$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/65/sAuy9X3hLvOKgN2tci0AuNUTFEU.roa File: sAuy9X3hLvOKgN2tci0AuNUTFEU.roa (raw, json) Hash identifier: etHz1Py0o7VNvXDJ6kPr2PILpq1U+FGqiX8pYAh0dbc= Subject key identifier: B0:0B:B2:F5:7D:E1:2E:F3:8A:80:DD:AD:72:2D:00:B8:D5:13:14:45 Certificate issuer: /CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9 Certificate serial: 14C6 Authority key identifier: 98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/sAuy9X3hLvOKgN2tci0AuNUTFEU.roa Signing time: Thu 11 Sep 2025 06:13:34 +0000 ROA not before: Thu 11 Sep 2025 06:13:34 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 23853 IP address blocks: 2404:7600:110::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 21:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5318 (0x14c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9 Validity Not Before: Sep 11 06:13:34 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=B00BB2F57DE12EF38A80DDAD722D00B8D5131445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6a:28:b5:bc:7f:95:b1:2b:ee:43:7c:ca:44: ed:31:9f:08:23:2d:36:91:0d:a1:3f:e1:84:8f:10: 23:f1:40:1b:30:cd:8c:eb:16:3b:9a:83:b5:2f:1e: 4a:cb:5d:f0:5c:70:9f:b3:64:85:0b:0c:bf:6c:5d: ad:66:16:c3:f0:c1:21:55:ec:e5:78:70:8c:24:ad: 63:c5:a5:ba:d8:9a:4d:28:a5:ec:2a:c6:57:5f:52: 2c:ba:32:24:10:a7:ba:85:4f:23:7e:e6:94:ba:11: 19:50:7b:d6:13:b8:4a:31:da:b3:ee:5f:97:ad:d1: 60:48:dd:4e:f7:5d:6e:8a:7b:3f:72:d8:70:08:44: fe:ad:f3:ef:2a:9c:df:05:b5:bc:0a:df:55:e8:70: cf:c9:e9:40:a7:77:ac:65:04:ab:8b:34:bb:1e:00: 86:e1:f4:04:e4:c7:2b:24:da:bc:f5:e8:ee:2a:d3: 61:ff:c3:83:92:fd:31:b1:87:24:dd:2d:15:50:bd: 85:9a:38:ee:62:25:ce:8d:7e:fd:ce:2d:45:00:02: e8:55:16:3c:5e:ef:d2:3e:1c:dc:9a:cd:98:76:6e: 5c:92:93:64:f7:7f:ad:10:c3:24:66:16:12:59:28: da:2a:ab:2f:28:1c:26:cf:c1:12:bc:74:84:8b:90: 48:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:0B:B2:F5:7D:E1:2E:F3:8A:80:DD:AD:72:2D:00:B8:D5:13:14:45 X509v3 Authority Key Identifier: keyid:98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/sAuy9X3hLvOKgN2tci0AuNUTFEU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2404:7600:110::/44 Signature Algorithm: sha256WithRSAEncryption 5b:93:3e:7b:b5:f9:1c:0a:18:91:37:71:98:59:42:0d:74:8d: 10:b4:31:96:c5:58:00:78:c6:dc:01:a4:16:40:e6:66:e5:8e: 7d:f1:fe:1a:01:66:b1:03:a8:d4:87:e9:c8:52:f7:a6:da:7f: 67:22:df:91:75:c4:e1:ce:66:ab:59:0b:40:f8:ac:df:dc:4e: 6c:34:3c:0e:68:f6:f7:82:aa:c3:ad:30:61:f8:d0:52:d2:36: fb:5c:ef:57:f2:45:f5:73:a9:3e:33:19:dc:56:df:d0:58:b0: 48:ed:70:5a:0c:c2:d3:fa:c2:ec:58:0e:7a:a7:d6:16:22:3b: df:30:04:23:15:00:12:11:ef:f6:49:a7:93:ff:b0:3b:29:4d: 5e:21:fb:48:bf:88:c4:b8:fb:22:3c:15:8f:f8:64:42:b9:92: 47:dd:01:6f:1c:f3:cf:67:fa:25:11:bf:9e:aa:af:1b:0c:44: 0e:a1:89:e4:92:96:61:81:0d:35:73:ee:c5:ad:d9:b4:02:26: fc:0c:da:49:25:c1:f7:e1:83:80:02:ae:9a:2f:5b:71:2d:d5: 8d:37:a3:17:51:09:69:e6:66:ba:43:7f:db:43:bb:7e:8a:01: e8:78:6c:38:17:e4:c5:21:e3:e2:21:f1:f7:c1:f1:b8:ed:e1: b2:3f:ea:54 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICFMYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTgy NEM1NTUyMjhCMjhCNjk4RERFNzdCQzFBREQwRTI4MDdCODZCOTAeFw0yNTA5MTEw NjEzMzRaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEIwMEJCMkY1N0RFMTJF RjM4QTgwRERBRDcyMkQwMEI4RDUxMzE0NDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5aii1vH+VsSvuQ3zKRO0xnwgjLTaRDaE/4YSPECPxQBswzYzr Fjuag7UvHkrLXfBccJ+zZIULDL9sXa1mFsPwwSFV7OV4cIwkrWPFpbrYmk0opewq xldfUiy6MiQQp7qFTyN+5pS6ERlQe9YTuEox2rPuX5et0WBI3U73XW6Kez9y2HAI RP6t8+8qnN8FtbwK31XocM/J6UCnd6xlBKuLNLseAIbh9ATkxysk2rz16O4q02H/ w4OS/TGxhyTdLRVQvYWaOO5iJc6Nfv3OLUUAAuhVFjxe79I+HNyazZh2blySk2T3 f60QwyRmFhJZKNoqqy8oHCbPwRK8dISLkEjZAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUsAuy9X3hLvOKgN2tci0AuNUTFEUwHwYDVR0jBBgwFoAUmCTFVSKLKLaY3ed7 wa3Q4oB7hrkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjUv bUNURlZTS0xLTGFZM2VkN3dhM1E0b0I3aHJrLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9tQ1RGVlNLTEtMYVkzZWQ3d2EzUTRvQjdocmsuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC82NS9zQXV5OVgzaEx2T0tnTjJ0 Y2kwQXVOVVRGRVUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcE JAR2AAEQMA0GCSqGSIb3DQEBCwUAA4IBAQBbkz57tfkcChiRN3GYWUINdI0QtDGW xVgAeMbcAaQWQOZm5Y598f4aAWaxA6jUh+nIUvem2n9nIt+RdcThzmarWQtA+Kzf 3E5sNDwOaPb3gqrDrTBh+NBS0jb7XO9X8kX1c6k+MxncVt/QWLBI7XBaDMLT+sLs WA56p9YWIjvfMAQjFQASEe/2SaeT/7A7KU1eIftIv4jEuPsiPBWP+GRCuZJH3QFv HPPPZ/olEb+eqq8bDEQOoYnkkpZhgQ01c+7Frdm0Aib8DNpJJcH34YOAAq6aL1tx LdWNN6MXUQlp5ma6Q3/bQ7t+igHoeGw4F+TFIePiIfH3wfG47eGyP+pU -----END CERTIFICATE-----Generated at Thu Oct 23 20:29:02 2025 by rpki-client