$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/unECYORprGtkFNHjIqFP1D8mFGI.roa File: unECYORprGtkFNHjIqFP1D8mFGI.roa (raw, json) Hash identifier: WpTFyuLSYvX7DRF/XPeyaRA1m5Lwotn263mTwV5KSXQ= Subject key identifier: BA:71:02:60:E4:69:AC:6B:64:14:D1:E3:22:A1:4F:D4:3F:26:14:62 Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708 Certificate serial: 21DB Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/unECYORprGtkFNHjIqFP1D8mFGI.roa Signing time: Sat 13 Sep 2025 03:09:02 +0000 ROA not before: Sat 13 Sep 2025 03:09:02 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 4811 IP address blocks: 118.145.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 18:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8667 (0x21db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708 Validity Not Before: Sep 13 03:09:02 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=BA710260E469AC6B6414D1E322A14FD43F261462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c9:24:fd:6f:ed:54:65:2b:13:35:18:1d:04: 36:ce:5d:f6:69:74:f2:8e:45:eb:dc:a2:d9:3c:76: 75:6f:a7:1a:66:e0:83:3c:4c:b1:fe:0e:8a:a9:21: d1:f8:3b:66:85:10:75:5a:2c:89:7a:40:63:98:fa: b4:59:0d:5d:ba:22:45:b8:50:9e:31:74:39:69:11: ca:c5:16:9c:ca:be:ad:0a:43:22:2f:e7:26:07:d1: 27:49:29:23:98:17:af:93:4d:7e:e2:e1:e4:70:55: 99:41:00:90:f3:50:0e:67:ab:cd:6b:a2:f6:14:8f: 1f:c9:2d:6e:2a:6a:ac:60:48:17:3d:7c:78:c5:88: ce:94:30:d0:7a:53:3f:2a:3a:51:5c:27:2e:10:88: bc:47:df:26:6b:b2:9b:d7:74:44:b5:8b:dd:0f:2a: ce:1a:ff:58:dd:eb:43:bf:a1:bf:8a:4e:58:96:a2: ad:34:b3:5c:a1:6e:7c:b3:af:46:7f:aa:67:fd:13: 43:07:cb:f0:42:36:72:0c:e1:60:8f:47:31:61:fc: 6e:d5:1e:e8:5d:50:7f:d9:80:6c:52:21:02:ce:0d: 9b:84:2a:55:bc:8d:b3:f7:1f:f0:0c:24:eb:92:e5: 7f:77:25:bf:7e:b9:14:64:1a:6b:81:6f:c0:65:c1: c0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:71:02:60:E4:69:AC:6B:64:14:D1:E3:22:A1:4F:D4:3F:26:14:62 X509v3 Authority Key Identifier: keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/unECYORprGtkFNHjIqFP1D8mFGI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.145.32.0/19 Signature Algorithm: sha256WithRSAEncryption 89:c2:5c:c3:49:6f:f0:74:27:68:40:0a:eb:15:33:f2:e7:ae: f0:5f:85:8e:57:48:a9:0c:f2:86:51:58:34:97:97:27:a7:7d: e5:8b:95:b0:6e:73:3c:af:f6:20:5a:e5:09:9f:ff:9c:f9:e3: 8b:23:c1:31:42:00:fd:b9:06:79:c1:49:bc:4c:35:be:ce:18: 6c:57:a5:15:c1:5b:66:11:50:d2:cb:7f:cb:69:48:16:d1:54: 38:4b:b4:d2:dc:73:7a:bd:25:f1:6f:f1:a6:69:47:45:5b:df: 59:93:3e:97:06:03:bb:ed:7e:32:2a:aa:3b:94:d7:93:ea:51: 36:d6:8a:4e:1f:13:4f:52:87:89:93:a8:be:e1:ff:35:b9:1c: ce:be:6e:3f:19:1c:25:4f:14:ed:2f:63:58:01:c5:e2:be:73: 67:4e:1b:1d:15:eb:92:c5:83:17:6b:2f:2f:ff:83:d4:ab:69: 9c:23:a8:4b:76:ee:99:14:72:eb:2a:3e:af:24:d7:de:57:12: b6:fc:78:66:51:2f:5e:24:5d:f2:ab:50:11:91:6f:be:18:bd: fb:6b:b9:cc:b5:ec:f3:10:a8:da:27:10:ba:df:b8:c6:ff:cc: 3b:ea:9c:8e:ea:19:8a:8a:0d:a0:34:13:d8:4e:8e:cc:c3:0f: e0:ea:e0:07 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIdswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4 QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTA5MTMw MzA5MDJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEJBNzEwMjYwRTQ2OUFD NkI2NDE0RDFFMzIyQTE0RkQ0M0YyNjE0NjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuyST9b+1UZSsTNRgdBDbOXfZpdPKORevcotk8dnVvpxpm4IM8 TLH+DoqpIdH4O2aFEHVaLIl6QGOY+rRZDV26IkW4UJ4xdDlpEcrFFpzKvq0KQyIv 5yYH0SdJKSOYF6+TTX7i4eRwVZlBAJDzUA5nq81rovYUjx/JLW4qaqxgSBc9fHjF iM6UMNB6Uz8qOlFcJy4QiLxH3yZrspvXdES1i90PKs4a/1jd60O/ob+KTliWoq00 s1yhbnyzr0Z/qmf9E0MHy/BCNnIM4WCPRzFh/G7VHuhdUH/ZgGxSIQLODZuEKlW8 jbP3H/AMJOuS5X93Jb9+uRRkGmuBb8BlwcD5AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUunECYORprGtkFNHjIqFP1D8mFGIwHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvdW5FQ1lPUnByR3Rr Rk5IaklxRlAxRDhtRkdJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBXaRIDANBgkqhkiG9w0BAQsFAAOCAQEAicJcw0lv8HQnaEAK6xUz8ueu8F+F jldIqQzyhlFYNJeXJ6d95YuVsG5zPK/2IFrlCZ//nPnjiyPBMUIA/bkGecFJvEw1 vs4YbFelFcFbZhFQ0st/y2lIFtFUOEu00txzer0l8W/xpmlHRVvfWZM+lwYDu+1+ MiqqO5TXk+pRNtaKTh8TT1KHiZOovuH/Nbkczr5uPxkcJU8U7S9jWAHF4r5zZ04b HRXrksWDF2svL/+D1KtpnCOoS3bumRRy6yo+ryTX3lcStvx4ZlEvXiRd8qtQEZFv vhi9+2u5zLXs8xCo2icQut+4xv/MO+qcjuoZiooNoDQT2E6OzMMP4OrgBw== -----END CERTIFICATE-----Generated at Mon Oct 20 16:22:31 2025 by rpki-client