$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3396/Kf3LpQBxSlsl-_6urq4NGFeLwNU.roa File: Kf3LpQBxSlsl-_6urq4NGFeLwNU.roa (raw, json) Hash identifier: vgo47MVbe1jdt+qM+TAEnzsTDcFBW80hb3tLyIo70XI= Subject key identifier: 29:FD:CB:A5:00:71:4A:5B:25:FB:FE:AE:AE:AE:0D:18:57:8B:C0:D5 Certificate issuer: /CN=B6C10D728A382431BAC1F14930D0FC1E075953A6 Certificate serial: 6C Authority key identifier: B6:C1:0D:72:8A:38:24:31:BA:C1:F1:49:30:D0:FC:1E:07:59:53:A6 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tsENcoo4JDG6wfFJMND8HgdZU6Y.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/Kf3LpQBxSlsl-_6urq4NGFeLwNU.roa Signing time: Fri 17 Oct 2025 13:33:53 +0000 ROA not before: Fri 17 Oct 2025 13:33:53 +0000 ROA not after: Sat 26 Sep 2026 09:42:00 +0000 asID: 151261 IP address blocks: 202.58.122.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/tsENcoo4JDG6wfFJMND8HgdZU6Y.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/tsENcoo4JDG6wfFJMND8HgdZU6Y.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tsENcoo4JDG6wfFJMND8HgdZU6Y.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 15:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6C10D728A382431BAC1F14930D0FC1E075953A6 Validity Not Before: Oct 17 13:33:53 2025 GMT Not After : Sep 26 09:42:00 2026 GMT Subject: CN=29FDCBA500714A5B25FBFEAEAEAE0D18578BC0D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0c:23:eb:a3:b6:a5:52:83:ab:b2:51:cd:cf: e4:85:bc:b4:6a:76:b7:f8:1b:ea:3d:54:b3:ba:32: 0a:fd:b0:f3:51:a3:99:08:a9:68:53:b8:fe:44:13: 46:09:13:a0:60:38:ca:6c:6b:0b:cf:5c:37:f9:bb: e9:14:cc:c1:ad:c5:cc:d9:e5:38:f9:1f:c1:8c:37: ce:59:c9:dd:ee:66:89:8f:d3:7c:5b:3b:a9:d7:3a: c0:9e:25:01:23:e5:96:95:09:20:50:cd:4d:75:cd: d6:e0:c1:b4:b5:b9:56:ae:9d:d6:d9:59:fb:a1:7c: cf:92:60:5f:93:94:1d:b9:c2:39:6b:59:7f:99:9a: 1c:c4:63:60:76:ed:71:f4:65:4e:0e:34:55:cd:7f: b1:1d:33:70:9b:30:f9:3c:0c:64:74:2d:c6:3f:06: 0b:10:e2:ac:8e:e5:10:2d:e0:54:72:82:5c:06:22: cf:d3:f2:79:8a:f4:ef:f0:ae:ef:2e:22:46:b3:9d: a7:16:1f:85:b6:4b:5f:bb:27:1e:cf:6a:5e:e0:f1: 94:dc:af:8f:60:e2:31:65:a5:10:a5:46:bd:17:90: 89:62:e0:65:89:ad:ec:0b:a7:e9:50:c5:4e:14:cd: 5b:ba:a7:e7:49:a6:32:ea:8f:dd:d2:9c:24:ab:bf: 2f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:FD:CB:A5:00:71:4A:5B:25:FB:FE:AE:AE:AE:0D:18:57:8B:C0:D5 X509v3 Authority Key Identifier: keyid:B6:C1:0D:72:8A:38:24:31:BA:C1:F1:49:30:D0:FC:1E:07:59:53:A6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/tsENcoo4JDG6wfFJMND8HgdZU6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tsENcoo4JDG6wfFJMND8HgdZU6Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/Kf3LpQBxSlsl-_6urq4NGFeLwNU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.58.122.0/23 