$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/lV8GgcR7O83g2cAegfliD7WU6ME.roa File: lV8GgcR7O83g2cAegfliD7WU6ME.roa (raw, json) Hash identifier: 5+Ny8kjTfkevzRlJ6fiF3+RDWcqcwJiVV1myrcVULuA= Subject key identifier: 95:5F:06:81:C4:7B:3B:CD:E0:D9:C0:1E:81:F9:62:0F:B5:94:E8:C1 Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708 Certificate serial: 21EB Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/lV8GgcR7O83g2cAegfliD7WU6ME.roa Signing time: Sat 13 Sep 2025 03:09:07 +0000 ROA not before: Sat 13 Sep 2025 03:09:07 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 138421 IP address blocks: 118.145.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 03:36:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8683 (0x21eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708 Validity Not Before: Sep 13 03:09:07 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=955F0681C47B3BCDE0D9C01E81F9620FB594E8C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1a:41:f4:28:e6:b1:f3:88:84:f9:80:64:33: 57:25:d1:1a:a6:7b:27:b7:68:96:f4:05:a0:c1:e0: 0d:5f:b0:39:1a:c8:32:88:3e:b3:89:63:9d:bc:7e: 09:a3:6d:52:3e:d2:0c:5a:dc:68:fd:a9:b7:a6:85: 7f:a6:3a:1d:be:36:65:d1:38:1a:39:b2:5a:d7:8a: 4c:1d:4f:3c:b8:13:b8:2c:c8:2b:40:2f:ea:e7:66: 62:32:eb:87:25:8c:91:79:ad:18:e2:0d:3f:ac:ed: 2f:70:35:c6:44:0c:be:48:7f:91:55:b4:79:ec:fc: 55:90:3a:a9:d2:80:99:d7:06:70:d7:96:c2:6c:b6: 95:19:04:a6:2d:c0:87:cf:5d:a4:51:ce:6d:b9:bd: 09:45:2b:dd:f7:69:cf:91:a7:46:e6:4d:8d:a4:20: ed:5c:c9:91:fa:b0:79:9e:8e:91:9f:ab:a5:8d:ac: 18:68:82:1f:b4:a9:64:0a:0f:f0:10:0e:5f:43:68: 56:85:1c:d9:48:e4:1a:7d:79:ca:e7:fd:19:17:3a: 63:0e:e6:eb:de:9e:7f:4c:6c:ef:84:f8:27:9d:75: 5e:40:4d:42:41:33:4c:15:ac:c0:2d:1b:06:c7:b4: 9b:30:53:6f:63:d2:a4:db:f1:96:86:d1:88:f2:16: bf:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:5F:06:81:C4:7B:3B:CD:E0:D9:C0:1E:81:F9:62:0F:B5:94:E8:C1 X509v3 Authority Key Identifier: keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/lV8GgcR7O83g2cAegfliD7WU6ME.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.145.32.0/19 Signature Algorithm: sha256WithRSAEncryption 7a:fa:63:4f:04:4f:ad:75:9c:d7:1f:ec:9d:cc:68:34:ad:2e: 93:da:4a:8e:d5:40:5e:f4:80:7c:43:b3:01:48:d5:1d:38:ad: 65:8e:9a:6e:c9:4d:27:e7:99:d7:57:ba:7a:e0:e1:9c:b7:cb: d3:0e:db:4e:4d:d2:3f:aa:0b:a7:68:14:ec:aa:cf:87:84:e8: 70:ae:9b:ba:b0:83:5a:44:29:48:4b:51:7d:ce:89:51:c6:5f: 57:57:3a:6a:9d:d3:ff:4d:89:b0:fc:ab:b3:87:3d:bb:65:f9: bc:25:d8:b9:e4:da:9e:9f:48:9e:67:1f:64:1d:c7:a6:a2:eb: 96:d6:f7:f6:b7:2c:00:a2:3e:0c:57:07:fe:57:63:80:cc:c4: b9:96:35:b4:ed:cb:ba:94:03:ab:19:e8:4b:57:e6:e8:7e:a4: da:57:2b:c1:58:d8:9c:d3:da:7e:98:99:fb:5b:65:4c:ec:8d: 7c:89:8a:b6:c0:91:64:05:91:1a:44:ea:0b:04:5c:3c:9c:c2: ed:c7:b7:cb:f9:72:66:e5:ee:a3:99:25:2c:09:4b:90:e3:b2: fe:96:b5:8b:31:92:43:cc:33:ef:54:de:39:64:e2:77:b1:a8: 38:39:ce:72:a9:5a:06:db:07:b2:96:91:6c:b3:ca:c7:62:92: 73:a1:99:45 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIeswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4 QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTA5MTMw MzA5MDdaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDk1NUYwNjgxQzQ3QjNC Q0RFMEQ5QzAxRTgxRjk2MjBGQjU5NEU4QzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4GkH0KOax84iE+YBkM1cl0Rqmeye3aJb0BaDB4A1fsDkayDKI PrOJY528fgmjbVI+0gxa3Gj9qbemhX+mOh2+NmXROBo5slrXikwdTzy4E7gsyCtA L+rnZmIy64cljJF5rRjiDT+s7S9wNcZEDL5If5FVtHns/FWQOqnSgJnXBnDXlsJs tpUZBKYtwIfPXaRRzm25vQlFK933ac+Rp0bmTY2kIO1cyZH6sHmejpGfq6WNrBho gh+0qWQKD/AQDl9DaFaFHNlI5Bp9ecrn/RkXOmMO5uvenn9MbO+E+CeddV5ATUJB M0wVrMAtGwbHtJswU29j0qTb8ZaG0YjyFr8bAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUlV8GgcR7O83g2cAegfliD7WU6MEwHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvbFY4R2djUjdPODNn MmNBZWdmbGlEN1dVNk1FLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBXaRIDANBgkqhkiG9w0BAQsFAAOCAQEAevpjTwRPrXWc1x/sncxoNK0uk9pK jtVAXvSAfEOzAUjVHTitZY6abslNJ+eZ11e6euDhnLfL0w7bTk3SP6oLp2gU7KrP h4TocK6burCDWkQpSEtRfc6JUcZfV1c6ap3T/02JsPyrs4c9u2X5vCXYueTanp9I nmcfZB3HpqLrltb39rcsAKI+DFcH/ldjgMzEuZY1tO3LupQDqxnoS1fm6H6k2lcr wVjYnNPafpiZ+1tlTOyNfImKtsCRZAWRGkTqCwRcPJzC7ce3y/lyZuXuo5klLAlL kOOy/pa1izGSQ8wz71TeOWTid7GoODnOcqlaBtsHspaRbLPKx2KSc6GZRQ== -----END CERTIFICATE-----Generated at Tue Oct 21 01:15:44 2025 by rpki-client