$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/bdkp1Giuk58G9zvgcZpy81qQE5o.roa File: bdkp1Giuk58G9zvgcZpy81qQE5o.roa (raw, json) Hash identifier: YgqHbA4VDHluNabgKNSs/305ak3OnHJ+6CbPuj1dCBE= Subject key identifier: 6D:D9:29:D4:68:AE:93:9F:06:F7:3B:E0:71:9A:72:F3:5A:90:13:9A Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708 Certificate serial: 21D5 Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/bdkp1Giuk58G9zvgcZpy81qQE5o.roa Signing time: Sat 13 Sep 2025 03:09:02 +0000 ROA not before: Sat 13 Sep 2025 03:09:02 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 4811 IP address blocks: 118.196.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 18:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8661 (0x21d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708 Validity Not Before: Sep 13 03:09:02 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=6DD929D468AE939F06F73BE0719A72F35A90139A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:78:ef:ab:5d:e2:27:76:c5:d2:01:bf:cb:aa: e4:ec:80:64:ae:3d:9b:38:a3:5b:70:79:de:b9:f0: bd:58:1c:b3:e6:e1:43:2d:ac:a1:d1:a6:ed:a7:fd: f9:48:e1:8b:6b:ad:b3:f2:43:ba:d8:25:70:da:18: 75:57:41:fa:ef:f4:4a:19:42:8d:4b:e6:45:6e:4d: e0:6c:a0:d4:5a:1b:ba:c5:67:ad:3b:91:ba:02:9a: 3d:fb:53:14:8f:bf:45:15:f9:7d:99:56:c0:21:e0: 63:4d:ff:97:5f:6c:3d:d6:76:50:01:dd:59:5c:37: aa:03:00:24:28:87:d1:8a:35:5a:59:6d:6f:92:43: fc:a6:59:62:83:15:29:66:a0:63:8b:f8:b4:35:9f: d0:08:52:4e:c4:a0:cf:e8:2a:d9:29:94:a2:7b:91: 32:e8:43:89:cb:ff:fa:c9:85:6e:15:1e:10:27:05: 93:6e:86:0f:f9:72:02:3d:b1:67:25:ef:53:7b:98: ec:fd:ea:1b:ce:d8:75:9a:c5:b1:8b:29:17:6b:4d: 50:72:ea:42:0c:b7:82:55:e1:42:1c:93:58:12:38: 2d:3d:61:c1:10:e9:c2:3e:67:b4:29:ab:e9:12:07: 77:91:98:49:b7:84:21:29:4b:4c:b1:5f:78:24:80: 4c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:D9:29:D4:68:AE:93:9F:06:F7:3B:E0:71:9A:72:F3:5A:90:13:9A X509v3 Authority Key Identifier: keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/bdkp1Giuk58G9zvgcZpy81qQE5o.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.196.0.0/15 Signature Algorithm: sha256WithRSAEncryption 4b:78:f0:7a:98:8a:cb:df:3d:aa:4d:df:cf:9e:21:2b:80:0f: 88:9b:b1:17:a5:81:13:c4:f2:a6:12:79:2c:8d:c8:54:3b:02: 0c:a6:77:df:3a:c2:8a:b6:46:e7:98:7c:ea:24:2a:46:25:9e: a6:7b:9c:e8:80:92:62:a1:a5:93:58:74:14:80:8f:b7:45:6a: 3f:d2:11:e0:5f:22:9b:d0:4b:fd:fa:54:94:7c:7f:c6:c6:bc: e8:e9:fe:d4:20:18:d4:c4:8e:ae:36:40:7a:b9:1e:41:ca:d3: 54:f0:92:88:da:ee:3c:c4:af:07:fe:52:f7:f9:ae:9c:47:df: 13:c7:5d:fe:55:ee:aa:b0:d3:2c:4f:7a:b0:67:84:66:e3:13: c2:b2:52:0b:b3:17:aa:d9:f7:7b:5d:c7:6f:bb:42:75:f6:fe: bb:68:61:4c:2a:70:e1:3a:67:a4:73:76:5d:79:69:45:6d:e2: d4:d2:d2:0f:7c:3f:1d:7e:bb:6c:3d:8b:ea:77:d6:d0:0c:d2: 07:3e:5c:74:3d:44:2e:51:85:03:84:4b:73:e0:82:70:ef:ad: 95:7f:cc:64:a8:9c:34:b5:34:93:65:4c:5b:e1:f6:f7:b4:f3: 12:4b:f7:78:d5:86:ba:c4:de:fd:3c:20:e1:48:58:d5:f7:aa: 37:21:fb:ca -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICIdUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4 QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTA5MTMw MzA5MDJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDZERDkyOUQ0NjhBRTkz OUYwNkY3M0JFMDcxOUE3MkYzNUE5MDEzOUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCieO+rXeIndsXSAb/LquTsgGSuPZs4o1twed658L1YHLPm4UMt rKHRpu2n/flI4YtrrbPyQ7rYJXDaGHVXQfrv9EoZQo1L5kVuTeBsoNRaG7rFZ607 kboCmj37UxSPv0UV+X2ZVsAh4GNN/5dfbD3WdlAB3VlcN6oDACQoh9GKNVpZbW+S Q/ymWWKDFSlmoGOL+LQ1n9AIUk7EoM/oKtkplKJ7kTLoQ4nL//rJhW4VHhAnBZNu hg/5cgI9sWcl71N7mOz96hvO2HWaxbGLKRdrTVBy6kIMt4JV4UIck1gSOC09YcEQ 6cI+Z7Qpq+kSB3eRmEm3hCEpS0yxX3gkgEzbAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUbdkp1Giuk58G9zvgcZpy81qQE5owHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvYmRrcDFHaXVrNThH OXp2Z2NacHk4MXFRRTVvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw BQMDAXbEMA0GCSqGSIb3DQEBCwUAA4IBAQBLePB6mIrL3z2qTd/PniErgA+Im7EX pYETxPKmEnksjchUOwIMpnffOsKKtkbnmHzqJCpGJZ6me5zogJJioaWTWHQUgI+3 RWo/0hHgXyKb0Ev9+lSUfH/Gxrzo6f7UIBjUxI6uNkB6uR5BytNU8JKI2u48xK8H /lL3+a6cR98Tx13+Ve6qsNMsT3qwZ4Rm4xPCslILsxeq2fd7Xcdvu0J19v67aGFM KnDhOmekc3ZdeWlFbeLU0tIPfD8dfrtsPYvqd9bQDNIHPlx0PUQuUYUDhEtz4IJw 762Vf8xkqJw0tTSTZUxb4fb3tPMSS/d41Ya6xN79PCDhSFjV96o3IfvK -----END CERTIFICATE-----Generated at Mon Oct 20 16:22:27 2025 by rpki-client