$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/L8FIC0D50FTzJv7_QFKjRNqd8oM.roa File: L8FIC0D50FTzJv7_QFKjRNqd8oM.roa (raw, json) Hash identifier: XhPqa1fT2/P0W8hhq7rzeHTGziJSJK4gqUUg/f5hKWQ= Subject key identifier: 2F:C1:48:0B:40:F9:D0:54:F3:26:FE:FF:40:52:A3:44:DA:9D:F2:83 Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708 Certificate serial: 21DF Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/L8FIC0D50FTzJv7_QFKjRNqd8oM.roa Signing time: Sat 13 Sep 2025 03:09:04 +0000 ROA not before: Sat 13 Sep 2025 03:09:04 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 4811 IP address blocks: 115.190.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 18:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8671 (0x21df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708 Validity Not Before: Sep 13 03:09:04 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=2FC1480B40F9D054F326FEFF4052A344DA9DF283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:65:d2:47:96:f7:25:5a:b9:2d:52:b4:e2:2e: db:94:61:1a:05:45:bd:55:1a:64:05:fa:cd:61:56: 9a:de:35:55:f7:62:96:6f:22:09:fa:bd:e9:f7:bf: d6:61:70:a0:c8:ed:90:be:23:75:89:16:99:4e:22: ec:84:de:55:11:4e:bc:e7:89:bf:54:aa:5e:2a:9d: fd:4c:ab:ae:1b:a8:b6:d8:ea:62:99:bf:3c:4c:03: d0:21:5d:54:ad:7a:7e:90:db:3e:13:94:99:19:2e: aa:e5:78:76:d1:80:fe:27:01:83:f4:74:39:5d:b4: 60:5c:a0:1e:4a:32:0c:3e:fc:38:79:ad:5b:d3:76: a4:32:88:c5:8b:25:d1:c0:f3:4b:8c:75:56:17:6d: d6:82:23:4d:66:9f:59:a0:61:11:0a:24:ee:39:b6: b9:33:25:58:8b:d8:1b:be:c0:cb:a7:1e:a5:98:fd: f6:f9:3b:51:89:08:39:82:2b:7d:c5:19:7f:af:21: 63:a8:bb:a9:0a:4c:0b:7a:ff:89:17:9d:65:61:c4: b7:72:6e:4d:28:df:07:84:68:87:2c:d5:40:00:5a: ae:02:3d:01:c0:1e:65:72:26:ba:a9:c1:be:2a:ec: 29:66:d2:28:14:0b:eb:a2:67:cb:f9:44:3c:d2:25: 23:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:C1:48:0B:40:F9:D0:54:F3:26:FE:FF:40:52:A3:44:DA:9D:F2:83 X509v3 Authority Key Identifier: keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/L8FIC0D50FTzJv7_QFKjRNqd8oM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 115.190.0.0/15 Signature Algorithm: sha256WithRSAEncryption 06:27:3d:3b:51:00:9f:fd:fa:c6:d5:1d:1e:55:47:8c:ee:46: 2c:fa:b2:5e:2f:55:79:8f:32:44:e3:b4:2a:e5:05:6a:bc:73: 02:fd:33:40:c6:66:dd:31:3a:bf:83:03:44:83:70:ed:a7:fb: a5:3c:d5:78:72:2f:2b:55:87:c4:52:42:2a:2c:94:35:4c:bc: 66:f9:45:e7:53:23:04:67:c5:d4:55:a5:4c:24:29:db:b1:c4: 57:d5:ae:f9:ac:92:36:1f:35:69:25:61:53:d7:98:f2:3c:3d: 4f:05:ea:9e:6b:5d:e4:71:62:83:b6:1b:3c:2f:d7:7c:8a:cb: b4:69:8c:7b:2c:a3:3e:50:06:28:4d:2f:36:18:4a:19:87:0f: 9f:bc:91:dd:ec:00:ae:82:af:5a:a0:0a:db:0a:17:db:b1:c2: e3:b9:f8:c0:0b:54:82:36:19:23:ef:d1:64:a1:99:c1:a6:da: b2:a9:33:f9:cb:9f:10:f8:f1:ec:79:ff:3d:16:04:a1:12:6c: 1e:6f:ea:75:a9:ff:b1:54:f3:cd:1f:6e:c3:5f:00:5d:89:2a: 25:84:8d:65:5c:e6:d6:0c:b4:d3:24:e4:ee:7a:ad:2e:de:aa: ec:9f:0c:0f:59:e5:ed:5b:79:d0:c5:e2:63:02:0f:8f:ef:4f: 5a:34:3f:b7 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICId8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4 QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTA5MTMw MzA5MDRaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDJGQzE0ODBCNDBGOUQw NTRGMzI2RkVGRjQwNTJBMzQ0REE5REYyODMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTZdJHlvclWrktUrTiLtuUYRoFRb1VGmQF+s1hVpreNVX3YpZv Ign6ven3v9ZhcKDI7ZC+I3WJFplOIuyE3lURTrznib9Uql4qnf1Mq64bqLbY6mKZ vzxMA9AhXVSten6Q2z4TlJkZLqrleHbRgP4nAYP0dDldtGBcoB5KMgw+/Dh5rVvT dqQyiMWLJdHA80uMdVYXbdaCI01mn1mgYREKJO45trkzJViL2Bu+wMunHqWY/fb5 O1GJCDmCK33FGX+vIWOou6kKTAt6/4kXnWVhxLdybk0o3weEaIcs1UAAWq4CPQHA HmVyJrqpwb4q7Clm0igUC+uiZ8v5RDzSJSN7AgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUL8FIC0D50FTzJv7/QFKjRNqd8oMwHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvTDhGSUMwRDUwRlR6 SnY3X1FGS2pSTnFkOG9NLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw BQMDAXO+MA0GCSqGSIb3DQEBCwUAA4IBAQAGJz07UQCf/frG1R0eVUeM7kYs+rJe L1V5jzJE47Qq5QVqvHMC/TNAxmbdMTq/gwNEg3Dtp/ulPNV4ci8rVYfEUkIqLJQ1 TLxm+UXnUyMEZ8XUVaVMJCnbscRX1a75rJI2HzVpJWFT15jyPD1PBeqea13kcWKD ths8L9d8isu0aYx7LKM+UAYoTS82GEoZhw+fvJHd7ACugq9aoArbChfbscLjufjA C1SCNhkj79FkoZnBptqyqTP5y58Q+PHsef89FgShEmweb+p1qf+xVPPNH27DXwBd iSolhI1lXObWDLTTJOTueq0u3qrsnwwPWeXtW3nQxeJjAg+P709aND+3 -----END CERTIFICATE-----Generated at Mon Oct 20 16:22:33 2025 by rpki-client