$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/qGDvgnjxJXaab3hPqCcCTXjB1xc.roa File: qGDvgnjxJXaab3hPqCcCTXjB1xc.roa (raw, json) Hash identifier: ajgBcrktRAsNECT9ouLdLOFF6WmrSMwQXkM6ODSdj9Y= Subject key identifier: A8:60:EF:82:78:F1:25:76:9A:6F:78:4F:A8:27:02:4D:78:C1:D7:17 Certificate issuer: /CN=C1D31291638F4A4040CD3D52DEC3FF2B9709C5F2 Certificate serial: 1503 Authority key identifier: C1:D3:12:91:63:8F:4A:40:40:CD:3D:52:DE:C3:FF:2B:97:09:C5:F2 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wdMSkWOPSkBAzT1S3sP_K5cJxfI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/qGDvgnjxJXaab3hPqCcCTXjB1xc.roa Signing time: Sat 13 Sep 2025 03:06:50 +0000 ROA not before: Sat 13 Sep 2025 03:06:50 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 136907 IP address blocks: 139.9.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/wdMSkWOPSkBAzT1S3sP_K5cJxfI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/wdMSkWOPSkBAzT1S3sP_K5cJxfI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wdMSkWOPSkBAzT1S3sP_K5cJxfI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Sep 2025 03:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5379 (0x1503) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1D31291638F4A4040CD3D52DEC3FF2B9709C5F2 Validity Not Before: Sep 13 03:06:50 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=A860EF8278F125769A6F784FA827024D78C1D717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ff:6e:f6:72:9e:34:66:73:42:61:f8:7d:9e: db:eb:0d:ee:fb:cd:70:9e:ff:32:d3:94:ac:56:6a: a6:58:0c:38:10:f8:db:53:24:9e:3f:54:26:5c:5b: d8:7b:4e:e3:dd:5c:dd:c1:20:44:b7:8a:46:be:d9: 24:5b:dc:a7:eb:29:62:90:d6:ee:43:ae:91:98:e0: bd:8f:2d:52:2f:5d:e2:37:9a:c7:ee:35:d3:a0:95: dc:4a:06:a6:6e:6d:43:ca:db:62:2f:1b:3d:e5:7e: 32:69:bb:61:de:7c:49:ec:c1:52:54:f8:03:20:04: 16:4a:a2:5c:2e:a8:44:7e:82:72:4b:3d:60:4e:90: 50:14:87:63:af:95:2d:73:0a:9c:b1:35:c2:c9:d9: 7f:30:e2:10:27:96:b7:f4:13:2f:dc:78:4d:7d:49: a1:58:15:3e:b5:14:dd:5a:51:a2:88:e0:41:40:93: 7e:96:2c:43:25:f5:95:14:62:b8:80:f9:d1:59:29: 00:80:35:a5:dc:48:6b:c2:04:37:46:4c:1b:f2:d9: 84:2d:d0:27:3c:62:68:00:f1:4d:86:39:32:13:b1: 05:f7:86:b3:09:de:25:f1:ef:ce:c0:59:7f:09:d8: 34:15:1c:38:d0:ec:1e:52:a0:f3:eb:95:f8:ce:e3: d4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:60:EF:82:78:F1:25:76:9A:6F:78:4F:A8:27:02:4D:78:C1:D7:17 X509v3 Authority Key Identifier: keyid:C1:D3:12:91:63:8F:4A:40:40:CD:3D:52:DE:C3:FF:2B:97:09:C5:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/wdMSkWOPSkBAzT1S3sP_K5cJxfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wdMSkWOPSkBAzT1S3sP_K5cJxfI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/qGDvgnjxJXaab3hPqCcCTXjB1xc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 139.9.98.