$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/65/EdVWfIr_HvlX10jImKCTXamvA6I.roa File: EdVWfIr_HvlX10jImKCTXamvA6I.roa (raw, json) Hash identifier: 5F6TMazIa1u5aWY870nmiX9IAeeNjXT4nRfxIqZbqk0= Subject key identifier: 11:D5:56:7C:8A:FF:1E:F9:57:D7:48:C8:98:A0:93:5D:A9:AF:03:A2 Certificate issuer: /CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9 Certificate serial: 14C2 Authority key identifier: 98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/EdVWfIr_HvlX10jImKCTXamvA6I.roa Signing time: Thu 11 Sep 2025 06:12:56 +0000 ROA not before: Thu 11 Sep 2025 06:12:56 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 23853 IP address blocks: 2404:7600:104::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 21:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5314 (0x14c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9 Validity Not Before: Sep 11 06:12:56 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=11D5567C8AFF1EF957D748C898A0935DA9AF03A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4e:f9:cc:d7:74:7d:e7:71:bb:c9:7d:74:3b: 6d:d9:d5:01:3f:e3:30:a2:a3:f7:3c:54:fb:96:61: cf:17:26:5a:9b:8a:70:d2:f0:ff:70:ba:e4:d6:e7: 6b:af:a0:48:b8:44:8b:dd:c4:0d:15:21:d4:a1:11: 25:ac:7a:3a:44:99:a9:27:b1:ab:6d:7a:51:d7:6a: 55:3f:08:89:82:b3:da:6d:fd:52:b2:d1:3f:bc:ca: b0:13:ac:5f:0f:08:2e:9f:df:95:b7:6a:65:ec:b7: a9:a4:53:6e:4f:57:a2:0b:55:f0:7e:ec:cc:e4:22: c3:78:a3:0a:3a:fa:92:e4:be:56:d9:4c:e7:22:78: a9:79:d9:22:93:36:67:2a:07:88:98:54:2b:6a:57: f8:f7:28:95:e0:bd:07:70:e8:e3:ca:45:59:d9:9d: f4:fb:7a:2b:09:d4:9d:25:89:16:29:09:45:0d:21: 4d:a2:0a:c2:15:31:7d:1e:4e:1f:dc:3f:ca:fd:60: 88:43:c1:47:4e:86:d2:ef:7f:49:80:c7:a0:71:d1: 63:14:18:33:08:2a:4f:eb:0c:8b:d2:87:56:51:3a: 36:43:34:19:35:da:2c:89:a7:49:7b:c4:51:8b:32: 91:19:75:38:06:cb:03:db:35:d9:ed:0f:a1:89:16: 9a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:D5:56:7C:8A:FF:1E:F9:57:D7:48:C8:98:A0:93:5D:A9:AF:03:A2 X509v3 Authority Key Identifier: keyid:98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/EdVWfIr_HvlX10jImKCTXamvA6I.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2404:7600:104::/46 Signature Algorithm: sha256WithRSAEncryption c4:2e:6c:e0:e3:2b:c1:df:6d:6f:65:08:50:71:a4:48:23:59: ef:37:38:15:00:89:08:44:71:57:ac:68:5e:68:da:d6:f6:90: c3:0a:a0:a9:d3:b3:ae:54:aa:e6:18:11:32:bd:62:41:94:8e: a8:9b:85:a3:dd:f7:14:82:26:75:86:85:18:84:8f:94:7a:78: e0:cb:ad:d6:f3:a8:ba:38:3e:b5:24:17:1e:8c:aa:9a:6f:43: 80:77:1f:31:e4:0d:46:2b:2b:6d:94:92:ae:51:80:51:83:a5: 5b:9a:7d:07:10:70:84:c1:2e:62:67:92:ec:14:3a:e4:fa:70: 33:91:d8:de:44:19:af:83:4c:cd:95:bb:17:b2:38:78:fc:8f: 6f:cb:db:52:e1:80:b3:ce:ad:fc:19:61:c7:60:40:c3:84:3e: a5:ef:b0:e9:a1:aa:5f:09:0f:7b:7a:6c:f5:ae:9b:23:65:a8: f0:88:48:ee:39:b9:c1:ef:24:47:f1:51:08:42:d0:6f:91:13: 95:10:33:87:d8:e4:76:ad:c6:8c:3d:70:03:77:da:78:7f:33: 12:cd:31:a0:64:5a:aa:2b:19:b6:ce:32:e9:c0:3c:db:09:d9: 16:7b:b6:9c:32:97:cf:c7:a2:b0:12:39:92:3a:7d:52:5c:a0: 32:15:de:14 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICFMIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTgy NEM1NTUyMjhCMjhCNjk4RERFNzdCQzFBREQwRTI4MDdCODZCOTAeFw0yNTA5MTEw NjEyNTZaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDExRDU1NjdDOEFGRjFF Rjk1N0Q3NDhDODk4QTA5MzVEQTlBRjAzQTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJTvnM13R953G7yX10O23Z1QE/4zCio/c8VPuWYc8XJlqbinDS 8P9wuuTW52uvoEi4RIvdxA0VIdShESWsejpEmaknsattelHXalU/CImCs9pt/VKy 0T+8yrATrF8PCC6f35W3amXst6mkU25PV6ILVfB+7MzkIsN4owo6+pLkvlbZTOci eKl52SKTNmcqB4iYVCtqV/j3KJXgvQdw6OPKRVnZnfT7eisJ1J0liRYpCUUNIU2i CsIVMX0eTh/cP8r9YIhDwUdOhtLvf0mAx6Bx0WMUGDMIKk/rDIvSh1ZROjZDNBk1 2iyJp0l7xFGLMpEZdTgGywPbNdntD6GJFpq9AgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUEdVWfIr/HvlX10jImKCTXamvA6IwHwYDVR0jBBgwFoAUmCTFVSKLKLaY3ed7 wa3Q4oB7hrkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjUv bUNURlZTS0xLTGFZM2VkN3dhM1E0b0I3aHJrLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9tQ1RGVlNLTEtMYVkzZWQ3d2EzUTRvQjdocmsuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC82NS9FZFZXZklyX0h2bFgxMGpJ bUtDVFhhbXZBNkkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcC JAR2AAEEMA0GCSqGSIb3DQEBCwUAA4IBAQDELmzg4yvB321vZQhQcaRII1nvNzgV AIkIRHFXrGheaNrW9pDDCqCp07OuVKrmGBEyvWJBlI6om4Wj3fcUgiZ1hoUYhI+U enjgy63W86i6OD61JBcejKqab0OAdx8x5A1GKyttlJKuUYBRg6Vbmn0HEHCEwS5i Z5LsFDrk+nAzkdjeRBmvg0zNlbsXsjh4/I9vy9tS4YCzzq38GWHHYEDDhD6l77Dp oapfCQ97emz1rpsjZajwiEjuObnB7yRH8VEIQtBvkROVEDOH2OR2rcaMPXADd9p4 fzMSzTGgZFqqKxm2zjLpwDzbCdkWe7acMpfPx6KwEjmSOn1SXKAyFd4U -----END CERTIFICATE-----Generated at Thu Oct 23 20:29:03 2025 by rpki-client