfHo9/Qo+/6RPWiVhNObTgGWDfNNZAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUvke24Sa/hmJAaqcGruox8ln0XMUwHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvdmtlMjRTYV9obUpB YXFjR3J1b3g4bG4wWE1VLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAXEtcjANBgkqhkiG9w0BAQsFAAOCAQEAvKaFWqMOekBbp3/QLQlZD7q0K4in T/nUywO6ljs1MHfbmc29Mtwv0qE8kTqJqYNo7rjLevj8KOkJKtrQ1BZW94+6nsFy MIeipGPb5VnR0mTwtwWInTAjhfe9hMUXysxyXOTaDKwKcM7GY2gqckAcksV8ROVR ChwQDXdqkwDTEMpxDNakiOhVpGxjasRuU+rLvpeB9D5aG0/X+8w/tT1jLdcVhbUS prD4X1gWUSLwHawRvufWuyU2m0dnLJ+i8uY3/za8MeSafRftDc0mYyv0ff8Yrgsc omJRzfULv+WL8C5KJoI/6l7DuQaBuB+NxRWd7HXE2762EcUaRCCv0mVp+A== -----END CERTIFICATE-----Generated at Mon Oct 20 19:21:01 2025 by rpki-client