$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/654/KQ-H06YzPy6rV4AqzFO-X8dibgw.roa File: KQ-H06YzPy6rV4AqzFO-X8dibgw.roa (raw, json) Hash identifier: /RpjV4HoINs3B8RP//omgR12bSPllVR3bfI79qOU30M= Subject key identifier: 29:0F:87:D3:A6:33:3F:2E:AB:57:80:2A:CC:53:BE:5F:C7:62:6E:0C Certificate issuer: /CN=DA993FE5C04FF9F22C5262630BEC37F5B3A78285 Certificate serial: 1748 Authority key identifier: DA:99:3F:E5:C0:4F:F9:F2:2C:52:62:63:0B:EC:37:F5:B3:A7:82:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2pk_5cBP-fIsUmJjC-w39bOngoU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/KQ-H06YzPy6rV4AqzFO-X8dibgw.roa Signing time: Sat 13 Sep 2025 03:06:21 +0000 ROA not before: Sat 13 Sep 2025 03:06:21 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 63199 IP address blocks: 2400:5280:3c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/2pk_5cBP-fIsUmJjC-w39bOngoU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/2pk_5cBP-fIsUmJjC-w39bOngoU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2pk_5cBP-fIsUmJjC-w39bOngoU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 04:06:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5960 (0x1748) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA993FE5C04FF9F22C5262630BEC37F5B3A78285 Validity Not Before: Sep 13 03:06:21 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=290F87D3A6333F2EAB57802ACC53BE5FC7626E0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c3:78:29:2d:cf:f4:6a:90:26:89:3b:e4:ec: 70:c3:61:fd:f3:b7:84:ba:57:a8:0c:96:f1:d6:45: 12:c1:a4:83:8a:b3:a9:f2:39:b4:af:0d:77:32:ab: b1:13:b6:85:3e:1a:36:1a:de:79:27:1f:50:88:2d: 90:03:97:7f:0d:3b:88:e5:34:05:22:18:de:4d:6e: 6f:9a:ea:4a:72:07:a2:52:f7:5b:34:08:02:92:b1: ae:87:59:e2:13:7b:5b:8d:c2:97:c7:a4:a9:7c:86: 48:15:07:19:cb:2d:45:90:a7:1e:15:81:17:ce:e9: 2b:e4:e5:16:d4:e0:2e:dc:50:b8:a0:c4:f5:ca:04: 2a:d3:2f:78:07:82:3e:1d:26:17:d9:eb:b2:eb:c5: 0b:11:51:f1:22:68:28:f2:71:79:40:97:16:d9:fd: 89:2d:62:60:f1:4f:d7:c5:e0:7c:8d:9d:e8:21:df: 42:c5:15:cf:35:f8:dd:06:be:08:db:4d:db:40:85: f9:1d:97:59:7e:1b:9b:90:be:07:5f:04:17:ca:e1: b0:05:a8:df:23:2b:d7:35:bc:27:9a:30:4e:9c:33: 86:79:2b:65:62:0c:9d:dd:e8:32:90:3d:33:d1:e4: c2:aa:cd:58:1a:c7:c3:f4:65:ec:9e:9d:05:84:43: ad:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:0F:87:D3:A6:33:3F:2E:AB:57:80:2A:CC:53:BE:5F:C7:62:6E:0C X509v3 Authority Key Identifier: keyid:DA:99:3F:E5:C0:4F:F9:F2:2C:52:62:63:0B:EC:37:F5:B3:A7:82:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/2pk_5cBP-fIsUmJjC-w39bOngoU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2pk_5cBP-fIsUmJjC-w39bOngoU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/KQ-H06YzPy6rV4AqzFO-X8dibgw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2400:5280:3c00::/38 