$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/623/c9ESnnmc3a4WZ5PAxwVSSav78EU.roa File: c9ESnnmc3a4WZ5PAxwVSSav78EU.roa (raw, json) Hash identifier: 0sCvCqVRI3bu0GOMcfqxEUkKQMrtCFdRTHW02qnP9J8= Subject key identifier: 73:D1:12:9E:79:9C:DD:AE:16:67:93:C0:C7:05:52:49:AB:FB:F0:45 Certificate issuer: /CN=DEBFC900EDC34F81DA4827F1F9F63D04E0E2F756 Certificate serial: 0A1F Authority key identifier: DE:BF:C9:00:ED:C3:4F:81:DA:48:27:F1:F9:F6:3D:04:E0:E2:F7:56 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/c9ESnnmc3a4WZ5PAxwVSSav78EU.roa Signing time: Sat 13 Sep 2025 03:02:32 +0000 ROA not before: Sat 13 Sep 2025 03:02:32 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 58834 IP address blocks: 119.2.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/3r_JAO3DT4HaSCfx-fY9BODi91Y.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/3r_JAO3DT4HaSCfx-fY9BODi91Y.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 08:36:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2591 (0xa1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEBFC900EDC34F81DA4827F1F9F63D04E0E2F756 Validity Not Before: Sep 13 03:02:32 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=73D1129E799CDDAE166793C0C7055249ABFBF045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:88:46:89:5a:0c:a2:a8:b8:63:a5:69:c6:76: 4c:58:da:0f:49:0e:ca:01:a5:c5:66:1b:b2:0c:ae: cf:90:ee:9b:07:c5:d9:86:ff:31:51:73:90:32:8b: d5:ca:80:81:39:f1:34:aa:e7:3f:54:54:15:8e:65: 1d:3f:27:56:1b:1b:31:7d:d1:19:da:b8:ca:31:9e: 42:0d:16:2b:f7:b3:ea:14:73:34:c6:17:e4:6d:80: a5:d6:20:57:00:bd:8e:e8:92:67:b2:39:48:a6:77: f4:ac:95:f2:b4:c1:21:4a:bf:64:f9:93:93:aa:3a: 9f:11:4f:12:85:88:76:ed:18:f0:e1:3e:e8:dd:68: c9:54:e9:f8:91:d1:61:a7:e9:8c:77:10:ab:d4:1f: d4:ec:fc:4e:65:8e:26:28:05:0a:b6:e2:28:1f:9d: c6:9b:e6:50:13:ad:01:51:17:d8:91:a2:f8:2c:ed: 1c:9d:43:10:75:40:56:6a:44:d0:19:fb:ac:94:f7: 26:4a:82:8b:6c:4f:9e:6b:d7:76:f0:6f:30:ab:28: f9:45:40:6e:65:81:4d:15:27:58:d7:9a:65:4a:b4: 2a:8e:dc:92:3c:6d:b9:22:e1:13:17:26:fe:ee:93: 5e:91:49:f8:c8:01:62:02:e5:79:f2:12:57:c9:e8: fc:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:D1:12:9E:79:9C:DD:AE:16:67:93:C0:C7:05:52:49:AB:FB:F0:45 X509v3 Authority Key Identifier: keyid:DE:BF:C9:00:ED:C3:4F:81:DA:48:27:F1:F9:F6:3D:04:E0:E2:F7:56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/3r_JAO3DT4HaSCfx-fY9BODi91Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/c9ESnnmc3a4WZ5PAxwVSSav78EU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.2.255.