$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/0xmh4RTjbliD7PacXnnJaXtne4Y.roa File: 0xmh4RTjbliD7PacXnnJaXtne4Y.roa (raw, json) Hash identifier: nwU16bWLa0FcJkMq6uf/7gd2GF14N5uirjnfcJg/Q8g= Subject key identifier: D3:19:A1:E1:14:E3:6E:58:83:EC:F6:9C:5E:79:C9:69:7B:67:7B:86 Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Certificate serial: 21A6 Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/0xmh4RTjbliD7PacXnnJaXtne4Y.roa Signing time: Fri 29 Aug 2025 09:05:33 +0000 ROA not before: Fri 29 Aug 2025 09:05:33 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 59077 IP address blocks: 2401:3480:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 11:06:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8614 (0x21a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Validity Not Before: Aug 29 09:05:33 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=D319A1E114E36E5883ECF69C5E79C9697B677B86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1a:9a:fe:01:14:d5:06:bf:c7:4f:bb:f4:01: 8d:e0:2f:3c:67:ae:5b:39:e1:f1:a2:3e:a1:d0:e2: 5d:ed:d9:f5:40:27:5c:2d:19:17:30:d2:ee:96:5e: 25:c2:a0:d9:63:c3:2f:f0:83:c8:24:4f:ab:f1:cf: bb:a1:a8:51:35:0b:fa:30:ed:c2:f3:99:f2:34:7e: d1:57:2c:dd:e0:2c:67:01:30:09:15:ff:47:60:a3: 3e:c2:51:a1:99:f8:9e:4f:62:92:cb:f7:bc:f0:e0: 90:9a:df:61:f8:a7:0c:26:0a:e9:42:63:53:96:36: dc:f4:e5:47:65:28:c1:58:f6:d3:8f:a5:6b:e0:3b: 4a:4f:54:5c:f6:d1:b2:31:94:13:00:ef:11:95:29: 6b:b3:de:68:1e:43:c3:74:40:39:95:51:ed:67:af: 19:99:f8:3e:29:4c:da:22:9e:bf:cf:8d:9d:d9:a2: 38:07:eb:0d:ae:22:78:52:3c:32:bc:67:32:fc:4c: f5:84:a6:cd:5e:19:9a:49:89:c2:5c:bc:80:65:28: 85:42:b4:d3:77:fc:48:ff:4d:99:4c:53:24:82:f0: 25:63:95:f4:ce:af:b2:a6:1c:f0:21:ab:c4:b6:cc: ed:ef:9b:db:09:90:de:4c:ea:c1:fd:1c:9c:b9:c3: ac:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:19:A1:E1:14:E3:6E:58:83:EC:F6:9C:5E:79:C9:69:7B:67:7B:86 X509v3 Authority Key Identifier: keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/0xmh4RTjbliD7PacXnnJaXtne4Y.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:3480:3000::/36 Signature Algorithm: sha256WithRSAEncryption 92:e5:94:6c:d5:36:3a:96:9d:7f:7a:6f:5a:0c:50:18:1d:05: 48:c8:16:9f:59:b2:0f:08:c2:cb:18:f3:cc:ea:0a:c2:5b:bf: e0:51:cb:97:8b:d5:d1:61:3b:3e:fd:87:2d:7d:9a:60:a5:71: f9:85:6d:49:09:a4:83:25:75:b6:b8:72:6e:a0:97:a3:a6:97: 00:6e:f6:53:78:1e:64:a9:7a:c1:4a:e4:8f:68:ea:33:e0:3a: 0c:4a:f7:4e:23:e8:58:0a:cd:29:09:52:56:73:8e:70:81:9f: d6:de:db:ef:19:94:7b:e3:eb:b6:ea:9a:84:f5:9c:d4:dd:42: 6f:65:f1:1c:c1:99:68:71:5f:8d:cb:3a:3a:70:b8:23:7e:0b: 5a:fc:f7:33:7f:10:42:17:44:4b:c0:5c:84:f8:27:58:bd:33: d3:3d:f1:82:6e:e8:d0:02:c9:73:e7:1e:a6:de:30:39:d6:a5: db:f8:a8:a3:47:d3:c8:88:14:8e:33:71:da:f6:23:47:b1:2e: d0:7d:fa:e7:73:fc:38:5d:21:ae:1a:f1:93:47:09:ee:6d:6c: 2b:c5:3e:13:78:c6:9f:02:8d:59:59:20:9b:34:f2:6e:63:97: 6e:eb:cc:68:9e:62:15:18:0e:bd:d7:14:cd:cb:93:80:87:11: b5:53:3f:53 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIaYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE3 MTFBQTdEQzYwMDQ5QjBCMEQ4ODQ4OTdFMDE1QjExNzFGMzdCOTAeFw0yNTA4Mjkw OTA1MzNaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEQzMTlBMUUxMTRFMzZF NTg4M0VDRjY5QzVFNzlDOTY5N0I2NzdCODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDfGpr+ARTVBr/HT7v0AY3gLzxnrls54fGiPqHQ4l3t2fVAJ1wt GRcw0u6WXiXCoNljwy/wg8gkT6vxz7uhqFE1C/ow7cLzmfI0ftFXLN3gLGcBMAkV /0dgoz7CUaGZ+J5PYpLL97zw4JCa32H4pwwmCulCY1OWNtz05UdlKMFY9tOPpWvg O0pPVFz20bIxlBMA7xGVKWuz3mgeQ8N0QDmVUe1nrxmZ+D4pTNoinr/PjZ3ZojgH 6w2uInhSPDK8ZzL8TPWEps1eGZpJicJcvIBlKIVCtNN3/Ej/TZlMUySC8CVjlfTO r7KmHPAhq8S2zO3vm9sJkN5M6sH9HJy5w6zPAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU0xmh4RTjbliD7PacXnnJaXtne4YwHwYDVR0jBBgwFoAUKnEap9xgBJsLDYhI l+AVsRcfN7kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3 L0tuRWFwOXhnQkpzTERZaElsLUFWc1JjZk43ay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvS25FYXA5eGdCSnNMRFloSWwtQVZzUmNmTjdrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3LzB4bWg0UlRqYmxpRDdQ YWNYbm5KYVh0bmU0WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgD BgQkATSAMDANBgkqhkiG9w0BAQsFAAOCAQEAkuWUbNU2Opadf3pvWgxQGB0FSMgW n1myDwjCyxjzzOoKwlu/4FHLl4vV0WE7Pv2HLX2aYKVx+YVtSQmkgyV1trhybqCX o6aXAG72U3geZKl6wUrkj2jqM+A6DEr3TiPoWArNKQlSVnOOcIGf1t7b7xmUe+Pr tuqahPWc1N1Cb2XxHMGZaHFfjcs6OnC4I34LWvz3M38QQhdES8BchPgnWL0z0z3x gm7o0ALJc+cept4wOdal2/ioo0fTyIgUjjNx2vYjR7Eu0H3653P8OF0hrhrxk0cJ 7m1sK8U+E3jGnwKNWVkgmzTybmOXbuvMaJ5iFRgOvdcUzcuTgIcRtVM/Uw== -----END CERTIFICATE-----Generated at Tue Sep 9 10:44:20 2025 by rpki-client