$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3168/oQZn5ZkeaDEJ3kVqYWfkhtBRZBw.roa File: oQZn5ZkeaDEJ3kVqYWfkhtBRZBw.roa (raw, json) Hash identifier: bDn12Zd/NbB2xKis/YT4LYypbfU7J4IDkQPIsGdXDeQ= Subject key identifier: A1:06:67:E5:99:1E:68:31:09:DE:45:6A:61:67:E4:86:D0:51:64:1C Certificate issuer: /CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094 Certificate serial: 1651 Authority key identifier: 24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/oQZn5ZkeaDEJ3kVqYWfkhtBRZBw.roa Signing time: Mon 08 Sep 2025 09:24:02 +0000 ROA not before: Mon 08 Sep 2025 09:24:02 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 13335 IP address blocks: 42.201.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Oct 2025 23:35:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5713 (0x1651) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094 Validity Not Before: Sep 8 09:24:02 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=A10667E5991E683109DE456A6167E486D051641C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:24:db:6a:d1:89:1f:d4:37:cf:a2:39:3b:ad: 12:ec:5b:19:a0:3a:7a:b2:71:14:19:f8:a4:14:32: 8e:be:f6:ac:fd:ee:72:f0:77:b2:18:e9:3c:4c:15: 3f:9a:c6:ad:e3:8c:49:ae:1c:bb:ac:f2:fb:e4:3f: 13:d6:96:d5:ad:4f:ac:91:0c:84:0f:6a:e2:99:23: 22:42:53:2c:a4:58:f9:dd:16:ec:54:92:ea:1b:92: 32:66:ec:00:67:c9:87:a5:c4:63:cb:ef:a5:8f:a1: 2a:b7:67:66:46:4f:67:7a:34:5d:68:ff:74:50:ef: e8:30:45:20:b7:d2:ca:80:cb:7b:c9:15:4c:30:87: 69:7e:8e:8a:b0:34:b5:0e:7f:3f:97:8b:d9:4b:6a: 6c:67:c3:41:ae:4d:19:ba:5e:ec:ce:68:23:ff:d4: 2c:fc:34:a9:54:84:d2:04:eb:b7:e4:5a:1f:f9:8d: fb:64:52:e2:20:c2:1d:a3:e9:6f:97:a4:87:e1:31: 82:95:bf:42:e4:57:7c:3d:38:67:1a:67:a0:a1:57: 46:cb:6c:de:43:4e:e9:03:5d:ad:67:86:b8:b3:7c: 49:1c:5d:42:de:fc:9a:c5:39:7c:67:63:3b:f7:ce: e2:b5:c4:2a:1d:eb:b9:16:c5:ab:86:63:74:e4:13: 9e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:06:67:E5:99:1E:68:31:09:DE:45:6A:61:67:E4:86:D0:51:64:1C X509v3 Authority Key Identifier: keyid:24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/oQZn5ZkeaDEJ3kVqYWfkhtBRZBw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 42.201.16.0/20 Signature Algorithm: sha256WithRSAEncryption 65:07:99:be:af:a6:82:8e:ff:61:ff:64:90:83:f7:cb:85:ed: eb:7b:cf:fb:cb:0c:e6:52:5f:80:2a:97:fb:d1:8c:b8:a4:9f: ea:b5:83:28:21:9b:1c:25:17:d6:71:83:df:b4:d9:51:21:5a: 7f:3b:b8:ac:af:31:46:4c:d1:c3:fc:16:47:07:05:48:94:78: 06:5a:32:c8:e6:fd:2d:93:db:db:48:be:03:e3:36:e7:f0:77: 99:62:bc:be:bf:76:60:e3:6a:f9:9c:19:ea:d6:c1:d1:d9:e8: 03:d9:28:79:fc:58:8d:6a:cc:07:2a:3f:49:ff:f9:07:1a:56: 50:d8:60:b4:bb:ac:fb:b8:f9:0f:76:2d:e1:0a:38:8c:00:90: ae:15:2a:24:db:13:d8:25:21:99:ce:3b:85:36:77:3f:13:9f: a8:36:b7:00:e2:4a:59:a8:dd:f4:ec:2b:ed:ce:94:69:e0:7e: f5:f1:94:84:39:1b:33:55:c3:eb:f6:c2:04:51:7c:8e:1e:f0: 33:72:8c:0c:6b:b5:e6:e2:08:a1:28:74:ab:37:f8:4d:38:b7: 3d:8e:e6:f8:30:88:86:69:93:75:c4:5d:5e:29:fa:07:2b:09: 3b:8e:ab:87:d3:9d:c8:22:19:57:23:88:53:0a:9e:d0:4c:3c: 12:6a:22:c5 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFlEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjQw OTg3RjQwQTYwMzBDREZBMzNERUQxRUVFN0NGNERDN0MzMDA5NDAeFw0yNTA5MDgw OTI0MDJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEExMDY2N0U1OTkxRTY4 MzEwOURFNDU2QTYxNjdFNDg2RDA1MTY0MUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4JNtq0Ykf1DfPojk7rRLsWxmgOnqycRQZ+KQUMo6+9qz97nLw d7IY6TxMFT+axq3jjEmuHLus8vvkPxPWltWtT6yRDIQPauKZIyJCUyykWPndFuxU kuobkjJm7ABnyYelxGPL76WPoSq3Z2ZGT2d6NF1o/3RQ7+gwRSC30sqAy3vJFUww h2l+joqwNLUOfz+Xi9lLamxnw0GuTRm6XuzOaCP/1Cz8NKlUhNIE67fkWh/5jftk UuIgwh2j6W+XpIfhMYKVv0LkV3w9OGcaZ6ChV0bLbN5DTukDXa1nhrizfEkcXULe /JrFOXxnYzv3zuK1xCod67kWxauGY3TkE54lAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUoQZn5ZkeaDEJ3kVqYWfkhtBRZBwwHwYDVR0jBBgwFoAUJAmH9ApgMM36M97R 7ufPTcfDAJQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE2 OC9KQW1IOUFwZ01NMzZNOTdSN3VmUFRjZkRBSlEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0pBbUg5QXBnTU0zNk05N1I3dWZQVGNmREFKUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNjgvb1FabjVaa2VhREVK M2tWcVlXZmtodEJSWkJ3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBCrJEDANBgkqhkiG9w0BAQsFAAOCAQEAZQeZvq+mgo7/Yf9kkIP3y4Xt63vP +8sM5lJfgCqX+9GMuKSf6rWDKCGbHCUX1nGD37TZUSFafzu4rK8xRkzRw/wWRwcF SJR4BloyyOb9LZPb20i+A+M25/B3mWK8vr92YONq+ZwZ6tbB0dnoA9koefxYjWrM Byo/Sf/5BxpWUNhgtLus+7j5D3Yt4Qo4jACQrhUqJNsT2CUhmc47hTZ3PxOfqDa3 AOJKWajd9Owr7c6UaeB+9fGUhDkbM1XD6/bCBFF8jh7wM3KMDGu15uIIoSh0qzf4 TTi3PY7m+DCIhmmTdcRdXin6BysJO46rh9OdyCIZVyOIUwqe0Ew8EmoixQ== -----END CERTIFICATE-----Generated at Sun Oct 19 21:08:53 2025 by rpki-client