$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2411/Tueg8B20i_WKP7hRxycvFmdclRo.roa File: Tueg8B20i_WKP7hRxycvFmdclRo.roa (raw, json) Hash identifier: mIBoeksWCFsk3OQ5asykOP8wMaYaVaEHEKnRSuCTL2Y= Subject key identifier: 4E:E7:A0:F0:1D:B4:8B:F5:8A:3F:B8:51:C7:27:2F:16:67:5C:95:1A Certificate issuer: /CN=1F552F6E8AC2F97E1447BFAC810059695E2B32A9 Certificate serial: 30 Authority key identifier: 1F:55:2F:6E:8A:C2:F9:7E:14:47:BF:AC:81:00:59:69:5E:2B:32:A9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/H1UvborC-X4UR7-sgQBZaV4rMqk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2411/Tueg8B20i_WKP7hRxycvFmdclRo.roa Signing time: Mon 18 Aug 2025 01:57:57 +0000 ROA not before: Mon 18 Aug 2025 01:57:57 +0000 ROA not after: Sun 16 Aug 2026 01:52:01 +0000 asID: 137690 IP address blocks: 43.240.216.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2411/H1UvborC-X4UR7-sgQBZaV4rMqk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2411/H1UvborC-X4UR7-sgQBZaV4rMqk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/H1UvborC-X4UR7-sgQBZaV4rMqk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:41:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F552F6E8AC2F97E1447BFAC810059695E2B32A9 Validity Not Before: Aug 18 01:57:57 2025 GMT Not After : Aug 16 01:52:01 2026 GMT Subject: CN=4EE7A0F01DB48BF58A3FB851C7272F16675C951A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c9:3c:a0:6b:44:02:83:9b:f0:f8:08:42:d4: 46:57:e7:f3:7a:59:5b:79:79:e5:dc:33:23:56:b1: 70:16:f5:3f:11:8d:e2:83:02:5c:f6:6d:3d:b5:43: 12:04:6a:e7:32:a9:42:30:15:37:e0:2a:18:d5:95: 5b:08:c3:6a:ef:a3:e7:a1:33:2f:a4:39:ea:85:87: 47:17:81:1e:6c:2d:62:93:54:5e:21:c1:38:ad:be: aa:7e:e0:d4:66:b2:68:92:9e:ef:26:cb:14:b1:32: 89:4a:e9:65:b7:d7:cd:c6:bc:da:98:45:0d:e5:9d: ad:47:89:fa:35:d6:45:1d:67:7d:e9:81:c6:e6:9d: dd:43:17:b6:bb:2d:4f:bc:50:ec:4e:4e:5d:2f:56: e8:2e:46:f7:78:41:10:e1:b0:28:48:f0:41:8b:2b: c9:e7:7e:17:b6:53:95:b9:c1:a1:b8:46:d1:0a:f3: 74:44:fa:3b:76:97:50:3c:4d:3b:cf:15:e4:39:06: 89:95:84:8e:1f:11:41:e3:70:21:fa:ac:f1:72:a9: 87:10:3d:e7:a9:39:c5:0b:8c:f3:75:5e:8b:10:aa: bf:08:f9:85:22:23:81:55:49:47:41:c3:ac:bf:a7: fd:18:e8:91:bb:cd:d2:9e:d9:02:5e:45:8c:c8:aa: 67:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:E7:A0:F0:1D:B4:8B:F5:8A:3F:B8:51:C7:27:2F:16:67:5C:95:1A X509v3 Authority Key Identifier: keyid:1F:55:2F:6E:8A:C2:F9:7E:14:47:BF:AC:81:00:59:69:5E:2B:32:A9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2411/H1UvborC-X4UR7-sgQBZaV4rMqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/H1UvborC-X4UR7-sgQBZaV4rMqk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2411/Tueg8B20i_WKP7hRxycvFmdclRo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.240.216.0/22 