$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1232/fOJpl53zG3Pjs97UUlI6499ky1Q.roa File: fOJpl53zG3Pjs97UUlI6499ky1Q.roa (raw, json) Hash identifier: T7VmGNRiQn2WgQuhGgQEx84p4+3yegJ/VgoOo17g2mg= Subject key identifier: 7C:E2:69:97:9D:F3:1B:73:E3:B3:DE:D4:52:52:3A:E3:DF:64:CB:54 Certificate issuer: /CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4 Certificate serial: 3C Authority key identifier: F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/fOJpl53zG3Pjs97UUlI6499ky1Q.roa Signing time: Fri 22 Aug 2025 06:30:21 +0000 ROA not before: Fri 22 Aug 2025 06:30:21 +0000 ROA not after: Thu 20 Aug 2026 07:49:18 +0000 asID: 138457 IP address blocks: 2402:7d80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 10:05:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4 Validity Not Before: Aug 22 06:30:21 2025 GMT Not After : Aug 20 07:49:18 2026 GMT Subject: CN=7CE269979DF31B73E3B3DED452523AE3DF64CB54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:da:dc:e0:fc:b5:53:f9:34:aa:eb:7e:73:5d: 8a:1e:3d:4a:bf:47:ec:ec:16:d3:51:9b:98:54:a5: 9c:54:31:eb:20:0e:29:67:f6:5c:84:4e:52:64:d7: 05:08:a2:cf:02:91:da:f7:c3:19:7e:bb:6d:bc:5c: 0e:01:5e:6b:d4:cd:17:e2:da:e8:9a:08:18:eb:7d: d7:44:30:82:e8:c8:16:89:2d:45:94:40:5c:9f:3f: 18:b2:5e:bb:ab:ba:ed:57:7d:c5:cb:8a:99:a5:11: b7:b8:99:13:79:df:c6:d1:4b:be:d6:20:f7:30:06: 58:3d:da:92:45:b5:c9:c9:4e:bb:60:69:c5:77:8b: bc:50:dd:62:20:00:38:67:eb:ea:e5:d9:28:aa:ff: e6:f4:a4:eb:93:c8:38:95:28:13:e6:76:9c:ea:37: c6:ab:c9:f4:40:0f:61:68:96:d2:d9:fd:02:db:47: 77:58:2e:95:cf:f9:ea:9e:bf:2c:a3:ef:39:ff:00: d9:a1:73:12:3b:ef:5f:44:0b:92:7e:8c:b1:e1:c1: 23:c4:03:bd:0b:01:00:2e:67:ed:51:63:48:98:36: 95:11:54:5a:42:08:b8:24:6f:02:81:1c:07:f6:76: a8:bf:d4:46:16:50:7c:66:5b:44:10:55:51:5f:ff: 94:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:E2:69:97:9D:F3:1B:73:E3:B3:DE:D4:52:52:3A:E3:DF:64:CB:54 X509v3 Authority Key Identifier: keyid:F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/fOJpl53zG3Pjs97UUlI6499ky1Q.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2402:7d80::/48 Signature Algorithm: sha256WithRSAEncryption 5b:11:15:d4:6e:2a:a5:96:aa:27:ea:80:8a:63:4d:72:52:75: 6f:31:f6:2a:cd:28:83:75:a4:b7:9b:61:ae:97:cb:46:bd:6e: a8:14:bf:c6:cd:5a:d1:41:e1:9a:64:88:4c:36:f6:93:a6:ef: 97:42:99:04:6e:eb:34:68:24:3f:42:cf:fb:13:cf:a1:4a:90: e9:cb:43:34:4b:db:66:c2:e6:20:2c:ee:eb:c8:b3:4a:8b:cd: f1:19:58:08:e6:86:28:a9:0a:ce:38:ef:e7:20:5b:80:eb:10: c0:d5:f0:ff:b1:10:b3:5e:13:d5:e8:b1:17:73:49:a0:46:bf: 71:cb:f1:49:02:a0:93:93:2b:ac:c1:2e:70:fc:bb:57:32:81: 91:9f:d9:4c:fd:98:e0:00:e0:d0:3f:63:42:07:41:bb:50:b1: ca:b3:ac:d9:d6:ad:d6:7b:4b:41:9d:21:19:f0:7a:ba:26:2b: 4c:e2:30:a9:ea:f5:da:f8:b4:a3:73:7a:1e:88:13:b3:ac:9e: c6:c9:24:56:fa:20:b9:32:34:02:8f:cc:82:e7:15:40:94:4c: 55:78:fc:c9:ac:35:4d:e0:0e:3b:93:c9:c5:15:99:cf:8f:df: 2b:67:a5:82:7a:7c:6a:7d:4b:a4:57:24:18:4b:ba:94:df:8a: 67:cf:f9:71 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIBPDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGMTk4 OUI0MDY5MDFBREY4ODEwQjlEQ0RDNEUwRkM5RTdFODVFRUI0MB4XDTI1MDgyMjA2 MzAyMVoXDTI2MDgyMDA3NDkxOFowMzExMC8GA1UEAxMoN0NFMjY5OTc5REYzMUI3 M0UzQjNERUQ0NTI1MjNBRTNERjY0Q0I1NDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL3a3OD8tVP5NKrrfnNdih49Sr9H7OwW01GbmFSlnFQx6yAOKWf2 XIROUmTXBQiizwKR2vfDGX67bbxcDgFea9TNF+La6JoIGOt910QwgujIFoktRZRA XJ8/GLJeu6u67Vd9xcuKmaURt7iZE3nfxtFLvtYg9zAGWD3akkW1yclOu2BpxXeL vFDdYiAAOGfr6uXZKKr/5vSk65PIOJUoE+Z2nOo3xqvJ9EAPYWiW0tn9AttHd1gu lc/56p6/LKPvOf8A2aFzEjvvX0QLkn6MseHBI8QDvQsBAC5n7VFjSJg2lRFUWkII uCRvAoEcB/Z2qL/URhZQfGZbRBBVUV//lGsCAwEAAaOCAfYwggHyMB0GA1UdDgQW BBR84mmXnfMbc+Oz3tRSUjrj32TLVDAfBgNVHSMEGDAWgBTxmJtAaQGt+IELnc3E 4PyefoXutDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xMjMy LzhaaWJRR2tCcmZpQkM1M054T0Q4bm42RjdyUS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOFppYlFHa0JyZmlCQzUzTnhPRDhubjZGN3JRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIzMi9mT0pwbDUzekczUGpz OTdVVWxJNjQ5OWt5MVEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcAJAJ9gAAAMA0GCSqGSIb3DQEBCwUAA4IBAQBbERXUbiqllqon6oCKY01yUnVv MfYqzSiDdaS3m2Gul8tGvW6oFL/GzVrRQeGaZIhMNvaTpu+XQpkEbus0aCQ/Qs/7 E8+hSpDpy0M0S9tmwuYgLO7ryLNKi83xGVgI5oYoqQrOOO/nIFuA6xDA1fD/sRCz XhPV6LEXc0mgRr9xy/FJAqCTkyuswS5w/LtXMoGRn9lM/ZjgAODQP2NCB0G7ULHK s6zZ1q3We0tBnSEZ8Hq6JitM4jCp6vXa+LSjc3oeiBOzrJ7GySRW+iC5MjQCj8yC 5xVAlExVePzJrDVN4A47k8nFFZnPj98rZ6WCenxqfUukVyQYS7qU34pnz/lx -----END CERTIFICATE-----Generated at Mon Sep 8 09:09:16 2025 by rpki-client