$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/654/fueDrUdkJjq3Fh2yqH4qYN_mGBU.roa File: fueDrUdkJjq3Fh2yqH4qYN_mGBU.roa (raw, json) Hash identifier: UryzZxE3raAFvefOehQQfkP8Bg/CybqwnETa9kULVnM= Subject key identifier: 7E:E7:83:AD:47:64:26:3A:B7:16:1D:B2:A8:7E:2A:60:DF:E6:18:15 Certificate issuer: /CN=FFADC8DD61366CD84D99521B638380E8B502E6E4 Certificate serial: 172F Authority key identifier: FF:AD:C8:DD:61:36:6C:D8:4D:99:52:1B:63:83:80:E8:B5:02:E6:E4 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_63I3WE2bNhNmVIbY4OA6LUC5uQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/fueDrUdkJjq3Fh2yqH4qYN_mGBU.roa Signing time: Sat 13 Sep 2025 03:06:20 +0000 ROA not before: Sat 13 Sep 2025 03:06:20 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 63199 IP address blocks: 139.159.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/_63I3WE2bNhNmVIbY4OA6LUC5uQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/_63I3WE2bNhNmVIbY4OA6LUC5uQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_63I3WE2bNhNmVIbY4OA6LUC5uQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 00:06:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5935 (0x172f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFADC8DD61366CD84D99521B638380E8B502E6E4 Validity Not Before: Sep 13 03:06:20 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=7EE783AD4764263AB7161DB2A87E2A60DFE61815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:87:c8:25:8d:50:29:72:27:16:ed:e5:c3:c2: 70:50:c2:4e:3b:f6:70:9e:06:0a:f4:46:65:ce:be: 6a:ef:d0:33:2a:f1:ba:cd:71:78:94:4f:ac:b7:24: 28:2a:75:80:61:ad:8b:f0:a7:ae:44:28:95:1d:45: 2c:fb:27:c7:b4:77:38:7b:59:8b:2e:07:5e:ef:8c: c3:88:6f:17:cc:af:a9:10:de:e8:55:e6:9b:94:ef: bc:39:79:6c:19:b7:1e:15:3e:00:13:a3:f8:d7:81: 9b:98:99:b1:2f:05:27:27:41:36:a7:93:78:a3:aa: 24:bb:be:f0:2c:60:03:82:1f:72:4e:ea:5f:cb:92: 10:41:e1:f7:0c:a7:28:f3:25:1c:29:16:f4:09:dd: 2e:08:34:cd:0d:94:64:a4:9b:33:8e:4d:1c:e5:ae: e6:e8:b1:9d:b2:d5:96:20:89:e3:1a:e8:6f:a9:c5: de:cf:71:08:65:aa:18:3b:3c:e4:48:8e:e5:d4:52: 42:a8:c4:9d:e9:ce:3a:91:3e:a6:cb:01:b7:df:1c: 68:b1:a9:41:a8:08:47:8a:c0:06:dc:0b:5a:12:98: 0d:99:d5:35:51:53:6e:80:70:f7:00:f8:d4:ff:ea: 6d:fa:14:ba:45:7b:fb:de:41:07:be:0b:6d:ad:71: 5d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:E7:83:AD:47:64:26:3A:B7:16:1D:B2:A8:7E:2A:60:DF:E6:18:15 X509v3 Authority Key Identifier: keyid:FF:AD:C8:DD:61:36:6C:D8:4D:99:52:1B:63:83:80:E8:B5:02:E6:E4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/_63I3WE2bNhNmVIbY4OA6LUC5uQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_63I3WE2bNhNmVIbY4OA6LUC5uQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/fueDrUdkJjq3Fh2yqH4qYN_mGBU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 