$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3168/9LUQoOv60bFQEBbJ0RZrU_qR9qY.roa File: 9LUQoOv60bFQEBbJ0RZrU_qR9qY.roa (raw, json) Hash identifier: d7L3XIHDR4TUXtb6XUZbNFGDJkyjahNy6E7vA1H4a6Y= Subject key identifier: F4:B5:10:A0:EB:FA:D1:B1:50:10:16:C9:D1:16:6B:53:FA:91:F6:A6 Certificate issuer: /CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094 Certificate serial: 1650 Authority key identifier: 24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/9LUQoOv60bFQEBbJ0RZrU_qR9qY.roa Signing time: Mon 08 Sep 2025 09:24:02 +0000 ROA not before: Mon 08 Sep 2025 09:24:02 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 13335 IP address blocks: 42.201.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Oct 2025 23:35:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5712 (0x1650) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094 Validity Not Before: Sep 8 09:24:02 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=F4B510A0EBFAD1B1501016C9D1166B53FA91F6A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f3:4f:96:af:43:f2:01:25:32:00:b3:bf:b4: 47:5e:a6:70:43:ce:fb:c0:ed:26:58:b7:ba:6b:28: af:a3:67:12:8a:e3:7a:ce:2c:44:07:1f:85:0d:be: 71:c2:e4:d7:65:e2:21:be:a7:8f:c0:94:99:b6:33: c5:ef:d6:59:3e:d9:8a:da:2f:18:5c:17:58:11:66: e4:8a:db:62:dd:dd:98:56:2d:bf:42:40:53:a2:30: 44:eb:73:03:88:73:6e:18:de:9b:74:da:5f:99:b1: 07:01:c0:3d:e3:af:86:f6:7c:ce:1d:34:96:b1:31: 65:7a:e4:fb:9f:5b:86:c9:4d:ff:c3:4c:4c:f4:a4: fc:8b:ec:8f:5f:3f:53:64:16:f9:9a:a9:0c:11:97: f9:df:dd:4a:9d:23:e6:6d:5a:e8:6e:2b:57:af:d6: ba:f0:16:8a:0a:07:66:ca:a4:d3:cc:12:78:12:7d: 05:e9:22:9f:d3:62:a5:49:e5:d9:b9:6a:1a:2e:10: 39:d0:78:3e:8b:37:ca:37:f1:4f:9b:bc:7c:4a:22: de:f2:0a:e2:99:71:39:77:49:e5:50:98:3f:ab:33: 71:dc:53:5d:ff:b6:3a:c7:45:d2:06:13:45:73:eb: 78:07:63:0c:f4:8c:2a:30:0b:10:dc:54:27:c9:a6: 01:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:B5:10:A0:EB:FA:D1:B1:50:10:16:C9:D1:16:6B:53:FA:91:F6:A6 X509v3 Authority Key Identifier: keyid:24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/9LUQoOv60bFQEBbJ0RZrU_qR9qY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 42.201.8.0/21 Signature Algorithm: sha256WithRSAEncryption 02:fb:70:ff:e4:01:b8:23:a4:2b:89:52:3b:a6:f7:c1:28:36: f6:f2:c7:31:9b:3c:ae:59:9b:e1:48:94:f8:23:8b:96:34:d9: 91:7e:f4:be:45:a9:e6:d1:91:46:36:64:bc:2d:d8:cc:6b:bf: 62:6b:b3:04:02:80:4f:df:40:8e:a1:81:62:21:9f:97:ce:d4: e9:97:d3:e7:d9:24:74:bb:0b:86:a6:62:65:f9:79:71:0b:56: 16:0b:d2:c4:1a:07:ad:6d:14:1c:52:e5:62:af:48:0e:7b:6b: f2:e9:2c:93:51:ac:63:03:57:b8:14:21:7f:ff:bf:2c:d2:91: 1a:48:81:eb:78:af:df:78:db:37:15:e5:c7:b9:44:78:8e:c7: 02:04:b9:8c:60:2a:42:da:45:f7:05:be:46:ae:ca:5a:56:76: 4a:06:f5:24:49:ca:de:25:e5:95:83:b5:20:9a:f6:6f:0b:45: d2:3e:8f:b2:4a:44:41:d0:1f:5f:c9:32:0d:17:fc:79:1f:59: 87:35:77:32:92:19:e8:88:6f:c1:6c:96:c7:4f:fd:59:93:9f: 98:af:6e:d6:c6:33:d6:56:b9:7c:77:d0:52:82:51:eb:d3:89: ff:66:1a:b1:9d:98:86:22:77:bc:c9:2a:fd:33:74:7d:68:52: 58:46:8b:75 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFlAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjQw OTg3RjQwQTYwMzBDREZBMzNERUQxRUVFN0NGNERDN0MzMDA5NDAeFw0yNTA5MDgw OTI0MDJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEY0QjUxMEEwRUJGQUQx QjE1MDEwMTZDOUQxMTY2QjUzRkE5MUY2QTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDN80+Wr0PyASUyALO/tEdepnBDzvvA7SZYt7prKK+jZxKK43rO LEQHH4UNvnHC5Ndl4iG+p4/AlJm2M8Xv1lk+2YraLxhcF1gRZuSK22Ld3ZhWLb9C QFOiMETrcwOIc24Y3pt02l+ZsQcBwD3jr4b2fM4dNJaxMWV65PufW4bJTf/DTEz0 pPyL7I9fP1NkFvmaqQwRl/nf3UqdI+ZtWuhuK1ev1rrwFooKB2bKpNPMEngSfQXp Ip/TYqVJ5dm5ahouEDnQeD6LN8o38U+bvHxKIt7yCuKZcTl3SeVQmD+rM3HcU13/ tjrHRdIGE0Vz63gHYwz0jCowCxDcVCfJpgFbAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU9LUQoOv60bFQEBbJ0RZrU/qR9qYwHwYDVR0jBBgwFoAUJAmH9ApgMM36M97R 7ufPTcfDAJQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE2 OC9KQW1IOUFwZ01NMzZNOTdSN3VmUFRjZkRBSlEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0pBbUg5QXBnTU0zNk05N1I3dWZQVGNmREFKUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNjgvOUxVUW9PdjYwYkZR RUJiSjBSWnJVX3FSOXFZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAyrJCDANBgkqhkiG9w0BAQsFAAOCAQEAAvtw/+QBuCOkK4lSO6b3wSg29vLH MZs8rlmb4UiU+COLljTZkX70vkWp5tGRRjZkvC3YzGu/YmuzBAKAT99AjqGBYiGf l87U6ZfT59kkdLsLhqZiZfl5cQtWFgvSxBoHrW0UHFLlYq9IDntr8uksk1GsYwNX uBQhf/+/LNKRGkiB63iv33jbNxXlx7lEeI7HAgS5jGAqQtpF9wW+Rq7KWlZ2Sgb1 JEnK3iXllYO1IJr2bwtF0j6PskpEQdAfX8kyDRf8eR9ZhzV3MpIZ6IhvwWyWx0/9 WZOfmK9u1sYz1la5fHfQUoJR69OJ/2YasZ2YhiJ3vMkq/TN0fWhSWEaLdQ== -----END CERTIFICATE-----Generated at Sun Oct 19 21:08:56 2025 by rpki-client