$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/357/vkWmHQcT_WfmSt8gQcnOswgyK4o.roa File: vkWmHQcT_WfmSt8gQcnOswgyK4o.roa (raw, json) Hash identifier: x3N7xl+pzlyFbxXl0X4yw//BbVjll4FUrmQW5XSju64= Subject key identifier: BE:45:A6:1D:07:13:FD:67:E6:4A:DF:20:41:C9:CE:B3:08:32:2B:8A Certificate issuer: /CN=B3BA6AEF3B8FA2E5D9B5E43438E0020D426A1ECA Certificate serial: 1957 Authority key identifier: B3:BA:6A:EF:3B:8F:A2:E5:D9:B5:E4:34:38:E0:02:0D:42:6A:1E:CA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/vkWmHQcT_WfmSt8gQcnOswgyK4o.roa Signing time: Sat 13 Sep 2025 03:10:17 +0000 ROA not before: Sat 13 Sep 2025 03:10:17 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 37963 IP address blocks: 112.127.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/s7pq7zuPouXZteQ0OOACDUJqHso.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/s7pq7zuPouXZteQ0OOACDUJqHso.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:09:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6487 (0x1957) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3BA6AEF3B8FA2E5D9B5E43438E0020D426A1ECA Validity Not Before: Sep 13 03:10:17 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=BE45A61D0713FD67E64ADF2041C9CEB308322B8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:95:91:4b:d0:f9:6c:41:70:22:58:f8:0b:d7: e6:a3:3c:64:34:b2:36:59:25:70:05:0b:e5:36:6a: 22:79:5f:93:0d:77:e0:0e:d6:6f:6a:fd:cb:f6:f1: 4f:62:fd:3c:d1:7f:6b:08:ad:8a:f5:7c:9a:22:ce: 21:02:7f:d5:bf:fe:ea:8e:cf:30:94:70:30:93:d7: d4:be:83:0b:ab:e5:79:4c:8e:1f:a4:43:0b:d5:6c: 52:6d:13:aa:9f:43:26:23:f6:7c:94:0f:88:57:65: 6a:1b:05:7d:c2:10:e8:7d:09:43:03:79:aa:a1:e4: 5a:0a:83:dd:07:81:95:d2:b7:76:09:2b:2b:ac:f5: 9e:f1:38:bc:38:12:91:57:85:4e:ba:47:22:72:a9: 01:88:d9:53:c4:e3:45:da:49:4a:58:7c:ae:69:f4: f4:d1:b5:23:ac:46:29:6b:ac:55:cc:fd:e1:3f:92: b4:0f:b3:9b:f8:23:87:7b:0a:12:5c:ac:52:2a:b3: 8c:93:80:66:7e:62:1d:f0:02:07:3e:6e:3b:7f:29: 4a:9c:80:fd:2e:e2:bc:35:22:6a:e6:f3:d2:bf:e0: da:32:a4:57:57:65:ac:85:d3:08:06:3c:c4:28:d7: 4c:92:b3:c2:0a:64:8f:a4:b2:1e:e4:ee:3f:f4:da: e3:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:45:A6:1D:07:13:FD:67:E6:4A:DF:20:41:C9:CE:B3:08:32:2B:8A X509v3 Authority Key Identifier: keyid:B3:BA:6A:EF:3B:8F:A2:E5:D9:B5:E4:34:38:E0:02:0D:42:6A:1E:CA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/s7pq7zuPouXZteQ0OOACDUJqHso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/vkWmHQcT_WfmSt8gQcnOswgyK4o.