$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/8YCpiSbb-SQsAP31zyjX5TxQe1I.roa File: 8YCpiSbb-SQsAP31zyjX5TxQe1I.roa (raw, json) Hash identifier: BPzE5Hz5FYQyXpaqi8icCphe+fPlQs+ma6SadAGi/tM= Subject key identifier: F1:80:A9:89:26:DB:F9:24:2C:00:FD:F5:CF:28:D7:E5:3C:50:7B:52 Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA Certificate serial: 0A65 Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/8YCpiSbb-SQsAP31zyjX5TxQe1I.roa Signing time: Sat 13 Sep 2025 03:03:17 +0000 ROA not before: Sat 13 Sep 2025 03:03:17 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 7641 IP address blocks: 112.128.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 18:04:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2661 (0xa65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA Validity Not Before: Sep 13 03:03:17 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=F180A98926DBF9242C00FDF5CF28D7E53C507B52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7f:10:b2:db:2a:0e:0a:c1:83:94:8e:9e:ee: 7f:1a:c3:20:4b:a9:68:c2:fd:15:46:52:89:bf:e5: dc:0a:f0:b8:18:2e:e5:51:48:89:48:8a:a8:b2:69: a1:f4:a1:d3:bd:63:d1:cb:5c:de:1b:62:db:64:40: 60:07:49:96:eb:88:d3:be:54:74:87:f5:89:b1:43: ed:bb:95:46:e9:d7:8a:d1:a2:86:d6:32:6b:cd:7b: 00:b2:09:21:d2:ce:3c:44:b0:05:82:e3:07:ea:b1: f7:62:71:49:0d:6a:92:0d:9f:0b:4c:92:d7:69:5a: 22:94:ef:79:f1:e7:0c:78:79:3c:1c:fb:6a:31:38: 5a:95:6a:1e:80:0a:e7:9c:f2:77:d1:00:10:17:29: 37:48:99:ab:e9:17:46:52:92:72:0d:a8:4b:55:ff: ed:cd:34:d2:dc:ab:ab:01:ec:d7:f9:cc:1b:a3:28: 2e:cc:c7:15:d4:d7:7b:53:d9:2a:34:39:74:35:58: 6c:a3:e7:13:39:90:64:6e:2a:23:73:d1:ff:30:fb: b7:5e:71:6e:a2:9a:1b:00:5d:27:32:42:cc:0e:fd: e5:d8:c5:24:d2:ca:2e:77:54:3f:2b:19:e9:bb:61: 12:5a:45:37:b4:6a:a6:e7:db:c2:1c:60:ed:72:73: 33:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:80:A9:89:26:DB:F9:24:2C:00:FD:F5:CF:28:D7:E5:3C:50:7B:52 X509v3 Authority Key Identifier: keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/8YCpiSbb-SQsAP31zyjX5TxQe1I.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 112.128.0.0/14 Signature Algorithm: sha256WithRSAEncryption 51:1b:c0:01:4e:a0:2e:d3:b5:d8:9a:a8:4f:da:98:c1:81:73: cb:48:4a:fb:6d:20:26:fc:f0:69:24:35:9f:59:4e:1b:d6:1c: 9c:97:1b:38:3b:98:e5:4d:fb:46:1f:24:d9:db:05:fc:a6:0b: 4e:68:17:dc:94:db:07:f7:d9:0e:96:ed:b7:9e:10:1d:fe:13: 4e:70:ec:60:10:ec:83:fc:da:cb:3c:b8:7f:cf:61:58:1f:75: ce:f5:6c:85:1b:30:a4:5c:8b:36:20:bf:4e:3f:1c:81:72:ab: 43:5d:0b:c3:3b:c1:7a:90:ae:0a:9f:70:71:d7:84:24:32:c6: b7:9c:fd:a8:30:81:a1:2d:6a:d1:27:04:42:5c:da:9f:63:06: 00:20:c9:6a:1e:1c:e3:25:46:f5:08:e2:82:75:a5:98:a8:d2: 51:3e:ad:7c:1e:a5:2c:22:97:00:73:30:ea:76:da:84:09:6f: aa:b7:c3:66:88:02:cd:a0:f1:d8:db:49:99:28:52:23:73:ef: 92:2b:c1:18:7e:cd:c7:b0:96:43:63:eb:a3:cc:16:2c:9b:f1: fb:de:fd:6f:3a:89:6e:55:a0:ca:2c:c9:36:af:6d:eb:d5:1d: b4:19:5b:ea:c6:43:ae:c6:f3:a0:12:70:e2:61:9b:b8:f3:17: 44:6d:14:c8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICCmUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkMw MzE0REZERUQ0MUFCNjExRDk5RjU0MjA2Mzk4MkZFMzgwODBCQTAeFw0yNTA5MTMw MzAzMTdaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEYxODBBOTg5MjZEQkY5 MjQyQzAwRkRGNUNGMjhEN0U1M0M1MDdCNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIfxCy2yoOCsGDlI6e7n8awyBLqWjC/RVGUom/5dwK8LgYLuVR SIlIiqiyaaH0odO9Y9HLXN4bYttkQGAHSZbriNO+VHSH9YmxQ+27lUbp14rRoobW MmvNewCyCSHSzjxEsAWC4wfqsfdicUkNapINnwtMktdpWiKU73nx5wx4eTwc+2ox OFqVah6ACuec8nfRABAXKTdImavpF0ZSknINqEtV/+3NNNLcq6sB7Nf5zBujKC7M xxXU13tT2So0OXQ1WGyj5xM5kGRuKiNz0f8w+7decW6imhsAXScyQswO/eXYxSTS yi53VD8rGem7YRJaRTe0aqbn28IcYO1yczMLAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU8YCpiSbb+SQsAP31zyjX5TxQe1IwHwYDVR0jBBgwFoAULAMU397UGrYR2Z9U IGOYL+OAgLowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMv TEFNVTM5N1VHcllSMlo5VUlHT1lMLU9BZ0xvLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MQU1VMzk3VUdyWVIyWjlVSUdPWUwtT0FnTG8uY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMy84WUNwaVNiYi1TUXNBUDMx enlqWDVUeFFlMUkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMC cIAwDQYJKoZIhvcNAQELBQADggEBAFEbwAFOoC7TtdiaqE/amMGBc8tISvttICb8 8GkkNZ9ZThvWHJyXGzg7mOVN+0YfJNnbBfymC05oF9yU2wf32Q6W7beeEB3+E05w 7GAQ7IP82ss8uH/PYVgfdc71bIUbMKRcizYgv04/HIFyq0NdC8M7wXqQrgqfcHHX hCQyxrec/agwgaEtatEnBEJc2p9jBgAgyWoeHOMlRvUI4oJ1pZio0lE+rXwepSwi lwBzMOp22oQJb6q3w2aIAs2g8djbSZkoUiNz75IrwRh+zcewlkNj66PMFiyb8fve /W86iW5VoMosyTavbevVHbQZW+rGQ67G86AScOJhm7jzF0RtFMg= -----END CERTIFICATE-----Generated at Mon Oct 20 14:03:01 2025 by rpki-client