$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3272/T3HWexZM2f7vnqdd_FK90-cF1fY.roa File: T3HWexZM2f7vnqdd_FK90-cF1fY.roa (raw, json) Hash identifier: JPKm2IFylXpc0ZweqBp70pbPsTJjgRO0KZtPaFD6MtE= Subject key identifier: 4F:71:D6:7B:16:4C:D9:FE:EF:9E:A7:5D:FC:52:BD:D3:E7:05:D5:F6 Certificate issuer: /CN=FD341E841C183777F8F91DF4FCDA0BB9EFA061BF Certificate serial: 0A62 Authority key identifier: FD:34:1E:84:1C:18:37:77:F8:F9:1D:F4:FC:DA:0B:B9:EF:A0:61:BF Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_TQehBwYN3f4-R30_NoLue-gYb8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3272/T3HWexZM2f7vnqdd_FK90-cF1fY.roa Signing time: Sat 13 Sep 2025 03:07:55 +0000 ROA not before: Sat 13 Sep 2025 03:07:55 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 146806 IP address blocks: 157.66.42.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3272/_TQehBwYN3f4-R30_NoLue-gYb8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3272/_TQehBwYN3f4-R30_NoLue-gYb8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_TQehBwYN3f4-R30_NoLue-gYb8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 09:37:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2658 (0xa62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD341E841C183777F8F91DF4FCDA0BB9EFA061BF Validity Not Before: Sep 13 03:07:55 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=4F71D67B164CD9FEEF9EA75DFC52BDD3E705D5F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c1:0c:c6:91:11:af:99:68:6c:37:36:ba:20: ef:75:fc:c1:c6:e4:9a:9d:03:39:09:24:12:e5:3b: 4e:47:27:ef:1b:db:31:2b:99:0a:56:3a:02:47:52: 6b:45:75:ae:2a:7b:81:3d:63:2f:35:ec:a1:bb:95: 34:ef:87:19:70:2f:a8:dc:17:2d:e1:dd:8a:f7:49: c6:cb:9f:87:75:bd:73:1e:b9:fa:ae:ce:48:64:6d: 01:6c:c7:4d:41:62:7c:47:8c:b2:7d:a7:a5:d5:94: 7e:e8:7b:c3:50:56:0a:0a:c3:11:30:1c:a1:0e:7f: f0:a1:9d:cd:43:d7:1a:f2:65:52:bd:e7:cf:39:95: 9a:1b:9a:9e:5e:cd:ee:d3:40:ec:3d:dd:76:ad:a2: 93:61:8c:41:33:7c:50:63:15:df:82:24:0e:cb:e7: 2c:75:b6:bb:15:45:3a:7f:10:1c:89:e5:d8:0c:06: f2:3f:dd:9c:4a:5b:55:eb:3d:04:41:f9:b7:27:6d: 0e:e4:40:d1:0b:d6:97:00:e7:18:35:62:9d:a2:cb: 9e:c2:1d:ce:7e:eb:81:43:90:03:6c:d9:47:d4:9f: a6:df:f9:a7:ae:a4:be:8c:4e:df:4e:aa:71:b0:43: a5:c8:25:07:ae:7e:7d:d1:d3:28:a3:c5:a1:81:f1: 4a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:71:D6:7B:16:4C:D9:FE:EF:9E:A7:5D:FC:52:BD:D3:E7:05:D5:F6 X509v3 Authority Key Identifier: keyid:FD:34:1E:84:1C:18:37:77:F8:F9:1D:F4:FC:DA:0B:B9:EF:A0:61:BF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3272/_TQehBwYN3f4-R30_NoLue-gYb8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_TQehBwYN3f4-R30_NoLue-gYb8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3272/T3HWexZM2f7vnqdd_FK90-cF1fY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.66.42.0/23 