Signature Algorithm: sha256WithRSAEncryption 5e:dc:7f:77:11:44:e9:e0:83:a2:8c:22:23:2e:0e:87:2e:d7: b2:11:54:24:17:c3:ee:8c:3c:65:d8:da:f8:ef:ae:3a:fc:ff: af:8b:3c:b7:e0:11:45:c1:eb:09:db:9a:05:c5:67:3f:fe:b4: 38:2c:4b:49:e1:35:68:f7:7c:af:d3:ab:b7:90:5f:3a:04:5f: 1e:59:a6:12:cf:55:1c:4f:d7:d1:75:dd:76:bc:63:22:05:c0: 58:4e:2e:c0:41:5c:61:1c:dd:3f:96:37:1f:a9:cc:97:66:ad: 12:c3:64:67:e0:47:9a:97:d4:22:c1:ba:a6:c0:78:72:e4:88: 67:55:5f:1e:fc:0d:a6:d0:3d:d0:e0:d7:13:c0:81:44:c2:92: 21:08:b2:28:0c:c6:16:e1:d9:09:2d:05:d6:16:cd:b8:0e:fc: 55:e9:3e:2d:e1:83:33:35:f5:8c:ee:0b:80:88:41:9f:d3:3e: 07:8d:96:ee:bd:f7:95:04:c3:93:19:5d:5c:bb:5c:c8:c3:09: 9e:b4:ee:48:67:45:c7:9a:f3:e5:17:bc:60:97:5f:c5:8d:33: 49:5b:5d:5a:72:25:fb:61:af:62:eb:fe:b3:ef:0a:17:d5:d3: 36:b2:06:65:10:bf:80:08:47:85:bb:95:68:e5:d7:75:7f:52: 95:d0:43:2a -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBMDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxRjU1 MkY2RThBQzJGOTdFMTQ0N0JGQUM4MTAwNTk2OTVFMkIzMkE5MB4XDTI1MDgxODAx NTc1N1oXDTI2MDgxNjAxNTIwMVowMzExMC8GA1UEAxMoNEVFN0EwRjAxREI0OEJG NThBM0ZCODUxQzcyNzJGMTY2NzVDOTUxQTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKbJPKBrRAKDm/D4CELURlfn83pZW3l55dwzI1axcBb1PxGN4oMC XPZtPbVDEgRq5zKpQjAVN+AqGNWVWwjDau+j56EzL6Q56oWHRxeBHmwtYpNUXiHB OK2+qn7g1GayaJKe7ybLFLEyiUrpZbfXzca82phFDeWdrUeJ+jXWRR1nfemBxuad 3UMXtrstT7xQ7E5OXS9W6C5G93hBEOGwKEjwQYsryed+F7ZTlbnBobhG0QrzdET6 O3aXUDxNO88V5DkGiZWEjh8RQeNwIfqs8XKphxA956k5xQuM83VeixCqvwj5hSIj gVVJR0HDrL+n/RjokbvN0p7ZAl5FjMiqZ9UCAwEAAaOCAfMwggHvMB0GA1UdDgQW BBRO56DwHbSL9Yo/uFHHJy8WZ1yVGjAfBgNVHSMEGDAWgBQfVS9uisL5fhRHv6yB AFlpXisyqTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNDEx L0gxVXZib3JDLVg0VVI3LXNnUUJaYVY0ck1xay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvSDFVdmJvckMtWDRVUjctc2dRQlphVjRyTXFrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjQxMS9UdWVnOEIyMGlfV0tQ N2hSeHljdkZtZGNsUm8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCK/DYMA0GCSqGSIb3DQEBCwUAA4IBAQBe3H93EUTp4IOijCIjLg6HLteyEVQk F8PujDxl2Nr47646/P+vizy34BFFwesJ25oFxWc//rQ4LEtJ4TVo93yv06u3kF86 BF8eWaYSz1UcT9fRdd12vGMiBcBYTi7AQVxhHN0/ljcfqcyXZq0Sw2Rn4Eeal9Qi wbqmwHhy5IhnVV8e/A2m0D3Q4NcTwIFEwpIhCLIoDMYW4dkJLQXWFs24DvxV6T4t 4YMzNfWM7guAiEGf0z4HjZbuvfeVBMOTGV1cu1zIwwmetO5IZ0XHmvPlF7xgl1/F jTNJW11aciX7Ya9i6/6z7woX1dM2sgZlEL+ACEeFu5Vo5dd1f1KV0EMq -----END CERTIFICATE-----Generated at Wed Nov 5 20:28:02 2025 by rpki-client