$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/357/q-9Ry7-1k_3djUpTgosZ8igSYDc.roa File: q-9Ry7-1k_3djUpTgosZ8igSYDc.roa (raw, json) Hash identifier: 6k801Xs8mnm7m8Hxv8JUH3LVMp3KISuyxt42Gy19gjk= Subject key identifier: AB:EF:51:CB:BF:B5:93:FD:DD:8D:4A:53:82:8B:19:F2:28:12:60:37 Certificate issuer: /CN=B3BA6AEF3B8FA2E5D9B5E43438E0020D426A1ECA Certificate serial: 1853 Authority key identifier: B3:BA:6A:EF:3B:8F:A2:E5:D9:B5:E4:34:38:E0:02:0D:42:6A:1E:CA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/q-9Ry7-1k_3djUpTgosZ8igSYDc.roa Signing time: Tue 22 Jul 2025 08:42:13 +0000 ROA not before: Tue 22 Jul 2025 08:42:13 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 24429 IP address blocks: 2408:4016::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/s7pq7zuPouXZteQ0OOACDUJqHso.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/s7pq7zuPouXZteQ0OOACDUJqHso.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 15:14:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6227 (0x1853) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3BA6AEF3B8FA2E5D9B5E43438E0020D426A1ECA Validity Not Before: Jul 22 08:42:13 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=ABEF51CBBFB593FDDD8D4A53828B19F228126037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:28:92:a2:c5:f2:41:7f:48:5e:c4:47:0b:06: 87:49:8e:bf:cb:ba:b3:26:31:54:8c:48:2e:d3:b4: fa:0a:fb:77:46:18:ed:f3:5b:73:45:b6:de:5e:4c: 94:3b:07:d7:30:73:1d:2d:57:d9:3e:d5:24:1e:fa: b0:96:da:cf:aa:3b:de:58:6e:5f:f4:72:57:34:cf: 3c:ca:18:79:ff:3e:38:d0:3a:95:f8:e3:63:cc:f5: 1b:48:e3:91:a4:a3:74:d0:6a:ff:ed:75:88:83:62: 65:52:ff:7e:15:66:21:9b:6e:f7:b9:a5:b9:41:7d: ee:fe:fc:fe:41:e4:97:25:a2:6b:fc:aa:b2:4e:bb: bc:14:aa:41:d8:7f:53:c2:e7:18:bf:0e:0f:b2:b1: f7:b5:21:c8:c3:5b:78:47:47:45:b7:19:0b:3f:0d: 3b:0a:00:7d:0d:40:aa:1d:01:24:c6:eb:83:7d:e4: e6:9b:4f:94:1a:13:ba:2e:88:27:09:81:60:55:0e: dd:94:22:01:c9:0f:df:6a:51:3d:2a:93:ba:59:3f: 0d:90:14:73:d8:cd:b7:74:d7:62:03:61:55:a8:e0: 3f:80:ee:04:f5:a6:a8:2c:12:cc:91:f7:2a:cc:2a: 4f:2e:0d:0c:3b:98:06:02:5d:0b:4f:d7:39:e7:99: 49:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:EF:51:CB:BF:B5:93:FD:DD:8D:4A:53:82:8B:19:F2:28:12:60:37 X509v3 Authority Key Identifier: keyid:B3:BA:6A:EF:3B:8F:A2:E5:D9:B5:E4:34:38:E0:02:0D:42:6A:1E:CA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/s7pq7zuPouXZteQ0OOACDUJqHso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/q-9Ry7-1k_3djUpTgosZ8igSYDc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2408:4016::/32 