$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1228/yGBgQ_Is6mtpS4o_kSNsUFhygtE.roa File: yGBgQ_Is6mtpS4o_kSNsUFhygtE.roa (raw, json) Hash identifier: R7h8Ue7gUr/+0YK1fEjPAlu/UJh1hg66VPEfvazJVHs= Subject key identifier: C8:60:60:43:F2:2C:EA:6B:69:4B:8A:3F:91:23:6C:50:58:72:82:D1 Certificate issuer: /CN=ADD2726DD6FF9F5A459AE5B0A9EE8E7DDFC7F07C Certificate serial: 0298 Authority key identifier: AD:D2:72:6D:D6:FF:9F:5A:45:9A:E5:B0:A9:EE:8E:7D:DF:C7:F0:7C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/yGBgQ_Is6mtpS4o_kSNsUFhygtE.roa Signing time: Tue 16 Sep 2025 07:28:27 +0000 ROA not before: Tue 16 Sep 2025 07:28:27 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 133033 IP address blocks: 45.248.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 23:41:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 664 (0x298) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADD2726DD6FF9F5A459AE5B0A9EE8E7DDFC7F07C Validity Not Before: Sep 16 07:28:27 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=C8606043F22CEA6B694B8A3F91236C50587282D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:81:cb:3a:fb:0d:83:8e:24:89:0a:16:d8:47: a7:a2:bb:ea:6c:cc:ba:4a:98:03:1a:20:e5:d1:1f: 97:87:53:a8:4b:12:89:72:6f:04:6c:32:29:b1:10: 49:a9:b2:4b:98:6a:c6:0d:b5:42:f3:e2:17:dc:a8: f0:19:e2:42:7b:bb:03:69:43:7a:1a:91:0e:ec:39: 6b:6a:58:f4:41:db:a0:df:df:57:6a:93:21:7e:47: cc:99:9b:fd:eb:24:ef:de:85:92:17:31:96:5a:0f: 16:15:ed:f7:69:b5:b8:e0:b7:78:45:70:28:2d:3c: 5b:fb:02:45:dc:6d:67:c1:c3:f0:c9:34:20:a4:fc: 00:c8:fa:94:59:9c:c1:12:93:93:c6:30:b8:c1:de: 31:16:b0:96:34:22:0a:a7:b1:8d:bb:7a:9d:b0:04: 52:d1:9c:fb:4f:51:de:57:a5:6d:f1:12:d1:46:f8: a2:98:2a:6f:75:31:f4:9f:86:56:bb:3a:e9:ac:21: f2:ea:80:4e:70:b1:a6:b4:8d:16:45:49:37:2c:2f: a1:a6:b5:b1:79:8e:72:ad:0c:d3:e2:25:7b:05:ab: 54:85:ff:cc:25:34:53:83:1b:f1:70:fb:6a:dc:79: b4:2e:ec:4e:6e:a2:18:83:ea:f2:23:42:d7:af:a9: cc:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:60:60:43:F2:2C:EA:6B:69:4B:8A:3F:91:23:6C:50:58:72:82:D1 X509v3 Authority Key Identifier: keyid:AD:D2:72:6D:D6:FF:9F:5A:45:9A:E5:B0:A9:EE:8E:7D:DF:C7:F0:7C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/yGBgQ_Is6mtpS4o_kSNsUFhygtE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.248.8.0/22 Signature Algorithm: sha256WithRSAEncryption 10:5f:5d:2d:fe:6c:71:fc:bb:0a:4a:51:e8:73:00:19:f3:03: