$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2358/QC4ZnbIvcdrpkTE2m_a5aRWR-t8.roa File: QC4ZnbIvcdrpkTE2m_a5aRWR-t8.roa (raw, json) Hash identifier: Uo1NXgmxduN8ZLxUAEiSzkhrWOTJAv90VkspB9KZxo0= Subject key identifier: 40:2E:19:9D:B2:2F:71:DA:E9:91:31:36:9B:F6:B9:69:15:91:FA:DF Certificate issuer: /CN=4C0430E3518A5AF51BC0DF62567E0D157CA523C1 Certificate serial: 5B Authority key identifier: 4C:04:30:E3:51:8A:5A:F5:1B:C0:DF:62:56:7E:0D:15:7C:A5:23:C1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TAQw41GKWvUbwN9iVn4NFXylI8E.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2358/QC4ZnbIvcdrpkTE2m_a5aRWR-t8.roa Signing time: Mon 29 Sep 2025 01:20:56 +0000 ROA not before: Mon 29 Sep 2025 01:20:56 +0000 ROA not after: Tue 15 Sep 2026 07:06:43 +0000 asID: 131539 IP address blocks: 110.42.7.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2358/TAQw41GKWvUbwN9iVn4NFXylI8E.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2358/TAQw41GKWvUbwN9iVn4NFXylI8E.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TAQw41GKWvUbwN9iVn4NFXylI8E.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 15:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C0430E3518A5AF51BC0DF62567E0D157CA523C1 Validity Not Before: Sep 29 01:20:56 2025 GMT Not After : Sep 15 07:06:43 2026 GMT Subject: CN=402E199DB22F71DAE99131369BF6B9691591FADF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ee:74:ba:be:52:4c:0b:0d:31:16:6d:eb:67: 00:85:c6:da:9e:73:60:cf:0a:48:dd:0e:7b:9f:58: 1e:39:db:c6:d8:a4:ab:3e:91:b6:ad:97:11:b4:ee: 75:e1:e4:8d:9a:73:31:99:21:68:58:1d:9e:07:b1: 57:35:db:4d:0f:34:07:43:71:eb:6c:e4:6b:c4:1c: 9a:6f:3c:17:7d:6b:d9:1a:e5:5c:f1:57:3e:09:99: c4:d7:5d:73:7b:d3:78:88:07:0a:6b:ab:fa:ea:c8: 8f:42:b9:51:b1:71:3c:04:2a:38:96:9c:af:06:f2: d8:a5:c4:47:86:85:ad:8e:5d:60:a6:29:6c:eb:1d: e5:35:9c:a2:9a:53:2b:66:0d:76:12:4d:c8:75:69: 01:b8:1f:70:e6:3a:13:33:a8:52:1a:18:f6:3b:6c: 6f:5d:41:ad:93:78:39:ce:d6:94:d9:c4:bf:61:a3: 70:b4:68:25:92:31:60:34:ae:f0:30:2f:9f:1f:9c: 9f:ab:84:29:68:e1:2f:01:70:2c:38:41:2a:74:98: 04:ec:44:3f:99:ca:54:a8:25:b9:e4:37:ed:89:29: 77:a8:24:a0:d7:a5:2c:2d:8c:5d:8d:9c:0f:d2:0a: da:f2:9b:e3:33:63:1e:b4:27:71:2a:a7:e9:69:c5: ad:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:2E:19:9D:B2:2F:71:DA:E9:91:31:36:9B:F6:B9:69:15:91:FA:DF X509v3 Authority Key Identifier: keyid:4C:04:30:E3:51:8A:5A:F5:1B:C0:DF:62:56:7E:0D:15:7C:A5:23:C1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2358/TAQw41GKWvUbwN9iVn4NFXylI8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TAQw41GKWvUbwN9iVn4NFXylI8E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2358/QC4ZnbIvcdrpkTE2m_a5aRWR-t8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 