$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/8Y3ARoNlpif3hLe1po3sEvqXx5Y.roa File: 8Y3ARoNlpif3hLe1po3sEvqXx5Y.roa (raw, json) Hash identifier: a9fsM/bA5t/CqWUJprqpz3b1cg5JnQMeBptwjbcfIWc= Subject key identifier: F1:8D:C0:46:83:65:A6:27:F7:84:B7:B5:A6:8D:EC:12:FA:97:C7:96 Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 7F9A Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/8Y3ARoNlpif3hLe1po3sEvqXx5Y.roa Signing time: Wed 06 Aug 2025 07:33:17 +0000 ROA not before: Wed 06 Aug 2025 07:33:17 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 24426 IP address blocks: 43.246.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 14:33:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32666 (0x7f9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: Aug 6 07:33:17 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=F18DC0468365A627F784B7B5A68DEC12FA97C796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8a:a9:c0:b0:ab:17:e4:4a:38:2a:b9:34:33: f7:f0:f0:f4:3a:b6:8e:20:e0:75:2c:ea:b8:8f:e3: 59:22:5b:99:43:f8:ae:fe:74:27:c3:8e:2b:c7:ec: e8:3b:01:50:5f:06:df:13:2e:05:68:5c:47:14:bb: 5f:23:16:45:4d:32:fa:23:09:64:a9:e0:ad:8c:85: c2:dc:e6:ae:24:e0:80:b8:0a:c3:de:e1:eb:22:b3: cd:e8:29:0e:71:ba:f1:6b:b1:0e:87:bd:bd:26:fe: 2f:f5:91:0b:2a:41:04:f3:38:d6:05:53:1e:b7:62: 1e:24:a8:76:3d:ac:ab:3a:64:7e:c3:85:19:bb:d5: 47:24:57:2f:5b:0b:80:73:6c:d2:6f:c9:39:a5:5f: 92:05:77:94:82:16:37:b2:e1:fe:31:79:cd:e7:48: be:2b:8c:e6:86:78:9a:5f:a5:28:a0:b9:95:1b:58: c1:59:43:c7:8e:b6:47:e6:bb:39:55:f7:db:01:93: 06:7e:cb:c6:7a:18:cc:ff:d8:6e:e6:0f:9b:b8:65: 66:32:54:78:b9:ed:88:39:f0:39:ce:69:0a:bc:db: 45:85:5f:0e:71:6f:9c:76:8a:9a:68:06:df:ac:15: 70:99:2c:01:80:19:fd:70:c9:af:bd:7e:a4:12:09: 5b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:8D:C0:46:83:65:A6:27:F7:84:B7:B5:A6:8D:EC:12:FA:97:C7:96 X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/8Y3ARoNlpif3hLe1po3sEvqXx5Y.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.246.4.0/22 Signature Algorithm: sha256WithRSAEncryption b7:0d:c2:a1:20:09:0f:dc:de:7e:92:1f:65:60:68:20:a4:f8: cc:4c:ed:d6:9a:90:59:95:e3:17:14:b9:2b:0d:11:e3:de:1c: 60:87:4d:87:cd:15:bd:34:3e:b8:42:d6:85:15:bc:40:e3:af: e1:78:2a:64:a3:c9:17:63:6f:ff:aa:88:77:e4:53:a5:a9:3d: 8e:fd:e8:26:e6:fa:ee:66:87:84:eb:04:ab:80:6e:64:72:ec: 16:75:fd:6e:25:1d:76:f0:5d:b9:a1:df:b0:91:57:a8:2c:58: d0:5d:fd:f2:4e:6d:95:dd:1a:83:5f:39:42:0c:ce:49:68:49: 63:65:f8:c6:b8:66:4f:c2:d3:4a:90:b2:38:17:40:55:57:21: 2e:8c:d7:f1:aa:0e:f3:ca:fa:49:91:92:4a:2b:87:ce:d6:3d: 82:72:99:59:b8:d3:6c:22:49:f4:94:43:02:d8:ce:a3:88:a7: 58:66:9a:09:d1:e4:c3:7e:7b:97:5d:be:9d:d7:a0:17:fc:f5: a3:2b:b5:73:d6:c7:52:de:c8:da:e9:de:ce:2e:8f:a4:d3:e0: 1b:1f:63:f8:2d:47:38:26:d5:3f:b3:69:ea:2d:ae:30:1b:4f: 89:cc:37:d6:e8:d0:64:88:f0:e1:da:2a:4e:1d:2b:63:78:2d: 35:1c:61:c9 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICf5owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA4MDYw NzMzMTdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEYxOERDMDQ2ODM2NUE2 MjdGNzg0QjdCNUE2OERFQzEyRkE5N0M3OTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZiqnAsKsX5Eo4Krk0M/fw8PQ6to4g4HUs6riP41kiW5lD+K7+ dCfDjivH7Og7AVBfBt8TLgVoXEcUu18jFkVNMvojCWSp4K2MhcLc5q4k4IC4CsPe 4esis83oKQ5xuvFrsQ6Hvb0m/i/1kQsqQQTzONYFUx63Yh4kqHY9rKs6ZH7DhRm7 1UckVy9bC4BzbNJvyTmlX5IFd5SCFjey4f4xec3nSL4rjOaGeJpfpSiguZUbWMFZ Q8eOtkfmuzlV99sBkwZ+y8Z6GMz/2G7mD5u4ZWYyVHi57Yg58DnOaQq820WFXw5x b5x2ippoBt+sFXCZLAGAGf1wya+9fqQSCVvhAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU8Y3ARoNlpif3hLe1po3sEvqXx5YwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzhZM0FSb05scGlmM2hM ZTFwbzNzRXZxWHg1WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIr9gQwDQYJKoZIhvcNAQELBQADggEBALcNwqEgCQ/c3n6SH2VgaCCk+MxM7daa kFmV4xcUuSsNEePeHGCHTYfNFb00PrhC1oUVvEDjr+F4KmSjyRdjb/+qiHfkU6Wp PY796Cbm+u5mh4TrBKuAbmRy7BZ1/W4lHXbwXbmh37CRV6gsWNBd/fJObZXdGoNf OUIMzkloSWNl+Ma4Zk/C00qQsjgXQFVXIS6M1/GqDvPK+kmRkkorh87WPYJymVm4 02wiSfSUQwLYzqOIp1hmmgnR5MN+e5ddvp3XoBf89aMrtXPWx1LeyNrp3s4uj6TT 4BsfY/gtRzgm1T+zaeotrjAbT4nMN9bo0GSI8OHaKk4dK2N4LTUcYck= -----END CERTIFICATE-----Generated at Thu Aug 14 11:10:46 2025 by rpki-client