$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3168/NUAhOp9rEdbCbwcBqRZ1BqYjAts.roa File: NUAhOp9rEdbCbwcBqRZ1BqYjAts.roa (raw, json) Hash identifier: e+m4e4I9crI0rPD+IWKnxpMY/JydOXyK2JvvXwOuvN8= Subject key identifier: 35:40:21:3A:9F:6B:11:D6:C2:6F:07:01:A9:16:75:06:A6:23:02:DB Certificate issuer: /CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094 Certificate serial: 164E Authority key identifier: 24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/NUAhOp9rEdbCbwcBqRZ1BqYjAts.roa Signing time: Mon 08 Sep 2025 09:24:01 +0000 ROA not before: Mon 08 Sep 2025 09:24:01 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 13335 IP address blocks: 45.250.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Oct 2025 23:35:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5710 (0x164e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094 Validity Not Before: Sep 8 09:24:01 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=3540213A9F6B11D6C26F0701A9167506A62302DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:19:cb:52:f7:92:e0:82:9a:a6:5e:3f:27:a5: 01:51:ab:2e:3c:db:2b:7b:d3:f3:45:55:b0:56:d7: 80:f7:3e:a9:51:b8:5a:b7:d1:aa:6c:9d:e7:90:2b: c8:2b:0e:3c:c2:2d:bd:ef:cb:bf:71:19:72:3f:cd: 0b:01:7f:54:6c:c5:c6:99:bf:68:83:40:19:ee:15: 04:a5:a6:d1:a4:fb:44:77:67:b6:e3:a3:0d:f9:14: 56:08:1c:3d:9f:bb:1a:a6:47:6f:08:7a:53:22:cc: 7f:de:89:49:fc:d4:f4:e3:59:ed:ca:83:62:c3:03: 4a:73:4e:8d:4a:d5:98:a1:a2:d5:ac:3b:75:19:11: 66:bd:e8:74:d0:93:f0:10:c1:2d:80:c0:38:d8:f9: aa:85:0f:c5:eb:1f:9f:82:15:e8:52:c7:38:f8:cb: 7a:d7:57:15:64:51:dc:87:73:6b:ae:f2:e2:98:1b: 0b:04:63:b2:d1:3e:18:94:79:ff:13:7e:8b:52:4a: 72:a0:36:0d:47:a6:f3:ab:3b:6a:34:e9:c7:d0:f8: f5:fd:63:07:e2:bb:e4:8c:7d:21:3c:e8:59:40:20: 07:67:6f:cb:a0:6a:dd:b4:56:ba:d8:30:9b:97:0f: f6:37:35:54:5a:59:e2:9c:4f:c9:20:61:c1:cf:10: 50:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:40:21:3A:9F:6B:11:D6:C2:6F:07:01:A9:16:75:06:A6:23:02:DB X509v3 Authority Key Identifier: keyid:24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/NUAhOp9rEdbCbwcBqRZ1BqYjAts.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.250.152.0/22 Signature Algorithm: sha256WithRSAEncryption b0:64:85:1e:c5:88:c1:92:e2:cd:84:ee:04:76:0a:18:c1:df: 39:1d:58:ef:97:eb:e7:1b:3e:01:59:f2:51:b1:cb:96:db:8f: 1a:3d:86:23:b3:e5:9b:02:75:c5:9a:24:8a:82:aa:b8:8d:1b: 18:d1:c5:cd:d4:f1:49:c9:1f:a7:74:eb:5c:07:4b:69:d6:01: 2d:98:2f:92:02:8d:7b:71:81:d0:79:e2:cb:ba:d4:2c:90:19: cc:ea:f6:5f:d3:34:ea:8b:36:97:cc:0a:7f:03:e9:5e:b9:b9: 19:84:4e:32:bb:d9:4f:4b:23:e9:5d:38:77:2a:35:7d:64:da: 2f:38:78:49:4a:02:16:aa:4f:10:7e:0c:a4:03:87:45:4b:6f: 76:7b:ff:15:6f:bf:ea:40:98:5a:5f:2f:4f:20:e8:e0:54:46: d4:fc:d6:3b:9a:e8:3b:f5:83:bd:4d:3f:80:d6:96:ff:b2:8e: 33:eb:57:ba:14:ba:8f:67:fa:f9:0f:50:2f:bb:8b:f7:93:df: 8e:82:00:73:f2:ce:c5:d2:11:a2:36:9c:fa:b8:41:85:ad:2f: 7c:bd:82:de:cf:de:7a:76:2f:72:09:07:a7:68:0e:99:97:64: 77:11:db:85:b2:26:61:01:0f:22:23:e2:a3:63:2a:17:19:68: 2a:26:57:f2 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFk4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjQw OTg3RjQwQTYwMzBDREZBMzNERUQxRUVFN0NGNERDN0MzMDA5NDAeFw0yNTA5MDgw OTI0MDFaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDM1NDAyMTNBOUY2QjEx RDZDMjZGMDcwMUE5MTY3NTA2QTYyMzAyREIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCbGctS95LggpqmXj8npQFRqy482yt70/NFVbBW14D3PqlRuFq3 0apsneeQK8grDjzCLb3vy79xGXI/zQsBf1RsxcaZv2iDQBnuFQSlptGk+0R3Z7bj ow35FFYIHD2fuxqmR28IelMizH/eiUn81PTjWe3Kg2LDA0pzTo1K1ZihotWsO3UZ EWa96HTQk/AQwS2AwDjY+aqFD8XrH5+CFehSxzj4y3rXVxVkUdyHc2uu8uKYGwsE Y7LRPhiUef8TfotSSnKgNg1HpvOrO2o06cfQ+PX9Ywfiu+SMfSE86FlAIAdnb8ug at20VrrYMJuXD/Y3NVRaWeKcT8kgYcHPEFDbAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUNUAhOp9rEdbCbwcBqRZ1BqYjAtswHwYDVR0jBBgwFoAUJAmH9ApgMM36M97R 7ufPTcfDAJQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE2 OC9KQW1IOUFwZ01NMzZNOTdSN3VmUFRjZkRBSlEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0pBbUg5QXBnTU0zNk05N1I3dWZQVGNmREFKUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNjgvTlVBaE9wOXJFZGJD YndjQnFSWjFCcVlqQXRzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAi36mDANBgkqhkiG9w0BAQsFAAOCAQEAsGSFHsWIwZLizYTuBHYKGMHfOR1Y 75fr5xs+AVnyUbHLltuPGj2GI7PlmwJ1xZokioKquI0bGNHFzdTxSckfp3TrXAdL adYBLZgvkgKNe3GB0Hniy7rULJAZzOr2X9M06os2l8wKfwPpXrm5GYROMrvZT0sj 6V04dyo1fWTaLzh4SUoCFqpPEH4MpAOHRUtvdnv/FW+/6kCYWl8vTyDo4FRG1PzW O5roO/WDvU0/gNaW/7KOM+tXuhS6j2f6+Q9QL7uL95PfjoIAc/LOxdIRojac+rhB ha0vfL2C3s/eenYvcgkHp2gOmZdkdxHbhbImYQEPIiPio2MqFxloKiZX8g== -----END CERTIFICATE-----Generated at Sun Oct 19 21:09:06 2025 by rpki-client