e8:4f:53:b3:ed:dd:8b:ae:1b:60:43:cb:fd:88:9f:d4:2c:38: b5:af:64:2b:09:d1:68:d0:a3:42:df:2a:16:05:c1:58:13:af: 3c:25:9e:af:cf:94:82:ee:b0:fc:71:e1:5d:87:99:c9:d9:3a: 55:00:36:82:a7:de:c5:0d:bf:0a:f8:eb:df:da:e2:8c:b3:ee: da:0b:ac:c7:bd:8e:c8:5f:ea:bd:f0:ba:50:91:78:cd:11:fc: ff:82:13:75:48:e1:22:8e:43:06:c6:d4:b9:6d:78:db:2d:f9: 90:5d:63:46:57:81:99:07:8b:f3:30:f6:92:0d:4e:c0:6a:ee: 17:bf:e7:e3:d7:d1:5e:73:84:76:7a:f4:1a:90:d3:11:06:00: e5:b9:c4:cd:35:41:d1:1c:cb:cb:1c:f9:fb:46:19:21:44:64: 1c:16:83:96:c6:13:2b:ee:67:7b:ee:69:a9:81:87:0b:54:72: 41:3e:8e:df:e9:39:62:d0:c3:82:af:4f:af:dc:99:ae:bc:87: 90:fe:90:24:1c:e2:37:52:48:1d:82:a6:66:fc:7f:4d:ec:35: 8d:6a:ec:97:91:7f:29:f1:86:ed:a3:e0:4b:43:b3:c9:8c:f2: e8:cd:1f:22 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICApgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQURE MjcyNkRENkZGOUY1QTQ1OUFFNUIwQTlFRThFN0RERkM3RjA3QzAeFw0yNTA5MTYw NzI4MjdaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEM4NjA2MDQzRjIyQ0VB NkI2OTRCOEEzRjkxMjM2QzUwNTg3MjgyRDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHgcs6+w2DjiSJChbYR6eiu+pszLpKmAMaIOXRH5eHU6hLEoly bwRsMimxEEmpskuYasYNtULz4hfcqPAZ4kJ7uwNpQ3oakQ7sOWtqWPRB26Df31dq kyF+R8yZm/3rJO/ehZIXMZZaDxYV7fdptbjgt3hFcCgtPFv7AkXcbWfBw/DJNCCk /ADI+pRZnMESk5PGMLjB3jEWsJY0IgqnsY27ep2wBFLRnPtPUd5XpW3xEtFG+KKY Km91MfSfhla7OumsIfLqgE5wsaa0jRZFSTcsL6GmtbF5jnKtDNPiJXsFq1SF/8wl NFODG/Fw+2rcebQu7E5uohiD6vIjQtevqcyrAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUyGBgQ/Is6mtpS4o/kSNsUFhygtEwHwYDVR0jBBgwFoAUrdJybdb/n1pFmuWw qe6Ofd/H8HwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIy OC9yZEp5YmRiX24xcEZtdVd3cWU2T2ZkX0g4SHcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3JkSnliZGJfbjFwRm11V3dxZTZPZmRfSDhIdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEyMjgveUdCZ1FfSXM2bXRw UzRvX2tTTnNVRmh5Z3RFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAi34CDANBgkqhkiG9w0BAQsFAAOCAQEAEF9dLf5scfy7CkpR6HMAGfMD6E9T s+3di64bYEPL/Yif1Cw4ta9kKwnRaNCjQt8qFgXBWBOvPCWer8+Ugu6w/HHhXYeZ ydk6VQA2gqfexQ2/Cvjr39rijLPu2gusx72OyF/qvfC6UJF4zRH8/4ITdUjhIo5D BsbUuW142y35kF1jRleBmQeL8zD2kg1OwGruF7/n49fRXnOEdnr0GpDTEQYA5bnE zTVB0RzLyxz5+0YZIURkHBaDlsYTK+5ne+5pqYGHC1RyQT6O3+k5YtDDgq9Pr9yZ rryHkP6QJBziN1JIHYKmZvx/Tew1jWrsl5F/KfGG7aPgS0OzyYzy6M0fIg== -----END CERTIFICATE-----Generated at Wed Nov 5 21:38:45 2025 by rpki-client