Signature Algorithm: sha256WithRSAEncryption 72:1a:c4:3c:73:43:8f:72:fb:fd:f8:cb:47:72:0c:8d:d7:df: a5:58:ea:39:98:57:a2:bf:ef:29:30:16:a6:43:b5:6f:a3:cc: d3:58:ed:91:40:47:60:a5:8b:af:2e:bd:39:0b:71:0e:d4:88: 4b:70:89:2d:7e:1f:53:57:e8:5b:0f:42:20:ff:aa:a1:07:b5: 4f:96:8a:07:31:70:da:9c:cc:2e:c6:b6:51:40:c4:b2:09:ca: b4:fa:60:10:f4:9d:1a:47:49:4e:ce:46:df:55:6a:bf:cd:cb: 65:9f:e6:62:de:7f:01:96:37:2a:46:76:28:57:ad:9b:f4:2b: db:36:3c:eb:81:0d:ce:3b:24:1d:71:89:6c:b1:f0:9a:e6:ff: f2:13:80:04:6a:da:88:1e:96:93:c9:3f:02:fb:a4:e6:e0:b4: e9:31:31:ac:24:ed:19:48:11:a3:f7:ea:b2:d5:3a:e9:81:f8: 3e:6e:5f:1d:0b:eb:37:62:0a:08:53:89:c2:e9:00:81:03:a5: e1:96:f4:08:75:bc:d6:82:6a:e8:28:d9:0a:16:0a:de:a4:b7: 56:0f:35:a2:32:13:a8:57:9a:d8:eb:69:26:6f:76:1f:f8:07: 8e:57:04:8a:68:92:e6:f3:ae:f3:3b:c0:75:47:ed:4a:ed:37: a4:49:f5:94 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICGFMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjNC QTZBRUYzQjhGQTJFNUQ5QjVFNDM0MzhFMDAyMEQ0MjZBMUVDQTAeFw0yNTA3MjIw ODQyMTNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEFCRUY1MUNCQkZCNTkz RkRERDhENEE1MzgyOEIxOUYyMjgxMjYwMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6KJKixfJBf0hexEcLBodJjr/LurMmMVSMSC7TtPoK+3dGGO3z W3NFtt5eTJQ7B9cwcx0tV9k+1SQe+rCW2s+qO95Ybl/0clc0zzzKGHn/PjjQOpX4 42PM9RtI45Gko3TQav/tdYiDYmVS/34VZiGbbve5pblBfe7+/P5B5Jclomv8qrJO u7wUqkHYf1PC5xi/Dg+ysfe1IcjDW3hHR0W3GQs/DTsKAH0NQKodASTG64N95Oab T5QaE7ouiCcJgWBVDt2UIgHJD99qUT0qk7pZPw2QFHPYzbd012IDYVWo4D+A7gT1 pqgsEsyR9yrMKk8uDQw7mAYCXQtP1znnmUktAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUq+9Ry7+1k/3djUpTgosZ8igSYDcwHwYDVR0jBBgwFoAUs7pq7zuPouXZteQ0 OOACDUJqHsowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzU3 L3M3cHE3enVQb3VYWnRlUTBPT0FDRFVKcUhzby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvczdwcTd6dVBvdVhadGVRME9PQUNEVUpxSHNvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzU3L3EtOVJ5Ny0xa18zZGpV cFRnb3NaOGlnU1lEYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcD BQAkCEAWMA0GCSqGSIb3DQEBCwUAA4IBAQByGsQ8c0OPcvv9+MtHcgyN19+lWOo5 mFeiv+8pMBamQ7Vvo8zTWO2RQEdgpYuvLr05C3EO1IhLcIktfh9TV+hbD0Ig/6qh B7VPlooHMXDanMwuxrZRQMSyCcq0+mAQ9J0aR0lOzkbfVWq/zctln+Zi3n8Bljcq RnYoV62b9CvbNjzrgQ3OOyQdcYlssfCa5v/yE4AEatqIHpaTyT8C+6Tm4LTpMTGs JO0ZSBGj9+qy1Trpgfg+bl8dC+s3YgoIU4nC6QCBA6XhlvQIdbzWgmroKNkKFgre pLdWDzWiMhOoV5rY62kmb3Yf+AeOVwSKaJLm867zO8B1R+1K7TekSfWU -----END CERTIFICATE-----Generated at Wed Jul 23 12:51:57 2025 by rpki-client