$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2122/Bjyw3g_GAKeU5e-RAW3jpW0yAvE.roa File: Bjyw3g_GAKeU5e-RAW3jpW0yAvE.roa (raw, json) Hash identifier: w/bVfvKpOise4P3CnXwb8ievAoA+Bf/DQeB+6d+le6M= Subject key identifier: 06:3C:B0:DE:0F:C6:00:A7:94:E5:EF:91:01:6D:E3:A5:6D:32:02:F1 Certificate issuer: /CN=88884D4D4A75F17F08DD44CBA9592FE70F539D97 Certificate serial: 20AF Authority key identifier: 88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/Bjyw3g_GAKeU5e-RAW3jpW0yAvE.roa Signing time: Sat 13 Sep 2025 03:05:50 +0000 ROA not before: Sat 13 Sep 2025 03:05:50 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 63641 IP address blocks: 123.49.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/iIhNTUp18X8I3UTLqVkv5w9TnZc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/iIhNTUp18X8I3UTLqVkv5w9TnZc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 11:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8367 (0x20af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88884D4D4A75F17F08DD44CBA9592FE70F539D97 Validity Not Before: Sep 13 03:05:50 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=063CB0DE0FC600A794E5EF91016DE3A56D3202F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c3:ea:79:d5:95:2c:0d:3c:29:c0:fc:2b:6e: 91:67:29:69:df:c6:6f:60:a7:f5:88:9c:db:86:3e: 8e:02:20:f1:69:18:9f:76:0b:b8:91:b8:21:98:91: 64:af:a8:80:2b:95:9e:ed:fa:36:c7:ce:06:8c:56: 86:58:cd:fe:6e:05:7d:e8:3f:da:7d:78:74:63:2f: 8f:a3:69:99:6c:88:46:9a:e0:e2:25:3d:b1:6a:27: 7c:48:53:91:cb:75:17:db:2f:5e:60:c7:37:4d:72: 2f:1a:2a:a3:6b:31:d4:35:3c:ea:4b:6a:c7:eb:4f: e5:e9:00:9e:63:fa:54:e6:62:25:7b:f4:8b:ed:4c: 9a:55:ce:45:d6:6d:47:75:d6:3e:61:ae:75:9c:e6: 00:68:96:d9:8b:a5:53:9c:7e:26:90:90:c0:ef:1e: d1:b9:12:9a:c3:d4:6f:ef:75:ac:c2:46:3c:8e:e5: 69:cc:98:8b:13:10:ce:99:ea:60:5b:a2:76:09:55: c3:51:ce:68:3b:5b:ea:1c:7b:98:50:5e:ab:b3:04: d6:ba:1d:2e:62:81:2a:0d:1f:b0:85:fa:b6:bd:79: 72:ed:a1:84:1a:2a:65:5b:0f:68:32:6c:a5:3d:3a: 03:1f:d2:55:75:be:dc:95:5c:25:d8:bf:6a:4e:ee: 54:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:3C:B0:DE:0F:C6:00:A7:94:E5:EF:91:01:6D:E3:A5:6D:32:02:F1 X509v3 Authority Key Identifier: keyid:88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/iIhNTUp18X8I3UTLqVkv5w9TnZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/Bjyw3g_GAKeU5e-RAW3jpW0yAvE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.49.247.0/24 Signature Algorithm: