$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3040/Pwy1qv5Hyp9NMw0PkzGVfHpKdJ8.roa File: Pwy1qv5Hyp9NMw0PkzGVfHpKdJ8.roa (raw, json) Hash identifier: xM1DIrY9P8e/ezA5NWX3jT3a1pJy2G7Ar1YgB8SHflA= Subject key identifier: 3F:0C:B5:AA:FE:47:CA:9F:4D:33:0D:0F:93:31:95:7C:7A:4A:74:9F Certificate issuer: /CN=03F075D9C6F18DC09BDA62B7087EA80DC5B711C5 Certificate serial: 2411 Authority key identifier: 03:F0:75:D9:C6:F1:8D:C0:9B:DA:62:B7:08:7E:A8:0D:C5:B7:11:C5 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A_B12cbxjcCb2mK3CH6oDcW3EcU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/Pwy1qv5Hyp9NMw0PkzGVfHpKdJ8.roa Signing time: Sat 13 Sep 2025 03:08:45 +0000 ROA not before: Sat 13 Sep 2025 03:08:45 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 49544 IP address blocks: 2406:d140::/32 maxlen: 48 2406:d140:8000::/34 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/A_B12cbxjcCb2mK3CH6oDcW3EcU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/A_B12cbxjcCb2mK3CH6oDcW3EcU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A_B12cbxjcCb2mK3CH6oDcW3EcU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 04:07:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9233 (0x2411) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03F075D9C6F18DC09BDA62B7087EA80DC5B711C5 Validity Not Before: Sep 13 03:08:45 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=3F0CB5AAFE47CA9F4D330D0F9331957C7A4A749F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ea:17:dd:ef:32:b7:49:5f:ac:47:01:1f:89: 27:ea:0b:3e:45:7c:82:7c:5b:31:cc:98:2a:fb:ae: 7f:25:1e:77:17:c0:bf:78:bc:8e:1f:40:6d:49:77: 51:c9:50:78:1f:de:0c:cf:f5:ed:4e:98:97:ce:1b: ad:54:dc:08:49:fa:8b:67:41:db:d2:96:2a:69:9a: 86:fa:4a:47:00:2a:fd:85:5a:71:a0:89:83:5e:e2: 5c:62:40:ea:06:8a:40:9e:2f:c4:da:2f:c4:d5:99: c0:44:2a:de:7b:82:97:e4:98:1e:7c:cf:00:26:3d: 42:84:be:64:77:a1:27:1c:ea:9b:bf:85:3d:bc:4e: 11:3b:51:38:fa:4e:b4:da:5b:dd:a3:05:34:ef:c6: e9:32:b7:b8:d4:34:a0:9a:d9:54:7f:c2:a7:bd:ae: 3c:d5:b7:b2:50:d8:c0:91:20:0e:dd:05:3f:4c:e3: 0a:c5:da:aa:a5:b8:91:4e:4c:ad:1d:b1:91:d3:f4: 53:b0:d0:ce:9b:d0:89:7b:be:b0:6f:bc:69:21:32: fa:8a:40:4b:6a:d6:11:62:75:f5:11:bb:65:9f:d0: 03:a6:6d:45:d0:6e:e2:0d:cb:e5:84:9f:c2:4f:1d: 48:be:0b:f3:f2:7d:1f:1f:cd:29:9c:8c:c9:69:64: 22:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:0C:B5:AA:FE:47:CA:9F:4D:33:0D:0F:93:31:95:7C:7A:4A:74:9F X509v3 Authority Key Identifier: keyid:03:F0:75:D9:C6:F1:8D:C0:9B:DA:62:B7:08:7E:A8:0D:C5:B7:11:C5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/A_B12cbxjcCb2mK3CH6oDcW3EcU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A_B12cbxjcCb2mK3CH6oDcW3EcU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/Pwy1qv5Hyp9NMw0PkzGVfHpKdJ8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2406:d140::/32 