$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3095/mYrHHv-tXUm8zvPCiVVHlFQeA-Y.roa File: mYrHHv-tXUm8zvPCiVVHlFQeA-Y.roa (raw, json) Hash identifier: Ndebnz/VJzrPk2L5DUkV8W9j8kHZFwUZcbNj85tMtoQ= Subject key identifier: 99:8A:C7:1E:FF:AD:5D:49:BC:CE:F3:C2:89:55:47:94:54:1E:03:E6 Certificate issuer: /CN=CB16707EAF0BDFD1326AFD9BDEC6AFFA6E63BA98 Certificate serial: 0DF0 Authority key identifier: CB:16:70:7E:AF:0B:DF:D1:32:6A:FD:9B:DE:C6:AF:FA:6E:63:BA:98 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yxZwfq8L39Eyav2b3sav-m5jupg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/mYrHHv-tXUm8zvPCiVVHlFQeA-Y.roa Signing time: Sat 06 Sep 2025 08:02:53 +0000 ROA not before: Sat 06 Sep 2025 08:02:53 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 135061 IP address blocks: 2407:8f40:2::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/yxZwfq8L39Eyav2b3sav-m5jupg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/yxZwfq8L39Eyav2b3sav-m5jupg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yxZwfq8L39Eyav2b3sav-m5jupg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 11:03:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3568 (0xdf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB16707EAF0BDFD1326AFD9BDEC6AFFA6E63BA98 Validity Not Before: Sep 6 08:02:53 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=998AC71EFFAD5D49BCCEF3C289554794541E03E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1c:e2:ce:44:35:c5:9e:fd:cc:d8:0f:33:3c: a5:c4:86:fb:62:d9:5b:86:ac:52:0a:c6:34:0c:09: ec:5c:d3:62:45:02:1b:99:5d:8c:5d:7e:70:86:e2: 7e:40:69:cd:f3:e0:2d:69:b3:32:31:45:e9:10:99: 35:71:05:d4:d0:ec:87:03:07:61:2d:21:07:91:47: 45:7f:5c:05:82:3d:bb:7b:8e:3d:f6:5b:58:e2:d5: cd:a8:67:a5:11:05:f3:04:6c:83:7b:f8:f3:86:b1: 2f:dc:39:c7:f4:42:8f:84:ad:af:f4:69:a8:2d:e9: a5:3f:36:46:01:b7:7d:d1:7d:62:d6:2a:6f:52:15: 69:4c:31:fd:7b:60:ed:d0:f6:9a:2d:2f:57:ba:0d: e8:e2:3f:71:e7:4c:2d:83:73:44:60:71:c4:2d:25: 71:6c:9e:c2:bf:63:45:5f:25:cc:3f:b4:c3:c1:04: b7:24:5d:b0:70:d1:2a:e7:d2:3a:7c:bf:2f:58:b0: c4:cf:89:7e:90:4a:e6:df:d4:7e:11:ef:34:7d:0c: 9d:19:96:bb:06:14:4c:56:61:e5:74:e7:36:29:85: cb:80:e0:ff:bc:0c:d8:f6:81:9e:d7:1f:c2:58:de: 04:c5:53:ec:4a:a2:01:6c:20:62:e6:93:df:8d:af: 9c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:8A:C7:1E:FF:AD:5D:49:BC:CE:F3:C2:89:55:47:94:54:1E:03:E6 X509v3 Authority Key Identifier: keyid:CB:16:70:7E:AF:0B:DF:D1:32:6A:FD:9B:DE:C6:AF:FA:6E:63:BA:98 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/yxZwfq8L39Eyav2b3sav-m5jupg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yxZwfq8L39Eyav2b3sav-m5jupg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/mYrHHv-tXUm8zvPCiVVHlFQeA-Y.