$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/TN3X9TBIQviE9Enq9mw3E0bmRlg.roa File: TN3X9TBIQviE9Enq9mw3E0bmRlg.roa (raw, json) Hash identifier: SW7FkMsPG81yZVeSzGBq9c6Bto41bNCYoGHgKViXN+c= Subject key identifier: 4C:DD:D7:F5:30:48:42:F8:84:F4:49:EA:F6:6C:37:13:46:E6:46:58 Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0 Certificate serial: 0DE1 Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/TN3X9TBIQviE9Enq9mw3E0bmRlg.roa Signing time: Fri 22 Aug 2025 05:01:09 +0000 ROA not before: Fri 22 Aug 2025 05:01:09 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 6079 IP address blocks: 124.173.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Aug 2025 21:03:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3553 (0xde1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0 Validity Not Before: Aug 22 05:01:09 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=4CDDD7F5304842F884F449EAF66C371346E64658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:43:05:6c:69:f9:9f:d2:3f:fa:e1:4b:49:65: e0:e0:5f:43:61:15:74:1a:88:a7:3b:24:8e:26:a6: b7:1b:66:b2:bc:c7:d9:55:d4:6e:59:de:b4:22:42: 76:a2:28:7e:8d:56:9b:ef:38:8e:4a:e2:25:66:cc: 7e:3f:fb:bd:4a:48:2f:17:42:a5:d8:3e:76:50:d3: 44:95:42:a1:c8:99:52:4b:22:b8:eb:23:0f:c8:42: 8c:2b:79:37:0b:1d:2e:5b:81:de:38:92:bb:eb:74: 67:f4:75:48:db:4f:e2:22:24:93:1b:df:77:2f:aa: 83:bd:f9:71:e8:3b:bc:59:e1:32:dc:c9:9f:4d:75: 89:d2:72:ac:85:ab:00:43:f8:64:0e:bd:cd:68:7d: 3b:b3:bc:dd:91:3a:61:39:5e:55:0d:d5:a7:cd:99: f4:6c:83:36:e7:2c:f1:b3:33:8f:23:ae:47:00:d7: 15:90:74:9b:79:58:75:55:87:12:65:ca:45:41:a6: 5d:97:7c:cd:f1:70:e9:54:b2:06:51:58:52:9d:54: 25:42:5e:95:8b:54:5b:d2:90:23:99:53:fe:c9:5c: 66:e4:1a:f9:75:8c:6e:f9:06:ea:a5:20:b7:76:ac: d1:33:21:6d:af:5e:90:13:62:cb:3e:bb:49:50:1e: 0e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:DD:D7:F5:30:48:42:F8:84:F4:49:EA:F6:6C:37:13:46:E6:46:58 X509v3 Authority Key Identifier: keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/TN3X9TBIQviE9Enq9mw3E0bmRlg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.173.192.0/18 Signature Algorithm: sha256WithRSAEncryption 46:7c:25:e7:4f:4e:8b:b3:57:76:4d:43:61:74:7b:c4:fb:e0: 2b:3e:57:17:a2:1a:85:76:19:62:eb:cf:4d:de:a2:ae:b3:78: f2:44:7f:31:a0:4e:f9:e5:da:85:5e:a3:0a:5a:2c:2b:0f:f5: 6c:fe:66:0c:c5:f7:83:d4:2c:c6:b9:ab:1d:dc:6d:27:e5:e3: ef:f6:76:2f:72:09:e9:a3:f9:96:cc:c0:4f:4b:15:6c:b5:fd: c6:66:0a:51:05:27:26:67:45:2a:bc:72:2f:a6:ce:e1:88:7c: 60:f7:e8:4d:c1:24:4d:3b:9e:46:03:fb:2d:1f:6a:d2:5f:8c: 16:52:2c:b8:1f:2b:41:f0:c9:31:f8:79:ae:8a:61:39:b6:8c: c8:a8:2d:53:e9:c4:14:04:d0:c2:e7:67:39:d9:0a:b2:d5:da: 09:ab:ef:67:b9:92:69:b2:da:3f:08:9b:28:7f:8d:c9:ca:c5: 4b:23:3e:28:b9:c1:66:8a:52:12:35:9d:f0:d0:41:6d:a2:5c: b0:99:f6:fd:9f:d1:20:24:aa:4b:ac:83:4e:73:4b:82:c0:f7: 25:b3:fd:62:da:49:a3:5f:b2:f5:80:90:fe:f3:6f:be:bd:09: 63:1e:33:fd:13:69:b5:85:d9:42:24:98:15:ab:9e:57:63:23: 68:e1:f8:73 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICDeEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTQ4 MUI0RTQwOTAxNUQ4RUI3RDAzRjM2MDM4ODMwRUMxMDk4QUJDMDAeFw0yNTA4MjIw NTAxMDlaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDRDREREN0Y1MzA0ODQy Rjg4NEY0NDlFQUY2NkMzNzEzNDZFNjQ2NTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDfQwVsafmf0j/64UtJZeDgX0NhFXQaiKc7JI4mprcbZrK8x9lV 1G5Z3rQiQnaiKH6NVpvvOI5K4iVmzH4/+71KSC8XQqXYPnZQ00SVQqHImVJLIrjr Iw/IQowreTcLHS5bgd44krvrdGf0dUjbT+IiJJMb33cvqoO9+XHoO7xZ4TLcyZ9N dYnScqyFqwBD+GQOvc1ofTuzvN2ROmE5XlUN1afNmfRsgzbnLPGzM48jrkcA1xWQ dJt5WHVVhxJlykVBpl2XfM3xcOlUsgZRWFKdVCVCXpWLVFvSkCOZU/7JXGbkGvl1 jG75BuqlILd2rNEzIW2vXpATYss+u0lQHg6/AgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUTN3X9TBIQviE9Enq9mw3E0bmRlgwHwYDVR0jBBgwFoAUlIG05AkBXY630D82 A4gw7BCYq8AwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNi9s SUcwNUFrQlhZNjMwRDgyQTRndzdCQ1lxOEEuY3JsMGMGCCsGAQUFBwEBBFcwVTBT BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw MDAwL2xJRzA1QWtCWFk2MzBEODJBNGd3N0JDWXE4QS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtp LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzYvVE4zWDlUQklRdmlFOUVucTlt dzNFMGJtUmxnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNu L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBnyt wDANBgkqhkiG9w0BAQsFAAOCAQEARnwl509Oi7NXdk1DYXR7xPvgKz5XF6IahXYZ YuvPTd6irrN48kR/MaBO+eXahV6jClosKw/1bP5mDMX3g9QsxrmrHdxtJ+Xj7/Z2 L3IJ6aP5lszAT0sVbLX9xmYKUQUnJmdFKrxyL6bO4Yh8YPfoTcEkTTueRgP7LR9q 0l+MFlIsuB8rQfDJMfh5rophObaMyKgtU+nEFATQwudnOdkKstXaCavvZ7mSabLa PwibKH+NycrFSyM+KLnBZopSEjWd8NBBbaJcsJn2/Z/RICSqS6yDTnNLgsD3JbP9 YtpJo1+y9YCQ/vNvvr0JYx4z/RNptYXZQiSYFaueV2MjaOH4cw== -----END CERTIFICATE-----Generated at Sat Aug 23 20:44:10 2025 by rpki-client