$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1646/TrV7UsSK143wR8Oshhdn_GGZydU.roa File: TrV7UsSK143wR8Oshhdn_GGZydU.roa (raw, json) Hash identifier: 86oQ7VZKUGMb85AuA0wIVI2BI50mGbjGriMoWRTGVQs= Subject key identifier: 4E:B5:7B:52:C4:8A:D7:8D:F0:47:C3:AC:86:17:67:FC:61:99:C9:D5 Certificate issuer: /CN=1619C986780A13F380FE45EDC28EF4C842884843 Certificate serial: 0162 Authority key identifier: 16:19:C9:86:78:0A:13:F3:80:FE:45:ED:C2:8E:F4:C8:42:88:48:43 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FhnJhngKE_OA_kXtwo70yEKISEM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1646/TrV7UsSK143wR8Oshhdn_GGZydU.roa Signing time: Tue 03 Mar 2026 09:17:45 +0000 ROA not before: Tue 03 Mar 2026 09:17:45 +0000 ROA not after: Sat 09 Jan 2027 08:23:18 +0000 asID: 135629 IP address blocks: 69.231.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1646/FhnJhngKE_OA_kXtwo70yEKISEM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1646/FhnJhngKE_OA_kXtwo70yEKISEM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FhnJhngKE_OA_kXtwo70yEKISEM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Mar 2026 15:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 354 (0x162) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1619C986780A13F380FE45EDC28EF4C842884843 Validity Not Before: Mar 3 09:17:45 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=4EB57B52C48AD78DF047C3AC861767FC6199C9D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:79:cc:a3:94:61:81:00:5c:ad:dd:a4:22:a9: 94:b7:48:c2:31:82:4f:c2:cc:a5:f6:d0:8c:c4:86: b5:7b:ca:9c:87:58:1e:bf:3f:d3:e5:8b:b7:57:6f: 7a:05:a0:6b:67:e9:38:8c:9f:27:41:74:cd:97:89: b7:36:3b:a1:e8:a3:4d:7d:6e:ef:c0:0b:87:b1:4e: dd:c4:0c:e4:82:f4:5b:06:b1:35:6e:61:09:31:e8: 1e:66:bd:99:ed:e6:52:0a:8b:ad:f6:1e:d1:ad:19: cc:9e:9c:36:2f:f8:20:21:b4:80:0b:b2:ae:e8:68: 6d:33:6d:b1:d2:76:12:8d:4a:a0:89:ff:10:ad:48: 9c:fa:0d:54:ad:18:21:07:f2:a0:da:12:2a:65:99: a1:8e:aa:40:83:9e:d6:b7:a0:44:e5:52:6e:15:8b: a3:79:9c:be:dc:23:bb:31:42:e2:0f:e5:27:bf:e7: a0:73:66:ce:0e:c8:83:36:b9:3e:aa:a4:8c:15:3a: be:b9:4c:d9:a3:99:93:b0:04:93:68:45:45:1a:3b: 32:95:d5:12:6c:49:92:55:8a:20:8e:82:6d:0a:70: 15:8e:f7:6a:e6:ce:b2:a7:6b:e2:54:53:25:79:79: 28:30:cb:c6:f2:37:52:a1:75:ab:fd:e0:d5:cc:7e: 4a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:B5:7B:52:C4:8A:D7:8D:F0:47:C3:AC:86:17:67:FC:61:99:C9:D5 X509v3 Authority Key Identifier: keyid:16:19:C9:86:78:0A:13:F3:80:FE:45:ED:C2:8E:F4:C8:42:88:48:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1646/FhnJhngKE_OA_kXtwo70yEKISEM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FhnJhngKE_OA_kXtwo70yEKISEM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1646/TrV7UsSK143wR8Oshhdn_GGZydU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 