$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/65/qD_gyieETJh4X2XCnGFlOkTehCQ.roa File: qD_gyieETJh4X2XCnGFlOkTehCQ.roa (raw, json) Hash identifier: YkuRdliFqLgefg7iLfhHuhyydgAGzp587s7Kczp02/o= Subject key identifier: A8:3F:E0:CA:27:84:4C:98:78:5F:65:C2:9C:61:65:3A:44:DE:84:24 Certificate issuer: /CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9 Certificate serial: 14D8 Authority key identifier: 98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/qD_gyieETJh4X2XCnGFlOkTehCQ.roa Signing time: Thu 11 Sep 2025 06:16:42 +0000 ROA not before: Thu 11 Sep 2025 06:16:42 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 23853 IP address blocks: 2404:7600:2000::/35 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 13:34:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5336 (0x14d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9 Validity Not Before: Sep 11 06:16:42 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=A83FE0CA27844C98785F65C29C61653A44DE8424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e7:90:2c:c2:16:84:e9:6b:41:eb:c9:50:4e: b1:28:05:c3:7e:c7:aa:db:cb:6b:57:ef:c1:e7:23: e7:06:44:88:0f:2b:de:b5:c4:ba:95:59:db:b6:ff: e0:11:5c:6d:59:be:68:0a:4f:0f:6d:95:46:da:58: ce:66:16:38:df:18:15:28:67:15:2c:cc:fd:dd:af: 15:ca:75:c6:7e:9b:63:20:da:e6:54:11:de:b9:5b: 43:a5:c5:4f:2b:6a:7e:90:6b:a9:1b:76:b0:1d:04: e1:6f:2b:33:22:a9:66:90:60:6a:94:ce:72:66:47: e5:b2:47:8c:4f:fc:77:0a:8c:c2:6b:33:cc:00:77: d7:b3:c9:e4:d1:cc:ba:22:c0:7e:25:ee:fd:4b:cb: 52:75:c6:68:67:ee:30:ab:f7:a1:1b:a5:4a:22:3a: de:a5:ca:ae:00:37:fd:a7:4f:84:db:7d:53:5a:ed: 4c:7f:af:2b:56:ec:16:7f:a5:c1:65:45:76:40:b5: eb:ba:d9:88:8a:e2:89:02:47:85:b3:d6:10:26:ee: 92:57:60:0a:3f:03:d2:ec:5d:b1:56:d8:46:12:1a: e5:29:04:9e:9e:e7:fa:58:94:b3:d7:87:36:ce:61: 8b:c9:20:4f:bd:45:60:00:a4:2b:22:5e:65:b9:bd: 29:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:3F:E0:CA:27:84:4C:98:78:5F:65:C2:9C:61:65:3A:44:DE:84:24 X509v3 Authority Key Identifier: keyid:98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/qD_gyieETJh4X2XCnGFlOkTehCQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2404:7600:2000::/35 Signature Algorithm: sha256WithRSAEncryption b6:9a:12:0c:a1:32:93:11:79:f4:97:92:b2:cb:4f:8e:b3:5a: db:49:98:f1:f5:5e:16:05:1a:31:50:c6:b7:e8:ac:55:3b:85: bf:9d:a4:82:64:45:42:92:02:63:2c:09:26:0b:aa:4a:e1:f4: 3d:80:46:c4:e1:be:1c:7e:5e:a6:ec:eb:95:7f:5a:68:25:44: 5b:da:30:71:b9:bd:ab:71:08:fb:d1:13:00:c8:6d:8e:b2:7e: bb:cf:d7:8b:96:3e:57:d1:6f:85:c8:a8:20:09:b3:f0:0c:0b: 63:b2:e3:52:8f:aa:1d:09:3a:09:0c:ef:a4:24:2e:12:47:f4: e0:12:b3:ff:02:62:76:a0:04:ac:5b:8b:bc:92:0c:05:43:34: 2c:1b:5b:b1:9e:22:3a:98:ef:3a:3c:5a:cc:17:a4:18:6e:6e: a8:dd:9b:a0:e6:0d:d2:c9:00:a8:c5:b0:b4:ed:0d:d7:80:c8: 8a:9b:cd:c9:2e:4f:7d:9c:15:c8:e2:de:39:09:42:d6:b4:87: db:4f:e9:14:03:76:25:ae:13:a8:f1:53:2d:35:f2:3c:dd:05: 94:aa:cd:7d:81:3e:0c:f4:33:e1:51:79:77:5e:a3:a6:5a:ca: 9b:4a:f5:18:49:ca:e6:bf:0d:fc:ca:34:73:be:79:f2:d6:14: bc:9e:c8:09 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFNgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTgy NEM1NTUyMjhCMjhCNjk4RERFNzdCQzFBREQwRTI4MDdCODZCOTAeFw0yNTA5MTEw NjE2NDJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEE4M0ZFMENBMjc4NDRD OTg3ODVGNjVDMjlDNjE2NTNBNDRERTg0MjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCk55AswhaE6WtB68lQTrEoBcN+x6rby2tX78HnI+cGRIgPK961 xLqVWdu2/+ARXG1ZvmgKTw9tlUbaWM5mFjjfGBUoZxUszP3drxXKdcZ+m2Mg2uZU Ed65W0OlxU8ran6Qa6kbdrAdBOFvKzMiqWaQYGqUznJmR+WyR4xP/HcKjMJrM8wA d9ezyeTRzLoiwH4l7v1Ly1J1xmhn7jCr96EbpUoiOt6lyq4AN/2nT4TbfVNa7Ux/ rytW7BZ/pcFlRXZAteu62YiK4okCR4Wz1hAm7pJXYAo/A9LsXbFW2EYSGuUpBJ6e 5/pYlLPXhzbOYYvJIE+9RWAApCsiXmW5vSn1AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUqD/gyieETJh4X2XCnGFlOkTehCQwHwYDVR0jBBgwFoAUmCTFVSKLKLaY3ed7 wa3Q4oB7hrkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjUv bUNURlZTS0xLTGFZM2VkN3dhM1E0b0I3aHJrLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9tQ1RGVlNLTEtMYVkzZWQ3d2EzUTRvQjdocmsuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC82NS9xRF9neWllRVRKaDRYMlhD bkdGbE9rVGVoQ1Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYF JAR2ACAwDQYJKoZIhvcNAQELBQADggEBALaaEgyhMpMRefSXkrLLT46zWttJmPH1 XhYFGjFQxrforFU7hb+dpIJkRUKSAmMsCSYLqkrh9D2ARsThvhx+Xqbs65V/Wmgl RFvaMHG5vatxCPvREwDIbY6yfrvP14uWPlfRb4XIqCAJs/AMC2Oy41KPqh0JOgkM 76QkLhJH9OASs/8CYnagBKxbi7ySDAVDNCwbW7GeIjqY7zo8WswXpBhubqjdm6Dm DdLJAKjFsLTtDdeAyIqbzckuT32cFcji3jkJQta0h9tP6RQDdiWuE6jxUy018jzd BZSqzX2BPgz0M+FReXdeo6ZayptK9RhJyua/DfzKNHO+efLWFLyeyAk= -----END CERTIFICATE-----Generated at Mon Oct 20 13:30:54 2025 by rpki-client