$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/ffnzNkkLF4B5sEmRbbt-73LygMI.roa File: ffnzNkkLF4B5sEmRbbt-73LygMI.roa (raw, json) Hash identifier: lfR0YWmJicUAI3V8hDlF+PVwpQclCZqiT/dKFEJOFIA= Subject key identifier: 7D:F9:F3:36:49:0B:17:80:79:B0:49:91:6D:BB:7E:EF:72:F2:80:C2 Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Certificate serial: 5CF5 Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/ffnzNkkLF4B5sEmRbbt-73LygMI.roa Signing time: Sat 13 Sep 2025 03:06:28 +0000 ROA not before: Sat 13 Sep 2025 03:06:28 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 134762 IP address blocks: 43.226.76.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 04:43:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23797 (0x5cf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Validity Not Before: Sep 13 03:06:28 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=7DF9F336490B178079B049916DBB7EEF72F280C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:bf:48:96:e1:19:fb:20:39:6a:1a:14:00:f0: 6d:ba:8c:8b:b3:e2:8b:fc:59:c0:8f:98:6b:0c:b8: 23:e8:fb:63:32:85:67:0c:1f:77:62:90:c2:0f:97: ba:70:48:66:d8:d9:05:e7:34:4d:72:8f:0e:98:f3: 84:50:1c:07:8c:f0:ce:af:c8:0e:b8:27:1c:a1:c2: 8f:35:29:26:d6:93:1f:fb:92:97:ea:1e:78:50:e1: 60:91:7d:b0:17:f0:67:5a:85:f6:3a:56:8a:b5:b7: 41:c1:e2:0e:9e:93:22:33:6d:f5:1b:be:ed:65:3c: 7a:ab:cc:07:d2:bc:08:05:25:f7:6b:20:9b:11:ec: bc:72:c1:2f:9e:c8:a0:1c:06:83:9e:d8:13:c2:5b: bc:a5:cb:a4:2f:4e:bc:9b:1e:ab:3a:03:15:23:22: 30:22:52:50:18:e4:8e:2d:28:f6:7c:6d:9c:25:92: f7:46:b2:b5:b2:d5:ab:07:f0:91:76:68:da:a1:6f: 37:21:ea:ba:74:43:b2:ce:b6:56:d8:d1:d1:fd:7e: 59:e2:29:10:0c:1f:4d:23:de:0d:97:82:ad:c6:ef: bb:b4:ec:21:7f:62:c8:c9:40:f4:a2:bb:13:ba:8d: ee:b9:1c:49:0d:8d:44:10:1a:58:03:88:f2:ab:e2: a5:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:F9:F3:36:49:0B:17:80:79:B0:49:91:6D:BB:7E:EF:72:F2:80:C2 X509v3 Authority Key Identifier: keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/ffnzNkkLF4B5sEmRbbt-73LygMI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.226.76.0/23 Signature Algorithm: sha256WithRSAEncryption 2c:4c:75:07:b6:ae:02:d8:77:c2:19:1f:20:00:a2:f2:2e:74: 0d:fd:7d:78:10:34:64:e5:b8:8f:ac:55:14:f6:0a:9a:84:3f: 97:4f:4d:27:e9:3d:be:ba:34:cf:8b:96:42:c6:a6:f5:7b:0e: d6:da:af:8c:bd:ab:ec:6b:be:68:08:2a:49:57:cd:0a:f2:91: d9:64:0f:ed:2b:03:9f:55:dc:26:c2:35:c0:1e:14:f5:e2:31: 6d:1f:4e:c0:50:08:a1:35:4a:5c:d4:39:2d:0d:ef:99:a9:d0: 8d:1e:dc:bf:c8:03:f8:0b:56:18:76:18:5f:16:fb:3e:aa:65: b7:1e:d4:bd:08:98:ed:3e:5a:e6:af:1d:04:e7:6d:2e:1d:5b: 3d:46:f8:3d:97:30:cd:a7:78:40:96:1b:b0:82:46:97:44:57: ee:6e:3e:87:99:4e:df:8e:ee:d9:f1:7f:a0:7d:31:c2:57:f9: 29:3c:44:8f:f2:96:cb:6d:e4:21:35:b1:2e:d5:a4:5e:55:37: 47:4e:48:7d:44:6b:32:8b:5f:69:65:77:5e:09:d7:8e:17:9c: 2f:0e:d7:2a:84:00:96:13:34:11:b0:8c:a2:31:46:af:e4:d3: ff:d7:7e:28:59:ae:bf:6c:ac:b5:e5:24:a2:23:19:e8:76:9f: 00:50:f9:f7 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICXPUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEFF NENGNzhCNDlERjBCMkMxRDI5RDMyRTQ4QTk0M0FFNEY0MUFDQzAeFw0yNTA5MTMw MzA2MjhaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDdERjlGMzM2NDkwQjE3 ODA3OUIwNDk5MTZEQkI3RUVGNzJGMjgwQzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDtv0iW4Rn7IDlqGhQA8G26jIuz4ov8WcCPmGsMuCPo+2MyhWcM H3dikMIPl7pwSGbY2QXnNE1yjw6Y84RQHAeM8M6vyA64Jxyhwo81KSbWkx/7kpfq HnhQ4WCRfbAX8GdahfY6Voq1t0HB4g6ekyIzbfUbvu1lPHqrzAfSvAgFJfdrIJsR 7LxywS+eyKAcBoOe2BPCW7yly6QvTrybHqs6AxUjIjAiUlAY5I4tKPZ8bZwlkvdG srWy1asH8JF2aNqhbzch6rp0Q7LOtlbY0dH9flniKRAMH00j3g2Xgq3G77u07CF/ YsjJQPSiuxO6je65HEkNjUQQGlgDiPKr4qVxAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUffnzNkkLF4B5sEmRbbt+73LygMIwHwYDVR0jBBgwFoAUiuTPeLSd8LLB0p0y 5IqUOuT0GswwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTY2 My9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2l1VFBlTFNkOExMQjBwMHk1SXFVT3VUMEdzdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2NjMvZmZuek5ra0xGNEI1 c0VtUmJidC03M0x5Z01JLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEASviTDANBgkqhkiG9w0BAQsFAAOCAQEALEx1B7auAth3whkfIACi8i50Df19 eBA0ZOW4j6xVFPYKmoQ/l09NJ+k9vro0z4uWQsam9XsO1tqvjL2r7Gu+aAgqSVfN CvKR2WQP7SsDn1XcJsI1wB4U9eIxbR9OwFAIoTVKXNQ5LQ3vmanQjR7cv8gD+AtW GHYYXxb7Pqpltx7UvQiY7T5a5q8dBOdtLh1bPUb4PZcwzad4QJYbsIJGl0RX7m4+ h5lO347u2fF/oH0xwlf5KTxEj/KWy23kITWxLtWkXlU3R05IfURrMotfaWV3XgnX jhecLw7XKoQAlhM0EbCMojFGr+TT/9d+KFmuv2ysteUkoiMZ6HafAFD59w== -----END CERTIFICATE-----Generated at Thu Nov 6 01:28:55 2025 by rpki-client