$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/dwtM8IvxpnRcEvVh7Cyv0u7G7C0.roa File: dwtM8IvxpnRcEvVh7Cyv0u7G7C0.roa (raw, json) Hash identifier: KyC8NCezfjeRtd9aDyBaeuIag6fWROOAIKe36HPDndA= Subject key identifier: 77:0B:4C:F0:8B:F1:A6:74:5C:12:F5:61:EC:2C:AF:D2:EE:C6:EC:2D Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 7F7F Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/dwtM8IvxpnRcEvVh7Cyv0u7G7C0.roa Signing time: Wed 06 Aug 2025 07:33:10 +0000 ROA not before: Wed 06 Aug 2025 07:33:10 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 24426 IP address blocks: 43.239.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 14:33:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32639 (0x7f7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: Aug 6 07:33:10 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=770B4CF08BF1A6745C12F561EC2CAFD2EEC6EC2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:54:76:60:13:20:05:24:3b:7e:d6:36:ec:e8: 99:11:bb:c0:ad:c8:00:1b:a6:de:5c:a2:c3:ad:4e: 4d:ab:1b:8e:a6:98:3b:9d:bf:6d:59:6c:ad:fc:b2: c2:76:85:5a:45:a9:36:56:02:34:0a:22:9e:95:77: b3:35:c1:96:ba:cd:4b:4f:6b:9c:96:bd:36:4e:cc: 41:d5:47:e1:28:c4:60:76:68:34:82:1a:03:04:e1: 22:b0:70:a6:53:91:8d:b8:f8:67:61:98:b2:a9:bd: fc:05:ec:8d:d8:07:59:c0:c5:f5:c4:8a:7b:3d:24: 86:bc:93:67:26:af:ea:2f:a0:e6:dd:2a:f3:a7:b1: 4c:14:98:42:a8:20:c0:9e:6e:b8:a2:60:eb:23:bd: 75:9c:27:93:2a:cf:08:89:ae:09:e3:55:9e:eb:96: bb:d9:9f:cb:48:10:57:78:39:0b:8f:e8:b5:06:c6: c3:7c:ea:2a:7b:25:49:2f:0a:d1:a4:d3:ed:cb:03: 00:1b:97:e1:07:5d:85:94:1e:19:9f:5c:8e:23:a8: 7e:a4:27:29:c8:84:66:3e:5f:00:84:c1:30:59:1f: 71:1d:c2:1d:c3:67:d7:d4:33:40:cc:74:fa:6f:2b: d5:8a:1c:b0:63:74:44:1e:54:82:5e:73:8f:b3:04: 78:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:0B:4C:F0:8B:F1:A6:74:5C:12:F5:61:EC:2C:AF:D2:EE:C6:EC:2D X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/dwtM8IvxpnRcEvVh7Cyv0u7G7C0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.239.48.0/22 Signature Algorithm: sha256WithRSAEncryption 0a:f7:8c:be:15:c8:1a:a3:28:df:a6:79:a3:c6:b2:ea:d4:73: fb:ff:b6:c5:64:88:bc:70:37:e3:44:ce:ac:9a:0b:e8:5e:bc: d9:bc:e3:97:15:6f:59:40:79:89:8a:08:02:c0:ce:10:b5:f9: 29:05:e9:d0:76:0a:7e:bb:30:b2:b2:2e:4f:4d:f0:70:40:2b: 6e:60:72:70:e6:a9:46:d5:e1:f1:47:f9:43:1e:72:07:ca:e0: 20:73:97:be:81:4d:61:a5:ce:2f:24:2a:99:51:73:5b:fe:40: fa:ab:bb:d1:71:89:8c:f7:ab:6f:88:95:6c:41:c2:5f:ec:fc: 8f:57:9d:cf:60:e9:10:cd:24:d5:8c:bb:45:a5:c5:ea:06:38: 83:d6:79:bf:85:54:85:b0:b2:88:d2:c3:4c:3f:cd:5e:96:41: 63:3c:95:97:2a:65:14:09:80:02:f4:9a:98:d6:55:52:d0:44: dd:3d:1a:f4:5a:be:bb:d2:be:a6:4c:4b:08:55:c6:19:18:d4: df:31:9a:65:d7:fd:44:ea:85:ab:dd:aa:69:06:f4:74:91:65: 0d:f0:19:3e:e4:7f:a8:6a:84:a0:04:14:9a:06:c5:74:64:4a: cf:02:c0:f6:eb:45:79:38:87:d6:86:3f:3e:48:18:71:db:a0: cd:ff:e6:84 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICf38wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA4MDYw NzMzMTBaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDc3MEI0Q0YwOEJGMUE2 NzQ1QzEyRjU2MUVDMkNBRkQyRUVDNkVDMkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHVHZgEyAFJDt+1jbs6JkRu8CtyAAbpt5cosOtTk2rG46mmDud v21ZbK38ssJ2hVpFqTZWAjQKIp6Vd7M1wZa6zUtPa5yWvTZOzEHVR+EoxGB2aDSC GgME4SKwcKZTkY24+GdhmLKpvfwF7I3YB1nAxfXEins9JIa8k2cmr+ovoObdKvOn sUwUmEKoIMCebriiYOsjvXWcJ5MqzwiJrgnjVZ7rlrvZn8tIEFd4OQuP6LUGxsN8 6ip7JUkvCtGk0+3LAwAbl+EHXYWUHhmfXI4jqH6kJynIhGY+XwCEwTBZH3Edwh3D Z9fUM0DMdPpvK9WKHLBjdEQeVIJec4+zBHiVAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUdwtM8IvxpnRcEvVh7Cyv0u7G7C0wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2R3dE04SXZ4cG5SY0V2 Vmg3Q3l2MHU3RzdDMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIr7zAwDQYJKoZIhvcNAQELBQADggEBAAr3jL4VyBqjKN+meaPGsurUc/v/tsVk iLxwN+NEzqyaC+hevNm845cVb1lAeYmKCALAzhC1+SkF6dB2Cn67MLKyLk9N8HBA K25gcnDmqUbV4fFH+UMecgfK4CBzl76BTWGlzi8kKplRc1v+QPqru9FxiYz3q2+I lWxBwl/s/I9Xnc9g6RDNJNWMu0WlxeoGOIPWeb+FVIWwsojSw0w/zV6WQWM8lZcq ZRQJgAL0mpjWVVLQRN09GvRavrvSvqZMSwhVxhkY1N8xmmXX/UTqhavdqmkG9HSR ZQ3wGT7kf6hqhKAEFJoGxXRkSs8CwPbrRXk4h9aGPz5IGHHboM3/5oQ= -----END CERTIFICATE-----Generated at Thu Aug 14 11:07:28 2025 by rpki-client