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:43:f5:01:f6:49:22:40:1e:7b:30:2f:4c:5f:ea:d9:5a:b1: 4c:5b:fa:5b:b6:3c:b6:68:cb:e3:94:41:eb:f3:a2:45:7c:da: bb:11:2c:1b:b2:5b:21:e3:08:f9:49:27:a7:8f:8f:f3:09:92: 55:33:95:7e:9c:cd:b3:db:01:dd:4c:51:21:5e:3b:8e:77:1f: e3:d9:fa:7f:b0:33:da:49:95:42:6c:d3:8a:a4:26:29:35:df: f0:76:05:bf:b7:a7:19:4a:4c:1a:03:57:a9:d9:f5:89:04:38: ba:82:7e:08:a1:e9:43:c8:92:fc:12:66:0d:c2:d7:ea:b3:14: 3a:73:34:15:47:44:2e:9a:71:37:d1:58:a6:84:25:7f:47:4d: d3:c9:b9:c7:51:72:22:69:aa:37:91:c7:76:b2:af:55:c3:1d: b4:38:1f:63:d9:ff:8e:6b:a9:86:b8:6c:58:7d:af:ea:58:79: 1e:19:81:a6:35:40:3c:b1:e2:6f:4e:1f:22:8b:b4:82:48:97: e9:b8:99:0d:12:33:54:58:04:47:e0:75:07:1b:8e:fa:5e:94: ef:7b:db:77:15:fd:b3:ec:73:a9:6c:74:59:ce:77:03:2a:96: 3b:21:8d:fe:e7:28:31:15:db:14:81:dd:90:a8:d8:1f:bf:0f: 25:1f:7d:f0 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICCh8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREVC RkM5MDBFREMzNEY4MURBNDgyN0YxRjlGNjNEMDRFMEUyRjc1NjAeFw0yNTA5MTMw MzAyMzJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDczRDExMjlFNzk5Q0RE QUUxNjY3OTNDMEM3MDU1MjQ5QUJGQkYwNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8iEaJWgyiqLhjpWnGdkxY2g9JDsoBpcVmG7IMrs+Q7psHxdmG /zFRc5Ayi9XKgIE58TSq5z9UVBWOZR0/J1YbGzF90RnauMoxnkINFiv3s+oUczTG F+RtgKXWIFcAvY7okmeyOUimd/SslfK0wSFKv2T5k5OqOp8RTxKFiHbtGPDhPujd aMlU6fiR0WGn6Yx3EKvUH9Ts/E5ljiYoBQq24igfncab5lATrQFRF9iRovgs7Ryd QxB1QFZqRNAZ+6yU9yZKgotsT55r13bwbzCrKPlFQG5lgU0VJ1jXmmVKtCqO3JI8 bbki4RMXJv7uk16RSfjIAWIC5XnyElfJ6PyvAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUc9ESnnmc3a4WZ5PAxwVSSav78EUwHwYDVR0jBBgwFoAU3r/JAO3DT4HaSCfx +fY9BODi91YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIz LzNyX0pBTzNEVDRIYVNDZngtZlk5Qk9EaTkxWS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvM3JfSkFPM0RUNEhhU0NmeC1mWTlCT0RpOTFZLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIzL2M5RVNubm1jM2E0V1o1 UEF4d1ZTU2F2NzhFVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAB3Av8wDQYJKoZIhvcNAQELBQADggEBAEtD9QH2SSJAHnswL0xf6tlasUxb+lu2 PLZoy+OUQevzokV82rsRLBuyWyHjCPlJJ6ePj/MJklUzlX6czbPbAd1MUSFeO453 H+PZ+n+wM9pJlUJs04qkJik13/B2Bb+3pxlKTBoDV6nZ9YkEOLqCfgih6UPIkvwS Zg3C1+qzFDpzNBVHRC6acTfRWKaEJX9HTdPJucdRciJpqjeRx3ayr1XDHbQ4H2PZ /45rqYa4bFh9r+pYeR4ZgaY1QDyx4m9OHyKLtIJIl+m4mQ0SM1RYBEfgdQcbjvpe lO9723cV/bPsc6lsdFnOdwMqljshjf7nKDEV2xSB3ZCo2B+/DyUfffA= -----END CERTIFICATE-----Generated at Tue Oct 21 06:43:57 2025 by rpki-client