$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2329/_WOgPad0W1kn45ia-U0MvBzC24c.roa File: _WOgPad0W1kn45ia-U0MvBzC24c.roa (raw, json) Hash identifier: USnlmKZvKeApDkmsw/iEDm10VzsUHxApky3Wv+X1AUo= Subject key identifier: FD:63:A0:3D:A7:74:5B:59:27:E3:98:9A:F9:4D:0C:BC:1C:C2:DB:87 Certificate issuer: /CN=EC10C93455759C659D2BB819FB07FF7063CECC32 Certificate serial: 2098 Authority key identifier: EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/_WOgPad0W1kn45ia-U0MvBzC24c.roa Signing time: Sat 13 Sep 2025 03:10:30 +0000 ROA not before: Sat 13 Sep 2025 03:10:30 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 18257 IP address blocks: 2404:6380::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 21:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8344 (0x2098) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC10C93455759C659D2BB819FB07FF7063CECC32 Validity Not Before: Sep 13 03:10:30 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=FD63A03DA7745B5927E3989AF94D0CBC1CC2DB87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:30:f5:06:62:87:f8:46:89:9d:ad:07:40:13: 17:cc:41:84:39:c0:4a:ca:1b:12:2b:ad:07:6d:78: 95:77:c8:53:ea:fd:d7:c1:a9:21:6c:5e:3b:0b:49: 55:bc:4a:58:cf:a0:32:66:2b:66:39:3d:fd:aa:29: 5e:b0:db:52:73:80:a0:53:25:34:09:eb:60:7e:1b: a1:d7:22:86:36:15:09:48:e6:40:35:15:1d:8d:64: 31:27:df:ff:25:6b:65:66:c4:68:1a:70:57:10:c4: 06:3c:9c:d7:5c:83:f2:be:21:57:e5:e8:e1:54:c3: 8b:7e:41:8f:a4:66:8d:23:46:02:ff:13:76:eb:ea: c6:26:7d:dc:f2:ba:4d:e1:0b:50:bd:a5:79:d9:cd: c4:6a:02:28:4d:58:1b:ac:cb:59:33:37:2d:ff:61: 41:93:6b:03:ed:df:30:da:53:a5:48:23:5f:45:e4: f6:df:29:db:9e:9f:3e:b7:a7:27:d8:95:37:e9:a6: a5:19:f6:b9:b5:cf:e2:50:66:f8:22:19:24:ce:fd: 4b:13:bf:c6:d6:2c:52:9b:64:92:d4:0f:57:25:59: 5d:65:22:3a:65:47:4e:1a:c5:f1:50:ba:4e:d0:64: 6a:e6:25:d5:fe:0e:61:24:68:97:ef:e3:f1:e6:6a: ec:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:63:A0:3D:A7:74:5B:59:27:E3:98:9A:F9:4D:0C:BC:1C:C2:DB:87 X509v3 Authority Key Identifier: keyid:EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/_WOgPad0W1kn45ia-U0MvBzC24c.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2404:6380::/32 Signature Algorithm: sha256WithRSAEncryption 03:54:b9:91:39:03:f5:72:e9:9b:e4:eb:d6:99:12:af:1e:3f: 2c:42:92:d0:0f:f4:cc:16:e9:ef:f2:0e:65:40:30:4a:4c:40: c9:3d:fb:fe:b3:ae:1d:9c:fe:aa:93:0f:0e:2d:2b:6d:61:1c: 98:86:ce:3b:6f:d8:7f:70:1f:df:10:96:22:00:66:02:6e:a5: d5:eb:c3:44:77:10:52:95:8b:6f:0f:f1:c2:81:ad:42:f6:32: 3c:15:85:1c:b7:97:42:4d:76:0c:66:f0:e6:1d:f6:70:76:4a: 31:b3:c6:bc:2d:a4:6b:3f:4b:7b:df:bc:4c:db:3d:cf:81:7d: 9b:e8:3e:43:a4:02:38:38:ed:03:27:d3:e1:77:32:e7:98:81: cd:3b:d5:f5:91:39:49:51:f6:45:7d:1a:6c:a5:95:16:14:f5: df:82:37:30:dc:9e:10:18:56:53:a2:2b:0d:c5:69:98:b0:9e: c9:35:52:af:53:d1:bc:ea:7b:54:82:ce:91:5f:f5:90:f0:d7: dd:c6:a6:02:98:71:24:f3:bc:ad:ef:74:ed:ce:4b:68:74:31: 46:44:c7:5d:7e:1f:c4:c7:b7:53:52:d0:52:48:69:f1:fb:28: f2:d3:7e:7f:29:1c:aa:84:9d:ce:de:25:d3:58:18:63:39:cf: 22:b9:67:27 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICIJgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUMx MEM5MzQ1NTc1OUM2NTlEMkJCODE5RkIwN0ZGNzA2M0NFQ0MzMjAeFw0yNTA5MTMw MzEwMzBaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEZENjNBMDNEQTc3NDVC NTkyN0UzOTg5QUY5NEQwQ0JDMUNDMkRCODcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPMPUGYof4RomdrQdAExfMQYQ5wErKGxIrrQdteJV3yFPq/dfB qSFsXjsLSVW8SljPoDJmK2Y5Pf2qKV6w21JzgKBTJTQJ62B+G6HXIoY2FQlI5kA1 FR2NZDEn3/8la2VmxGgacFcQxAY8nNdcg/K+IVfl6OFUw4t+QY+kZo0jRgL/E3br 6sYmfdzyuk3hC1C9pXnZzcRqAihNWBusy1kzNy3/YUGTawPt3zDaU6VII19F5Pbf Kduenz63pyfYlTfppqUZ9rm1z+JQZvgiGSTO/UsTv8bWLFKbZJLUD1clWV1lIjpl R04axfFQuk7QZGrmJdX+DmEkaJfv4/HmauyDAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQU/WOgPad0W1kn45ia+U0MvBzC24cwHwYDVR0jBBgwFoAU7BDJNFV1nGWdK7gZ +wf/cGPOzDIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjMy OS83QkRKTkZWMW5HV2RLN2daLXdmX2NHUE96REkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzdCREpORlYxbkdXZEs3Z1otd2ZfY0dQT3pESS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzMjkvX1dPZ1BhZDBXMWtu NDVpYS1VME12QnpDMjRjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQEY4AwDQYJKoZIhvcNAQELBQADggEBAANUuZE5A/Vy6Zvk69aZEq8ePyxC ktAP9MwW6e/yDmVAMEpMQMk9+/6zrh2c/qqTDw4tK21hHJiGzjtv2H9wH98QliIA ZgJupdXrw0R3EFKVi28P8cKBrUL2MjwVhRy3l0JNdgxm8OYd9nB2SjGzxrwtpGs/ S3vfvEzbPc+BfZvoPkOkAjg47QMn0+F3MueYgc071fWROUlR9kV9GmyllRYU9d+C NzDcnhAYVlOiKw3FaZiwnsk1Uq9T0bzqe1SCzpFf9ZDw193GpgKYcSTzvK3vdO3O S2h0MUZEx11+H8THt1NS0FJIafH7KPLTfn8pHKqEnc7eJdNYGGM5zyK5Zyc= -----END CERTIFICATE-----Generated at Thu Oct 23 20:17:23 2025 by rpki-client