$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/65/P4rrPSUpBszXlm5a4ExpKwVWwRA.roa File: P4rrPSUpBszXlm5a4ExpKwVWwRA.roa (raw, json) Hash identifier: ZmlZSlxLhhUBsDGQVPtr6Pb52LCMNPCzFq61HL7eshc= Subject key identifier: 3F:8A:EB:3D:25:29:06:CC:D7:96:6E:5A:E0:4C:69:2B:05:56:C1:10 Certificate issuer: /CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9 Certificate serial: 14E6 Authority key identifier: 98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/P4rrPSUpBszXlm5a4ExpKwVWwRA.roa Signing time: Thu 11 Sep 2025 08:18:04 +0000 ROA not before: Thu 11 Sep 2025 08:18:04 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 17621 IP address blocks: 211.144.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 21:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5350 (0x14e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9 Validity Not Before: Sep 11 08:18:04 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=3F8AEB3D252906CCD7966E5AE04C692B0556C110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:44:86:61:34:12:ad:ad:ce:46:3e:ec:84:b0: e1:47:9c:5e:f6:90:50:8c:76:7b:ec:52:03:9c:1c: d4:6e:36:fe:47:78:c6:bf:17:ca:9c:14:34:71:97: 14:60:aa:80:00:e3:78:76:4b:1a:17:d3:4e:e7:51: 5f:f3:2d:f6:e6:c8:b0:d8:5f:d8:4b:ac:20:7e:f8: 57:44:22:90:eb:20:3d:31:64:f1:b7:97:6f:f2:b9: 0b:b9:cf:e0:f0:16:9f:b3:4c:b4:f0:c0:46:c0:39: b0:eb:e3:a9:ae:1a:a5:26:bd:83:03:d0:42:12:d3: 08:b9:4f:ea:87:3b:d6:63:0a:59:7a:6f:b1:a6:a8: 95:f5:2b:9d:11:a5:29:64:a1:b6:f3:73:8c:30:9d: ea:68:86:c7:17:5f:9e:f3:e3:4c:a8:b4:76:9c:b1: 0e:04:ce:57:82:2f:16:c6:99:83:bc:52:90:93:08: 5f:f5:fa:2c:89:7c:d6:24:cf:51:6c:22:f9:f2:d1: e3:b0:92:0a:ae:57:d2:23:e5:c3:71:89:35:c1:1f: 1d:66:9e:73:60:cf:4a:0e:36:54:ea:03:bf:39:6d: 2d:6c:dd:43:da:e9:a6:a1:9b:06:11:80:cd:40:cd: a1:31:78:6d:45:fc:70:16:0c:13:35:23:57:23:29: cf:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:8A:EB:3D:25:29:06:CC:D7:96:6E:5A:E0:4C:69:2B:05:56:C1:10 X509v3 Authority Key Identifier: keyid:98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/P4rrPSUpBszXlm5a4ExpKwVWwRA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.144.192.0/20 Signature Algorithm: sha256WithRSAEncryption de:0e:1e:70:90:61:5d:c2:67:ba:53:90:ea:5a:4d:c4:69:97: 9b:b1:e3:8a:5d:59:67:65:ef:c8:c1:88:cb:3e:10:34:62:56: de:1e:a2:cf:01:e4:73:c5:99:d5:d4:7c:41:05:48:86:6b:93: 55:3d:3d:5e:7d:ec:43:16:bf:05:36:91:e6:c4:70:4d:d6:09: 41:e5:63:82:cf:c8:01:a0:1b:52:e1:b1:d7:da:53:fb:da:d7: ee:a7:61:42:40:b3:97:e9:54:0c:b1:89:98:88:2a:05:45:4d: 0b:c8:62:10:fe:76:91:ee:ae:4a:af:47:e1:06:26:a6:6a:94: 77:a9:b3:06:08:93:28:9a:70:e8:d5:38:17:dd:07:50:c6:9f: cc:77:14:01:d6:1e:c9:03:af:6d:56:5a:a9:13:27:21:96:a1: 89:ed:f5:46:31:69:c3:f3:e3:df:b3:7c:00:cb:41:27:cd:e2: 31:8b:5f:43:a3:f9:4a:c6:8a:80:dc:34:9d:8e:bd:b7:5b:93: 61:d6:68:93:88:58:4b:a7:12:c3:91:de:07:02:fb:e1:74:fb: 9e:a8:b3:36:1d:f8:41:31:ea:d2:27:ce:da:b6:9d:7a:56:ce: 4e:d0:ed:03:c7:2d:cc:70:ed:76:a7:e9:e9:ae:a5:d0:0d:22: cc:4d:6e:e3 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICFOYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTgy NEM1NTUyMjhCMjhCNjk4RERFNzdCQzFBREQwRTI4MDdCODZCOTAeFw0yNTA5MTEw ODE4MDRaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDNGOEFFQjNEMjUyOTA2 Q0NENzk2NkU1QUUwNEM2OTJCMDU1NkMxMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKRIZhNBKtrc5GPuyEsOFHnF72kFCMdnvsUgOcHNRuNv5HeMa/ F8qcFDRxlxRgqoAA43h2SxoX007nUV/zLfbmyLDYX9hLrCB++FdEIpDrID0xZPG3 l2/yuQu5z+DwFp+zTLTwwEbAObDr46muGqUmvYMD0EIS0wi5T+qHO9ZjCll6b7Gm qJX1K50RpSlkobbzc4wwnepohscXX57z40yotHacsQ4EzleCLxbGmYO8UpCTCF/1 +iyJfNYkz1FsIvny0eOwkgquV9Ij5cNxiTXBHx1mnnNgz0oONlTqA785bS1s3UPa 6aahmwYRgM1AzaExeG1F/HAWDBM1I1cjKc+pAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUP4rrPSUpBszXlm5a4ExpKwVWwRAwHwYDVR0jBBgwFoAUmCTFVSKLKLaY3ed7 wa3Q4oB7hrkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjUv bUNURlZTS0xLTGFZM2VkN3dhM1E0b0I3aHJrLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9tQ1RGVlNLTEtMYVkzZWQ3d2EzUTRvQjdocmsuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC82NS9QNHJyUFNVcEJzelhsbTVh NEV4cEt3Vld3UkEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE 05DAMA0GCSqGSIb3DQEBCwUAA4IBAQDeDh5wkGFdwme6U5DqWk3EaZebseOKXVln Ze/IwYjLPhA0YlbeHqLPAeRzxZnV1HxBBUiGa5NVPT1efexDFr8FNpHmxHBN1glB 5WOCz8gBoBtS4bHX2lP72tfup2FCQLOX6VQMsYmYiCoFRU0LyGIQ/naR7q5Kr0fh BiamapR3qbMGCJMomnDo1TgX3QdQxp/MdxQB1h7JA69tVlqpEychlqGJ7fVGMWnD 8+Pfs3wAy0EnzeIxi19Do/lKxoqA3DSdjr23W5Nh1miTiFhLpxLDkd4HAvvhdPue qLM2HfhBMerSJ87atp16Vs5O0O0Dxy3McO12p+nprqXQDSLMTW7j -----END CERTIFICATE-----Generated at Thu Oct 23 20:27:25 2025 by rpki-client