$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1228/--5p3HNP_npcM9WwQGiJmHx5u0U.roa File: --5p3HNP_npcM9WwQGiJmHx5u0U.roa (raw, json) Hash identifier: Rl9Es6qphuLb/+2nbxNbdm0tzkYUplAdlWLJexuDZlE= Subject key identifier: FB:EE:69:DC:73:4F:FE:7A:5C:33:D5:B0:40:68:89:98:7C:79:BB:45 Certificate issuer: /CN=ADD2726DD6FF9F5A459AE5B0A9EE8E7DDFC7F07C Certificate serial: 0299 Authority key identifier: AD:D2:72:6D:D6:FF:9F:5A:45:9A:E5:B0:A9:EE:8E:7D:DF:C7:F0:7C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/--5p3HNP_npcM9WwQGiJmHx5u0U.roa Signing time: Tue 16 Sep 2025 07:28:27 +0000 ROA not before: Tue 16 Sep 2025 07:28:27 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 62468 IP address blocks: 45.248.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 10:06:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 665 (0x299) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADD2726DD6FF9F5A459AE5B0A9EE8E7DDFC7F07C Validity Not Before: Sep 16 07:28:27 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=FBEE69DC734FFE7A5C33D5B0406889987C79BB45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ad:66:97:45:99:83:41:86:3f:6e:4e:f0:a2: 8e:c6:5d:3d:d3:dd:35:c1:99:e1:a8:5d:58:75:5a: 1b:b1:46:df:71:71:60:6c:6d:df:da:d5:e8:b5:a8: 3c:fd:59:6e:b7:2e:ea:77:c5:44:7f:35:20:1c:f3: 9d:2d:7c:41:62:26:c5:8b:90:c3:99:51:b4:33:07: 17:f3:28:9e:85:92:80:a4:25:17:5f:ad:63:d8:76: 23:7f:49:3c:03:ab:7e:25:1c:3b:5e:f3:47:26:77: 14:b7:71:64:a5:94:13:fe:73:ef:51:db:ab:4a:df: a0:e8:0e:09:bb:5f:e1:34:b5:a3:68:43:eb:09:6d: 52:c0:a6:70:27:bc:42:db:6f:7c:4f:52:a7:a8:5e: 32:6e:c2:87:d7:d3:d9:8d:b7:3f:28:6d:f8:bb:92: 29:d0:ad:06:e9:73:3c:32:75:2a:20:03:ae:13:35: c0:07:00:dc:8f:f6:59:f6:8c:a5:88:53:9a:f9:27: 8c:21:2c:af:65:07:a5:38:4a:24:42:f6:47:06:01: ac:9a:5f:e4:ea:0a:f5:44:e4:90:88:c1:5d:17:3c: 95:4a:d1:39:54:3f:40:e6:36:83:b5:74:d5:b8:3c: fc:62:43:1c:a9:f5:93:13:97:ac:34:a9:66:12:cb: c2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:EE:69:DC:73:4F:FE:7A:5C:33:D5:B0:40:68:89:98:7C:79:BB:45 X509v3 Authority Key Identifier: keyid:AD:D2:72:6D:D6:FF:9F:5A:45:9A:E5:B0:A9:EE:8E:7D:DF:C7:F0:7C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/--5p3HNP_npcM9WwQGiJmHx5u0U.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.248.8.0/22 Signature Algorithm: sha256WithRSAEncryption 61:a2:5e:1e:58:b1:44:05:92:69:e0:ea:6e:02:1e:1b:a2:63: 77:2b:1f:a6:d1:fc:ec:1e:35:c6:55:23:22:5b:69:5e:e4:f6: 42:86:68:b4:51:c9:7a:b5:a7:98:f7:02:f3:7c:d0:07:c1:42: f8:af:33:73:45:c6:8c:58:79:42:6f:42:bf:a1:4e:f8:39:fa: 20:c4:9f:f7:a7:f2:85:34:49:35:dc:e7:06:df:55:7b:be:fe: 3b:db:67:63:12:2c:f5:95:96:66:63:1f:0e:24:e5:78:0a:17: 61:9a:16:64:c9:67:db:bd:57:ab:9a:9c:35:b8:0c:63:f4:e9: b5:dc:f9:7e:e1:b3:69:1b:23:22:9b:2e:c3:09:4a:81:e5:e5: 6a:2e:f3:e1:45:35:ee:61:88:5d:27:ce:2b:4f:9e:ef:b1:5c: 12:cf:2f:ea:15:12:d4:ba:97:51:24:be:ee:f6:8c:9b:1e:04: 73:0b:28:81:8d:51:66:3c:de:84:b5:5f:2a:18:2d:98:80:e0: 13:98:ac:70:dc:93:ae:53:dd:49:02:76:0f:55:c0:8c:cb:d8: 47:b1:1e:55:2c:de:a5:ba:0a:c8:15:6b:26:e5:59:9d:01:73: f6:df:b2:f8:cf:7b:0a:1f:38:14:60:b6:71:45:7e:3a:72:15: 57:97:21:13 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICApkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQURE MjcyNkRENkZGOUY1QTQ1OUFFNUIwQTlFRThFN0RERkM3RjA3QzAeFw0yNTA5MTYw NzI4MjdaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEZCRUU2OURDNzM0RkZF N0E1QzMzRDVCMDQwNjg4OTk4N0M3OUJCNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCurWaXRZmDQYY/bk7woo7GXT3T3TXBmeGoXVh1WhuxRt9xcWBs bd/a1ei1qDz9WW63Lup3xUR/NSAc850tfEFiJsWLkMOZUbQzBxfzKJ6FkoCkJRdf rWPYdiN/STwDq34lHDte80cmdxS3cWSllBP+c+9R26tK36DoDgm7X+E0taNoQ+sJ bVLApnAnvELbb3xPUqeoXjJuwofX09mNtz8obfi7kinQrQbpczwydSogA64TNcAH ANyP9ln2jKWIU5r5J4whLK9lB6U4SiRC9kcGAayaX+TqCvVE5JCIwV0XPJVK0TlU P0DmNoO1dNW4PPxiQxyp9ZMTl6w0qWYSy8KTAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU++5p3HNP/npcM9WwQGiJmHx5u0UwHwYDVR0jBBgwFoAUrdJybdb/n1pFmuWw qe6Ofd/H8HwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIy OC9yZEp5YmRiX24xcEZtdVd3cWU2T2ZkX0g4SHcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3JkSnliZGJfbjFwRm11V3dxZTZPZmRfSDhIdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEyMjgvLS01cDNITlBfbnBj TTlXd1FHaUptSHg1dTBVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAi34CDANBgkqhkiG9w0BAQsFAAOCAQEAYaJeHlixRAWSaeDqbgIeG6Jjdysf ptH87B41xlUjIltpXuT2QoZotFHJerWnmPcC83zQB8FC+K8zc0XGjFh5Qm9Cv6FO +Dn6IMSf96fyhTRJNdznBt9Ve77+O9tnYxIs9ZWWZmMfDiTleAoXYZoWZMln271X q5qcNbgMY/Tptdz5fuGzaRsjIpsuwwlKgeXlai7z4UU17mGIXSfOK0+e77FcEs8v 6hUS1LqXUSS+7vaMmx4EcwsogY1RZjzehLVfKhgtmIDgE5iscNyTrlPdSQJ2D1XA jMvYR7EeVSzepboKyBVrJuVZnQFz9t+y+M97Ch84FGC2cUV+OnIVV5chEw== -----END CERTIFICATE-----Generated at Wed Oct 22 07:59:00 2025 by rpki-client