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 112.127.0.0/16 Signature Algorithm: sha256WithRSAEncryption 11:e0:ab:d9:fe:57:b1:8b:a3:2b:a4:c5:57:f8:1f:76:5d:80: f9:b6:cb:7f:73:ab:16:81:32:20:d2:25:57:9f:14:ec:1d:ab: b6:48:ac:0c:2a:7b:35:d5:96:8e:a5:c8:70:71:17:61:e2:e1: 4b:00:3f:49:6b:d0:0e:10:37:0f:6c:ac:ff:ce:66:d1:e5:49: 4d:6d:50:e5:78:a6:f2:93:71:47:cf:d5:47:ae:d5:ea:25:aa: 81:00:85:09:62:fa:6e:2a:0e:66:02:a9:20:e2:3a:93:28:49: 30:64:99:a0:18:b5:69:7d:7b:4d:4b:bf:a7:d1:59:ba:d0:38: e5:25:86:22:53:9b:5b:95:95:b8:50:54:cc:fd:1b:b7:5b:8b: dc:dc:b0:d0:5f:5c:06:17:00:3a:70:73:f1:7a:59:56:4b:ce: da:10:c8:41:9d:73:a2:cd:8b:2b:4d:e5:6d:f1:25:64:53:20: b3:67:0b:83:4b:1d:a8:a3:a3:6a:38:a3:8c:cc:c1:0f:fd:6a: b0:78:52:36:d9:03:8b:01:87:27:00:0a:d1:4e:e8:b7:79:09: eb:a0:9b:33:0c:3f:2f:13:40:1b:6f:7b:8b:28:f4:9a:5c:eb: 9b:25:33:a6:15:35:8e:e4:1a:0f:28:10:49:86:1f:fe:1c:be: 0b:95:46:2b -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICGVcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjNC QTZBRUYzQjhGQTJFNUQ5QjVFNDM0MzhFMDAyMEQ0MjZBMUVDQTAeFw0yNTA5MTMw MzEwMTdaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEJFNDVBNjFEMDcxM0ZE NjdFNjRBREYyMDQxQzlDRUIzMDgzMjJCOEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBlZFL0PlsQXAiWPgL1+ajPGQ0sjZZJXAFC+U2aiJ5X5MNd+AO 1m9q/cv28U9i/TzRf2sIrYr1fJoiziECf9W//uqOzzCUcDCT19S+gwur5XlMjh+k QwvVbFJtE6qfQyYj9nyUD4hXZWobBX3CEOh9CUMDeaqh5FoKg90HgZXSt3YJKyus 9Z7xOLw4EpFXhU66RyJyqQGI2VPE40XaSUpYfK5p9PTRtSOsRilrrFXM/eE/krQP s5v4I4d7ChJcrFIqs4yTgGZ+Yh3wAgc+bjt/KUqcgP0u4rw1Imrm89K/4NoypFdX ZayF0wgGPMQo10ySs8IKZI+ksh7k7j/02uOTAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUvkWmHQcT/WfmSt8gQcnOswgyK4owHwYDVR0jBBgwFoAUs7pq7zuPouXZteQ0 OOACDUJqHsowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzU3 L3M3cHE3enVQb3VYWnRlUTBPT0FDRFVKcUhzby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvczdwcTd6dVBvdVhadGVRME9PQUNEVUpxSHNvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzU3L3ZrV21IUWNUX1dmbVN0 OGdRY25Pc3dneUs0by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwBwfzANBgkqhkiG9w0BAQsFAAOCAQEAEeCr2f5XsYujK6TFV/gfdl2A+bbLf3Or FoEyINIlV58U7B2rtkisDCp7NdWWjqXIcHEXYeLhSwA/SWvQDhA3D2ys/85m0eVJ TW1Q5Xim8pNxR8/VR67V6iWqgQCFCWL6bioOZgKpIOI6kyhJMGSZoBi1aX17TUu/ p9FZutA45SWGIlObW5WVuFBUzP0bt1uL3Nyw0F9cBhcAOnBz8XpZVkvO2hDIQZ1z os2LK03lbfElZFMgs2cLg0sdqKOjajijjMzBD/1qsHhSNtkDiwGHJwAK0U7ot3kJ 66CbMww/LxNAG297iyj0mlzrmyUzphU1juQaDygQSYYf/hy+C5VGKw== -----END CERTIFICATE-----Generated at Sun Oct 26 04:51:55 2025 by rpki-client