$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/65/VqXKrGginDBcjdXDMOtgyCJy4gY.roa File: VqXKrGginDBcjdXDMOtgyCJy4gY.roa (raw, json) Hash identifier: T0k45MfR+PFvkB8jOKVhh5Q7pQJJlS2DDwmCPvX4m24= Subject key identifier: 56:A5:CA:AC:68:22:9C:30:5C:8D:D5:C3:30:EB:60:C8:22:72:E2:06 Certificate issuer: /CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9 Certificate serial: 14E5 Authority key identifier: 98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/VqXKrGginDBcjdXDMOtgyCJy4gY.roa Signing time: Thu 11 Sep 2025 08:18:04 +0000 ROA not before: Thu 11 Sep 2025 08:18:04 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 17621 IP address blocks: 120.136.168.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 08:34:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5349 (0x14e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9 Validity Not Before: Sep 11 08:18:04 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=56A5CAAC68229C305C8DD5C330EB60C82272E206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:20:c3:e7:9b:61:f9:e5:09:38:ba:68:71:f0: bb:1f:66:1a:53:d4:42:0b:21:df:b9:96:12:b0:02: ff:67:f6:67:cf:84:5c:16:8a:96:df:e3:35:44:b9: e4:e9:c5:56:65:d7:3f:a8:3b:51:d6:30:26:ac:f4: 9c:28:a2:0b:85:b7:62:0c:9b:33:eb:1e:f2:d8:90: 78:3c:35:4d:76:04:2f:0a:3a:0d:c6:69:f8:5a:3a: 92:54:18:fa:cd:b7:27:ec:44:ab:17:a0:f8:18:07: a6:6c:0d:52:93:4d:77:7f:0e:54:70:8e:27:3d:5a: 2c:dc:61:4f:d2:d0:f6:88:3c:f2:89:50:d3:03:33: 7f:62:43:db:b0:85:82:ae:67:c7:5d:7d:49:ce:f2: 6b:1a:fc:1c:81:0e:7f:fe:f6:c2:a1:89:63:d7:aa: 4f:58:52:6e:50:38:34:35:bd:2e:3a:34:1d:15:1b: 59:0d:6d:76:84:7b:1f:b8:9c:49:78:c0:50:f5:e7: af:ea:83:bc:8b:4e:a5:d2:71:84:3e:8b:e6:4f:c1: 79:0b:ee:18:96:fe:d6:13:a0:ca:10:49:1a:6a:34: aa:35:73:83:87:06:5f:ba:57:ce:16:c3:4f:8f:a8: 93:77:e3:39:77:76:0d:1b:bb:65:8f:a3:44:9a:ba: 49:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:A5:CA:AC:68:22:9C:30:5C:8D:D5:C3:30:EB:60:C8:22:72:E2:06 X509v3 Authority Key Identifier: keyid:98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/VqXKrGginDBcjdXDMOtgyCJy4gY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 120.136.168.0/21 Signature Algorithm: sha256WithRSAEncryption 9a:35:97:a6:e6:83:53:e3:8f:ac:07:24:fb:7e:85:84:66:f1: 58:a6:89:36:9f:fc:b4:66:8f:48:fa:28:32:18:85:a3:97:8e: 86:a1:09:c6:85:e5:95:9f:b8:82:8f:b6:66:f2:77:48:23:16: 1e:99:71:c3:47:2d:ea:2c:0e:8a:46:6a:fd:06:da:94:ba:77: 4f:0e:17:01:b7:03:a0:1b:2f:67:72:97:aa:48:d7:37:7c:87: 01:57:8e:c7:b9:2e:1e:71:c5:20:3a:10:48:13:33:28:13:4e: a4:c0:ec:90:c2:fa:89:7e:41:06:55:54:7a:e6:36:ed:b8:b1: 96:5f:47:3d:27:17:e6:52:8f:af:c3:4f:77:9e:fc:1b:ab:78: 1e:c9:b3:42:74:35:14:ff:df:0b:e7:79:cb:17:f8:e8:9d:1b: f4:33:8d:88:44:09:02:bb:e3:e9:d9:e7:e1:e8:35:7c:76:02: d4:11:06:4e:a3:29:95:8c:1d:9d:81:9a:d8:d9:ec:9e:48:8c: 6d:a0:56:9d:83:56:2f:32:79:36:46:fb:7a:c9:83:1e:35:93: de:4c:f2:f8:61:9f:ab:2d:7d:68:1b:c5:8e:a8:1c:27:a8:11: 89:5d:c4:50:ee:ff:66:4b:0c:76:81:bc:08:45:d8:8b:28:d0: ee:79:28:54 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICFOUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTgy NEM1NTUyMjhCMjhCNjk4RERFNzdCQzFBREQwRTI4MDdCODZCOTAeFw0yNTA5MTEw ODE4MDRaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDU2QTVDQUFDNjgyMjlD MzA1QzhERDVDMzMwRUI2MEM4MjI3MkUyMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8IMPnm2H55Qk4umhx8LsfZhpT1EILId+5lhKwAv9n9mfPhFwW ipbf4zVEueTpxVZl1z+oO1HWMCas9JwooguFt2IMmzPrHvLYkHg8NU12BC8KOg3G afhaOpJUGPrNtyfsRKsXoPgYB6ZsDVKTTXd/DlRwjic9WizcYU/S0PaIPPKJUNMD M39iQ9uwhYKuZ8ddfUnO8msa/ByBDn/+9sKhiWPXqk9YUm5QODQ1vS46NB0VG1kN bXaEex+4nEl4wFD156/qg7yLTqXScYQ+i+ZPwXkL7hiW/tYToMoQSRpqNKo1c4OH Bl+6V84Ww0+PqJN34zl3dg0bu2WPo0SaukmFAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUVqXKrGginDBcjdXDMOtgyCJy4gYwHwYDVR0jBBgwFoAUmCTFVSKLKLaY3ed7 wa3Q4oB7hrkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjUv bUNURlZTS0xLTGFZM2VkN3dhM1E0b0I3aHJrLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9tQ1RGVlNLTEtMYVkzZWQ3d2EzUTRvQjdocmsuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC82NS9WcVhLckdnaW5EQmNqZFhE TU90Z3lDSnk0Z1kucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD eIioMA0GCSqGSIb3DQEBCwUAA4IBAQCaNZem5oNT44+sByT7foWEZvFYpok2n/y0 Zo9I+igyGIWjl46GoQnGheWVn7iCj7Zm8ndIIxYemXHDRy3qLA6KRmr9BtqUundP DhcBtwOgGy9ncpeqSNc3fIcBV47HuS4eccUgOhBIEzMoE06kwOyQwvqJfkEGVVR6 5jbtuLGWX0c9JxfmUo+vw093nvwbq3geybNCdDUU/98L53nLF/jonRv0M42IRAkC u+Pp2efh6DV8dgLUEQZOoymVjB2dgZrY2eyeSIxtoFadg1YvMnk2Rvt6yYMeNZPe TPL4YZ+rLX1oG8WOqBwnqBGJXcRQ7v9mSwx2gbwIRdiLKNDueShU -----END CERTIFICATE-----Generated at Mon Oct 20 05:45:55 2025 by rpki-client