$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/721/bLwQqBcTUAgOLnFSM3XxPIkZ2FY.roa File: bLwQqBcTUAgOLnFSM3XxPIkZ2FY.roa (raw, json) Hash identifier: LX4FyTHWhh/waOHWjY0OPodv6BUvJ+N8+fSgpbHSFls= Subject key identifier: 6C:BC:10:A8:17:13:50:08:0E:2E:71:52:33:75:F1:3C:89:19:D8:56 Certificate issuer: /CN=7B099066BD2AF234293C87917B33B1AB861970EF Certificate serial: 2012 Authority key identifier: 7B:09:90:66:BD:2A:F2:34:29:3C:87:91:7B:33:B1:AB:86:19:70:EF Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ewmQZr0q8jQpPIeRezOxq4YZcO8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/bLwQqBcTUAgOLnFSM3XxPIkZ2FY.roa Signing time: Sat 06 Sep 2025 08:02:56 +0000 ROA not before: Sat 06 Sep 2025 08:02:56 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 63199 IP address blocks: 139.159.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/ewmQZr0q8jQpPIeRezOxq4YZcO8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/ewmQZr0q8jQpPIeRezOxq4YZcO8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ewmQZr0q8jQpPIeRezOxq4YZcO8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 09:35:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8210 (0x2012) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B099066BD2AF234293C87917B33B1AB861970EF Validity Not Before: Sep 6 08:02:56 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=6CBC10A8171350080E2E71523375F13C8919D856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6c:c2:ed:29:e2:e1:f4:30:48:be:53:15:97: 41:cc:22:d2:e8:ea:c9:9e:74:a9:cd:da:2b:d1:45: 2f:f4:c9:01:55:cb:36:28:17:11:9f:eb:ec:1b:f0: f7:2f:1c:5f:aa:74:af:80:1e:59:5e:2e:1e:73:06: 2c:2d:e7:cd:08:f0:8a:94:5a:51:d3:06:e3:de:18: 1c:12:8c:97:9e:be:b0:86:b6:8c:dc:90:5d:e9:65: da:94:d3:0b:1d:1e:93:e2:70:2c:94:5f:29:e6:9b: 36:71:ac:bb:84:2d:6c:10:57:47:d9:a8:f8:08:f1: 5c:66:a7:3a:04:30:f4:9a:3c:07:47:06:67:9e:ca: a6:3e:f7:55:89:82:8c:d7:d0:b3:d8:62:2d:82:03: bd:f8:bc:d7:36:55:25:6d:a0:d5:41:36:c6:37:ea: c6:42:d5:8c:0a:0d:ce:a9:b6:90:ec:d2:5a:50:73: b1:89:60:0c:58:5c:63:14:e1:d7:1b:87:41:38:8f: 5a:71:6b:bf:19:65:c3:16:ca:ba:25:e0:07:0a:05: 7d:a1:ea:0e:97:ce:e8:29:36:19:63:e4:e4:aa:32: 36:c6:02:1c:ed:37:da:f2:55:6b:4e:9c:e2:aa:af: ac:25:0e:c6:f8:40:da:6e:31:42:a8:ec:d4:16:62: 3d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:BC:10:A8:17:13:50:08:0E:2E:71:52:33:75:F1:3C:89:19:D8:56 X509v3 Authority Key Identifier: keyid:7B:09:90:66:BD:2A:F2:34:29:3C:87:91:7B:33:B1:AB:86:19:70:EF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/ewmQZr0q8jQpPIeRezOxq4YZcO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ewmQZr0q8jQpPIeRezOxq4YZcO8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/bLwQqBcTUAgOLnFSM3XxPIkZ2FY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 