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:55:73:87:d2:81:2e:6a:ab:66:3d:9c:74:25:17:f6:17:4c: 0c:f6:75:c0:3d:ba:cc:97:94:a4:1f:03:5e:2e:09:9c:22:cf: fa:46:d4:96:d0:5a:5d:f3:ed:57:4c:35:25:b4:4b:5a:e6:e1: b4:60:06:f0:46:da:a4:f2:f4:63:97:41:ee:1b:42:7f:b7:34: 97:c9:4d:a4:87:ff:f8:5d:03:b0:4e:92:60:53:2e:c9:ff:ad: 6b:f6:2e:46:4b:90:85:2d:d7:68:ea:69:f1:ee:5b:3d:f8:6d: 9b:cd:e8:a8:34:54:75:4c:a6:b2:d8:c4:cd:72:61:42:d6:52: 2b:70:41:50:1f:75:ef:4d:54:a3:fc:78:ef:e1:cf:9b:45:b4: fa:5c:eb:71:6f:71:71:3f:26:e9:d1:11:2f:4a:ad:6d:70:cd: c5:fb:40:f6:40:e2:03:22:99:50:fe:b6:e7:93:4e:78:fd:10: 58:df:90:59:83:02:1f:89:b3:21:ca:6e:8c:93:35:4c:33:a5: d8:ce:c1:76:1c:d6:2a:53:c5:5b:fb:d8:d3:6b:d0:5a:df:a7: 62:0f:9a:cd:ed:96:01:f5:ec:5f:f3:ae:40:c0:18:bb:4b:e0: 00:14:69:54:d0:a6:8d:c5:22:0c:ba:28:d5:66:4f:3a:61:59: d7:ac:2e:2b -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFQMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzFE MzEyOTE2MzhGNEE0MDQwQ0QzRDUyREVDM0ZGMkI5NzA5QzVGMjAeFw0yNTA5MTMw MzA2NTBaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEE4NjBFRjgyNzhGMTI1 NzY5QTZGNzg0RkE4MjcwMjRENzhDMUQ3MTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0/272cp40ZnNCYfh9ntvrDe77zXCe/zLTlKxWaqZYDDgQ+NtT JJ4/VCZcW9h7TuPdXN3BIES3ika+2SRb3KfrKWKQ1u5DrpGY4L2PLVIvXeI3msfu NdOgldxKBqZubUPK22IvGz3lfjJpu2HefEnswVJU+AMgBBZKolwuqER+gnJLPWBO kFAUh2OvlS1zCpyxNcLJ2X8w4hAnlrf0Ey/ceE19SaFYFT61FN1aUaKI4EFAk36W LEMl9ZUUYriA+dFZKQCANaXcSGvCBDdGTBvy2YQt0Cc8YmgA8U2GOTITsQX3hrMJ 3iXx787AWX8J2DQVHDjQ7B5SoPPrlfjO49S7AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUqGDvgnjxJXaab3hPqCcCTXjB1xcwHwYDVR0jBBgwFoAUwdMSkWOPSkBAzT1S 3sP/K5cJxfIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC93ZE1Ta1dPUFNrQkF6VDFTM3NQX0s1Y0p4ZkkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3dkTVNrV09QU2tCQXpUMVMzc1BfSzVjSnhmSS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvcUdEdmduanhKWGFh YjNoUHFDY0NUWGpCMXhjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAIsJYjANBgkqhkiG9w0BAQsFAAOCAQEALVVzh9KBLmqrZj2cdCUX9hdMDPZ1 wD26zJeUpB8DXi4JnCLP+kbUltBaXfPtV0w1JbRLWubhtGAG8EbapPL0Y5dB7htC f7c0l8lNpIf/+F0DsE6SYFMuyf+ta/YuRkuQhS3XaOpp8e5bPfhtm83oqDRUdUym stjEzXJhQtZSK3BBUB91701Uo/x47+HPm0W0+lzrcW9xcT8m6dERL0qtbXDNxftA 9kDiAyKZUP6255NOeP0QWN+QWYMCH4mzIcpujJM1TDOl2M7BdhzWKlPFW/vY02vQ Wt+nYg+aze2WAfXsX/OuQMAYu0vgABRpVNCmjcUiDLoo1WZPOmFZ16wuKw== -----END CERTIFICATE-----Generated at Thu Sep 18 01:53:12 2025 by rpki-client