sha256WithRSAEncryption 79:1a:1b:ea:cb:42:02:e8:2f:d3:38:ef:ad:49:e4:d4:09:31: 15:67:45:81:65:cd:f8:aa:b8:5f:f7:de:32:78:2c:8e:30:cb: fa:10:ec:a0:d8:ad:cd:9d:c1:c5:07:44:1a:0d:7c:6f:69:6e: 52:4b:bd:4e:c1:d8:95:95:6b:d1:e3:25:b5:12:01:06:e4:14: 0f:5d:d2:73:8e:ee:66:98:5d:e6:52:3e:07:47:bc:6e:1e:1c: b1:96:a1:13:0d:cf:88:9b:d2:8c:50:8f:f7:15:f1:98:9d:45: 06:24:c0:77:7d:d9:d0:37:7c:7d:17:d5:40:44:41:b0:86:87: b4:5b:8e:bb:bd:7b:cc:fa:5e:ee:25:20:41:8d:cc:80:6f:d9: 0a:94:4b:02:0f:da:2c:49:05:d3:09:89:f9:e5:7a:cb:fd:0f: b3:7d:64:4d:6f:49:73:cc:9e:c0:1f:c9:e3:5a:c3:95:bd:7d: 39:6f:f4:36:1b:64:d8:f8:2a:3e:10:34:1a:7c:ba:75:69:35: b6:9d:44:27:12:74:be:e5:00:ce:b0:c0:b5:33:df:d0:f6:ac: 7e:4e:eb:4c:a1:89:1a:dd:a4:72:13:c6:38:55:d1:35:34:7b: f8:b6:be:d2:19:18:1c:74:13:24:7c:fa:ee:2c:dd:ef:e7:21: be:d6:d7:9d -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIK8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODg4 ODRENEQ0QTc1RjE3RjA4REQ0NENCQTk1OTJGRTcwRjUzOUQ5NzAeFw0yNTA5MTMw MzA1NTBaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDA2M0NCMERFMEZDNjAw QTc5NEU1RUY5MTAxNkRFM0E1NkQzMjAyRjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCbw+p51ZUsDTwpwPwrbpFnKWnfxm9gp/WInNuGPo4CIPFpGJ92 C7iRuCGYkWSvqIArlZ7t+jbHzgaMVoZYzf5uBX3oP9p9eHRjL4+jaZlsiEaa4OIl PbFqJ3xIU5HLdRfbL15gxzdNci8aKqNrMdQ1POpLasfrT+XpAJ5j+lTmYiV79Ivt TJpVzkXWbUd11j5hrnWc5gBoltmLpVOcfiaQkMDvHtG5EprD1G/vdazCRjyO5WnM mIsTEM6Z6mBbonYJVcNRzmg7W+oce5hQXquzBNa6HS5igSoNH7CF+ra9eXLtoYQa KmVbD2gybKU9OgMf0lV1vtyVXCXYv2pO7lRJAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUBjyw3g/GAKeU5e+RAW3jpW0yAvEwHwYDVR0jBBgwFoAUiIhNTUp18X8I3UTL qVkv5w9TnZcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjEy Mi9pSWhOVFVwMThYOEkzVVRMcVZrdjV3OVRuWmMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2lJaE5UVXAxOFg4STNVVExxVmt2NXc5VG5aYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIxMjIvQmp5dzNnX0dBS2VV NWUtUkFXM2pwVzB5QXZFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAHsx9zANBgkqhkiG9w0BAQsFAAOCAQEAeRob6stCAugv0zjvrUnk1AkxFWdF gWXN+Kq4X/feMngsjjDL+hDsoNitzZ3BxQdEGg18b2luUku9TsHYlZVr0eMltRIB BuQUD13Sc47uZphd5lI+B0e8bh4csZahEw3PiJvSjFCP9xXxmJ1FBiTAd33Z0Dd8 fRfVQERBsIaHtFuOu717zPpe7iUgQY3MgG/ZCpRLAg/aLEkF0wmJ+eV6y/0Ps31k TW9Jc8yewB/J41rDlb19OW/0Nhtk2PgqPhA0Gny6dWk1tp1EJxJ0vuUAzrDAtTPf 0Pasfk7rTKGJGt2kchPGOFXRNTR7+La+0hkYHHQTJHz67izd7+chvtbXnQ== -----END CERTIFICATE-----Generated at Wed Nov 5 10:22:27 2025 by rpki-client