$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1232/0SApI_yjyt058-yY4QkK-9_hHf0.roa File: 0SApI_yjyt058-yY4QkK-9_hHf0.roa (raw, json) Hash identifier: wc8AtkR1KwoxzppGOgBW08GNL1QcRHViEidhlZwYxg8= Subject key identifier: D1:20:29:23:FC:A3:CA:DD:39:F3:EC:98:E1:09:0A:FB:DF:E1:1D:FD Certificate issuer: /CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4 Certificate serial: 42 Authority key identifier: F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/0SApI_yjyt058-yY4QkK-9_hHf0.roa Signing time: Fri 22 Aug 2025 06:30:23 +0000 ROA not before: Fri 22 Aug 2025 06:30:23 +0000 ROA not after: Thu 20 Aug 2026 07:49:18 +0000 asID: 139140 IP address blocks: 2402:7d80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 10:05:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4 Validity Not Before: Aug 22 06:30:23 2025 GMT Not After : Aug 20 07:49:18 2026 GMT Subject: CN=D1202923FCA3CADD39F3EC98E1090AFBDFE11DFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:de:7d:89:8f:b7:67:d5:ab:38:89:a1:8e:2c: 81:24:ad:2f:84:0a:ec:d8:4f:64:fd:2c:6f:9a:12: 93:df:58:7e:de:c2:69:d8:d4:e2:df:09:b8:a6:95: 68:3b:e2:55:c7:7b:37:00:6e:fd:63:35:49:68:c7: d7:aa:b6:66:a3:88:8e:2b:c7:98:5f:74:34:d9:03: 33:2d:21:be:4d:55:0d:59:65:19:28:a1:62:ea:07: b5:a3:da:07:0e:05:20:3e:0c:15:1e:81:08:7a:be: c0:df:7b:42:01:c4:00:66:17:e1:06:83:b9:4b:49: ee:a7:21:a0:9a:64:6c:ac:7b:e7:31:77:40:07:6d: 39:aa:bb:4e:8f:5a:c7:b5:aa:97:6f:39:b2:04:c3: 34:fb:fc:5f:50:a7:4e:9e:34:f3:b3:b9:fa:4d:9e: 5d:02:f3:3d:93:8d:c7:62:e5:79:63:0b:37:10:a6: e1:86:f5:19:75:11:35:ee:42:1a:f5:d6:53:bc:a5: 8e:40:d3:65:d4:4f:ec:33:4e:03:88:d3:80:97:37: ca:34:3e:2b:e4:6d:bc:68:00:46:26:6d:19:9a:a5: e5:7f:23:73:92:e3:17:8d:60:7d:98:ec:6e:f6:35: 13:9e:3d:aa:65:9a:84:c3:d9:5b:3a:33:f6:5b:75: c7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:20:29:23:FC:A3:CA:DD:39:F3:EC:98:E1:09:0A:FB:DF:E1:1D:FD X509v3 Authority Key Identifier: keyid:F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/0SApI_yjyt058-yY4QkK-9_hHf0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2402:7d80::/48 Signature Algorithm: sha256WithRSAEncryption 4f:6e:64:93:26:9f:dd:e2:31:ad:ec:15:b1:03:f0:b1:d8:13: 7a:fe:f6:e5:b1:8c:ec:30:73:5c:9c:93:f8:2c:33:df:fe:f7: 3c:e9:e6:f5:83:b6:dc:2d:9e:fc:cd:32:dc:c9:75:e1:c1:be: 4b:95:7a:bd:b5:74:5e:28:58:cf:30:69:24:0b:6c:f5:2a:a1: 87:08:bf:aa:75:60:20:fe:12:a8:bf:0a:1e:83:18:c2:f0:5b: ad:d8:89:89:4f:db:02:a8:91:cf:fa:ee:3d:67:d4:47:86:a0: 1c:1e:94:38:19:f3:4a:f4:91:00:f7:2d:c8:28:29:b1:ea:aa: 53:0a:23:5a:bd:8d:11:08:5f:b9:ef:d4:3f:ee:6d:4b:5b:b2: 77:8f:3d:69:b0:9c:2e:0e:d8:9b:39:13:e7:91:31:36:3d:4e: 21:61:e1:c2:b3:ee:1d:41:b5:34:98:32:53:0e:70:71:f3:e5: aa:10:ec:6c:4f:20:8f:2f:04:c8:9b:52:61:ce:49:8f:39:39: 2a:f3:31:cb:c0:2c:e0:7c:d6:6d:32:49:58:bd:66:22:c7:dd: 84:6a:fc:72:8b:2b:d7:f9:66:c7:8a:f8:f0:cd:dc:50:15:53: 31:f0:87:57:52:31:4f:7b:c1:13:57:1a:c6:8e:23:00:ca:e4: 84:c8:44:33 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIBQjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGMTk4 OUI0MDY5MDFBREY4ODEwQjlEQ0RDNEUwRkM5RTdFODVFRUI0MB4XDTI1MDgyMjA2 MzAyM1oXDTI2MDgyMDA3NDkxOFowMzExMC8GA1UEAxMoRDEyMDI5MjNGQ0EzQ0FE RDM5RjNFQzk4RTEwOTBBRkJERkUxMURGRDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJ3efYmPt2fVqziJoY4sgSStL4QK7NhPZP0sb5oSk99Yft7CadjU 4t8JuKaVaDviVcd7NwBu/WM1SWjH16q2ZqOIjivHmF90NNkDMy0hvk1VDVllGSih YuoHtaPaBw4FID4MFR6BCHq+wN97QgHEAGYX4QaDuUtJ7qchoJpkbKx75zF3QAdt Oaq7To9ax7Wql285sgTDNPv8X1CnTp4087O5+k2eXQLzPZONx2LleWMLNxCm4Yb1 GXURNe5CGvXWU7yljkDTZdRP7DNOA4jTgJc3yjQ+K+RtvGgARiZtGZql5X8jc5Lj F41gfZjsbvY1E549qmWahMPZWzoz9lt1x+UCAwEAAaOCAfYwggHyMB0GA1UdDgQW BBTRICkj/KPK3Tnz7JjhCQr73+Ed/TAfBgNVHSMEGDAWgBTxmJtAaQGt+IELnc3E 4PyefoXutDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xMjMy LzhaaWJRR2tCcmZpQkM1M054T0Q4bm42RjdyUS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOFppYlFHa0JyZmlCQzUzTnhPRDhubjZGN3JRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIzMi8wU0FwSV95anl0MDU4 LXlZNFFrSy05X2hIZjAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcAJAJ9gAAAMA0GCSqGSIb3DQEBCwUAA4IBAQBPbmSTJp/d4jGt7BWxA/Cx2BN6 /vblsYzsMHNcnJP4LDPf/vc86eb1g7bcLZ78zTLcyXXhwb5LlXq9tXReKFjPMGkk C2z1KqGHCL+qdWAg/hKovwoegxjC8Fut2ImJT9sCqJHP+u49Z9RHhqAcHpQ4GfNK 9JEA9y3IKCmx6qpTCiNavY0RCF+579Q/7m1LW7J3jz1psJwuDtibORPnkTE2PU4h YeHCs+4dQbU0mDJTDnBx8+WqEOxsTyCPLwTIm1JhzkmPOTkq8zHLwCzgfNZtMklY vWYix92EavxyiyvX+WbHivjwzdxQFVMx8IdXUjFPe8ETVxrGjiMAyuSEyEQz -----END CERTIFICATE-----Generated at Mon Sep 8 09:09:09 2025 by rpki-client