$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/6SxtQP3DrofnLHda_35CH9nSdtE.roa File: 6SxtQP3DrofnLHda_35CH9nSdtE.roa (raw, json) Hash identifier: EltO10fLVmTZNw1eX5XH7pnxpe70KdZMzCibcxk66xc= Subject key identifier: E9:2C:6D:40:FD:C3:AE:87:E7:2C:77:5A:FF:7E:42:1F:D9:D2:76:D1 Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 7F90 Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6SxtQP3DrofnLHda_35CH9nSdtE.roa Signing time: Wed 06 Aug 2025 07:33:15 +0000 ROA not before: Wed 06 Aug 2025 07:33:15 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 24426 IP address blocks: 43.246.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 14:33:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32656 (0x7f90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: Aug 6 07:33:15 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=E92C6D40FDC3AE87E72C775AFF7E421FD9D276D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:17:16:9e:62:4d:c7:20:f9:0d:31:c5:0a:4e: 45:27:5a:24:00:1e:1a:ae:5a:9b:f5:d7:88:f4:72: 2e:41:26:21:b5:12:6f:31:fa:c8:55:4a:00:3d:b0: 2d:c0:1d:2f:92:78:bf:38:6d:b7:15:d3:07:76:12: c5:f7:51:1a:3e:84:48:8e:e3:de:a6:4a:ac:3e:42: 08:dd:de:2c:48:ac:9f:fd:5f:51:96:31:6c:28:84: 25:b0:b8:a9:1f:23:27:20:74:56:00:6c:aa:50:0e: d4:56:5f:32:5a:c3:4f:d9:b2:7b:a4:ff:cf:78:14: cb:db:70:77:91:b9:fc:b5:28:82:0e:32:ec:be:74: bb:09:e0:f3:b2:c5:08:43:e9:de:a5:1f:4b:02:56: 4e:f7:10:a5:26:27:d7:47:21:86:1f:ec:c0:f9:bb: df:bd:6b:8c:25:51:37:0d:0e:2d:7d:74:73:36:6a: b4:d3:63:23:55:46:0c:74:4e:c4:af:ab:26:82:d8: 68:17:e3:5b:34:a8:e1:c5:83:ad:5f:3f:8b:e4:71: 63:45:aa:54:b0:e2:23:ca:3b:c8:b2:d8:d2:a3:a5: 7b:7a:6a:73:ea:1c:25:b4:51:4a:c0:b3:9f:76:37: 2e:c1:6a:95:1d:ab:90:33:f6:c1:ff:cc:d3:88:c9: aa:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:2C:6D:40:FD:C3:AE:87:E7:2C:77:5A:FF:7E:42:1F:D9:D2:76:D1 X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6SxtQP3DrofnLHda_35CH9nSdtE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.246.24.0/22 Signature Algorithm: sha256WithRSAEncryption 95:5e:2a:8e:66:05:9f:ac:b1:31:49:dd:90:0d:b1:f1:6e:59: 66:75:f4:1f:e5:1d:c7:ba:24:2c:d7:b9:0e:9b:59:31:43:8e: 89:26:4b:ff:d1:20:23:3a:56:dc:a3:d1:1a:a9:45:0a:d9:0f: 4f:82:5b:0b:03:91:64:e0:50:98:2f:21:92:0d:79:b8:cc:5f: c1:74:18:b1:b4:0b:7a:d4:de:4f:f4:c1:44:75:ab:6c:fe:91: 17:48:f4:2d:05:6a:dd:af:12:e6:f8:93:c0:cc:1e:9c:30:ca: e3:4c:7d:96:ac:e4:75:3b:c6:1f:5b:38:3e:da:08:74:87:59: 93:fe:19:7b:16:7c:bf:7f:e0:d9:ba:ff:fe:6c:7d:8b:57:e2: ba:88:e8:1a:ca:06:aa:ab:26:e5:b8:60:a2:9d:86:21:c6:6d: 82:92:c3:46:11:97:e8:3e:89:04:9f:a4:a4:b5:ec:37:1e:a2: 38:e4:2b:97:97:be:9b:12:05:a6:34:7e:a6:68:9c:9e:f9:46: ca:c6:80:4f:0b:b2:94:44:da:55:1f:17:12:3a:0e:33:bb:17: 17:20:22:56:a6:77:c7:0b:c0:5c:68:88:8d:b2:b3:08:c7:fb: 59:f0:b3:d6:1e:fb:b7:9e:e0:35:d7:39:cc:a1:21:22:f0:bf: bd:fe:1b:ee -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICf5AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA4MDYw NzMzMTVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEU5MkM2RDQwRkRDM0FF ODdFNzJDNzc1QUZGN0U0MjFGRDlEMjc2RDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDuFxaeYk3HIPkNMcUKTkUnWiQAHhquWpv114j0ci5BJiG1Em8x +shVSgA9sC3AHS+SeL84bbcV0wd2EsX3URo+hEiO496mSqw+Qgjd3ixIrJ/9X1GW MWwohCWwuKkfIycgdFYAbKpQDtRWXzJaw0/Zsnuk/894FMvbcHeRufy1KIIOMuy+ dLsJ4POyxQhD6d6lH0sCVk73EKUmJ9dHIYYf7MD5u9+9a4wlUTcNDi19dHM2arTT YyNVRgx0TsSvqyaC2GgX41s0qOHFg61fP4vkcWNFqlSw4iPKO8iy2NKjpXt6anPq HCW0UUrAs592Ny7BapUdq5Az9sH/zNOIyaq3AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU6SxtQP3DrofnLHda/35CH9nSdtEwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzZTeHRRUDNEcm9mbkxI ZGFfMzVDSDluU2R0RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIr9hgwDQYJKoZIhvcNAQELBQADggEBAJVeKo5mBZ+ssTFJ3ZANsfFuWWZ19B/l Hce6JCzXuQ6bWTFDjokmS//RICM6Vtyj0RqpRQrZD0+CWwsDkWTgUJgvIZINebjM X8F0GLG0C3rU3k/0wUR1q2z+kRdI9C0Fat2vEub4k8DMHpwwyuNMfZas5HU7xh9b OD7aCHSHWZP+GXsWfL9/4Nm6//5sfYtX4rqI6BrKBqqrJuW4YKKdhiHGbYKSw0YR l+g+iQSfpKS17DceojjkK5eXvpsSBaY0fqZonJ75RsrGgE8LspRE2lUfFxI6DjO7 FxcgIlamd8cLwFxoiI2yswjH+1nws9Ye+7ee4DXXOcyhISLwv73+G+4= -----END CERTIFICATE-----Generated at Thu Aug 14 11:10:47 2025 by rpki-client