$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/3H3gaPCVIYoYKAvpRUdu2IZ2rQY.roa File: 3H3gaPCVIYoYKAvpRUdu2IZ2rQY.roa (raw, json) Hash identifier: w9bDHp7UsgmhtfqUjhGkTJDkTqNN3EnOHWc7Ki+SSKg= Subject key identifier: DC:7D:E0:68:F0:95:21:8A:18:28:0B:E9:45:47:6E:D8:86:76:AD:06 Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 7F8C Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/3H3gaPCVIYoYKAvpRUdu2IZ2rQY.roa Signing time: Wed 06 Aug 2025 07:33:13 +0000 ROA not before: Wed 06 Aug 2025 07:33:13 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 24426 IP address blocks: 43.246.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 14:33:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32652 (0x7f8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: Aug 6 07:33:13 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=DC7DE068F095218A18280BE945476ED88676AD06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b5:d1:6b:ad:c2:71:b0:88:a9:ed:ce:54:ee: 7b:e7:e8:de:6e:f2:cc:9a:5d:24:4c:94:50:b5:8d: ce:9b:d2:0b:6b:1e:00:c1:4b:00:71:62:23:6f:21: c1:47:67:53:01:fe:f2:f2:39:9e:da:0b:20:15:0c: ae:1f:05:ce:f3:31:d6:e9:94:cc:d4:67:0c:63:6a: ce:32:43:00:93:04:70:e3:e9:95:26:bc:5d:07:50: 5f:20:c2:e2:86:6d:c6:b7:3d:a9:8e:72:c2:34:54: f4:ab:a6:09:40:95:da:76:10:de:12:08:77:74:b0: 6a:6f:2a:b1:3c:cb:da:ee:df:31:ea:a1:95:f9:fc: fc:a4:4b:66:91:51:3b:9e:63:03:68:2b:72:37:36: 05:27:a8:04:26:0b:47:59:57:1f:51:31:d8:89:d7: 8b:8f:90:04:f9:ec:23:36:a1:f3:34:51:fa:ba:ea: be:33:d5:36:76:f7:3a:9a:e7:4e:87:2f:1c:6a:2b: 17:e6:9a:da:9f:8a:02:b2:2c:8c:fe:f2:73:47:fc: 64:8b:bf:c1:cc:c6:82:06:e6:4f:35:c6:3d:3f:3e: 8c:eb:e4:88:4a:a4:bd:74:44:d9:4c:e8:43:0f:5b: 80:9c:63:0a:65:db:b3:1e:b0:c1:f4:08:97:ae:a6: ea:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:7D:E0:68:F0:95:21:8A:18:28:0B:E9:45:47:6E:D8:86:76:AD:06 X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/3H3gaPCVIYoYKAvpRUdu2IZ2rQY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.246.80.0/22 Signature Algorithm: sha256WithRSAEncryption 98:f2:b5:03:b0:a6:a8:69:c3:ca:d1:e5:36:2d:f7:18:39:6f: e3:25:2d:d3:84:86:21:33:ff:97:ef:63:16:cc:bc:7a:a0:f2: 3d:e3:01:64:8b:d9:f1:d3:5a:53:22:0e:56:e1:0d:31:3b:1a: d2:8e:e9:e4:ab:36:5a:fd:bd:b4:bb:ad:d7:09:14:22:50:70: 22:2c:cc:f5:aa:5b:bd:cc:70:6e:97:cb:72:23:f6:09:88:63: f9:cf:ab:17:b1:3f:ca:25:70:e7:e7:26:6c:dc:38:62:88:74: ea:fd:0f:45:7b:13:07:0e:d3:23:02:92:24:02:0b:3e:7e:6b: e7:3e:8d:0f:99:ce:fa:e5:31:c5:30:a3:b2:c4:26:8c:85:0d: 9a:82:40:48:64:88:78:6f:3e:a1:fe:84:3a:d1:af:12:28:7b: a1:49:64:49:13:17:b6:56:a2:a1:b4:3e:02:07:26:07:ae:f7: 23:9a:5c:f5:ad:5f:2f:61:3e:0e:e6:05:5f:bf:81:4a:f8:bc: 25:c1:f3:df:f6:9f:20:88:df:09:e2:f1:db:4f:a6:7d:87:a5: 28:14:cb:1f:23:b9:56:27:31:a4:78:15:70:58:27:77:dc:55: 73:c6:fd:74:16:a2:5e:b8:04:fe:2b:1b:17:cd:52:29:f8:9b: ca:75:aa:9b -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICf4wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA4MDYw NzMzMTNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKERDN0RFMDY4RjA5NTIx OEExODI4MEJFOTQ1NDc2RUQ4ODY3NkFEMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5tdFrrcJxsIip7c5U7nvn6N5u8syaXSRMlFC1jc6b0gtrHgDB SwBxYiNvIcFHZ1MB/vLyOZ7aCyAVDK4fBc7zMdbplMzUZwxjas4yQwCTBHDj6ZUm vF0HUF8gwuKGbca3PamOcsI0VPSrpglAldp2EN4SCHd0sGpvKrE8y9ru3zHqoZX5 /PykS2aRUTueYwNoK3I3NgUnqAQmC0dZVx9RMdiJ14uPkAT57CM2ofM0Ufq66r4z 1TZ29zqa506HLxxqKxfmmtqfigKyLIz+8nNH/GSLv8HMxoIG5k81xj0/Pozr5IhK pL10RNlM6EMPW4CcYwpl27MesMH0CJeupurdAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU3H3gaPCVIYoYKAvpRUdu2IZ2rQYwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzNIM2dhUENWSVlvWUtB dnBSVWR1MklaMnJRWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIr9lAwDQYJKoZIhvcNAQELBQADggEBAJjytQOwpqhpw8rR5TYt9xg5b+MlLdOE hiEz/5fvYxbMvHqg8j3jAWSL2fHTWlMiDlbhDTE7GtKO6eSrNlr9vbS7rdcJFCJQ cCIszPWqW73McG6Xy3Ij9gmIY/nPqxexP8olcOfnJmzcOGKIdOr9D0V7EwcO0yMC kiQCCz5+a+c+jQ+ZzvrlMcUwo7LEJoyFDZqCQEhkiHhvPqH+hDrRrxIoe6FJZEkT F7ZWoqG0PgIHJgeu9yOaXPWtXy9hPg7mBV+/gUr4vCXB89/2nyCI3wni8dtPpn2H pSgUyx8juVYnMaR4FXBYJ3fcVXPG/XQWol64BP4rGxfNUin4m8p1qps= -----END CERTIFICATE-----Generated at Thu Aug 14 11:12:07 2025 by rpki-client