$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/xhy90QSivZaPYasqTPjYCtmt8Ig.roa File: xhy90QSivZaPYasqTPjYCtmt8Ig.roa (raw, json) Hash identifier: ZkZYnmK3b06WYj1iyh4kv5MhpmSFY5NyLmuF+oa1e4A= Subject key identifier: C6:1C:BD:D1:04:A2:BD:96:8F:61:AB:2A:4C:F8:D8:0A:D9:AD:F0:88 Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0 Certificate serial: 0DDF Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/xhy90QSivZaPYasqTPjYCtmt8Ig.roa Signing time: Fri 22 Aug 2025 05:01:09 +0000 ROA not before: Fri 22 Aug 2025 05:01:09 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 398704 IP address blocks: 124.173.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 02:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3551 (0xddf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0 Validity Not Before: Aug 22 05:01:09 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=C61CBDD104A2BD968F61AB2A4CF8D80AD9ADF088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:37:aa:b4:13:81:61:a5:41:bb:b8:05:93:56: ab:df:97:ea:1a:59:25:77:98:81:c5:76:5e:3d:79: 66:d8:12:d8:eb:58:7c:cd:5f:01:ee:6c:21:31:4c: 7a:a4:50:6a:a5:8d:29:7b:3a:89:bf:5f:e1:fe:0a: 89:02:a0:0e:a1:fc:29:a6:25:73:21:ae:75:ff:ee: 18:78:51:74:68:19:0f:eb:17:93:e7:9c:45:c0:af: 12:19:48:0b:c4:ce:2f:50:da:d6:55:fb:96:dd:fa: a5:0c:7f:3c:ec:64:b8:b1:6d:b0:2a:b2:d0:37:9b: 56:f9:1c:88:61:3d:17:2c:b6:ae:6f:fa:12:9f:ad: d5:4f:0d:69:e9:7a:bc:16:14:99:d6:00:ae:8e:ed: a6:64:00:b0:1b:80:ca:f5:f5:64:29:f8:15:3e:2a: 23:2a:be:e9:ba:dd:cd:d8:3b:27:e9:b7:61:c3:61: 89:45:1a:31:53:dd:d3:3c:e7:4f:c2:cf:e9:fb:d3: b1:15:00:b7:ec:77:b0:e6:fe:1d:3d:35:7e:e6:a8: f4:99:c0:25:ed:5e:1d:2a:32:e4:a5:37:23:26:0d: 8c:83:96:c7:d8:5a:db:62:b4:2a:61:e2:3a:41:5f: c3:4d:60:88:91:ed:e2:c4:cc:63:8c:27:10:b7:00: b4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:1C:BD:D1:04:A2:BD:96:8F:61:AB:2A:4C:F8:D8:0A:D9:AD:F0:88 X509v3 Authority Key Identifier: keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/xhy90QSivZaPYasqTPjYCtmt8Ig.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.173.192.0/18 Signature Algorithm: sha256WithRSAEncryption 05:55:05:db:a5:89:58:4b:c9:a1:79:80:67:bd:52:cf:af:aa: 51:6b:91:cf:c8:7e:26:74:7a:10:31:02:0d:db:b2:c0:c9:99: a6:04:f7:4f:d2:c9:61:f5:91:3c:87:f1:bb:96:1c:21:8d:a5: 94:a0:55:df:d9:88:c0:60:cb:46:c7:d1:95:53:40:fe:89:3c: e6:90:d5:6e:d4:f2:1b:84:3a:11:bb:90:56:4c:c4:df:23:b9: 21:42:e9:6a:43:bd:99:6d:5f:76:e4:0b:ac:a2:40:6c:7d:bd: 98:38:34:dc:96:20:6e:cf:ce:13:4c:c4:a3:25:e7:6c:e4:60: b3:9e:45:62:1d:e8:65:af:2b:c1:ae:80:20:97:55:43:b2:75: 37:4f:28:1f:cd:f7:dd:03:ed:64:9c:20:2d:a6:95:6a:e0:91: 0f:cb:5e:44:fb:61:62:24:87:25:2e:f9:7c:b4:58:07:1c:ff: 9e:52:b2:07:2b:3a:7d:d8:4a:fb:2a:36:64:15:50:10:c1:de: 02:02:c8:ea:50:81:64:e6:7f:4d:3e:ac:57:70:c6:a8:12:f7: 09:bf:45:58:ad:56:6e:7a:55:eb:60:f7:1b:12:a8:98:c7:c4: 24:3f:f2:0f:9c:47:e0:f1:f5:7e:9c:17:43:c6:e7:5a:a7:92: f2:3e:03:aa -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICDd8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTQ4 MUI0RTQwOTAxNUQ4RUI3RDAzRjM2MDM4ODMwRUMxMDk4QUJDMDAeFw0yNTA4MjIw NTAxMDlaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEM2MUNCREQxMDRBMkJE OTY4RjYxQUIyQTRDRjhEODBBRDlBREYwODgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3N6q0E4FhpUG7uAWTVqvfl+oaWSV3mIHFdl49eWbYEtjrWHzN XwHubCExTHqkUGqljSl7Oom/X+H+CokCoA6h/CmmJXMhrnX/7hh4UXRoGQ/rF5Pn nEXArxIZSAvEzi9Q2tZV+5bd+qUMfzzsZLixbbAqstA3m1b5HIhhPRcstq5v+hKf rdVPDWnperwWFJnWAK6O7aZkALAbgMr19WQp+BU+KiMqvum63c3YOyfpt2HDYYlF GjFT3dM850/Cz+n707EVALfsd7Dm/h09NX7mqPSZwCXtXh0qMuSlNyMmDYyDlsfY WttitCph4jpBX8NNYIiR7eLEzGOMJxC3ALTHAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUxhy90QSivZaPYasqTPjYCtmt8IgwHwYDVR0jBBgwFoAUlIG05AkBXY630D82 A4gw7BCYq8AwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNi9s SUcwNUFrQlhZNjMwRDgyQTRndzdCQ1lxOEEuY3JsMGMGCCsGAQUFBwEBBFcwVTBT BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw MDAwL2xJRzA1QWtCWFk2MzBEODJBNGd3N0JDWXE4QS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtp LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzYveGh5OTBRU2l2WmFQWWFzcVRQ allDdG10OElnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNu L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBnyt wDANBgkqhkiG9w0BAQsFAAOCAQEABVUF26WJWEvJoXmAZ71Sz6+qUWuRz8h+JnR6 EDECDduywMmZpgT3T9LJYfWRPIfxu5YcIY2llKBV39mIwGDLRsfRlVNA/ok85pDV btTyG4Q6EbuQVkzE3yO5IULpakO9mW1fduQLrKJAbH29mDg03JYgbs/OE0zEoyXn bORgs55FYh3oZa8rwa6AIJdVQ7J1N08oH8333QPtZJwgLaaVauCRD8teRPthYiSH JS75fLRYBxz/nlKyBys6fdhK+yo2ZBVQEMHeAgLI6lCBZOZ/TT6sV3DGqBL3Cb9F WK1WbnpV62D3GxKomMfEJD/yD5xH4PH1fpwXQ8bnWqeS8j4Dqg== -----END CERTIFICATE-----Generated at Sun Aug 24 00:19:08 2025 by rpki-client