$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1232/1aQww9cPJhLPbc0TG3tApknV8Ko.roa File: 1aQww9cPJhLPbc0TG3tApknV8Ko.roa (raw, json) Hash identifier: ANaRpAjZShiPajdKHTIe9sjNeKMSVnY/EeLx7drqQNc= Subject key identifier: D5:A4:30:C3:D7:0F:26:12:CF:6D:CD:13:1B:7B:40:A6:49:D5:F0:AA Certificate issuer: /CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4 Certificate serial: 44 Authority key identifier: F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/1aQww9cPJhLPbc0TG3tApknV8Ko.roa Signing time: Fri 22 Aug 2025 06:30:23 +0000 ROA not before: Fri 22 Aug 2025 06:30:23 +0000 ROA not after: Thu 20 Aug 2026 07:49:18 +0000 asID: 138457 IP address blocks: 45.120.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 10:05:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4 Validity Not Before: Aug 22 06:30:23 2025 GMT Not After : Aug 20 07:49:18 2026 GMT Subject: CN=D5A430C3D70F2612CF6DCD131B7B40A649D5F0AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:bc:d5:e6:06:85:5f:51:46:7c:87:85:2a:c8: 9a:c0:88:a8:12:18:5f:ac:8b:05:22:04:9b:9f:b1: b1:7a:f5:e6:16:25:0a:de:d0:33:f9:31:11:9f:47: de:ae:85:f1:06:99:c4:c3:f4:d3:ad:1f:45:4a:45: 59:59:3a:5b:4e:07:c0:18:45:ee:c7:cd:82:c2:da: 27:d3:09:57:b2:08:4f:9d:13:22:21:fa:88:96:83: 37:78:17:e0:60:08:67:ab:3c:6d:63:d9:83:f0:b9: 01:2a:df:12:35:76:8a:e7:a7:c0:51:de:bf:9c:1d: 02:0a:4e:f3:02:20:c0:95:eb:2c:98:4b:df:af:fa: 54:eb:be:69:e6:f8:28:01:3b:d1:69:db:4b:4a:39: 93:e9:20:d8:ed:1a:d2:4a:99:03:15:d2:99:54:90: 32:aa:7c:0a:ca:a5:32:49:65:91:46:5b:c2:3a:5c: cf:3c:4e:f8:44:ef:b8:45:ae:87:69:a6:bc:b8:72: 63:c1:af:5a:49:77:c8:bd:58:22:f9:00:ec:d8:ad: eb:c5:1c:db:c8:e7:9a:70:88:45:4a:56:57:5b:1d: 59:dc:01:b1:be:f0:e3:fe:f4:ad:87:a6:41:a0:53: a5:ce:b5:af:ef:10:0c:4a:35:78:60:46:18:1b:9b: 24:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:A4:30:C3:D7:0F:26:12:CF:6D:CD:13:1B:7B:40:A6:49:D5:F0:AA X509v3 Authority Key Identifier: keyid:F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/1aQww9cPJhLPbc0TG3tApknV8Ko.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.120.243.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:5b:62:e4:65:d7:e0:0b:86:b2:aa:b1:a7:7d:2a:32:ae:e5: 8e:cb:da:7d:df:1c:dd:3a:db:5b:e5:b3:6c:6b:3b:76:2a:c8: 32:a7:6e:e6:73:ec:4e:98:86:bf:37:25:72:f5:e4:39:23:1b: 39:5f:77:a8:cd:72:94:6d:75:8e:46:06:24:4f:40:d7:8b:a0: 12:3f:e8:ff:b8:ef:60:5a:e3:13:85:d0:6b:3c:5d:de:ef:d6: 5a:6d:8d:8c:ea:01:2d:ba:61:e0:42:6f:b8:19:fd:91:37:3a: 13:1a:2d:8f:66:ed:b3:4b:73:a0:bf:4c:14:a2:94:fd:6a:6f: 39:11:5a:4c:38:88:87:45:99:ee:4c:46:e5:c7:e0:41:9c:6b: 70:a0:33:b3:6d:bd:4d:06:a5:78:aa:de:9b:5b:a9:a5:7f:c2: 03:b2:2f:8a:fd:d4:d2:75:39:38:cb:a0:58:50:1a:88:b1:52: 70:10:87:81:9e:4a:1f:6a:dd:e5:02:aa:77:5c:ad:24:b8:96: c8:39:53:65:76:17:21:d4:d6:e4:bf:00:13:16:fb:12:94:60: fd:a1:76:29:b5:ba:cf:84:56:b5:fe:39:f7:de:82:f8:c3:c8: 80:ae:87:61:ce:8e:9f:67:d5:87:70:84:ca:b1:c4:0c:52:91: fb:65:b3:80 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBRDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGMTk4 OUI0MDY5MDFBREY4ODEwQjlEQ0RDNEUwRkM5RTdFODVFRUI0MB4XDTI1MDgyMjA2 MzAyM1oXDTI2MDgyMDA3NDkxOFowMzExMC8GA1UEAxMoRDVBNDMwQzNENzBGMjYx MkNGNkRDRDEzMUI3QjQwQTY0OUQ1RjBBQTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANO81eYGhV9RRnyHhSrImsCIqBIYX6yLBSIEm5+xsXr15hYlCt7Q M/kxEZ9H3q6F8QaZxMP0060fRUpFWVk6W04HwBhF7sfNgsLaJ9MJV7IIT50TIiH6 iJaDN3gX4GAIZ6s8bWPZg/C5ASrfEjV2iuenwFHev5wdAgpO8wIgwJXrLJhL36/6 VOu+aeb4KAE70WnbS0o5k+kg2O0a0kqZAxXSmVSQMqp8CsqlMkllkUZbwjpczzxO +ETvuEWuh2mmvLhyY8GvWkl3yL1YIvkA7Nit68Uc28jnmnCIRUpWV1sdWdwBsb7w 4/70rYemQaBTpc61r+8QDEo1eGBGGBubJFMCAwEAAaOCAfMwggHvMB0GA1UdDgQW BBTVpDDD1w8mEs9tzRMbe0CmSdXwqjAfBgNVHSMEGDAWgBTxmJtAaQGt+IELnc3E 4PyefoXutDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xMjMy LzhaaWJRR2tCcmZpQkM1M054T0Q4bm42RjdyUS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOFppYlFHa0JyZmlCQzUzTnhPRDhubjZGN3JRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIzMi8xYVF3dzljUEpoTFBi YzBURzN0QXBrblY4S28ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQALXjzMA0GCSqGSIb3DQEBCwUAA4IBAQBaW2LkZdfgC4ayqrGnfSoyruWOy9p9 3xzdOttb5bNsazt2Ksgyp27mc+xOmIa/NyVy9eQ5Ixs5X3eozXKUbXWORgYkT0DX i6ASP+j/uO9gWuMThdBrPF3e79ZabY2M6gEtumHgQm+4Gf2RNzoTGi2PZu2zS3Og v0wUopT9am85EVpMOIiHRZnuTEblx+BBnGtwoDOzbb1NBqV4qt6bW6mlf8IDsi+K /dTSdTk4y6BYUBqIsVJwEIeBnkofat3lAqp3XK0kuJbIOVNldhch1NbkvwATFvsS lGD9oXYptbrPhFa1/jn33oL4w8iArodhzo6fZ9WHcITKscQMUpH7ZbOA -----END CERTIFICATE-----Generated at Mon Sep 8 09:07:50 2025 by rpki-client