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:8f40:2::/48 Signature Algorithm: sha256WithRSAEncryption 4a:3d:f9:e1:42:7d:73:65:a6:93:da:bd:03:0d:d8:71:d8:2f: 73:c9:aa:fe:47:6e:8e:a2:28:17:09:58:4b:a2:fc:c1:50:7d: 02:5f:45:74:e0:82:3c:1f:a9:a0:cd:2d:e3:4b:95:73:51:ae: 0f:6d:e0:80:f9:d1:df:27:62:d9:6d:5c:02:91:01:9b:f3:1c: 1f:ac:4a:71:ae:97:ca:41:59:df:c3:87:7a:64:08:f8:61:ac: e9:e0:62:3c:93:23:dd:7f:fc:8b:10:8f:b4:f4:3a:84:a2:cd: 3e:a5:4f:67:a6:5b:66:be:60:86:cc:a7:ca:11:83:2e:4d:7f: 4a:a7:97:6d:cc:2b:f2:12:c6:41:57:04:79:50:fd:19:4b:f3: 8c:08:42:99:7a:af:7d:51:e6:16:1d:bb:df:9d:1a:fc:ff:6c: 2c:b2:14:69:d9:32:03:dc:9a:c4:2b:dd:eb:aa:12:88:fd:15: 0a:9a:4a:80:2b:b6:d0:7d:9a:d0:b7:92:1a:48:af:fd:17:f1: f7:bc:12:3e:25:d9:ba:5e:8c:86:34:e8:e7:88:d0:ca:69:1d: 2f:ef:36:05:d3:1e:14:3d:c3:28:e5:95:66:9e:57:13:e8:9f: 70:58:7d:46:d7:df:7e:e6:4a:3a:1e:31:ef:15:54:42:b7:bb: e8:77:3d:29 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICDfAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Ix NjcwN0VBRjBCREZEMTMyNkFGRDlCREVDNkFGRkE2RTYzQkE5ODAeFw0yNTA5MDYw ODAyNTNaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDk5OEFDNzFFRkZBRDVE NDlCQ0NFRjNDMjg5NTU0Nzk0NTQxRTAzRTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHHOLORDXFnv3M2A8zPKXEhvti2VuGrFIKxjQMCexc02JFAhuZ XYxdfnCG4n5Aac3z4C1pszIxRekQmTVxBdTQ7IcDB2EtIQeRR0V/XAWCPbt7jj32 W1ji1c2oZ6URBfMEbIN7+POGsS/cOcf0Qo+Era/0aagt6aU/NkYBt33RfWLWKm9S FWlMMf17YO3Q9potL1e6DejiP3HnTC2Dc0RgccQtJXFsnsK/Y0VfJcw/tMPBBLck XbBw0Srn0jp8vy9YsMTPiX6QSubf1H4R7zR9DJ0ZlrsGFExWYeV05zYphcuA4P+8 DNj2gZ7XH8JY3gTFU+xKogFsIGLmk9+Nr5wRAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUmYrHHv+tXUm8zvPCiVVHlFQeA+YwHwYDVR0jBBgwFoAUyxZwfq8L39Eyav2b 3sav+m5jupgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5 NS95eFp3ZnE4TDM5RXlhdjJiM3Nhdi1tNWp1cGcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3l4WndmcThMMzlFeWF2MmIzc2F2LW01anVwZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTUvbVlySEh2LXRYVW04 enZQQ2lWVkhsRlFlQS1ZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHACQHj0AAAjANBgkqhkiG9w0BAQsFAAOCAQEASj354UJ9c2Wmk9q9Aw3Ycdgv c8mq/kdujqIoFwlYS6L8wVB9Al9FdOCCPB+poM0t40uVc1GuD23ggPnR3ydi2W1c ApEBm/McH6xKca6XykFZ38OHemQI+GGs6eBiPJMj3X/8ixCPtPQ6hKLNPqVPZ6Zb Zr5ghsynyhGDLk1/SqeXbcwr8hLGQVcEeVD9GUvzjAhCmXqvfVHmFh27350a/P9s LLIUadkyA9yaxCvd66oSiP0VCppKgCu20H2a0LeSGkiv/Rfx97wSPiXZul6MhjTo 54jQymkdL+82BdMeFD3DKOWVZp5XE+ifcFh9RtfffuZKOh4x7xVUQre76Hc9KQ== -----END CERTIFICATE-----Generated at Mon Sep 8 09:13:25 2025 by rpki-client