$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2122/3utxk1tgtYo6xDcnTDWIBqyNtow.roa File: 3utxk1tgtYo6xDcnTDWIBqyNtow.roa (raw, json) Hash identifier: Z6TXaegC/+4UdxNY6jIZkPqsj2iHG/OlQPrAafdFzcY= Subject key identifier: DE:EB:71:93:5B:60:B5:8A:3A:C4:37:27:4C:35:88:06:AC:8D:B6:8C Certificate issuer: /CN=88884D4D4A75F17F08DD44CBA9592FE70F539D97 Certificate serial: 20B4 Authority key identifier: 88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/3utxk1tgtYo6xDcnTDWIBqyNtow.roa Signing time: Sat 13 Sep 2025 03:05:51 +0000 ROA not before: Sat 13 Sep 2025 03:05:51 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 4515 IP address blocks: 123.49.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/iIhNTUp18X8I3UTLqVkv5w9TnZc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/iIhNTUp18X8I3UTLqVkv5w9TnZc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 04:05:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8372 (0x20b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88884D4D4A75F17F08DD44CBA9592FE70F539D97 Validity Not Before: Sep 13 03:05:51 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=DEEB71935B60B58A3AC437274C358806AC8DB68C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:72:3a:45:a6:05:58:26:3d:da:23:03:e2:be: 74:c6:b3:c0:a2:10:ca:a9:5c:de:07:86:0d:9a:7a: 15:0b:60:75:3f:9f:82:d3:91:31:19:c9:02:f1:4c: 81:85:a0:7e:5b:99:85:a8:f3:f4:b3:fd:fc:c5:95: 40:b4:2a:93:0c:1a:16:ad:a8:ff:fe:b8:9b:d3:3e: 79:98:cd:bd:da:42:2e:34:a8:32:8b:e2:e5:6f:6e: c1:44:9a:2b:89:63:77:0f:41:55:65:2c:12:34:46: 75:9e:f4:d2:8f:49:a9:ab:75:4e:aa:88:f9:1f:de: 05:6f:f0:31:22:99:ff:d2:23:bf:2e:31:d5:0f:9e: 8c:7f:44:34:83:bd:1d:c0:df:e5:d4:13:3f:8c:d3: 70:4b:aa:b8:6d:52:13:df:fa:04:b8:90:0e:96:6c: b0:bc:41:b7:50:7f:d4:00:f3:7e:11:18:40:01:0a: 08:68:2c:4e:d9:26:a3:10:86:8b:7a:c9:99:d5:1d: 25:bd:c9:ed:05:76:74:da:2b:e7:ae:45:af:a4:64: c4:9e:37:70:ae:43:95:5f:6e:58:1c:f5:8c:9d:bc: 35:23:ba:cb:0d:a1:61:7d:47:1d:95:72:97:64:54: 1a:9f:ef:e3:7a:50:d2:27:71:9a:63:76:21:c8:1d: 24:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:EB:71:93:5B:60:B5:8A:3A:C4:37:27:4C:35:88:06:AC:8D:B6:8C X509v3 Authority Key Identifier: keyid:88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/iIhNTUp18X8I3UTLqVkv5w9TnZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/3utxk1tgtYo6xDcnTDWIBqyNtow.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.49.241.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:6c:52:da:f4:ec:83:e1:e2:2d:8a:a2:97:72:05:54:44:08: 5f:a0:4d:6a:19:ab:eb:fe:aa:c2:7b:06:71:0f:21:66:12:c3: 7e:90:6b:d5:14:21:2d:8c:cd:ea:e5:eb:76:d6:50:d4:bf:42: 2c:8a:63:cb:0a:49:0a:7a:28:fb:04:7f:39:ad:8d:76:bc:42: 37:ba:cc:40:15:89:1b:af:1a:c4:d5:d5:3b:bf:0a:32:30:ce: 6f:3e:76:50:7a:67:1c:80:dc:2b:1c:f5:a9:4d:02:a6:9d:1d: e0:06:11:1d:7c:61:d4:a0:3d:86:fc:58:b0:b6:c9:8b:8c:5e: 31:35:28:ac:db:2d:87:34:ec:9d:2c:f3:f9:72:d5:63:18:dd: 1b:77:ef:c7:9a:02:fc:04:48:37:71:2e:19:68:b3:9a:1c:85: 7e:da:4a:ae:1c:b0:06:42:1b:db:ef:8d:59:e7:2b:20:54:4f: a8:b8:48:97:07:7a:d6:f2:c0:7a:88:15:a5:1a:c4:dc:03:fe: 3a:d7:22:fa:92:f2:b8:37:66:58:1d:fe:86:bd:4d:78:fc:45: 5a:b3:97:a8:cb:91:1f:0f:b0:ce:ec:fb:87:4d:d8:0b:01:fc: df:90:96:0a:01:7d:49:e7:01:b8:5a:a1:f2:80:64:85:a1:f6: cc:df:10:b1 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICILQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODg4 ODRENEQ0QTc1RjE3RjA4REQ0NENCQTk1OTJGRTcwRjUzOUQ5NzAeFw0yNTA5MTMw MzA1NTFaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKERFRUI3MTkzNUI2MEI1 OEEzQUM0MzcyNzRDMzU4ODA2QUM4REI2OEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOcjpFpgVYJj3aIwPivnTGs8CiEMqpXN4Hhg2aehULYHU/n4LT kTEZyQLxTIGFoH5bmYWo8/Sz/fzFlUC0KpMMGhatqP/+uJvTPnmYzb3aQi40qDKL 4uVvbsFEmiuJY3cPQVVlLBI0RnWe9NKPSamrdU6qiPkf3gVv8DEimf/SI78uMdUP nox/RDSDvR3A3+XUEz+M03BLqrhtUhPf+gS4kA6WbLC8QbdQf9QA834RGEABCgho LE7ZJqMQhot6yZnVHSW9ye0FdnTaK+euRa+kZMSeN3CuQ5Vfblgc9YydvDUjussN oWF9Rx2VcpdkVBqf7+N6UNIncZpjdiHIHSQ/AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU3utxk1tgtYo6xDcnTDWIBqyNtowwHwYDVR0jBBgwFoAUiIhNTUp18X8I3UTL qVkv5w9TnZcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjEy Mi9pSWhOVFVwMThYOEkzVVRMcVZrdjV3OVRuWmMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2lJaE5UVXAxOFg4STNVVExxVmt2NXc5VG5aYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIxMjIvM3V0eGsxdGd0WW82 eERjblREV0lCcXlOdG93LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAHsx8TANBgkqhkiG9w0BAQsFAAOCAQEAPWxS2vTsg+HiLYqil3IFVEQIX6BN ahmr6/6qwnsGcQ8hZhLDfpBr1RQhLYzN6uXrdtZQ1L9CLIpjywpJCnoo+wR/Oa2N drxCN7rMQBWJG68axNXVO78KMjDObz52UHpnHIDcKxz1qU0Cpp0d4AYRHXxh1KA9 hvxYsLbJi4xeMTUorNsthzTsnSzz+XLVYxjdG3fvx5oC/ARIN3EuGWizmhyFftpK rhywBkIb2++NWecrIFRPqLhIlwd61vLAeogVpRrE3AP+Otci+pLyuDdmWB3+hr1N ePxFWrOXqMuRHw+wzuz7h03YCwH835CWCgF9SecBuFqh8oBkhaH2zN8QsQ== -----END CERTIFICATE-----Generated at Tue Oct 21 03:00:18 2025 by rpki-client