$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2889/Sp5Xwkqi9VbdKTp_DliHIJL0QV0.roa File: Sp5Xwkqi9VbdKTp_DliHIJL0QV0.roa (raw, json) Hash identifier: pJe5kK9bBr3GgNUP3olkRHuMNbfpo6YsuKoUg923rTQ= Subject key identifier: 4A:9E:57:C2:4A:A2:F5:56:DD:29:3A:7F:0E:58:87:20:92:F4:41:5D Certificate issuer: /CN=A93A86712684A72E5DF41F00AFA04C5F01A97735 Certificate serial: 206E Authority key identifier: A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/Sp5Xwkqi9VbdKTp_DliHIJL0QV0.roa Signing time: Sat 13 Sep 2025 03:09:26 +0000 ROA not before: Sat 13 Sep 2025 03:09:26 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 139021 IP address blocks: 218.247.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:13:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8302 (0x206e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A93A86712684A72E5DF41F00AFA04C5F01A97735 Validity Not Before: Sep 13 03:09:26 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=4A9E57C24AA2F556DD293A7F0E58872092F4415D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:32:8b:bc:03:a1:4f:2e:64:8a:09:08:8c:3d: 76:a1:c6:45:d2:85:3b:63:b4:6c:7d:24:d4:ed:85: 64:cd:79:0b:2e:8a:5e:ea:cf:72:12:f9:0b:fe:cc: 07:b5:c3:07:e2:45:66:7d:2a:c9:7a:10:fa:00:fd: 55:d9:69:a9:d7:b4:e5:5d:6f:68:6f:94:df:27:a9: a0:75:45:c6:f1:e5:3d:d6:82:ae:8c:fa:e1:55:0f: 8f:7f:1b:bb:c2:77:f6:52:9c:7a:65:82:26:2d:48: 85:7b:30:d7:a3:a2:de:76:cc:13:9d:15:fe:b9:40: 84:cd:51:b2:3c:24:f5:94:3c:f5:4c:12:00:e8:7f: 64:c4:3d:60:61:74:c6:2b:21:4a:3b:07:bb:a1:99: d4:55:0b:d1:32:95:d8:cc:90:c9:b9:b4:09:2b:44: 39:ab:ea:d7:a5:20:bd:d5:59:30:73:75:66:c3:78: 28:9b:18:29:9c:35:76:8a:9d:35:4f:93:db:67:eb: 68:f5:ca:b3:a7:9c:6d:f4:14:ac:48:7c:f3:65:0f: e1:17:b3:c1:d8:2d:bb:a1:32:c8:15:1d:3e:fa:67: 0b:a2:d4:2f:74:14:64:da:c8:54:df:4e:4b:92:72: 1c:62:8c:39:ee:17:b5:f9:ff:bc:ec:f7:85:a2:ec: 19:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:9E:57:C2:4A:A2:F5:56:DD:29:3A:7F:0E:58:87:20:92:F4:41:5D X509v3 Authority Key Identifier: keyid:A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/Sp5Xwkqi9VbdKTp_DliHIJL0QV0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.247.64.0/20 Signature Algorithm: sha256WithRSAEncryption 35:3c:77:0d:65:81:e2:37:86:c7:75:c0:2c:6e:2f:5a:06:37: 74:6c:31:12:e7:82:04:8c:65:db:2c:19:0c:c4:bb:fc:75:e0: 33:bf:95:e4:f7:f3:e2:9b:ee:93:b2:58:ab:6d:54:38:1f:b9: d1:3f:63:cd:96:70:37:5a:28:c9:cf:ea:fd:42:93:ff:7c:99: 23:96:9a:e9:01:99:2f:51:c0:f2:a4:f8:2f:83:4b:ed:19:a2: 32:81:93:9d:ef:18:86:01:a6:b5:5f:92:df:e6:6e:f3:dd:38: d3:42:67:c2:ac:1c:de:24:d6:eb:ef:8f:39:a7:37:97:19:b7: 3d:13:5d:50:1b:10:ae:b1:c7:13:f3:73:40:e0:a9:b5:de:14: 39:77:d3:42:fa:3e:e1:53:94:3e:7e:e0:ed:a4:68:54:5e:70: 16:10:36:f5:2a:43:77:d8:4d:a0:0e:bc:e9:89:bd:22:50:09: 68:4e:55:f7:01:18:5d:1b:81:48:ba:b3:52:b4:c9:e0:2d:b9: 16:97:b0:0c:32:e5:d9:b8:a2:f2:2f:a6:1d:ce:7e:42:7c:cb: 84:eb:b8:cf:27:71:7b:d7:ed:15:c1:df:05:93:ad:e5:4d:2f: 17:22:17:bf:ae:d1:d3:61:8c:86:2d:bc:0a:8a:b2:d0:d8:24: 9f:5f:dd:95 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIG4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTkz QTg2NzEyNjg0QTcyRTVERjQxRjAwQUZBMDRDNUYwMUE5NzczNTAeFw0yNTA5MTMw MzA5MjZaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDRBOUU1N0MyNEFBMkY1 NTZERDI5M0E3RjBFNTg4NzIwOTJGNDQxNUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCaMou8A6FPLmSKCQiMPXahxkXShTtjtGx9JNTthWTNeQsuil7q z3IS+Qv+zAe1wwfiRWZ9Ksl6EPoA/VXZaanXtOVdb2hvlN8nqaB1Rcbx5T3Wgq6M +uFVD49/G7vCd/ZSnHplgiYtSIV7MNejot52zBOdFf65QITNUbI8JPWUPPVMEgDo f2TEPWBhdMYrIUo7B7uhmdRVC9EyldjMkMm5tAkrRDmr6telIL3VWTBzdWbDeCib GCmcNXaKnTVPk9tn62j1yrOnnG30FKxIfPNlD+EXs8HYLbuhMsgVHT76Zwui1C90 FGTayFTfTkuSchxijDnuF7X5/7zs94Wi7BnTAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUSp5Xwkqi9VbdKTp/DliHIJL0QV0wHwYDVR0jBBgwFoAUqTqGcSaEpy5d9B8A r6BMXwGpdzUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjg4 OS9xVHFHY1NhRXB5NWQ5QjhBcjZCTVh3R3BkelUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3FUcUdjU2FFcHk1ZDlCOEFyNkJNWHdHcGR6VS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4ODkvU3A1WHdrcWk5VmJk S1RwX0RsaUhJSkwwUVYwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBNr3QDANBgkqhkiG9w0BAQsFAAOCAQEANTx3DWWB4jeGx3XALG4vWgY3dGwx EueCBIxl2ywZDMS7/HXgM7+V5Pfz4pvuk7JYq21UOB+50T9jzZZwN1ooyc/q/UKT /3yZI5aa6QGZL1HA8qT4L4NL7RmiMoGTne8YhgGmtV+S3+Zu890400Jnwqwc3iTW 6++POac3lxm3PRNdUBsQrrHHE/NzQOCptd4UOXfTQvo+4VOUPn7g7aRoVF5wFhA2 9SpDd9hNoA686Ym9IlAJaE5V9wEYXRuBSLqzUrTJ4C25FpewDDLl2bii8i+mHc5+ QnzLhOu4zydxe9ftFcHfBZOt5U0vFyIXv67R02GMhi28Coqy0Ngkn1/dlQ== -----END CERTIFICATE-----Generated at Fri Nov 7 12:20:39 2025 by rpki-client