$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/rnLSeI9bhyiI6jxX_yw6B2wdUV4.roa File: rnLSeI9bhyiI6jxX_yw6B2wdUV4.roa (raw, json) Hash identifier: 6w14o1K7n8G/+OOIWS8eVa5cLOq3deqMw5OI3ia71UY= Subject key identifier: AE:72:D2:78:8F:5B:87:28:88:EA:3C:57:FF:2C:3A:07:6C:1D:51:5E Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0 Certificate serial: 0DDE Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/rnLSeI9bhyiI6jxX_yw6B2wdUV4.roa Signing time: Fri 22 Aug 2025 05:01:08 +0000 ROA not before: Fri 22 Aug 2025 05:01:08 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 18811 IP address blocks: 124.173.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 02:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3550 (0xdde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0 Validity Not Before: Aug 22 05:01:08 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=AE72D2788F5B872888EA3C57FF2C3A076C1D515E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:7a:7b:e8:cf:82:83:fd:d0:91:3c:1e:ce:d2: b8:30:9e:2d:5e:bd:26:3c:75:9d:a3:0f:b3:59:eb: 64:ba:5d:86:dc:d9:a2:06:e8:e9:a0:18:f2:56:ac: 19:81:ec:0a:b9:4e:a7:5b:03:d3:a7:2d:b4:21:24: ee:6c:ed:66:a5:cd:fa:79:78:7c:85:7b:d3:57:8c: 90:f8:f7:cd:c7:1c:b5:e5:b5:ef:75:3b:ae:c8:d0: 0d:cd:12:43:e8:cc:24:f8:8d:81:0d:27:26:39:dd: 49:7e:74:a5:4c:64:55:9f:21:33:06:89:19:f6:29: f1:73:84:7f:49:6c:6d:ae:de:9c:d1:d7:33:71:16: 18:d7:df:7d:37:97:21:ef:61:74:63:7a:93:5a:ef: 12:3a:57:02:29:7e:e6:e4:db:bc:14:01:21:80:98: ca:36:6d:32:fa:5d:c2:d2:81:71:69:b7:f7:a0:b9: aa:d1:8a:da:5c:f5:75:f8:0c:75:ef:4b:f2:1d:81: 08:1e:49:c5:07:62:7e:b3:c3:ee:d0:dd:53:c5:83: 7c:dc:ae:9b:e1:c9:4d:ed:fc:71:7e:55:17:3b:23: 97:5b:74:6c:2b:0e:f0:4c:9a:b3:5b:05:b0:3a:c3: 21:30:e6:24:1f:71:f2:b5:f8:58:66:3d:a0:63:5d: f4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:72:D2:78:8F:5B:87:28:88:EA:3C:57:FF:2C:3A:07:6C:1D:51:5E X509v3 Authority Key Identifier: keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/rnLSeI9bhyiI6jxX_yw6B2wdUV4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.173.192.0/18 Signature Algorithm: sha256WithRSAEncryption 51:1b:8d:b1:18:78:ca:d6:e2:c6:d5:ed:a4:e4:69:46:97:f4: 49:28:8c:5c:02:50:0c:50:18:c6:06:70:ab:ce:c0:fa:44:4b: fc:49:57:58:d8:11:50:96:91:a8:b7:15:5c:94:b3:36:5b:a6: 96:f1:bf:27:2f:a2:a3:0b:2a:0d:7f:f7:af:3d:33:45:fe:a4: 02:e4:c0:17:d8:01:4d:e9:07:5a:cb:02:ce:02:5b:c3:99:69: ad:14:e3:01:c1:f0:a1:7e:72:e1:66:82:61:90:5b:a4:e5:c3: ee:fc:a9:e9:92:9e:97:ac:b9:fb:6d:31:55:fb:8c:52:23:18: 4a:fd:32:cc:15:8d:cf:22:75:1d:4f:9d:dc:2e:88:ed:6f:77: 85:f8:6f:ac:85:4e:11:5c:8b:e7:8e:a0:43:33:8b:0f:86:22: 0d:5f:49:3c:e6:af:9c:9d:b6:01:4b:ed:e6:92:ba:51:f2:67: 23:99:47:e3:34:70:37:0e:c1:9e:86:dd:1a:ce:62:c6:28:f3: f8:11:ac:4a:44:d7:27:ba:41:98:02:56:33:cb:a2:2b:9c:fc: 76:1d:02:6c:9e:ce:7c:24:89:1e:72:97:9c:54:74:d7:d8:4a: 9b:91:ae:88:17:7c:5c:22:61:c0:f6:c7:b4:e0:64:75:7b:4a: 52:3e:bf:4f -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICDd4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTQ4 MUI0RTQwOTAxNUQ4RUI3RDAzRjM2MDM4ODMwRUMxMDk4QUJDMDAeFw0yNTA4MjIw NTAxMDhaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEFFNzJEMjc4OEY1Qjg3 Mjg4OEVBM0M1N0ZGMkMzQTA3NkMxRDUxNUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDgenvoz4KD/dCRPB7O0rgwni1evSY8dZ2jD7NZ62S6XYbc2aIG 6OmgGPJWrBmB7Aq5TqdbA9OnLbQhJO5s7Walzfp5eHyFe9NXjJD4983HHLXlte91 O67I0A3NEkPozCT4jYENJyY53Ul+dKVMZFWfITMGiRn2KfFzhH9JbG2u3pzR1zNx FhjX3303lyHvYXRjepNa7xI6VwIpfubk27wUASGAmMo2bTL6XcLSgXFpt/eguarR itpc9XX4DHXvS/IdgQgeScUHYn6zw+7Q3VPFg3zcrpvhyU3t/HF+VRc7I5dbdGwr DvBMmrNbBbA6wyEw5iQfcfK1+FhmPaBjXfRtAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUrnLSeI9bhyiI6jxX/yw6B2wdUV4wHwYDVR0jBBgwFoAUlIG05AkBXY630D82 A4gw7BCYq8AwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNi9s SUcwNUFrQlhZNjMwRDgyQTRndzdCQ1lxOEEuY3JsMGMGCCsGAQUFBwEBBFcwVTBT BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw MDAwL2xJRzA1QWtCWFk2MzBEODJBNGd3N0JDWXE4QS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtp LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzYvcm5MU2VJOWJoeWlJNmp4WF95 dzZCMndkVVY0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNu L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBnyt wDANBgkqhkiG9w0BAQsFAAOCAQEAURuNsRh4ytbixtXtpORpRpf0SSiMXAJQDFAY xgZwq87A+kRL/ElXWNgRUJaRqLcVXJSzNlumlvG/Jy+iowsqDX/3rz0zRf6kAuTA F9gBTekHWssCzgJbw5lprRTjAcHwoX5y4WaCYZBbpOXD7vyp6ZKel6y5+20xVfuM UiMYSv0yzBWNzyJ1HU+d3C6I7W93hfhvrIVOEVyL546gQzOLD4YiDV9JPOavnJ22 AUvt5pK6UfJnI5lH4zRwNw7BnobdGs5ixijz+BGsSkTXJ7pBmAJWM8uiK5z8dh0C bJ7OfCSJHnKXnFR019hKm5GuiBd8XCJhwPbHtOBkdXtKUj6/Tw== -----END CERTIFICATE-----Generated at Sun Aug 24 01:00:06 2025 by rpki-client