$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/S8k9PiQQfX4pGdZ3vCQc8Kx3G6I.roa File: S8k9PiQQfX4pGdZ3vCQc8Kx3G6I.roa (raw, json) Hash identifier: U0eDChCQOiousTE3KapYoV736YuqG8Eqol2uOWGx9XQ= Subject key identifier: 4B:C9:3D:3E:24:10:7D:7E:29:19:D6:77:BC:24:1C:F0:AC:77:1B:A2 Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 7F9D Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/S8k9PiQQfX4pGdZ3vCQc8Kx3G6I.roa Signing time: Wed 06 Aug 2025 07:33:17 +0000 ROA not before: Wed 06 Aug 2025 07:33:17 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 24426 IP address blocks: 43.246.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 14:33:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32669 (0x7f9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: Aug 6 07:33:17 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=4BC93D3E24107D7E2919D677BC241CF0AC771BA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fb:30:c2:b6:6b:df:4a:19:7d:bf:40:dc:44: 26:d9:f8:6c:5a:1f:c6:1f:62:6f:54:86:da:6b:f0: c7:bc:f9:26:b8:88:59:2e:d1:94:09:69:30:52:3b: bc:a6:fd:6d:04:26:ae:ac:cd:66:bb:38:ec:c3:ba: dc:f0:6b:4b:9f:7a:20:0c:03:8b:89:b1:29:94:9a: e0:34:d3:35:80:72:bb:9e:2a:dc:38:9f:27:b2:49: 9e:c4:8b:c2:5b:12:9a:70:64:4f:f2:2d:0f:16:c2: 3d:7b:06:7c:5b:2d:01:38:3c:c6:04:da:70:d8:c1: 6d:9e:2f:29:fe:43:43:2b:dd:9b:78:76:05:33:9d: 0d:36:60:92:58:e4:e2:84:a0:20:8c:6e:e9:28:44: cc:aa:e3:4c:bf:97:d3:d2:59:71:c4:de:3a:19:b2: 35:56:4f:30:9c:a4:84:96:a5:93:d6:e2:03:87:e6: 61:f1:db:e3:7c:09:00:18:70:4b:da:71:7e:1e:26: d7:39:86:ce:de:0c:ad:5e:c1:5b:cd:3c:3d:d8:31: 92:60:4f:97:6c:5e:26:d6:2f:7e:4c:9c:29:15:91: aa:5c:b5:74:93:6a:03:a9:51:54:6a:e8:72:f4:ef: e7:6b:5f:4f:d2:82:da:c8:13:0a:1c:c6:c8:81:ee: fc:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C9:3D:3E:24:10:7D:7E:29:19:D6:77:BC:24:1C:F0:AC:77:1B:A2 X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/S8k9PiQQfX4pGdZ3vCQc8Kx3G6I.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.246.88.0/22 Signature Algorithm: sha256WithRSAEncryption 9f:0a:9f:f8:19:79:6d:67:43:73:76:00:b5:32:32:b7:31:79: 3a:8b:2d:8c:72:74:9a:46:c0:1f:68:1b:ca:95:25:73:1b:11: eb:c0:31:0a:8d:a1:10:cb:4f:fe:9d:17:24:6c:b3:f4:c3:ae: 8b:d6:c4:c4:e0:7e:cf:e6:63:e2:51:85:f0:54:d7:58:a5:96: 34:50:d4:8e:3c:e6:f2:71:b8:3c:76:3a:2a:5f:ef:b6:25:79: f0:24:f8:16:77:12:03:29:0a:68:89:06:78:e6:66:28:e7:5e: af:dc:2e:b9:30:6b:20:ca:0b:8e:27:1d:1d:21:e7:c9:ec:c5: 7a:8f:b0:74:a4:aa:8e:22:48:cf:94:e7:48:62:f9:e1:43:45: 81:1b:5e:ab:e9:89:78:94:fd:49:10:8f:e1:e9:7a:70:40:6b: 8e:3c:e5:fb:e1:cd:af:f3:8c:8c:df:7d:ef:2a:ce:f9:14:39: 52:d4:49:b6:33:bd:52:d7:d6:9e:ca:60:85:88:a1:a7:1a:35: ea:93:ab:48:d3:21:62:98:23:fa:9f:37:de:77:13:ef:17:b1: 19:d3:08:7c:3b:a6:86:ea:25:15:9d:b7:8d:c1:98:78:62:4b: a8:35:62:52:86:88:8d:3c:29:d2:0d:9e:08:ac:88:97:f7:e3: e1:63:9b:4c -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICf50wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA4MDYw NzMzMTdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDRCQzkzRDNFMjQxMDdE N0UyOTE5RDY3N0JDMjQxQ0YwQUM3NzFCQTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDF+zDCtmvfShl9v0DcRCbZ+GxaH8YfYm9Uhtpr8Me8+Sa4iFku 0ZQJaTBSO7ym/W0EJq6szWa7OOzDutzwa0ufeiAMA4uJsSmUmuA00zWAcrueKtw4 nyeySZ7Ei8JbEppwZE/yLQ8Wwj17BnxbLQE4PMYE2nDYwW2eLyn+Q0Mr3Zt4dgUz nQ02YJJY5OKEoCCMbukoRMyq40y/l9PSWXHE3joZsjVWTzCcpISWpZPW4gOH5mHx 2+N8CQAYcEvacX4eJtc5hs7eDK1ewVvNPD3YMZJgT5dsXibWL35MnCkVkapctXST agOpUVRq6HL07+drX0/SgtrIEwocxsiB7vyzAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUS8k9PiQQfX4pGdZ3vCQc8Kx3G6IwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1M4azlQaVFRZlg0cEdk WjN2Q1FjOEt4M0c2SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIr9lgwDQYJKoZIhvcNAQELBQADggEBAJ8Kn/gZeW1nQ3N2ALUyMrcxeTqLLYxy dJpGwB9oG8qVJXMbEevAMQqNoRDLT/6dFyRss/TDrovWxMTgfs/mY+JRhfBU11il ljRQ1I485vJxuDx2Oipf77YlefAk+BZ3EgMpCmiJBnjmZijnXq/cLrkwayDKC44n HR0h58nsxXqPsHSkqo4iSM+U50hi+eFDRYEbXqvpiXiU/UkQj+HpenBAa4485fvh za/zjIzffe8qzvkUOVLUSbYzvVLX1p7KYIWIoacaNeqTq0jTIWKYI/qfN953E+8X sRnTCHw7pobqJRWdt43BmHhiS6g1YlKGiI08KdINngisiJf34+Fjm0w= -----END CERTIFICATE-----Generated at Thu Aug 14 11:09:21 2025 by rpki-client