$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2329/o41ABfq_RN50Q6JuNOYLyZxWhyU.roa File: o41ABfq_RN50Q6JuNOYLyZxWhyU.roa (raw, json) Hash identifier: EATu2epUFhkYOfHp9GgLIt/0Hk+GwgOPAHpPCXc+Q4U= Subject key identifier: A3:8D:40:05:FA:BF:44:DE:74:43:A2:6E:34:E6:0B:C9:9C:56:87:25 Certificate issuer: /CN=EC10C93455759C659D2BB819FB07FF7063CECC32 Certificate serial: 2099 Authority key identifier: EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/o41ABfq_RN50Q6JuNOYLyZxWhyU.roa Signing time: Sat 13 Sep 2025 03:10:31 +0000 ROA not before: Sat 13 Sep 2025 03:10:31 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 140293 IP address blocks: 118.184.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 02:15:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8345 (0x2099) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC10C93455759C659D2BB819FB07FF7063CECC32 Validity Not Before: Sep 13 03:10:31 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=A38D4005FABF44DE7443A26E34E60BC99C568725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:87:a9:e3:fd:6b:60:ae:d6:51:21:a6:08:7c: 55:23:6c:55:73:11:8e:fe:ea:d2:13:44:d1:df:5e: 5d:ff:a4:b6:a0:49:9d:78:77:59:7c:7c:ab:01:a8: aa:10:67:9f:1d:53:cf:1b:3e:fd:4c:e0:41:bd:4b: 32:7e:dd:04:56:d6:2e:86:45:4e:2b:08:ea:6a:72: 90:3b:1c:89:e2:ad:94:6a:c8:7d:10:6d:05:97:bb: 79:ab:c7:b6:d9:44:b4:20:cc:1c:87:01:97:b4:81: c1:f2:6e:ed:fe:a9:43:99:2f:9a:21:1c:a5:96:5c: 60:ce:a3:ca:4b:8c:22:0c:03:f3:d5:3c:dd:51:14: d4:a3:e9:cd:38:5b:35:fa:e4:93:27:a5:86:0c:1c: ce:de:dd:02:99:69:f3:1d:2d:ad:a1:97:e6:8e:46: 6b:c0:b0:8a:00:ca:e9:1e:50:75:75:be:14:70:1e: cd:97:23:2d:e3:ca:51:42:e4:e1:b7:7f:02:d4:20: f8:fb:cb:0a:ee:6a:80:97:0b:3f:26:5c:29:75:d4: 90:91:cf:28:16:88:fb:4f:5f:4f:e7:fb:89:e5:26: 54:79:67:83:40:07:33:9a:e9:b1:34:32:85:22:48: 3f:66:90:36:70:64:d4:d1:6a:ba:96:9e:f6:be:d2: 53:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:8D:40:05:FA:BF:44:DE:74:43:A2:6E:34:E6:0B:C9:9C:56:87:25 X509v3 Authority Key Identifier: keyid:EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/o41ABfq_RN50Q6JuNOYLyZxWhyU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.184.128.0/17 Signature Algorithm: sha256WithRSAEncryption 63:24:30:e0:f3:3c:51:25:b1:0f:84:30:2f:25:2c:a5:4d:8e: df:c7:bc:25:34:55:7a:0a:b9:31:c5:55:6a:aa:91:19:c8:8f: 2e:3d:76:8e:e2:44:c2:df:cf:f1:f5:38:4f:86:03:f3:e7:9b: 86:69:16:f3:34:fb:ad:84:33:f4:2f:40:40:d5:a6:66:92:51: 7f:ac:0a:81:8c:1a:4c:a1:58:7e:04:ae:69:e4:ec:15:e3:2c: de:bd:10:a6:14:4b:39:27:b0:21:d9:9d:5c:48:02:2c:ce:19: b0:e1:3c:f8:79:74:93:c0:97:a0:98:cb:05:26:2d:8b:e7:d0: fb:2f:74:47:43:b1:47:2c:c3:41:0c:92:1d:9a:5b:7c:ac:6f: 64:d8:52:12:8d:13:68:8a:23:6d:0a:40:9c:eb:b3:59:99:a9: a9:98:73:59:72:7d:b9:e5:02:7b:21:5b:99:6a:c9:26:b0:94: 2f:08:ee:df:65:fe:17:ed:1a:9b:b1:18:ca:5d:a3:f3:d3:e3: 04:31:59:56:ec:60:91:50:4c:38:f3:6b:11:a9:a3:8a:57:79: 96:08:6d:f6:2a:bc:e1:4a:09:77:10:ca:57:87:b6:44:ab:39: ef:66:e5:c5:4c:49:c7:93:59:e3:44:01:91:cf:2b:a4:d6:05: fc:7a:e5:2f -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIJkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUMx MEM5MzQ1NTc1OUM2NTlEMkJCODE5RkIwN0ZGNzA2M0NFQ0MzMjAeFw0yNTA5MTMw MzEwMzFaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEEzOEQ0MDA1RkFCRjQ0 REU3NDQzQTI2RTM0RTYwQkM5OUM1Njg3MjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8h6nj/WtgrtZRIaYIfFUjbFVzEY7+6tITRNHfXl3/pLagSZ14 d1l8fKsBqKoQZ58dU88bPv1M4EG9SzJ+3QRW1i6GRU4rCOpqcpA7HInirZRqyH0Q bQWXu3mrx7bZRLQgzByHAZe0gcHybu3+qUOZL5ohHKWWXGDOo8pLjCIMA/PVPN1R FNSj6c04WzX65JMnpYYMHM7e3QKZafMdLa2hl+aORmvAsIoAyukeUHV1vhRwHs2X Iy3jylFC5OG3fwLUIPj7ywruaoCXCz8mXCl11JCRzygWiPtPX0/n+4nlJlR5Z4NA BzOa6bE0MoUiSD9mkDZwZNTRarqWnva+0lPRAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUo41ABfq/RN50Q6JuNOYLyZxWhyUwHwYDVR0jBBgwFoAU7BDJNFV1nGWdK7gZ +wf/cGPOzDIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjMy OS83QkRKTkZWMW5HV2RLN2daLXdmX2NHUE96REkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzdCREpORlYxbkdXZEs3Z1otd2ZfY0dQT3pESS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzMjkvbzQxQUJmcV9STjUw UTZKdU5PWUx5WnhXaHlVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEB3a4gDANBgkqhkiG9w0BAQsFAAOCAQEAYyQw4PM8USWxD4QwLyUspU2O38e8 JTRVegq5McVVaqqRGciPLj12juJEwt/P8fU4T4YD8+ebhmkW8zT7rYQz9C9AQNWm ZpJRf6wKgYwaTKFYfgSuaeTsFeMs3r0QphRLOSewIdmdXEgCLM4ZsOE8+Hl0k8CX oJjLBSYti+fQ+y90R0OxRyzDQQySHZpbfKxvZNhSEo0TaIojbQpAnOuzWZmpqZhz WXJ9ueUCeyFbmWrJJrCULwju32X+F+0am7EYyl2j89PjBDFZVuxgkVBMOPNrEamj ild5lght9iq84UoJdxDKV4e2RKs572blxUxJx5NZ40QBkc8rpNYF/HrlLw== -----END CERTIFICATE-----Generated at Thu Nov 6 01:48:57 2025 by rpki-client