Signature Algorithm: sha256WithRSAEncryption 85:7e:aa:8c:37:42:ef:da:3b:fc:02:35:30:99:0d:8c:85:1e: 4f:80:99:b6:1c:f1:c4:68:6a:7f:34:96:96:c3:c2:57:39:03: 83:d5:d6:18:9d:01:01:be:e7:90:36:a7:0b:34:4e:0e:74:ac: 53:93:56:ff:ca:ae:b0:da:27:80:c5:9d:b9:52:51:24:cf:b7: e4:62:f7:b1:41:9c:6f:21:c2:19:d8:20:40:81:30:0c:39:ee: d5:a3:66:2d:df:32:d8:09:27:f2:86:56:fa:11:65:6e:5f:43: 10:f3:fd:3f:27:7d:a2:e8:a6:b5:9d:25:dd:06:00:a4:bf:8e: 60:30:db:75:ec:b5:6d:b3:dd:f3:4f:36:2b:59:97:30:6a:9f: 0c:fc:3c:25:4a:29:67:e0:ed:51:9e:fb:36:57:3a:b7:a7:f3: d1:1d:44:d1:c3:32:0f:f3:4a:c0:e5:b7:27:d7:f1:84:b4:a1: b3:19:d5:28:12:a6:54:64:76:b7:63:b1:e0:d0:c1:5e:ed:87: 6d:cc:67:50:18:eb:59:3f:e4:06:75:5f:85:68:76:ff:63:56: 2a:61:a7:c3:c1:64:df:25:df:88:c6:cd:18:50:73:ea:bd:9c: 52:99:8f:d7:7d:df:c7:88:27:e9:15:59:f2:52:81:9a:ec:42: 4b:95:33:35 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICJBEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDNG MDc1RDlDNkYxOERDMDlCREE2MkI3MDg3RUE4MERDNUI3MTFDNTAeFw0yNTA5MTMw MzA4NDVaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDNGMENCNUFBRkU0N0NB OUY0RDMzMEQwRjkzMzE5NTdDN0E0QTc0OUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDW6hfd7zK3SV+sRwEfiSfqCz5FfIJ8WzHMmCr7rn8lHncXwL94 vI4fQG1Jd1HJUHgf3gzP9e1OmJfOG61U3AhJ+otnQdvSlippmob6SkcAKv2FWnGg iYNe4lxiQOoGikCeL8TaL8TVmcBEKt57gpfkmB58zwAmPUKEvmR3oScc6pu/hT28 ThE7UTj6TrTaW92jBTTvxukyt7jUNKCa2VR/wqe9rjzVt7JQ2MCRIA7dBT9M4wrF 2qqluJFOTK0dsZHT9FOw0M6b0Il7vrBvvGkhMvqKQEtq1hFidfURu2Wf0AOmbUXQ buINy+WEn8JPHUi+C/PyfR8fzSmcjMlpZCIPAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUPwy1qv5Hyp9NMw0PkzGVfHpKdJ8wHwYDVR0jBBgwFoAUA/B12cbxjcCb2mK3 CH6oDcW3EcUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 MC9BX0IxMmNieGpjQ2IybUszQ0g2b0RjVzNFY1UuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0FfQjEyY2J4amNDYjJtSzNDSDZvRGNXM0VjVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDAvUHd5MXF2NUh5cDlO TXcwUGt6R1ZmSHBLZEo4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQG0UAwDQYJKoZIhvcNAQELBQADggEBAIV+qow3Qu/aO/wCNTCZDYyFHk+A mbYc8cRoan80lpbDwlc5A4PV1hidAQG+55A2pws0Tg50rFOTVv/KrrDaJ4DFnblS USTPt+Ri97FBnG8hwhnYIECBMAw57tWjZi3fMtgJJ/KGVvoRZW5fQxDz/T8nfaLo prWdJd0GAKS/jmAw23XstW2z3fNPNitZlzBqnwz8PCVKKWfg7VGe+zZXOren89Ed RNHDMg/zSsDltyfX8YS0obMZ1SgSplRkdrdjseDQwV7th23MZ1AY61k/5AZ1X4Vo dv9jViphp8PBZN8l34jGzRhQc+q9nFKZj9d938eIJ+kVWfJSgZrsQkuVMzU= -----END CERTIFICATE-----Generated at Mon Oct 20 00:04:19 2025 by rpki-client