139.159.50.0/24 Signature Algorithm: sha256WithRSAEncryption a5:74:02:8d:e6:11:14:81:7a:b5:70:eb:46:fe:c8:ff:02:dd: c7:f9:77:21:14:c6:7a:65:a8:8f:3b:28:20:d5:a0:bc:d8:5f: 13:93:cf:93:35:c6:dc:d3:83:9d:a3:9b:a0:38:a0:ed:9f:92: 73:e4:df:d6:cf:c3:07:de:9d:b0:e7:39:48:cf:a2:57:33:0f: 6d:61:83:4c:3f:a8:53:31:c3:c9:aa:9a:18:2c:a6:42:89:6b: 89:87:bb:fc:64:ca:9a:46:4b:be:33:36:77:43:62:06:dc:2d: 9e:6e:79:ae:79:65:42:ca:a1:4c:34:31:89:fc:c6:51:30:90: ec:b0:43:32:62:f2:90:6f:9e:a1:6f:60:38:9a:95:14:58:35: eb:a2:3d:ff:57:9b:64:98:a3:01:a1:27:55:4d:7f:42:50:29: a7:a2:13:81:0d:52:5b:9a:f6:00:2d:11:75:47:9b:59:78:48: 95:ea:86:06:31:fa:b2:a1:36:86:27:2b:66:63:5a:b8:54:db: 22:ae:fb:9c:e6:2c:05:6a:8e:50:a3:22:54:e6:8c:fa:e8:b1: 0e:d3:f9:95:32:15:cf:18:46:3f:32:8a:8a:80:ea:b5:05:95: ff:cb:97:31:46:37:d8:63:12:34:7b:8d:46:4b:3c:e4:c0:32: 1b:85:e0:96 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFy8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkZB REM4REQ2MTM2NkNEODREOTk1MjFCNjM4MzgwRThCNTAyRTZFNDAeFw0yNTA5MTMw MzA2MjBaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDdFRTc4M0FENDc2NDI2 M0FCNzE2MURCMkE4N0UyQTYwREZFNjE4MTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVh8gljVApcicW7eXDwnBQwk479nCeBgr0RmXOvmrv0DMq8brN cXiUT6y3JCgqdYBhrYvwp65EKJUdRSz7J8e0dzh7WYsuB17vjMOIbxfMr6kQ3uhV 5puU77w5eWwZtx4VPgATo/jXgZuYmbEvBScnQTank3ijqiS7vvAsYAOCH3JO6l/L khBB4fcMpyjzJRwpFvQJ3S4INM0NlGSkmzOOTRzlrubosZ2y1ZYgieMa6G+pxd7P cQhlqhg7PORIjuXUUkKoxJ3pzjqRPqbLAbffHGixqUGoCEeKwAbcC1oSmA2Z1TVR U26AcPcA+NT/6m36FLpFe/veQQe+C22tcV21AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUfueDrUdkJjq3Fh2yqH4qYN/mGBUwHwYDVR0jBBgwFoAU/63I3WE2bNhNmVIb Y4OA6LUC5uQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjU0 L182M0kzV0UyYk5oTm1WSWJZNE9BNkxVQzV1US5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvXzYzSTNXRTJiTmhObVZJYlk0T0E2TFVDNXVRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjU0L2Z1ZURyVWRrSmpxM0Zo MnlxSDRxWU5fbUdCVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACLnzIwDQYJKoZIhvcNAQELBQADggEBAKV0Ao3mERSBerVw60b+yP8C3cf5dyEU xnplqI87KCDVoLzYXxOTz5M1xtzTg52jm6A4oO2fknPk39bPwwfenbDnOUjPolcz D21hg0w/qFMxw8mqmhgspkKJa4mHu/xkyppGS74zNndDYgbcLZ5uea55ZULKoUw0 MYn8xlEwkOywQzJi8pBvnqFvYDialRRYNeuiPf9Xm2SYowGhJ1VNf0JQKaeiE4EN Ulua9gAtEXVHm1l4SJXqhgYx+rKhNoYnK2ZjWrhU2yKu+5zmLAVqjlCjIlTmjPro sQ7T+ZUyFc8YRj8yioqA6rUFlf/LlzFGN9hjEjR7jUZLPOTAMhuF4JY= -----END CERTIFICATE-----Generated at Mon Oct 20 00:04:20 2025 by rpki-client