$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/WfnJFvtvLLmdBDUxHvriGdlK4hw.roa File: WfnJFvtvLLmdBDUxHvriGdlK4hw.roa (raw, json) Hash identifier: Ixfrgb+lm3Icpun1ne1PcsUB9coTtYRP1bzFwuCb/rE= Subject key identifier: 59:F9:C9:16:FB:6F:2C:B9:9D:04:35:31:1E:FA:E2:19:D9:4A:E2:1C Certificate issuer: /CN=4911CB6D544B3B6905532964C8E1A472BDCBC267 Certificate serial: 24F3 Authority key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/WfnJFvtvLLmdBDUxHvriGdlK4hw.roa Signing time: Sat 13 Sep 2025 03:08:51 +0000 ROA not before: Sat 13 Sep 2025 03:08:51 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 60721 IP address blocks: 223.29.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 13:08:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9459 (0x24f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267 Validity Not Before: Sep 13 03:08:51 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=59F9C916FB6F2CB99D0435311EFAE219D94AE21C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:18:3a:2c:3e:2c:7b:a9:2d:2a:af:90:bf:08: 09:cb:ce:b8:b1:96:42:52:1d:96:e1:05:da:c9:ef: 2b:cb:e7:d7:2e:66:1a:52:18:cc:5e:62:fa:b8:87: e8:38:87:96:fb:2d:88:ef:49:09:3c:5b:88:17:5e: 0e:b8:16:37:4d:d8:7c:78:58:54:e7:df:b5:9a:c6: b5:51:16:61:f2:87:b6:b6:7c:d1:c7:26:b5:df:dc: 22:e9:a6:f2:a8:b6:10:3d:ce:da:7a:9b:48:44:3c: 28:de:f1:43:14:14:4b:f3:5b:bd:84:63:ef:46:86: a3:d8:7f:42:3a:1c:64:69:61:6f:74:9e:98:1f:3b: 0f:1c:e8:d7:ad:38:e7:24:c2:c8:d4:5f:11:5d:d8: 0f:4c:16:84:19:22:d5:3f:5e:a8:7a:0c:09:c0:ac: 9a:71:e7:7f:0b:84:e8:92:38:02:b0:b9:38:71:b4: 93:1c:c6:5c:06:99:67:98:69:67:0b:26:4c:20:6c: 80:6b:06:e3:b7:c4:6a:87:c1:62:9d:62:f4:f5:04: 51:71:58:31:3a:00:f1:ae:e0:c1:c1:66:54:29:b9: 55:e0:70:f3:9c:47:5d:65:66:27:a6:fe:2b:98:e3: 89:d5:b1:22:72:f6:37:63:6b:3d:64:89:db:be:bd: b0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:F9:C9:16:FB:6F:2C:B9:9D:04:35:31:1E:FA:E2:19:D9:4A:E2:1C X509v3 Authority Key Identifier: keyid:49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/WfnJFvtvLLmdBDUxHvriGdlK4hw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.29.254.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:ee:49:a1:df:77:44:a2:14:c4:b3:c2:69:c5:e3:05:90:43: e6:af:01:28:c0:a4:84:47:29:29:29:c3:e5:c1:fa:7f:1d:1d: 16:ef:5a:ee:5e:e1:e8:48:39:d1:a5:94:35:02:bb:fa:d8:6e: fd:fc:e9:0d:ef:f3:4b:9c:05:d0:be:72:f5:09:3d:e7:79:7e: d9:49:70:6b:ae:81:dd:a3:17:41:78:ea:44:a1:47:f1:c7:1e: c9:c7:60:0c:4f:81:1a:01:da:03:46:b0:9f:80:63:ab:1a:37: a1:bd:aa:4a:35:c0:02:08:49:15:86:e0:69:65:ea:89:71:0e: 18:9b:4a:13:a9:4c:76:a0:dc:a6:5e:de:34:f4:79:1c:23:e3: d8:89:ce:47:53:37:8e:e0:1f:8b:85:c2:ad:bb:3a:89:79:7b: 0c:3f:b0:ba:99:54:24:87:27:8d:54:a0:af:97:16:bb:44:23: a4:69:16:56:e9:c9:b0:66:88:f9:51:07:82:43:8b:06:09:d7: 9a:c9:99:48:99:cb:d3:7a:06:8f:38:9a:8d:18:1a:8a:5f:4d: 61:05:90:c4:d8:d6:2a:1f:9d:2e:01:32:7b:59:fb:59:0a:d0: 0a:72:0f:3c:f2:7d:73:31:42:79:67:84:c0:00:af:ac:69:57: d0:26:40:69 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICJPMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDkx MUNCNkQ1NDRCM0I2OTA1NTMyOTY0QzhFMUE0NzJCRENCQzI2NzAeFw0yNTA5MTMw MzA4NTFaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDU5RjlDOTE2RkI2RjJD Qjk5RDA0MzUzMTFFRkFFMjE5RDk0QUUyMUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDsGDosPix7qS0qr5C/CAnLzrixlkJSHZbhBdrJ7yvL59cuZhpS GMxeYvq4h+g4h5b7LYjvSQk8W4gXXg64FjdN2Hx4WFTn37WaxrVRFmHyh7a2fNHH JrXf3CLppvKothA9ztp6m0hEPCje8UMUFEvzW72EY+9GhqPYf0I6HGRpYW90npgf Ow8c6NetOOckwsjUXxFd2A9MFoQZItU/Xqh6DAnArJpx538LhOiSOAKwuThxtJMc xlwGmWeYaWcLJkwgbIBrBuO3xGqHwWKdYvT1BFFxWDE6APGu4MHBZlQpuVXgcPOc R11lZiem/iuY44nVsSJy9jdjaz1kidu+vbDXAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUWfnJFvtvLLmdBDUxHvriGdlK4hwwHwYDVR0jBBgwFoAUSRHLbVRLO2kFUylk yOGkcr3LwmcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTQx MS9TUkhMYlZSTE8ya0ZVeWxreU9Ha2NyM0x3bWMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NSSExiVlJMTzJrRlV5bGt5T0drY3IzTHdtYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE0MTEvV2ZuSkZ2dHZMTG1k QkRVeEh2cmlHZGxLNGh3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAN8d/jANBgkqhkiG9w0BAQsFAAOCAQEAX+5Jod93RKIUxLPCacXjBZBD5q8B KMCkhEcpKSnD5cH6fx0dFu9a7l7h6Eg50aWUNQK7+thu/fzpDe/zS5wF0L5y9Qk9 53l+2Ulwa66B3aMXQXjqRKFH8cceycdgDE+BGgHaA0awn4Bjqxo3ob2qSjXAAghJ FYbgaWXqiXEOGJtKE6lMdqDcpl7eNPR5HCPj2InOR1M3juAfi4XCrbs6iXl7DD+w uplUJIcnjVSgr5cWu0QjpGkWVunJsGaI+VEHgkOLBgnXmsmZSJnL03oGjziajRga il9NYQWQxNjWKh+dLgEye1n7WQrQCnIPPPJ9czFCeWeEwACvrGlX0CZAaQ== -----END CERTIFICATE-----Generated at Mon Sep 15 12:13:38 2025 by rpki-client