$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/Gvyrp4fi3jVoIEEZUGNLqFFhE8A.roa File: Gvyrp4fi3jVoIEEZUGNLqFFhE8A.roa (raw, json) Hash identifier: uoGVi6V4ZNOaBDz3qzr3zdYSmxMqOP0uNDF5XAGgOgE= Subject key identifier: 1A:FC:AB:A7:87:E2:DE:35:68:20:41:19:50:63:4B:A8:51:61:13:C0 Certificate issuer: /CN=C1D31291638F4A4040CD3D52DEC3FF2B9709C5F2 Certificate serial: 1504 Authority key identifier: C1:D3:12:91:63:8F:4A:40:40:CD:3D:52:DE:C3:FF:2B:97:09:C5:F2 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wdMSkWOPSkBAzT1S3sP_K5cJxfI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Gvyrp4fi3jVoIEEZUGNLqFFhE8A.roa Signing time: Sat 13 Sep 2025 03:06:51 +0000 ROA not before: Sat 13 Sep 2025 03:06:51 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 55990 IP address blocks: 139.9.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/wdMSkWOPSkBAzT1S3sP_K5cJxfI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/wdMSkWOPSkBAzT1S3sP_K5cJxfI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wdMSkWOPSkBAzT1S3sP_K5cJxfI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 09:36:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5380 (0x1504) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1D31291638F4A4040CD3D52DEC3FF2B9709C5F2 Validity Not Before: Sep 13 03:06:51 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=1AFCABA787E2DE356820411950634BA8516113C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:22:1a:a2:4a:5e:1f:17:bc:78:0b:e8:f4:69: 0b:b8:bc:48:ac:f4:88:f9:97:a0:ff:26:b5:6e:0d: 32:4c:76:66:23:f1:36:01:e2:2e:aa:6e:ca:47:95: 71:fa:e7:42:12:e5:f7:5a:94:08:7b:a1:32:7d:b7: a9:7b:67:8b:9c:ac:6e:2a:92:22:56:f7:63:f2:41: 5a:cf:85:8b:da:89:08:2f:73:5a:88:7f:13:b5:91: 0c:c1:43:96:fb:5f:1b:2d:f3:58:2f:86:51:1f:4f: e2:a1:6b:63:63:25:af:5b:90:59:48:e8:27:1a:36: 9b:5f:bc:15:8d:89:a2:d3:56:90:f3:11:07:9f:e8: c9:06:ef:84:3f:1c:dd:12:52:4e:4a:70:21:70:30: aa:ed:b6:85:18:70:66:e7:75:17:39:66:d2:76:13: 98:f4:0b:90:17:2c:19:8e:0b:50:68:33:34:bb:c8: eb:5b:43:8f:64:64:f0:39:e8:c6:bd:31:ea:49:4a: bc:6b:3d:2d:9d:b1:92:64:45:be:3c:e7:8d:ee:f1: 43:03:1d:a7:9d:a3:f9:d2:a9:0f:81:de:f7:41:64: 8a:25:a4:b9:c1:68:f7:6a:76:94:b2:ce:d3:e7:25: ec:55:81:94:0b:d5:2a:9c:18:c9:81:e6:c1:2c:2b: 7e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:FC:AB:A7:87:E2:DE:35:68:20:41:19:50:63:4B:A8:51:61:13:C0 X509v3 Authority Key Identifier: keyid:C1:D3:12:91:63:8F:4A:40:40:CD:3D:52:DE:C3:FF:2B:97:09:C5:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/wdMSkWOPSkBAzT1S3sP_K5cJxfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wdMSkWOPSkBAzT1S3sP_K5cJxfI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Gvyrp4fi3jVoIEEZUGNLqFFhE8A.