$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1211/FGw0KNnuwk0ZpJYhW1mXIp50G18.roa File: FGw0KNnuwk0ZpJYhW1mXIp50G18.roa (raw, json) Hash identifier: ejpaSLir+afshkqzctdThVsaCfDYyBXbT5SvYT6xzCE= Subject key identifier: 14:6C:34:28:D9:EE:C2:4D:19:A4:96:21:5B:59:97:22:9E:74:1B:5F Certificate issuer: /CN=183D882201945BE13993B4C6DAC954F8EE426C97 Certificate serial: 1407 Authority key identifier: 18:3D:88:22:01:94:5B:E1:39:93:B4:C6:DA:C9:54:F8:EE:42:6C:97 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GD2IIgGUW-E5k7TG2slU-O5CbJc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/FGw0KNnuwk0ZpJYhW1mXIp50G18.roa Signing time: Sat 13 Sep 2025 03:06:56 +0000 ROA not before: Sat 13 Sep 2025 03:06:56 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 63701 IP address blocks: 45.116.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/GD2IIgGUW-E5k7TG2slU-O5CbJc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/GD2IIgGUW-E5k7TG2slU-O5CbJc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GD2IIgGUW-E5k7TG2slU-O5CbJc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 23:43:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5127 (0x1407) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=183D882201945BE13993B4C6DAC954F8EE426C97 Validity Not Before: Sep 13 03:06:56 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=146C3428D9EEC24D19A496215B5997229E741B5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cb:fa:3e:9e:5d:64:80:de:c7:8e:76:eb:38: c7:36:30:54:4b:00:b3:62:7c:cb:ee:80:fe:3d:8f: c6:9a:66:e5:0b:ae:e8:e1:71:05:7c:9a:0a:a0:63: b9:fd:31:20:c1:d4:d0:0e:5a:68:25:4c:e5:30:4a: 98:6b:58:a1:15:2e:f3:09:fd:fc:66:cb:40:05:6c: 3a:48:7b:3f:2a:75:08:2c:37:f6:96:a0:74:b7:94: a0:d6:37:41:e4:7e:85:56:d8:6d:d1:83:2f:ba:12: 25:c5:8b:62:cc:0a:79:8c:71:a0:5b:bc:e1:a0:fb: e3:f3:2b:35:49:be:ad:48:4f:a2:b8:e8:ea:04:7a: 5e:66:e7:e5:f5:01:14:32:31:05:69:a1:c1:b4:58: 74:f5:82:63:bd:2c:c4:9e:48:47:7a:3c:c7:22:f6: 13:9b:9e:f1:ea:8f:cd:eb:20:67:30:94:f0:90:60: 7f:64:6c:21:fa:58:c5:2d:f8:2a:f9:c7:bf:1d:cf: 2a:47:b7:db:d2:5d:94:64:93:bb:2f:55:16:04:ca: 69:d8:f2:7e:55:0f:86:8d:37:25:6b:0b:cb:91:2a: 9e:9d:15:8e:59:9a:3d:a0:0d:2e:a0:ee:76:9a:f3: 38:b3:16:a4:15:51:af:7a:c6:f2:2c:f9:58:0b:b9: 57:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:6C:34:28:D9:EE:C2:4D:19:A4:96:21:5B:59:97:22:9E:74:1B:5F X509v3 Authority Key Identifier: keyid:18:3D:88:22:01:94:5B:E1:39:93:B4:C6:DA:C9:54:F8:EE:42:6C:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/GD2IIgGUW-E5k7TG2slU-O5CbJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GD2IIgGUW-E5k7TG2slU-O5CbJc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/FGw0KNnuwk0ZpJYhW1mXIp50G18.