$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/w9C7U21kNvD66GMvuQRBl01R7f0.roa File: w9C7U21kNvD66GMvuQRBl01R7f0.roa (raw, json) Hash identifier: Oy6D6WhUMhmhlvOvu5+chvVWUa63xpEfyxzH+RyCNOQ= Subject key identifier: C3:D0:BB:53:6D:64:36:F0:FA:E8:63:2F:B9:04:41:97:4D:51:ED:FD Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 1597 Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/w9C7U21kNvD66GMvuQRBl01R7f0.roa Signing time: Sat 13 Sep 2025 03:06:37 +0000 ROA not before: Sat 13 Sep 2025 03:06:37 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 55990 IP address blocks: 113.46.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5527 (0x1597) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Sep 13 03:06:37 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=C3D0BB536D6436F0FAE8632FB90441974D51EDFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:73:ef:90:df:f6:2e:4e:aa:2a:5f:24:64:92: 4c:5b:52:4f:a9:3c:1d:28:18:4f:6a:f6:8e:66:a0: a4:cd:db:a0:03:fb:d1:2c:0e:96:35:7a:6f:23:fc: 33:c1:13:d9:17:72:8c:d4:f7:d2:fe:40:c5:89:3a: ad:4e:9d:b6:25:ac:a7:b0:73:01:96:d2:ca:d3:2c: 14:93:f1:15:b4:b5:2f:e9:56:c3:b4:a2:41:e2:5d: 2a:5d:10:fe:e9:25:ca:54:35:21:d5:b7:3d:ff:cb: 73:6b:68:38:cf:26:a5:7c:33:72:12:8e:c7:32:dd: 44:38:cb:92:cd:cb:20:89:2d:76:17:20:a8:f6:bf: 3f:3e:7c:a9:08:76:c7:23:67:e0:0f:aa:75:74:4e: e1:84:05:fd:0c:0c:8e:ab:7a:89:4f:05:e4:18:f7: 22:0e:e2:a9:b2:19:6b:ab:1b:d5:e6:39:b9:38:60: 67:ad:b5:15:9a:4e:4e:b9:b5:0d:5a:7f:e0:9b:47: b0:0f:e0:91:65:a4:50:37:eb:ee:de:14:df:39:88: dc:c4:f4:7e:17:de:41:e3:3c:07:3b:45:fe:6a:a7: ca:9d:d9:dc:91:1a:10:7c:24:60:e1:08:c5:7c:fe: 07:22:aa:dd:1c:b4:3a:25:9a:6f:2f:28:b6:a2:95: 75:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D0:BB:53:6D:64:36:F0:FA:E8:63:2F:B9:04:41:97:4D:51:ED:FD X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/w9C7U21kNvD66GMvuQRBl01R7f0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.46.248.0/21 Signature Algorithm: sha256WithRSAEncryption 00:0e:97:44:fd:89:26:6d:dc:1a:52:72:06:2a:51:b7:9b:c8: 58:8c:50:36:1e:c4:1c:3a:27:d9:c4:62:1b:eb:5f:1b:72:f1: a4:12:0c:72:e7:f5:c5:85:8c:6f:25:90:44:f1:ae:92:d2:25: 34:70:78:e8:eb:5f:c7:97:8d:0d:25:34:fc:72:2a:63:0a:c1: 5b:b4:2c:a5:27:20:ad:d4:07:06:2e:82:7c:a5:42:a2:0f:62: 56:40:80:fe:40:76:4d:1a:67:08:c8:20:1f:14:dd:35:fb:7a: aa:82:bf:8b:32:a2:b0:e5:f9:53:86:81:26:11:b0:0e:9d:9e: 24:bb:8a:63:ad:90:4a:9d:02:03:ed:78:49:95:72:96:34:f1: da:d4:bc:26:df:f5:ac:44:0e:9c:5c:66:d0:b0:78:09:6f:2e: 55:95:9f:21:76:bc:d8:5f:f6:04:e9:12:0b:c4:b1:6f:69:1f: 2b:dd:aa:70:3d:56:e8:ef:b3:10:47:f0:80:2a:02:e7:5d:63: 93:31:87:df:f9:3b:ea:51:ec:55:b5:3d:ac:3b:ee:32:af:b5: 32:ce:a4:cf:69:1f:c3:1a:7f:e8:8a:9e:47:61:b8:52:4b:c2: 54:ae:af:c0:a0:7c:61:dc:d7:3f:5a:14:d9:a7:4b:12:15:14: be:81:6f:65 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFZcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNTA5MTMw MzA2MzdaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEMzRDBCQjUzNkQ2NDM2 RjBGQUU4NjMyRkI5MDQ0MTk3NEQ1MUVERkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGc++Q3/YuTqoqXyRkkkxbUk+pPB0oGE9q9o5moKTN26AD+9Es DpY1em8j/DPBE9kXcozU99L+QMWJOq1OnbYlrKewcwGW0srTLBST8RW0tS/pVsO0 okHiXSpdEP7pJcpUNSHVtz3/y3NraDjPJqV8M3ISjscy3UQ4y5LNyyCJLXYXIKj2 vz8+fKkIdscjZ+APqnV0TuGEBf0MDI6reolPBeQY9yIO4qmyGWurG9XmObk4YGet tRWaTk65tQ1af+CbR7AP4JFlpFA36+7eFN85iNzE9H4X3kHjPAc7Rf5qp8qd2dyR GhB8JGDhCMV8/gciqt0ctDolmm8vKLailXXPAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUw9C7U21kNvD66GMvuQRBl01R7f0wHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvdzlDN1UyMWtOdkQ2 NkdNdnVRUkJsMDFSN2YwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA3Eu+DANBgkqhkiG9w0BAQsFAAOCAQEAAA6XRP2JJm3cGlJyBipRt5vIWIxQ Nh7EHDon2cRiG+tfG3LxpBIMcuf1xYWMbyWQRPGuktIlNHB46Otfx5eNDSU0/HIq YwrBW7QspScgrdQHBi6CfKVCog9iVkCA/kB2TRpnCMggHxTdNft6qoK/izKisOX5 U4aBJhGwDp2eJLuKY62QSp0CA+14SZVyljTx2tS8Jt/1rEQOnFxm0LB4CW8uVZWf IXa82F/2BOkSC8Sxb2kfK92qcD1W6O+zEEfwgCoC511jkzGH3/k76lHsVbU9rDvu Mq+1Ms6kz2kfwxp/6IqeR2G4UkvCVK6vwKB8YdzXP1oU2adLEhUUvoFvZQ== -----END CERTIFICATE-----Generated at Mon Oct 20 19:21:13 2025 by rpki-client