Signature Algorithm: sha256WithRSAEncryption 89:57:50:5c:d1:56:3c:bd:ee:d9:67:89:0c:f5:08:27:38:c8: c4:b5:44:52:bc:56:06:e1:0a:76:19:c8:0e:e9:d2:db:df:ab: 02:a4:8b:97:8a:d6:81:93:e0:64:e2:ac:f5:63:95:cd:76:c6: b0:72:fb:be:e1:d0:d4:5d:47:21:42:95:02:5a:5d:84:98:6d: 29:fa:57:90:1f:a9:7d:bd:b0:ac:0f:27:78:9c:10:e5:3b:f0: f7:fc:8f:37:37:71:53:d5:b6:9f:96:39:97:ad:73:17:e8:aa: fd:c9:93:18:a8:46:22:19:4d:f6:8f:e6:d3:e8:74:4f:3f:42: 97:27:1f:09:40:11:46:89:9f:5f:d2:3d:70:d8:bb:fd:20:a0: 55:69:1a:53:5a:4e:80:01:92:ef:a2:7e:6f:6c:ed:55:69:cb: 0d:70:c6:66:fb:30:a6:6f:5f:fb:df:a5:cb:70:97:c3:77:6d: 97:d7:31:83:68:69:09:15:2c:a6:88:03:c7:50:4d:e2:04:84: 7f:30:e4:da:de:20:09:87:88:b1:e1:ad:17:61:ea:0f:38:d0: 2b:09:cf:45:ea:e7:29:42:9c:11:68:0a:a5:08:df:80:30:3a: a0:0a:5e:04:bf:0f:f6:03:23:5d:d7:18:a8:af:e7:94:0b:85: e3:1f:5c:ce -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICF0gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREE5 OTNGRTVDMDRGRjlGMjJDNTI2MjYzMEJFQzM3RjVCM0E3ODI4NTAeFw0yNTA5MTMw MzA2MjFaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDI5MEY4N0QzQTYzMzNG MkVBQjU3ODAyQUNDNTNCRTVGQzc2MjZFMEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9w3gpLc/0apAmiTvk7HDDYf3zt4S6V6gMlvHWRRLBpIOKs6ny ObSvDXcyq7ETtoU+GjYa3nknH1CILZADl38NO4jlNAUiGN5Nbm+a6kpyB6JS91s0 CAKSsa6HWeITe1uNwpfHpKl8hkgVBxnLLUWQpx4VgRfO6Svk5RbU4C7cULigxPXK BCrTL3gHgj4dJhfZ67LrxQsRUfEiaCjycXlAlxbZ/YktYmDxT9fF4HyNnegh30LF Fc81+N0GvgjbTdtAhfkdl1l+G5uQvgdfBBfK4bAFqN8jK9c1vCeaME6cM4Z5K2Vi DJ3d6DKQPTPR5MKqzVgax8P0ZeyenQWEQ60FAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUKQ+H06YzPy6rV4AqzFO+X8dibgwwHwYDVR0jBBgwFoAU2pk/5cBP+fIsUmJj C+w39bOngoUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjU0 LzJwa181Y0JQLWZJc1VtSmpDLXczOWJPbmdvVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvMnBrXzVjQlAtZklzVW1KakMtdzM5Yk9uZ29VLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjU0L0tRLUgwNll6UHk2clY0 QXF6Rk8tWDhkaWJndy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgD BgIkAFKAPDANBgkqhkiG9w0BAQsFAAOCAQEAiVdQXNFWPL3u2WeJDPUIJzjIxLVE UrxWBuEKdhnIDunS29+rAqSLl4rWgZPgZOKs9WOVzXbGsHL7vuHQ1F1HIUKVAlpd hJhtKfpXkB+pfb2wrA8neJwQ5Tvw9/yPNzdxU9W2n5Y5l61zF+iq/cmTGKhGIhlN 9o/m0+h0Tz9ClycfCUARRomfX9I9cNi7/SCgVWkaU1pOgAGS76J+b2ztVWnLDXDG Zvswpm9f+9+ly3CXw3dtl9cxg2hpCRUspogDx1BN4gSEfzDk2t4gCYeIseGtF2Hq DzjQKwnPRernKUKcEWgKpQjfgDA6oApeBL8P9gMjXdcYqK/nlAuF4x9czg== -----END CERTIFICATE-----Generated at Mon Oct 20 00:04:31 2025 by rpki-client