139.159.104.0/22 Signature Algorithm: sha256WithRSAEncryption 3e:9e:1d:b0:e8:a3:85:89:11:84:e9:95:1a:f3:bc:ce:85:1c: d1:3b:96:58:2d:42:95:3d:b9:1f:49:3c:22:fd:b3:02:cd:bf: d4:a7:96:87:94:33:f3:40:e9:cf:6f:5f:e7:17:16:56:a6:d9: 17:fc:0b:fb:7f:67:a0:e8:31:c5:3b:5d:72:db:7a:f9:81:bd: 57:98:4c:ce:e2:34:cb:db:d4:88:a1:7b:b0:17:1e:d4:d2:d9: 35:6f:54:15:2a:c1:0a:ca:4f:b3:ed:51:a6:40:3a:d9:9c:0b: 54:98:5a:68:d7:6a:00:a4:d2:11:3f:97:59:e9:0c:d8:5b:36: 80:1a:6f:05:8e:f3:87:cb:96:77:e9:b4:70:57:22:86:8e:df: 64:74:0d:00:22:61:87:50:33:39:17:7e:7b:5e:46:9b:80:ef: 77:18:59:f8:ab:48:c7:6a:73:c4:6f:4d:f0:8c:eb:85:83:39: 10:41:21:a5:e3:2c:43:74:80:6d:31:49:32:af:6a:e0:9d:b3: 2c:87:2f:e5:3b:89:26:f7:ee:6c:3f:5c:0c:55:f1:d2:40:62: 59:c0:d0:e0:29:48:6e:7c:d4:20:22:2f:be:36:00:b9:0a:f0: 2b:8c:f5:05:ba:a2:f5:4f:ac:4e:30:c6:12:10:fa:b2:28:6f: e8:91:c9:03 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICIBIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0Iw OTkwNjZCRDJBRjIzNDI5M0M4NzkxN0IzM0IxQUI4NjE5NzBFRjAeFw0yNTA5MDYw ODAyNTZaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDZDQkMxMEE4MTcxMzUw MDgwRTJFNzE1MjMzNzVGMTNDODkxOUQ4NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCobMLtKeLh9DBIvlMVl0HMItLo6smedKnN2ivRRS/0yQFVyzYo FxGf6+wb8PcvHF+qdK+AHlleLh5zBiwt580I8IqUWlHTBuPeGBwSjJeevrCGtozc kF3pZdqU0wsdHpPicCyUXynmmzZxrLuELWwQV0fZqPgI8VxmpzoEMPSaPAdHBmee yqY+91WJgozX0LPYYi2CA734vNc2VSVtoNVBNsY36sZC1YwKDc6ptpDs0lpQc7GJ YAxYXGMU4dcbh0E4j1pxa78ZZcMWyrol4AcKBX2h6g6XzugpNhlj5OSqMjbGAhzt N9ryVWtOnOKqr6wlDsb4QNpuMUKo7NQWYj1ZAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUbLwQqBcTUAgOLnFSM3XxPIkZ2FYwHwYDVR0jBBgwFoAUewmQZr0q8jQpPIeR ezOxq4YZcO8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzIx L2V3bVFacjBxOGpRcFBJZVJlek94cTRZWmNPOC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZXdtUVpyMHE4alFwUEllUmV6T3hxNFlaY084LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzIxL2JMd1FxQmNUVUFnT0xu RlNNM1h4UElrWjJGWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAKLn2gwDQYJKoZIhvcNAQELBQADggEBAD6eHbDoo4WJEYTplRrzvM6FHNE7llgt QpU9uR9JPCL9swLNv9SnloeUM/NA6c9vX+cXFlam2Rf8C/t/Z6DoMcU7XXLbevmB vVeYTM7iNMvb1Iihe7AXHtTS2TVvVBUqwQrKT7PtUaZAOtmcC1SYWmjXagCk0hE/ l1npDNhbNoAabwWO84fLlnfptHBXIoaO32R0DQAiYYdQMzkXfnteRpuA73cYWfir SMdqc8RvTfCM64WDORBBIaXjLEN0gG0xSTKvauCdsyyHL+U7iSb37mw/XAxV8dJA YlnA0OApSG581CAiL742ALkK8CuM9QW6ovVPrE4wxhIQ+rIob+iRyQM= -----END CERTIFICATE-----Generated at Sat Oct 25 08:23:12 2025 by rpki-client