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.116.208.0/22 Signature Algorithm: sha256WithRSAEncryption 6e:c5:da:88:57:f5:4c:ed:05:24:65:c0:52:82:37:cb:68:04: cb:2a:9a:a2:37:b8:d5:6a:f6:99:9f:5a:cf:68:2c:16:34:f0: ac:fc:ac:09:21:63:a9:1a:5c:af:a5:aa:9d:28:c2:16:2a:be: 9f:a7:d4:0f:75:bf:b4:f8:ed:eb:f3:db:32:56:9a:6d:90:bc: 03:93:30:13:5b:d4:8c:39:07:29:89:9a:3f:0a:29:da:be:9e: 01:ab:37:63:6b:f7:a3:39:35:31:6a:f9:fd:1b:ba:c8:ea:21: 92:1d:df:82:87:3f:3b:78:6a:8e:b3:92:1a:e2:29:b2:15:09: 99:aa:33:4d:26:f0:fb:98:d8:72:6a:f3:da:72:bd:5e:81:eb: 17:4d:c8:31:03:f4:3d:18:6c:08:f3:5c:a8:84:ee:bf:60:d1: c6:e4:01:8e:d2:da:aa:59:0c:1a:6f:c7:fa:6b:af:68:7b:4f: ab:d1:f0:a4:3e:4c:58:a5:1c:dd:04:ce:15:14:6a:e3:91:7a: db:84:1a:18:59:e1:01:c6:89:59:b2:ac:11:5a:83:9e:44:ef: 7f:4e:2d:07:c1:38:45:6c:d3:f1:0a:16:0e:27:e8:01:12:9f: 16:b9:5e:68:bc:ed:4a:da:97:ad:27:ee:94:98:72:c1:28:71: a0:df:51:4b -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFAcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTgz RDg4MjIwMTk0NUJFMTM5OTNCNEM2REFDOTU0RjhFRTQyNkM5NzAeFw0yNTA5MTMw MzA2NTZaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDE0NkMzNDI4RDlFRUMy NEQxOUE0OTYyMTVCNTk5NzIyOUU3NDFCNUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHy/o+nl1kgN7HjnbrOMc2MFRLALNifMvugP49j8aaZuULrujh cQV8mgqgY7n9MSDB1NAOWmglTOUwSphrWKEVLvMJ/fxmy0AFbDpIez8qdQgsN/aW oHS3lKDWN0HkfoVW2G3Rgy+6EiXFi2LMCnmMcaBbvOGg++PzKzVJvq1IT6K46OoE el5m5+X1ARQyMQVpocG0WHT1gmO9LMSeSEd6PMci9hObnvHqj83rIGcwlPCQYH9k bCH6WMUt+Cr5x78dzypHt9vSXZRkk7svVRYEymnY8n5VD4aNNyVrC8uRKp6dFY5Z mj2gDS6g7naa8zizFqQVUa96xvIs+VgLuVeTAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUFGw0KNnuwk0ZpJYhW1mXIp50G18wHwYDVR0jBBgwFoAUGD2IIgGUW+E5k7TG 2slU+O5CbJcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIx MS9HRDJJSWdHVVctRTVrN1RHMnNsVS1PNUNiSmMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0dEMklJZ0dVVy1FNWs3VEcyc2xVLU81Q2JKYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEyMTEvRkd3MEtObnV3azBa cEpZaFcxbVhJcDUwRzE4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAi100DANBgkqhkiG9w0BAQsFAAOCAQEAbsXaiFf1TO0FJGXAUoI3y2gEyyqa oje41Wr2mZ9az2gsFjTwrPysCSFjqRpcr6WqnSjCFiq+n6fUD3W/tPjt6/PbMlaa bZC8A5MwE1vUjDkHKYmaPwop2r6eAas3Y2v3ozk1MWr5/Ru6yOohkh3fgoc/O3hq jrOSGuIpshUJmaozTSbw+5jYcmrz2nK9XoHrF03IMQP0PRhsCPNcqITuv2DRxuQB jtLaqlkMGm/H+muvaHtPq9HwpD5MWKUc3QTOFRRq45F624QaGFnhAcaJWbKsEVqD nkTvf04tB8E4RWzT8QoWDifoARKfFrleaLztStqXrSfulJhywShxoN9RSw== -----END CERTIFICATE-----Generated at Wed Nov 5 23:34:03 2025 by rpki-client