$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/qe20gAZbuwVu_t2cnfTPZkvTqlA.roa File: qe20gAZbuwVu_t2cnfTPZkvTqlA.roa (raw, json) Hash identifier: rEzVYj2gFODsMAGdxG3xTH2suYUBY7xxuVYE2eGkAMI= Subject key identifier: A9:ED:B4:80:06:5B:BB:05:6E:FE:DD:9C:9D:F4:CF:66:4B:D3:AA:50 Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Certificate serial: 5CF4 Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/qe20gAZbuwVu_t2cnfTPZkvTqlA.roa Signing time: Sat 13 Sep 2025 03:06:27 +0000 ROA not before: Sat 13 Sep 2025 03:06:27 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 134762 IP address blocks: 43.226.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 04:42:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23796 (0x5cf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Validity Not Before: Sep 13 03:06:27 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=A9EDB480065BBB056EFEDD9C9DF4CF664BD3AA50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d2:42:81:cf:15:0d:32:c5:5c:86:e7:ad:e7: 3f:2d:8d:3f:7b:63:83:b4:7e:90:c9:25:48:e0:46: b5:bb:f4:e2:28:e9:35:e4:7b:4f:25:b7:82:86:d9: a0:8f:98:d6:91:67:30:72:79:2f:22:02:6d:87:c1: 83:e4:e3:b0:69:b6:57:f1:53:52:87:90:0b:0a:11: 98:60:6d:24:29:b3:5a:0b:8e:af:6a:e3:82:5a:5a: f8:88:ae:f4:d9:c1:ff:70:d6:f0:fe:99:3e:e3:94: db:51:36:3e:3c:3d:b2:4c:32:eb:c9:4d:ea:ee:18: 9f:06:2e:82:cd:03:3f:49:e0:c6:4c:9c:67:ac:76: 8b:51:5f:11:77:42:81:32:e9:3b:20:fe:99:00:f2: 2e:12:ae:48:d9:91:4a:da:5c:fa:f9:75:a6:a9:42: 72:be:b0:5a:7c:f9:b9:55:07:f7:9d:3e:8f:6b:5e: fa:0b:22:c3:12:5d:bf:19:54:d5:a6:8e:41:6d:57: 24:b4:fd:58:7e:79:29:38:77:2e:2c:b0:78:de:2c: 06:61:b8:23:87:3b:16:5b:9f:69:ce:9e:0b:20:08: 6d:46:77:57:e8:f2:8d:66:2d:2f:21:88:f2:30:7d: aa:e8:ae:47:ea:ff:0e:f7:c6:68:27:d7:ae:52:55: 21:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:ED:B4:80:06:5B:BB:05:6E:FE:DD:9C:9D:F4:CF:66:4B:D3:AA:50 X509v3 Authority Key Identifier: keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/qe20gAZbuwVu_t2cnfTPZkvTqlA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.226.54.0/24 Signature Algorithm: sha256WithRSAEncryption 99:fc:ce:45:d2:6f:17:f1:45:3b:94:f7:05:87:bc:98:12:3a: 13:f7:f1:a9:6f:a6:fa:ff:88:35:6a:e4:69:80:67:af:ed:46: c9:31:4e:05:41:e1:b1:5c:0f:81:84:86:17:10:95:16:24:9b: 9b:19:08:a9:11:e3:38:49:dc:85:b8:6f:a3:bd:73:ec:a1:69: 20:fc:8d:85:ad:ba:f9:fa:79:48:63:ac:9a:04:ee:72:77:9b: 69:54:5d:ec:44:de:51:3f:c9:83:a6:d9:84:f6:77:53:23:2f: 71:80:74:9e:ab:18:ab:5f:c8:af:08:43:ee:86:d1:5b:5e:b3: 44:7d:03:bf:d7:70:83:9e:98:b6:3c:41:f8:7f:dc:56:b2:ec: 75:6a:af:72:60:2c:ee:b5:af:54:8f:6d:1b:64:c8:82:29:da: f5:e9:cd:6b:b5:8b:15:0c:58:27:0e:e4:e4:a4:a8:54:fd:ad: 54:e7:96:9a:d2:25:09:f5:fc:f1:c3:4c:2d:64:a6:dd:7d:c7: 9d:db:14:56:07:87:83:9d:0a:54:e3:53:31:70:1d:cb:33:df: 81:df:66:67:1c:71:59:b1:ef:76:53:c8:43:00:1b:5c:7a:82: 9d:54:a9:7c:81:f9:70:4a:f8:d0:6c:d9:b7:84:b5:39:b0:42: 3c:30:07:b6 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICXPQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEFF NENGNzhCNDlERjBCMkMxRDI5RDMyRTQ4QTk0M0FFNEY0MUFDQzAeFw0yNTA5MTMw MzA2MjdaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEE5RURCNDgwMDY1QkJC MDU2RUZFREQ5QzlERjRDRjY2NEJEM0FBNTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJ0kKBzxUNMsVchuet5z8tjT97Y4O0fpDJJUjgRrW79OIo6TXk e08lt4KG2aCPmNaRZzByeS8iAm2HwYPk47BptlfxU1KHkAsKEZhgbSQps1oLjq9q 44JaWviIrvTZwf9w1vD+mT7jlNtRNj48PbJMMuvJTeruGJ8GLoLNAz9J4MZMnGes dotRXxF3QoEy6Tsg/pkA8i4SrkjZkUraXPr5daapQnK+sFp8+blVB/edPo9rXvoL IsMSXb8ZVNWmjkFtVyS0/Vh+eSk4dy4ssHjeLAZhuCOHOxZbn2nOngsgCG1Gd1fo 8o1mLS8hiPIwfarorkfq/w73xmgn165SVSEVAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUqe20gAZbuwVu/t2cnfTPZkvTqlAwHwYDVR0jBBgwFoAUiuTPeLSd8LLB0p0y 5IqUOuT0GswwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTY2 My9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2l1VFBlTFNkOExMQjBwMHk1SXFVT3VUMEdzdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2NjMvcWUyMGdBWmJ1d1Z1 X3QyY25mVFBaa3ZUcWxBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEACviNjANBgkqhkiG9w0BAQsFAAOCAQEAmfzORdJvF/FFO5T3BYe8mBI6E/fx qW+m+v+INWrkaYBnr+1GyTFOBUHhsVwPgYSGFxCVFiSbmxkIqRHjOEnchbhvo71z 7KFpIPyNha26+fp5SGOsmgTucnebaVRd7ETeUT/Jg6bZhPZ3UyMvcYB0nqsYq1/I rwhD7obRW16zRH0Dv9dwg56YtjxB+H/cVrLsdWqvcmAs7rWvVI9tG2TIgina9enN a7WLFQxYJw7k5KSoVP2tVOeWmtIlCfX88cNMLWSm3X3HndsUVgeHg50KVONTMXAd yzPfgd9mZxxxWbHvdlPIQwAbXHqCnVSpfIH5cEr40GzZt4S1ObBCPDAHtg== -----END CERTIFICATE-----Generated at Thu Nov 6 00:01:09 2025 by rpki-client