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 139.9.98.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:42:41:4d:4a:cd:2d:5b:a3:8a:a2:1c:8a:f9:03:a5:f7:e5: ce:76:79:c0:8f:fc:d7:44:58:1f:e8:5e:6b:f2:7a:2c:d4:05: 87:7f:d4:2d:d5:e2:8a:dc:23:d1:f4:d6:95:67:58:a0:e0:5c: 2a:fb:b8:3d:20:6f:eb:fd:d5:7c:34:8a:b3:39:9f:ea:3d:dd: 3b:cd:e7:87:f1:9d:03:9c:29:35:33:49:99:cd:67:1f:fc:76: 00:af:2c:ed:18:7f:72:ff:6e:2e:d3:0f:13:dd:a4:a9:09:46: 60:d4:d5:5b:e4:ad:97:77:16:32:10:eb:88:ef:27:29:e3:a7: 4d:86:53:8e:f5:a4:6a:65:b3:d0:3d:d7:74:ff:de:50:c8:c2: 63:e6:b4:e8:c4:78:0a:6e:25:8c:34:70:a7:3e:c5:3f:57:4f: a1:8d:fb:d1:ff:06:05:7e:1a:df:ef:c7:b5:5a:98:1f:03:e5: 20:00:82:1a:d2:a4:fa:ef:51:43:47:b6:81:38:90:92:42:16: e6:a2:70:70:5b:4c:b9:a0:82:ba:f5:8d:09:3b:ad:45:22:7d: 1c:4d:c1:9b:a2:fe:9d:67:f7:f2:27:37:1d:94:33:31:b0:f8: e4:e0:25:1e:57:b2:68:9b:8b:7f:9f:a7:84:83:5a:93:8b:6b: dd:43:7e:14 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFQQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzFE MzEyOTE2MzhGNEE0MDQwQ0QzRDUyREVDM0ZGMkI5NzA5QzVGMjAeFw0yNTA5MTMw MzA2NTFaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDFBRkNBQkE3ODdFMkRF MzU2ODIwNDExOTUwNjM0QkE4NTE2MTEzQzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCdIhqiSl4fF7x4C+j0aQu4vEis9Ij5l6D/JrVuDTJMdmYj8TYB 4i6qbspHlXH650IS5fdalAh7oTJ9t6l7Z4ucrG4qkiJW92PyQVrPhYvaiQgvc1qI fxO1kQzBQ5b7Xxst81gvhlEfT+Kha2NjJa9bkFlI6CcaNptfvBWNiaLTVpDzEQef 6MkG74Q/HN0SUk5KcCFwMKrttoUYcGbndRc5ZtJ2E5j0C5AXLBmOC1BoMzS7yOtb Q49kZPA56Ma9MepJSrxrPS2dsZJkRb48543u8UMDHaedo/nSqQ+B3vdBZIolpLnB aPdqdpSyztPnJexVgZQL1SqcGMmB5sEsK345AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUGvyrp4fi3jVoIEEZUGNLqFFhE8AwHwYDVR0jBBgwFoAUwdMSkWOPSkBAzT1S 3sP/K5cJxfIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC93ZE1Ta1dPUFNrQkF6VDFTM3NQX0s1Y0p4ZkkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3dkTVNrV09QU2tCQXpUMVMzc1BfSzVjSnhmSS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvR3Z5cnA0ZmkzalZv SUVFWlVHTkxxRkZoRThBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAIsJYjANBgkqhkiG9w0BAQsFAAOCAQEACkJBTUrNLVujiqIcivkDpfflznZ5 wI/810RYH+hea/J6LNQFh3/ULdXiitwj0fTWlWdYoOBcKvu4PSBv6/3VfDSKszmf 6j3dO83nh/GdA5wpNTNJmc1nH/x2AK8s7Rh/cv9uLtMPE92kqQlGYNTVW+Stl3cW MhDriO8nKeOnTYZTjvWkamWz0D3XdP/eUMjCY+a06MR4Cm4ljDRwpz7FP1dPoY37 0f8GBX4a3+/HtVqYHwPlIACCGtKk+u9RQ0e2gTiQkkIW5qJwcFtMuaCCuvWNCTut RSJ9HE3Bm6L+nWf38ic3HZQzMbD45OAlHleyaJuLf5+nhINak4tr3UN+FA== -----END CERTIFICATE-----Generated at Sat Oct 25 08:37:29 2025 by rpki-client