Signature Algorithm: sha256WithRSAEncryption 2e:fa:15:30:c0:88:3c:9c:10:c2:28:38:90:3a:7c:f8:1e:70: a7:43:c9:04:2a:96:35:99:c8:34:dd:7a:04:73:cb:69:7b:23: e2:ea:97:9b:c9:bc:e6:cd:cd:bd:2a:00:fb:15:7f:76:0e:a0: 6e:5a:ae:ab:a8:29:85:0f:bc:32:97:31:18:b7:dd:0e:6e:57: 36:5b:9b:16:22:26:0d:24:3f:1a:9c:dd:e3:ae:bc:1f:0e:ff: a1:ab:37:36:7e:3c:52:82:b1:ba:fb:f6:75:e1:12:7d:16:c1: 67:56:1d:ef:a2:d2:08:27:36:0b:2d:13:be:ff:14:4f:1a:ed: 2a:27:93:80:1b:33:00:e7:d8:4f:96:a4:4f:97:7f:75:96:f0: 49:9c:39:11:0d:73:9c:97:e8:b0:3c:91:27:6f:2d:17:5f:d5: 4c:f2:fc:e3:b6:cb:75:32:20:6a:b8:d2:ba:32:e9:b0:66:f9: 23:f5:0d:b6:04:61:f8:01:39:f9:cc:a2:1d:ab:f1:3b:96:a8: ad:3f:00:bb:f7:bf:e3:71:ae:29:e4:38:00:2f:9d:fe:5e:57: 36:44:85:08:e3:d3:69:8b:94:e1:ab:38:e6:f2:d3:4b:2b:77: c8:d3:6c:aa:db:e9:2e:24:51:eb:53:97:f9:d4:fe:15:00:41: 44:6e:22:cb -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICCmIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkQz NDFFODQxQzE4Mzc3N0Y4RjkxREY0RkNEQTBCQjlFRkEwNjFCRjAeFw0yNTA5MTMw MzA3NTVaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDRGNzFENjdCMTY0Q0Q5 RkVFRjlFQTc1REZDNTJCREQzRTcwNUQ1RjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvwQzGkRGvmWhsNza6IO91/MHG5JqdAzkJJBLlO05HJ+8b2zEr mQpWOgJHUmtFda4qe4E9Yy817KG7lTTvhxlwL6jcFy3h3Yr3ScbLn4d1vXMeufqu zkhkbQFsx01BYnxHjLJ9p6XVlH7oe8NQVgoKwxEwHKEOf/Chnc1D1xryZVK95885 lZobmp5eze7TQOw93XatopNhjEEzfFBjFd+CJA7L5yx1trsVRTp/EByJ5dgMBvI/ 3ZxKW1XrPQRB+bcnbQ7kQNEL1pcA5xg1Yp2iy57CHc5+64FDkANs2UfUn6bf+aeu pL6MTt9OqnGwQ6XIJQeufn3R0yijxaGB8UqbAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUT3HWexZM2f7vnqdd/FK90+cF1fYwHwYDVR0jBBgwFoAU/TQehBwYN3f4+R30 /NoLue+gYb8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 Mi9fVFFlaEJ3WU4zZjQtUjMwX05vTHVlLWdZYjguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL19UUWVoQndZTjNmNC1SMzBfTm9MdWUtZ1liOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzIvVDNIV2V4Wk0yZjd2 bnFkZF9GSzkwLWNGMWZZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAZ1CKjANBgkqhkiG9w0BAQsFAAOCAQEALvoVMMCIPJwQwig4kDp8+B5wp0PJ BCqWNZnINN16BHPLaXsj4uqXm8m85s3NvSoA+xV/dg6gblquq6gphQ+8MpcxGLfd Dm5XNlubFiImDSQ/Gpzd4668Hw7/oas3Nn48UoKxuvv2deESfRbBZ1Yd76LSCCc2 Cy0Tvv8UTxrtKieTgBszAOfYT5akT5d/dZbwSZw5EQ1znJfosDyRJ28tF1/VTPL8 47bLdTIgarjSujLpsGb5I/UNtgRh+AE5+cyiHavxO5aorT8Au/e/43GuKeQ4AC+d /l5XNkSFCOPTaYuU4as45vLTSyt3yNNsqtvpLiRR61OX+dT+FQBBRG4iyw== -----END CERTIFICATE-----Generated at Sat Oct 25 08:16:54 2025 by rpki-client