$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/dCgMf9XJsxgj5oMyIijm2CObJ-c.roa File: dCgMf9XJsxgj5oMyIijm2CObJ-c.roa (raw, json) Hash identifier: ArcxUILWhZ2km3Tezbi+tFxMRHHL9SOyKO00i3Dz3uk= Subject key identifier: 74:28:0C:7F:D5:C9:B3:18:23:E6:83:32:22:28:E6:D8:23:9B:27:E7 Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 7F87 Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/dCgMf9XJsxgj5oMyIijm2CObJ-c.roa Signing time: Wed 06 Aug 2025 07:33:12 +0000 ROA not before: Wed 06 Aug 2025 07:33:12 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 24426 IP address blocks: 43.246.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 14:33:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32647 (0x7f87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: Aug 6 07:33:12 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=74280C7FD5C9B31823E683322228E6D8239B27E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:70:a5:32:56:07:b1:6a:92:ae:70:ec:88:1a: 20:64:a5:17:be:33:09:9b:0e:5b:97:51:eb:f0:c0: 6d:59:c7:92:0a:38:dc:19:c2:27:f2:ac:7d:e9:97: 6e:c9:f7:53:6e:c0:40:13:74:6f:d6:70:cd:17:1a: 5a:d8:74:3b:e1:56:96:9c:6c:d9:3b:19:c9:e4:82: 6e:ce:f5:79:72:a7:0a:9f:2c:c5:2a:33:70:7c:b5: 17:df:d0:d3:3d:14:a6:31:27:64:f4:09:ea:dc:53: a2:6d:89:42:6d:e6:41:94:3f:25:32:42:0a:e2:1d: b2:84:39:16:70:a7:84:f3:6d:c9:5a:20:30:8e:7e: ad:eb:67:88:30:b5:81:84:ef:18:c1:57:1e:8d:6b: 27:e8:16:6d:f3:22:13:13:2c:38:7d:72:5d:5a:bb: 9c:a2:53:94:d8:d9:07:97:84:71:4e:bd:43:c1:27: e0:31:5e:27:00:bb:21:7f:85:60:37:6b:99:64:f4: ca:35:21:7f:9f:be:ea:2a:38:88:c0:d6:85:e6:28: dc:a2:ef:9e:60:07:60:d4:01:ae:80:99:99:64:06: 9f:bc:e9:1b:62:1d:67:52:aa:1b:47:19:0f:97:ff: 10:b3:78:eb:b9:a8:bb:68:30:22:5a:57:51:c1:69: 75:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:28:0C:7F:D5:C9:B3:18:23:E6:83:32:22:28:E6:D8:23:9B:27:E7 X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/dCgMf9XJsxgj5oMyIijm2CObJ-c.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.246.96.0/22 Signature Algorithm: sha256WithRSAEncryption a7:0a:69:49:c9:30:c9:c1:f4:98:66:79:5d:f4:25:56:11:2e: 16:04:58:df:a0:7f:f8:56:c4:0c:37:e3:f2:ae:4d:3a:b1:0d: 03:81:8c:07:b5:84:51:bd:54:37:b5:90:6c:3d:24:f9:0c:7c: d1:84:49:21:9d:18:9b:04:c0:ba:9a:0f:15:b0:a5:ed:41:9d: e7:66:95:57:8a:67:79:27:a9:0a:2f:65:82:a2:80:ef:39:76: 4d:45:bd:f3:4f:1c:0d:dd:75:fd:25:ae:09:05:d1:10:4e:81: 6f:ae:06:79:aa:0f:c0:ce:58:dd:c3:2c:46:2b:0c:58:0d:78: dd:5c:44:cb:4f:1a:68:01:58:64:8b:d5:10:7e:d0:4f:5b:97: 9f:a8:87:54:45:e4:23:ae:2c:57:05:ab:a5:0a:88:73:d8:a9: 08:53:da:14:75:98:11:b5:a4:3e:04:f0:1c:40:3b:cf:ae:6f: c4:eb:b5:51:05:9a:f4:e4:68:e5:73:13:80:0d:c1:56:8b:ac: c4:d3:4b:ce:15:40:85:c5:f6:d2:cc:43:02:44:a6:f6:ff:54: 3f:51:34:3e:d3:15:ec:9a:12:4f:bf:b8:68:d5:17:5e:7e:b6: 7e:a2:29:32:9b:40:c2:34:44:3b:36:7d:78:2b:45:70:f8:cf: ac:03:34:c4 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICf4cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA4MDYw NzMzMTJaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDc0MjgwQzdGRDVDOUIz MTgyM0U2ODMzMjIyMjhFNkQ4MjM5QjI3RTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCncKUyVgexapKucOyIGiBkpRe+MwmbDluXUevwwG1Zx5IKONwZ wifyrH3pl27J91NuwEATdG/WcM0XGlrYdDvhVpacbNk7Gcnkgm7O9XlypwqfLMUq M3B8tRff0NM9FKYxJ2T0CercU6JtiUJt5kGUPyUyQgriHbKEORZwp4TzbclaIDCO fq3rZ4gwtYGE7xjBVx6NayfoFm3zIhMTLDh9cl1au5yiU5TY2QeXhHFOvUPBJ+Ax XicAuyF/hWA3a5lk9Mo1IX+fvuoqOIjA1oXmKNyi755gB2DUAa6AmZlkBp+86Rti HWdSqhtHGQ+X/xCzeOu5qLtoMCJaV1HBaXUzAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUdCgMf9XJsxgj5oMyIijm2CObJ+cwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2RDZ01mOVhKc3hnajVv TXlJaWptMkNPYkotYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIr9mAwDQYJKoZIhvcNAQELBQADggEBAKcKaUnJMMnB9JhmeV30JVYRLhYEWN+g f/hWxAw34/KuTTqxDQOBjAe1hFG9VDe1kGw9JPkMfNGESSGdGJsEwLqaDxWwpe1B nedmlVeKZ3knqQovZYKigO85dk1FvfNPHA3ddf0lrgkF0RBOgW+uBnmqD8DOWN3D LEYrDFgNeN1cRMtPGmgBWGSL1RB+0E9bl5+oh1RF5COuLFcFq6UKiHPYqQhT2hR1 mBG1pD4E8BxAO8+ub8TrtVEFmvTkaOVzE4ANwVaLrMTTS84VQIXF9tLMQwJEpvb/ VD9RND7TFeyaEk+/uGjVF15+tn6iKTKbQMI0RDs2fXgrRXD4z6wDNMQ= -----END CERTIFICATE-----Generated at Thu Aug 14 11:05:47 2025 by rpki-client