Signature Algorithm: sha256WithRSAEncryption e7:50:0d:b0:f8:d9:8d:07:93:d9:fe:54:07:68:3d:f4:1a:85: 6f:cd:05:90:09:f7:0e:fc:e5:cd:18:8d:ea:cf:2c:91:5c:0e: eb:bb:24:1b:bc:0a:d4:9c:cf:b8:85:fb:60:9e:bb:1c:3d:d9: 34:2a:fc:a3:15:d7:39:e3:2f:9a:db:1f:5b:38:fd:fd:67:e9: 72:70:de:94:a7:4b:22:f2:6f:57:5d:ea:b0:29:da:b8:e0:bd: 05:89:eb:fd:cb:10:6e:bf:97:7e:0f:7b:ad:c1:fb:4c:38:74: 3c:c7:de:a8:ce:b7:fd:44:36:50:6f:b4:79:f5:da:16:e4:23: ec:de:cd:c1:e7:58:de:b2:7c:59:d8:c8:35:7b:9e:a5:b9:43: c3:eb:0c:62:9d:89:a4:36:cc:2e:f3:d8:94:d8:6a:05:4e:32: 68:f3:56:8c:ac:20:96:2f:38:6b:c3:af:8c:38:e3:e3:54:75: 28:0a:4e:72:39:10:dd:01:eb:e7:ad:64:5c:8c:38:fe:54:fd: 65:c0:5c:a7:54:ab:0c:08:3a:56:58:96:00:6c:34:d2:8b:ca: 17:c6:86:d3:33:66:0e:9f:98:d2:78:4b:f3:18:e8:5e:8f:cd: 1e:5e:c0:97:44:71:6f:d4:37:ae:b9:09:e4:e9:d8:27:8b:74: f9:a7:cd:a5 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBbDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCNkMx MEQ3MjhBMzgyNDMxQkFDMUYxNDkzMEQwRkMxRTA3NTk1M0E2MB4XDTI1MTAxNzEz MzM1M1oXDTI2MDkyNjA5NDIwMFowMzExMC8GA1UEAxMoMjlGRENCQTUwMDcxNEE1 QjI1RkJGRUFFQUVBRTBEMTg1NzhCQzBENTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANAMI+ujtqVSg6uyUc3P5IW8tGp2t/gb6j1Us7oyCv2w81GjmQip aFO4/kQTRgkToGA4ymxrC89cN/m76RTMwa3FzNnlOPkfwYw3zlnJ3e5miY/TfFs7 qdc6wJ4lASPllpUJIFDNTXXN1uDBtLW5Vq6d1tlZ+6F8z5JgX5OUHbnCOWtZf5ma HMRjYHbtcfRlTg40Vc1/sR0zcJsw+TwMZHQtxj8GCxDirI7lEC3gVHKCXAYiz9Py eYr07/Cu7y4iRrOdpxYfhbZLX7snHs9qXuDxlNyvj2DiMWWlEKVGvReQiWLgZYmt 7Aun6VDFThTNW7qn50mmMuqP3dKcJKu/L/kCAwEAAaOCAfMwggHvMB0GA1UdDgQW BBQp/culAHFKWyX7/q6urg0YV4vA1TAfBgNVHSMEGDAWgBS2wQ1yijgkMbrB8Ukw 0PweB1lTpjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMzk2 L3RzRU5jb280SkRHNndmRkpNTkQ4SGdkWlU2WS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdHNFTmNvbzRKREc2d2ZGSk1ORDhIZ2RaVTZZLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM5Ni9LZjNMcFFCeFNsc2wt XzZ1cnE0TkdGZUx3TlUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQByjp6MA0GCSqGSIb3DQEBCwUAA4IBAQDnUA2w+NmNB5PZ/lQHaD30GoVvzQWQ CfcO/OXNGI3qzyyRXA7ruyQbvArUnM+4hftgnrscPdk0KvyjFdc54y+a2x9bOP39 Z+lycN6Up0si8m9XXeqwKdq44L0Fiev9yxBuv5d+D3utwftMOHQ8x96ozrf9RDZQ b7R59doW5CPs3s3B51jesnxZ2Mg1e56luUPD6wxinYmkNswu89iU2GoFTjJo81aM rCCWLzhrw6+MOOPjVHUoCk5yORDdAevnrWRcjDj+VP1lwFynVKsMCDpWWJYAbDTS i8oXxobTM2YOn5jSeEvzGOhej80eXsCXRHFv1DeuuQnk6dgni3T5p82l -----END CERTIFICATE-----Generated at Tue Oct 21 13:17:58 2025 by rpki-client