$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1232/465HbhHsn4rC4qI-yQQRieXyN6k.roa File: 465HbhHsn4rC4qI-yQQRieXyN6k.roa (raw, json) Hash identifier: 6ybKpAXy30XNKrn226tIEhs+HTs5YNQkEeoyox2DiOs= Subject key identifier: E3:AE:47:6E:11:EC:9F:8A:C2:E2:A2:3E:C9:04:11:89:E5:F2:37:A9 Certificate issuer: /CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4 Certificate serial: 3B Authority key identifier: F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/465HbhHsn4rC4qI-yQQRieXyN6k.roa Signing time: Fri 22 Aug 2025 06:30:21 +0000 ROA not before: Fri 22 Aug 2025 06:30:21 +0000 ROA not after: Thu 20 Aug 2026 07:49:18 +0000 asID: 12076 IP address blocks: 2402:7d80:8888::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 06:13:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4 Validity Not Before: Aug 22 06:30:21 2025 GMT Not After : Aug 20 07:49:18 2026 GMT Subject: CN=E3AE476E11EC9F8AC2E2A23EC9041189E5F237A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2f:d0:cc:ab:0a:3c:b1:1e:7d:07:76:c5:27: 55:44:1c:fc:10:38:31:96:09:ed:48:0e:4b:92:ce: c5:d3:98:d7:47:b6:34:97:3f:51:dc:64:2c:2c:93: 46:77:3e:d7:3e:ff:96:5e:1a:d7:d4:29:8d:9d:f3: b7:43:fc:c8:15:9a:da:af:2c:79:48:dc:e9:26:d9: c3:7c:ac:ff:8f:a1:bf:e4:18:ec:3a:ee:b6:ab:68: 8e:27:53:73:73:ed:77:42:85:57:64:bf:b3:59:28: 0a:b8:85:c6:64:eb:6b:d6:5c:d7:e9:3e:7b:6b:64: d5:4e:c9:32:e9:0d:28:d1:e4:7c:f0:ae:71:8b:71: 1a:80:4d:50:6d:1b:10:1e:f1:39:36:49:9f:42:a0: 26:d9:ab:e6:72:b8:59:c0:ae:7c:25:63:d0:17:9d: ae:3b:d9:c1:3f:4d:80:3b:17:bd:d6:6b:e8:7a:ba: d8:ac:c8:23:16:e6:28:bb:ec:c8:ee:d3:11:63:07: 52:34:29:fa:80:e5:df:86:c1:40:53:6d:c4:b3:d8: a6:10:ff:f0:6b:0e:96:0c:04:a9:3b:96:29:e5:30: d5:4f:77:0e:b6:f1:8c:32:0f:3a:b0:a0:52:19:b4: 6f:91:86:21:3d:8c:a5:80:e1:ed:0f:57:b2:a6:3d: d3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:AE:47:6E:11:EC:9F:8A:C2:E2:A2:3E:C9:04:11:89:E5:F2:37:A9 X509v3 Authority Key Identifier: keyid:F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/465HbhHsn4rC4qI-yQQRieXyN6k.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2402:7d80:8888::/48 Signature Algorithm: sha256WithRSAEncryption 55:9b:25:4b:d0:4d:d1:6f:84:f8:c2:e7:f6:c0:c0:29:ce:d4: 8c:14:e3:f8:30:4e:26:6e:3d:e6:bf:b4:3c:70:12:cc:a3:44: 6b:f5:79:20:a0:16:92:97:fd:10:11:a3:62:97:06:24:0d:1a: 04:e5:66:c9:ab:78:d5:e3:a4:b9:84:27:f4:01:0c:d8:a4:78: 02:29:98:09:15:6d:d7:2d:46:91:9d:e1:3d:b3:67:11:4a:f8: 41:45:70:d5:32:d2:fd:6a:a9:54:b4:1c:73:aa:f5:79:cb:96: 62:f8:60:06:50:d6:9b:e6:39:b1:1f:61:78:e2:f6:71:96:7c: 1e:f6:e3:63:59:07:2a:af:8c:2b:60:3d:fe:07:38:9c:f5:e3: 54:40:02:d1:4b:ef:9a:28:e2:7d:f9:d9:31:7a:c0:c7:34:6e: ed:c7:c7:2f:a4:e9:6c:25:db:3f:da:d6:67:c0:5a:bb:76:3f: 25:ec:5f:1a:4d:16:a1:03:cd:be:a4:f8:c6:f9:5d:4c:15:51: 85:a7:26:5f:d7:4a:21:c8:36:bb:07:dd:a3:70:e3:1e:da:4c: 9e:b4:61:44:4f:6c:12:fd:ed:0e:d3:5e:1b:37:af:8f:eb:9c: 4f:9e:d2:21:1b:e0:92:b6:f2:95:57:09:97:7e:35:f3:6c:52: cb:e0:20:8b -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIBOzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGMTk4 OUI0MDY5MDFBREY4ODEwQjlEQ0RDNEUwRkM5RTdFODVFRUI0MB4XDTI1MDgyMjA2 MzAyMVoXDTI2MDgyMDA3NDkxOFowMzExMC8GA1UEAxMoRTNBRTQ3NkUxMUVDOUY4 QUMyRTJBMjNFQzkwNDExODlFNUYyMzdBOTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALgv0MyrCjyxHn0HdsUnVUQc/BA4MZYJ7UgOS5LOxdOY10e2NJc/ UdxkLCyTRnc+1z7/ll4a19QpjZ3zt0P8yBWa2q8seUjc6SbZw3ys/4+hv+QY7Dru tqtojidTc3Ptd0KFV2S/s1koCriFxmTra9Zc1+k+e2tk1U7JMukNKNHkfPCucYtx GoBNUG0bEB7xOTZJn0KgJtmr5nK4WcCufCVj0BedrjvZwT9NgDsXvdZr6Hq62KzI IxbmKLvsyO7TEWMHUjQp+oDl34bBQFNtxLPYphD/8GsOlgwEqTuWKeUw1U93Drbx jDIPOrCgUhm0b5GGIT2MpYDh7Q9XsqY908ECAwEAAaOCAfYwggHyMB0GA1UdDgQW BBTjrkduEeyfisLioj7JBBGJ5fI3qTAfBgNVHSMEGDAWgBTxmJtAaQGt+IELnc3E 4PyefoXutDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xMjMy LzhaaWJRR2tCcmZpQkM1M054T0Q4bm42RjdyUS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOFppYlFHa0JyZmlCQzUzTnhPRDhubjZGN3JRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIzMi80NjVIYmhIc240ckM0 cUkteVFRUmllWHlONmsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcAJAJ9gIiIMA0GCSqGSIb3DQEBCwUAA4IBAQBVmyVL0E3Rb4T4wuf2wMApztSM FOP4ME4mbj3mv7Q8cBLMo0Rr9XkgoBaSl/0QEaNilwYkDRoE5WbJq3jV46S5hCf0 AQzYpHgCKZgJFW3XLUaRneE9s2cRSvhBRXDVMtL9aqlUtBxzqvV5y5Zi+GAGUNab 5jmxH2F44vZxlnwe9uNjWQcqr4wrYD3+Bzic9eNUQALRS++aKOJ9+dkxesDHNG7t x8cvpOlsJds/2tZnwFq7dj8l7F8aTRahA82+pPjG+V1MFVGFpyZf10ohyDa7B92j cOMe2kyetGFET2wS/e0O014bN6+P65xPntIhG+CStvKVVwmXfjXzbFLL4CCL -----END CERTIFICATE-----Generated at Wed Nov 5 06:04:46 2025 by rpki-client