$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/df0pLmZ7mhxLzZLYzEfUCUs_FQ0.roa File: df0pLmZ7mhxLzZLYzEfUCUs_FQ0.roa (raw, json) Hash identifier: ofJX+uTbB9SRnzmr1dUgEW+yUuWxDAYktAQChsfNRhM= Subject key identifier: 75:FD:29:2E:66:7B:9A:1C:4B:CD:92:D8:CC:47:D4:09:4B:3F:15:0D Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708 Certificate serial: 21C6 Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/df0pLmZ7mhxLzZLYzEfUCUs_FQ0.roa Signing time: Sat 13 Sep 2025 03:08:58 +0000 ROA not before: Sat 13 Sep 2025 03:08:58 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 137718 IP address blocks: 118.145.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 04:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8646 (0x21c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708 Validity Not Before: Sep 13 03:08:58 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=75FD292E667B9A1C4BCD92D8CC47D4094B3F150D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9a:e0:d0:91:4a:f9:ec:eb:dd:79:64:57:33: 7b:04:e7:70:45:5e:b5:ef:ea:bf:6d:69:70:2c:36: 8a:44:3e:34:49:06:a3:e5:b6:8d:66:35:d2:f0:1f: 93:ef:17:ab:35:7c:b4:56:86:d5:72:d7:36:37:c7: a6:b1:ef:c5:19:0b:c0:69:94:18:c5:e1:d6:a1:e9: 19:f1:17:30:c0:bb:61:f7:71:7a:52:f2:35:c6:51: 07:cb:be:2b:b1:96:26:9e:8c:c1:b1:99:d2:d4:9d: 34:4c:a2:86:6e:47:e9:08:1c:0b:ed:b1:e9:55:3f: 4e:4c:2a:08:88:b1:0a:92:31:16:d6:d4:57:34:26: 51:f9:5d:e9:c6:c6:18:14:6a:a3:e8:60:bd:4d:b0: 14:30:fa:63:1f:9d:00:bf:2e:29:2b:b2:6a:67:15: 18:93:69:1d:64:19:34:9b:fb:ca:9e:db:0e:b8:07: 26:c1:89:41:72:14:1e:5e:cc:b6:09:c2:49:28:b1: fa:3e:1e:45:5c:86:93:74:22:a2:9d:07:19:6f:d6: 88:fb:91:24:25:75:e3:83:eb:39:34:3d:e6:76:1d: 20:cb:9b:15:68:fe:73:be:53:c7:a1:f4:77:72:0b: ac:37:85:e7:24:b6:a5:29:4a:9c:c3:6f:3f:d3:e3: f8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:FD:29:2E:66:7B:9A:1C:4B:CD:92:D8:CC:47:D4:09:4B:3F:15:0D X509v3 Authority Key Identifier: keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/df0pLmZ7mhxLzZLYzEfUCUs_FQ0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.145.32.0/19 Signature Algorithm: sha256WithRSAEncryption 53:df:bf:a2:3c:fe:f7:8b:95:6c:83:69:28:0c:2f:d5:e3:52: ba:13:17:ea:9b:0f:7c:a9:61:f5:44:12:f0:e7:54:ca:df:d5: d3:8f:a4:9b:41:2d:35:5b:6b:6d:4c:6a:8b:c3:48:4c:ea:0c: 68:ee:f8:3e:f5:fc:be:ed:09:0a:d6:a3:16:15:ea:cd:f1:5c: 46:b6:c9:86:a3:e5:1f:52:6f:89:1f:d6:09:a4:6c:d1:e3:60: 2e:7e:ce:43:79:8e:96:58:58:5d:02:e7:da:64:16:ea:28:a7: a6:c5:08:df:bb:c3:b9:5d:01:25:bf:5d:a9:54:7c:c2:61:a1: d4:6a:2d:4c:13:d1:43:6d:a6:2a:51:c6:78:19:55:10:81:fc: 70:8d:ad:ac:af:bd:92:e4:31:8f:b1:bb:b3:2b:05:e1:fe:b2: 18:6c:69:30:b2:be:63:2b:35:6e:69:08:cb:0a:38:21:45:3c: de:d7:79:c0:7a:09:c8:81:d0:33:26:ed:8f:c7:b5:91:25:c6: fe:00:45:c6:3e:32:88:b4:19:e5:6a:4d:5e:1c:8e:c4:72:1d: ca:eb:1d:f0:ed:59:27:83:74:a0:2a:73:26:da:c3:f9:58:a5: 5f:43:80:85:cd:93:59:96:80:88:21:00:e3:37:05:7b:17:68: d1:8f:a2:c7 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIcYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4 QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTA5MTMw MzA4NThaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDc1RkQyOTJFNjY3QjlB MUM0QkNEOTJEOENDNDdENDA5NEIzRjE1MEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvmuDQkUr57OvdeWRXM3sE53BFXrXv6r9taXAsNopEPjRJBqPl to1mNdLwH5PvF6s1fLRWhtVy1zY3x6ax78UZC8BplBjF4dah6RnxFzDAu2H3cXpS 8jXGUQfLviuxliaejMGxmdLUnTRMooZuR+kIHAvtselVP05MKgiIsQqSMRbW1Fc0 JlH5XenGxhgUaqPoYL1NsBQw+mMfnQC/LikrsmpnFRiTaR1kGTSb+8qe2w64BybB iUFyFB5ezLYJwkkosfo+HkVchpN0IqKdBxlv1oj7kSQldeOD6zk0PeZ2HSDLmxVo /nO+U8eh9HdyC6w3hecktqUpSpzDbz/T4/jDAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUdf0pLmZ7mhxLzZLYzEfUCUs/FQ0wHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvZGYwcExtWjdtaHhM elpMWXpFZlVDVXNfRlEwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBXaRIDANBgkqhkiG9w0BAQsFAAOCAQEAU9+/ojz+94uVbINpKAwv1eNSuhMX 6psPfKlh9UQS8OdUyt/V04+km0EtNVtrbUxqi8NITOoMaO74PvX8vu0JCtajFhXq zfFcRrbJhqPlH1JviR/WCaRs0eNgLn7OQ3mOllhYXQLn2mQW6iinpsUI37vDuV0B Jb9dqVR8wmGh1GotTBPRQ22mKlHGeBlVEIH8cI2trK+9kuQxj7G7sysF4f6yGGxp MLK+Yys1bmkIywo4IUU83td5wHoJyIHQMybtj8e1kSXG/gBFxj4yiLQZ5WpNXhyO xHIdyusd8O1ZJ4N0oCpzJtrD+VilX0OAhc2TWZaAiCEA4zcFexdo0Y+ixw== -----END CERTIFICATE-----Generated at Tue Oct 21 04:00:01 2025 by rpki-client