$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/OgJaheM8n7R4x4gCxeN_6ekcpCw.roa File: OgJaheM8n7R4x4gCxeN_6ekcpCw.roa (raw, json) Hash identifier: lydiI0UhYe4cVToJUHFE530XDUJBpXB5+d6dcmL/ub8= Subject key identifier: 3A:02:5A:85:E3:3C:9F:B4:78:C7:88:02:C5:E3:7F:E9:E9:1C:A4:2C Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Certificate serial: 2194 Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/OgJaheM8n7R4x4gCxeN_6ekcpCw.roa Signing time: Fri 29 Aug 2025 09:05:29 +0000 ROA not before: Fri 29 Aug 2025 09:05:29 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 23724 IP address blocks: 101.237.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 01:05:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8596 (0x2194) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Validity Not Before: Aug 29 09:05:29 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=3A025A85E33C9FB478C78802C5E37FE9E91CA42C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a8:c7:e3:20:77:b6:58:5a:9b:5d:3c:9e:61: f0:73:b3:4a:b4:27:07:a7:67:36:c8:bf:dd:5c:8d: f5:fb:1d:d0:47:11:47:a3:73:a1:dc:a5:cd:66:e3: 3b:bf:35:e2:73:c3:c2:13:cd:aa:57:b2:3c:2f:69: a8:69:71:f8:fa:92:51:3d:94:e1:ba:3f:e6:71:4a: de:df:ee:d1:bb:57:4d:d1:e8:d7:24:04:4d:6e:d1: b0:e7:fe:c7:49:62:00:8c:d8:8d:8c:76:80:7d:81: 15:cb:51:c2:6a:e2:59:cd:70:39:64:0d:d8:17:c2: b1:1d:ae:5d:88:90:d3:22:f8:6f:1a:19:f3:43:1e: 7d:27:12:01:b8:bb:7b:86:09:7d:e0:1b:2a:f3:d3: 7c:ef:00:79:cf:38:80:c2:2a:60:08:a1:6c:22:6d: eb:59:32:6a:07:bd:b6:7e:4b:12:4e:de:6b:42:47: a9:66:c0:a3:c0:d4:76:b0:19:1f:73:8d:60:d3:e9: ec:3f:e5:a7:78:82:76:d4:36:2f:fa:97:d9:5f:d0: b8:dd:64:93:a9:7f:69:9b:21:59:81:30:fb:e0:32: 1d:79:fd:1a:5c:e6:0a:de:eb:a0:5b:3f:45:36:5a: c0:40:34:aa:3f:a0:07:bd:f9:5d:c3:f6:3f:cc:e6: 4b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:02:5A:85:E3:3C:9F:B4:78:C7:88:02:C5:E3:7F:E9:E9:1C:A4:2C X509v3 Authority Key Identifier: keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/OgJaheM8n7R4x4gCxeN_6ekcpCw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 101.237.34.0/24 Signature Algorithm: sha256WithRSAEncryption 96:e0:c5:4d:0b:1a:00:e2:03:a7:4f:91:e2:0b:7e:a7:44:29: 6e:88:d0:13:12:ae:e1:78:a3:96:c5:50:81:e9:a9:4a:69:9c: 6b:5f:ac:21:aa:7b:3c:76:4f:18:6b:16:09:5e:80:c0:93:2f: bb:af:1a:0a:fe:1d:be:43:a8:71:6d:7b:a8:ff:ce:49:0e:80: 82:d0:d7:78:36:31:be:7d:26:31:02:dc:fe:08:a8:73:07:dc: 10:76:3d:1d:d7:98:8f:11:33:a2:a2:1b:da:e1:d7:d2:24:7b: ea:24:52:c5:fe:4e:a8:4c:d3:4e:8f:98:77:60:e2:7b:68:a6: c2:59:bd:4d:fa:99:c1:37:e2:16:d0:c1:78:1c:99:06:7e:18: 48:26:59:18:8d:93:82:06:20:b9:0a:76:0e:52:b3:3c:f5:5c: fc:f4:f0:78:fb:fb:88:96:f7:46:09:79:b4:72:5a:71:cf:e8: 21:78:60:b6:99:11:7b:72:bd:fa:04:f3:4e:32:6e:69:8c:88: d3:88:b7:56:8a:9f:2f:63:1b:a8:04:29:13:2b:d8:a0:11:00: 75:f6:ef:04:13:0c:e9:65:a7:29:36:73:a8:59:b6:49:30:0c: 88:83:b7:2b:4d:97:e8:0c:61:98:4c:bf:b3:90:fd:ab:22:1e: b6:0d:49:91 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICIZQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE3 MTFBQTdEQzYwMDQ5QjBCMEQ4ODQ4OTdFMDE1QjExNzFGMzdCOTAeFw0yNTA4Mjkw OTA1MjlaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDNBMDI1QTg1RTMzQzlG QjQ3OEM3ODgwMkM1RTM3RkU5RTkxQ0E0MkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCcqMfjIHe2WFqbXTyeYfBzs0q0JwenZzbIv91cjfX7HdBHEUej c6Hcpc1m4zu/NeJzw8ITzapXsjwvaahpcfj6klE9lOG6P+ZxSt7f7tG7V03R6Nck BE1u0bDn/sdJYgCM2I2MdoB9gRXLUcJq4lnNcDlkDdgXwrEdrl2IkNMi+G8aGfND Hn0nEgG4u3uGCX3gGyrz03zvAHnPOIDCKmAIoWwibetZMmoHvbZ+SxJO3mtCR6lm wKPA1HawGR9zjWDT6ew/5ad4gnbUNi/6l9lf0LjdZJOpf2mbIVmBMPvgMh15/Rpc 5gre66BbP0U2WsBANKo/oAe9+V3D9j/M5kuzAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUOgJaheM8n7R4x4gCxeN/6ekcpCwwHwYDVR0jBBgwFoAUKnEap9xgBJsLDYhI l+AVsRcfN7kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3 L0tuRWFwOXhnQkpzTERZaElsLUFWc1JjZk43ay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvS25FYXA5eGdCSnNMRFloSWwtQVZzUmNmTjdrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3L09nSmFoZU04bjdSNHg0 Z0N4ZU5fNmVrY3BDdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABl7SIwDQYJKoZIhvcNAQELBQADggEBAJbgxU0LGgDiA6dPkeILfqdEKW6I0BMS ruF4o5bFUIHpqUppnGtfrCGqezx2TxhrFglegMCTL7uvGgr+Hb5DqHFte6j/zkkO gILQ13g2Mb59JjEC3P4IqHMH3BB2PR3XmI8RM6KiG9rh19Ike+okUsX+TqhM006P mHdg4ntopsJZvU36mcE34hbQwXgcmQZ+GEgmWRiNk4IGILkKdg5Sszz1XPz08Hj7 +4iW90YJebRyWnHP6CF4YLaZEXtyvfoE804ybmmMiNOIt1aKny9jG6gEKRMr2KAR AHX27wQTDOllpyk2c6hZtkkwDIiDtytNl+gMYZhMv7OQ/asiHrYNSZE= -----END CERTIFICATE-----Generated at Sun Oct 26 23:17:39 2025 by rpki-client