69.231.128.0/18 Signature Algorithm: sha256WithRSAEncryption 01:d1:24:d1:fe:67:f7:e4:a7:cc:e1:8e:56:13:0b:6a:fd:9e: 5e:49:81:0a:e5:5f:c0:c8:62:f8:fc:33:ef:fe:9b:bb:87:5f: 84:5e:2d:9d:bd:cd:b2:1d:18:91:f1:0f:58:e0:d7:30:5f:13: df:b4:d9:b4:a1:c0:2d:55:ea:f5:8f:74:4b:7a:80:04:f5:b2: 56:48:0f:d2:7a:39:41:d1:20:a1:61:68:ec:17:f9:1f:fe:b4: 36:f2:9e:a9:cb:25:b7:07:13:d4:58:51:57:9b:35:b5:03:2a: c3:90:0f:26:de:05:c4:3a:5b:8c:31:3e:3a:a1:77:cb:91:cd: dc:bc:2a:bf:a5:88:63:c9:1a:04:54:99:7c:95:c7:90:75:37: 8f:e8:17:90:54:ff:20:64:59:de:17:5c:9c:8f:14:ff:6d:d5: 6c:42:7c:93:d8:a8:54:ad:90:01:e8:ff:43:e5:76:31:eb:dd: 1f:6b:ba:96:e6:e2:0d:2c:15:13:2f:42:1f:f5:c6:d8:11:2f: 77:d8:5e:b3:68:10:f6:1c:af:99:d1:74:25:90:23:67:c2:9f: 0f:cf:8f:ba:8a:99:cd:c0:dd:21:7d:e5:9c:86:65:64:72:0f: d8:b4:ad:6e:d7:cf:91:9d:5a:b2:fb:b4:41:5f:7b:b6:81:4b: 2d:1d:2f:63 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICAWIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYx OUM5ODY3ODBBMTNGMzgwRkU0NUVEQzI4RUY0Qzg0Mjg4NDg0MzAeFw0yNjAzMDMw OTE3NDVaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDRFQjU3QjUyQzQ4QUQ3 OERGMDQ3QzNBQzg2MTc2N0ZDNjE5OUM5RDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRecyjlGGBAFyt3aQiqZS3SMIxgk/CzKX20IzEhrV7ypyHWB6/ P9Pli7dXb3oFoGtn6TiMnydBdM2Xibc2O6Hoo019bu/AC4exTt3EDOSC9FsGsTVu YQkx6B5mvZnt5lIKi632HtGtGcyenDYv+CAhtIALsq7oaG0zbbHSdhKNSqCJ/xCt SJz6DVStGCEH8qDaEiplmaGOqkCDnta3oETlUm4Vi6N5nL7cI7sxQuIP5Se/56Bz Zs4OyIM2uT6qpIwVOr65TNmjmZOwBJNoRUUaOzKV1RJsSZJViiCOgm0KcBWO92rm zrKna+JUUyV5eSgwy8byN1Khdav94NXMfkpZAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUTrV7UsSK143wR8Oshhdn/GGZydUwHwYDVR0jBBgwFoAUFhnJhngKE/OA/kXt wo70yEKISEMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTY0 Ni9GaG5KaG5nS0VfT0Ffa1h0d283MHlFS0lTRU0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0ZobkpobmdLRV9PQV9rWHR3bzcweUVLSVNFTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2NDYvVHJWN1VzU0sxNDN3 UjhPc2hoZG5fR0daeWRVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBkXngDANBgkqhkiG9w0BAQsFAAOCAQEAAdEk0f5n9+SnzOGOVhMLav2eXkmB CuVfwMhi+Pwz7/6bu4dfhF4tnb3Nsh0YkfEPWODXMF8T37TZtKHALVXq9Y90S3qA BPWyVkgP0no5QdEgoWFo7Bf5H/60NvKeqcsltwcT1FhRV5s1tQMqw5APJt4FxDpb jDE+OqF3y5HN3Lwqv6WIY8kaBFSZfJXHkHU3j+gXkFT/IGRZ3hdcnI8U/23VbEJ8 k9ioVK2QAej/Q+V2MevdH2u6lubiDSwVEy9CH/XG2BEvd9hes2gQ9hyvmdF0JZAj Z8KfD8+PuoqZzcDdIX3lnIZlZHIP2LStbtfPkZ1asvu0QV97toFLLR0vYw== -----END CERTIFICATE-----Generated at Thu Mar 12 13:51:15 2026 by rpki-client