110.42.7.0/24 Signature Algorithm: sha256WithRSAEncryption 25:7b:74:84:b6:d4:c8:78:58:ae:42:4a:8b:1a:3f:17:58:54: 4c:a8:1d:2a:79:a3:01:21:97:9d:a0:68:b2:93:9c:61:71:2f: 71:e0:8f:30:1b:7d:99:f4:18:73:02:d5:a2:1f:0d:32:8b:e9: ec:ba:2c:c4:6f:d4:0d:af:f5:82:58:a3:b3:38:0c:63:62:20: 0f:e0:71:5d:04:c8:c9:8f:c2:cf:16:0e:a5:f8:4c:78:09:81: af:2d:09:22:73:e2:e7:9f:86:b0:77:c9:92:fd:8f:57:29:0c: a5:22:57:22:bf:21:db:56:e1:84:13:f7:25:85:86:28:e5:32: 76:ec:af:1b:23:da:54:43:f2:b7:c1:4f:28:c5:58:ef:5d:84: d1:58:d4:bd:9c:e6:21:98:c9:68:e7:39:bc:98:64:81:3d:a0: 74:66:d3:ec:cb:a4:dd:df:46:21:83:a0:50:f9:7a:23:60:17: d7:ee:45:92:27:29:a3:c2:fe:cd:49:ab:50:a5:d0:87:19:84: 59:ca:db:a2:01:2d:5e:c1:b0:06:a1:44:c4:76:e1:e3:f6:bc: 2d:4a:e2:88:09:b7:f9:0f:4a:d2:63:41:c5:34:e1:a2:97:f9: 30:aa:57:ed:7b:c1:1a:bc:8e:7f:b2:62:05:88:8a:12:b3:fb: 39:23:73:34 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBWzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0QzA0 MzBFMzUxOEE1QUY1MUJDMERGNjI1NjdFMEQxNTdDQTUyM0MxMB4XDTI1MDkyOTAx MjA1NloXDTI2MDkxNTA3MDY0M1owMzExMC8GA1UEAxMoNDAyRTE5OURCMjJGNzFE QUU5OTEzMTM2OUJGNkI5NjkxNTkxRkFERjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALDudLq+UkwLDTEWbetnAIXG2p5zYM8KSN0Oe59YHjnbxtikqz6R tq2XEbTudeHkjZpzMZkhaFgdngexVzXbTQ80B0Nx62zka8Qcmm88F31r2RrlXPFX PgmZxNddc3vTeIgHCmur+urIj0K5UbFxPAQqOJacrwby2KXER4aFrY5dYKYpbOsd 5TWcoppTK2YNdhJNyHVpAbgfcOY6EzOoUhoY9jtsb11BrZN4Oc7WlNnEv2GjcLRo JZIxYDSu8DAvnx+cn6uEKWjhLwFwLDhBKnSYBOxEP5nKVKglueQ37Ykpd6gkoNel LC2MXY2cD9IK2vKb4zNjHrQncSqn6WnFrTsCAwEAAaOCAfMwggHvMB0GA1UdDgQW BBRALhmdsi9x2umRMTab9rlpFZH63zAfBgNVHSMEGDAWgBRMBDDjUYpa9RvA32JW fg0VfKUjwTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yMzU4 L1RBUXc0MUdLV3ZVYndOOWlWbjRORlh5bEk4RS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvVEFRdzQxR0tXdlVid045aVZuNE5GWHlsSThFLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM1OC9RQzRabmJJdmNkcnBr VEUybV9hNWFSV1ItdDgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAbioHMA0GCSqGSIb3DQEBCwUAA4IBAQAle3SEttTIeFiuQkqLGj8XWFRMqB0q eaMBIZedoGiyk5xhcS9x4I8wG32Z9BhzAtWiHw0yi+nsuizEb9QNr/WCWKOzOAxj YiAP4HFdBMjJj8LPFg6l+Ex4CYGvLQkic+Lnn4awd8mS/Y9XKQylIlcivyHbVuGE E/clhYYo5TJ27K8bI9pUQ/K3wU8oxVjvXYTRWNS9nOYhmMlo5zm8mGSBPaB0ZtPs y6Td30Yhg6BQ+XojYBfX7kWSJymjwv7NSatQpdCHGYRZytuiAS1ewbAGoUTEduHj 9rwtSuKICbf5D0rSY0HFNOGil/kwqlfte8EavI5/smIFiIoSs/s5I3M0 -----END CERTIFICATE-----Generated at Tue Oct 21 14:09:32 2025 by rpki-client