$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1232/4OmMwHZdd0WjdZK52xGL4UYdR-s.roa File: 4OmMwHZdd0WjdZK52xGL4UYdR-s.roa (raw, json) Hash identifier: Zzi/3bmJfIrw0XdJjnutorU7VeSwCIv8oXloxDA5R2c= Subject key identifier: E0:E9:8C:C0:76:5D:77:45:A3:75:92:B9:DB:11:8B:E1:46:1D:47:EB Certificate issuer: /CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4 Certificate serial: 48 Authority key identifier: F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/4OmMwHZdd0WjdZK52xGL4UYdR-s.roa Signing time: Fri 22 Aug 2025 06:35:04 +0000 ROA not before: Fri 22 Aug 2025 06:35:04 +0000 ROA not after: Thu 20 Aug 2026 07:49:18 +0000 asID: 138457 IP address blocks: 2402:7d80:fffe::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 15:05:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4 Validity Not Before: Aug 22 06:35:04 2025 GMT Not After : Aug 20 07:49:18 2026 GMT Subject: CN=E0E98CC0765D7745A37592B9DB118BE1461D47EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:95:2b:f1:38:00:40:0b:6d:0b:3d:e8:ca:d9: 29:fb:ec:89:df:6f:1a:5a:b7:e2:0e:a1:09:22:6d: c5:e7:e9:1c:c4:bf:59:d3:b7:93:e2:cf:3a:8a:33: 14:00:d7:8f:45:c7:2b:ad:d5:cd:76:f5:6c:67:6b: b1:63:75:59:f8:df:28:91:77:eb:7e:1b:6b:af:9e: f4:48:b0:2f:64:cc:24:da:f2:09:e5:25:f0:b7:5c: e6:3d:7b:4f:bd:be:06:bb:ab:1e:46:92:ae:37:d6: c1:6e:df:dc:e7:4f:70:8d:5b:cb:b5:ca:0c:b2:d3: ca:41:58:d8:b4:a1:de:1e:ae:1e:b2:a8:a9:21:9a: 96:ee:e7:61:bf:fc:fb:0e:ce:91:1e:0f:76:68:f0: f2:9c:e9:aa:e7:ee:40:6a:d4:da:48:47:74:da:6f: 6f:c2:88:78:a4:92:92:b3:50:84:c5:86:df:6a:b9: a5:5a:2b:b6:d1:09:93:91:ec:ab:01:5f:24:a7:87: fb:4a:b6:f3:86:6d:00:53:14:5d:a4:c7:52:4f:32: 3b:56:6b:3f:ea:ce:96:fc:05:f6:94:1e:ce:9a:d7: 2e:81:b1:d3:3c:00:2c:e2:36:83:6e:8b:fd:82:d2: cc:ae:41:de:65:c2:02:23:6b:6e:57:3e:d7:b9:5f: 2b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E9:8C:C0:76:5D:77:45:A3:75:92:B9:DB:11:8B:E1:46:1D:47:EB X509v3 Authority Key Identifier: keyid:F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/4OmMwHZdd0WjdZK52xGL4UYdR-s.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2402:7d80:fffe::/48 Signature Algorithm: sha256WithRSAEncryption 8d:08:6a:b2:39:80:a9:4e:a5:fa:da:20:26:26:c6:34:cc:29: f8:ee:d3:85:e8:c2:5c:79:c8:66:e1:a7:f8:8b:2d:66:41:af: 5f:0f:41:fb:4e:1b:7a:7d:c3:5b:84:65:6b:b8:4b:d3:5a:55: 65:61:e9:58:54:bc:48:0b:f2:20:5f:22:6a:19:af:f8:e7:bc: eb:85:1e:dd:cd:b8:f1:db:54:da:5f:89:84:01:13:d8:21:40: 60:34:9c:ca:a2:01:96:68:1d:c0:27:ea:5e:5d:32:b8:39:b7: a3:e4:3d:d2:30:a6:70:cf:f2:55:24:4a:ee:1d:36:88:68:6f: 84:89:c7:76:bd:c7:22:ec:54:aa:21:02:46:1c:aa:d3:91:9f: 8a:ea:e2:6a:f3:6b:5e:ba:54:b4:ea:cf:66:da:fa:51:ba:d2: 05:8d:92:84:4e:f9:10:9c:a1:c6:98:40:f1:b0:4d:18:cc:68: a0:16:41:d9:76:97:53:7d:29:ec:21:89:fc:f4:13:bc:c6:6a: 77:7e:85:7d:9c:13:cd:cc:a9:ab:68:b9:7f:5d:b8:bc:5a:67: 9c:42:5f:08:74:84:86:ce:f3:2c:71:23:a0:0a:87:40:27:aa: a3:53:d6:72:db:4d:6e:8a:14:2d:b9:c4:64:1d:0e:18:39:19: 4a:25:1a:00 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIBSDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGMTk4 OUI0MDY5MDFBREY4ODEwQjlEQ0RDNEUwRkM5RTdFODVFRUI0MB4XDTI1MDgyMjA2 MzUwNFoXDTI2MDgyMDA3NDkxOFowMzExMC8GA1UEAxMoRTBFOThDQzA3NjVENzc0 NUEzNzU5MkI5REIxMThCRTE0NjFENDdFQjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALeVK/E4AEALbQs96MrZKfvsid9vGlq34g6hCSJtxefpHMS/WdO3 k+LPOoozFADXj0XHK63VzXb1bGdrsWN1WfjfKJF3634ba6+e9EiwL2TMJNryCeUl 8Ldc5j17T72+BrurHkaSrjfWwW7f3OdPcI1by7XKDLLTykFY2LSh3h6uHrKoqSGa lu7nYb/8+w7OkR4Pdmjw8pzpqufuQGrU2khHdNpvb8KIeKSSkrNQhMWG32q5pVor ttEJk5HsqwFfJKeH+0q284ZtAFMUXaTHUk8yO1ZrP+rOlvwF9pQezprXLoGx0zwA LOI2g26L/YLSzK5B3mXCAiNrblc+17lfK/kCAwEAAaOCAfYwggHyMB0GA1UdDgQW BBTg6YzAdl13RaN1krnbEYvhRh1H6zAfBgNVHSMEGDAWgBTxmJtAaQGt+IELnc3E 4PyefoXutDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xMjMy LzhaaWJRR2tCcmZpQkM1M054T0Q4bm42RjdyUS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOFppYlFHa0JyZmlCQzUzTnhPRDhubjZGN3JRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIzMi80T21Nd0haZGQwV2pk Wks1MnhHTDRVWWRSLXMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcAJAJ9gP/+MA0GCSqGSIb3DQEBCwUAA4IBAQCNCGqyOYCpTqX62iAmJsY0zCn4 7tOF6MJcechm4af4iy1mQa9fD0H7Tht6fcNbhGVruEvTWlVlYelYVLxIC/IgXyJq Ga/457zrhR7dzbjx21TaX4mEARPYIUBgNJzKogGWaB3AJ+peXTK4Obej5D3SMKZw z/JVJEruHTaIaG+Eicd2vcci7FSqIQJGHKrTkZ+K6uJq82teulS06s9m2vpRutIF jZKETvkQnKHGmEDxsE0YzGigFkHZdpdTfSnsIYn89BO8xmp3foV9nBPNzKmraLl/ Xbi8WmecQl8IdISGzvMscSOgCodAJ6qjU9Zy201uihQtucRkHQ4YORlKJRoA -----END CERTIFICATE-----Generated at Mon Sep 8 11:58:09 2025 by rpki-client