$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/242/FJya2J9MRXewJS0UsrRFHHS19fY.roa File: FJya2J9MRXewJS0UsrRFHHS19fY.roa (raw, json) Hash identifier: xdD1SHxivnU0RMg/dvIBrXho/Z9i/igtmo4LcBAFRxE= Subject key identifier: 14:9C:9A:D8:9F:4C:45:77:B0:25:2D:14:B2:B4:45:1C:74:B5:F5:F6 Certificate issuer: /CN=0A6F972D24078F89088ED110A26DCDF90A9EBCEA Certificate serial: 1733 Authority key identifier: 0A:6F:97:2D:24:07:8F:89:08:8E:D1:10:A2:6D:CD:F9:0A:9E:BC:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Cm-XLSQHj4kIjtEQom3N-QqevOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/242/FJya2J9MRXewJS0UsrRFHHS19fY.roa Signing time: Sat 13 Sep 2025 03:08:05 +0000 ROA not before: Sat 13 Sep 2025 03:08:05 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 45102 IP address blocks: 59.82.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/242/Cm-XLSQHj4kIjtEQom3N-QqevOo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/242/Cm-XLSQHj4kIjtEQom3N-QqevOo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Cm-XLSQHj4kIjtEQom3N-QqevOo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 11:14:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5939 (0x1733) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A6F972D24078F89088ED110A26DCDF90A9EBCEA Validity Not Before: Sep 13 03:08:05 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=149C9AD89F4C4577B0252D14B2B4451C74B5F5F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fe:04:bd:38:76:7e:87:02:09:6d:dd:7f:a0: b7:05:ac:12:28:35:bb:72:87:91:0f:ac:8d:c6:88: 30:e1:79:0b:0f:de:8b:cd:9a:09:d0:84:cf:bf:d6: ba:8d:47:e5:e3:4a:f6:66:b8:00:64:b7:eb:69:20: 00:8c:d6:fd:e3:26:9f:a8:d8:37:52:57:21:e1:88: bc:4f:f1:70:02:88:fc:0f:3c:d3:51:34:57:85:ee: 93:dd:3d:b7:8a:e3:34:9e:16:2d:17:04:8c:65:ad: 74:2e:cb:7d:da:76:dd:8b:34:7a:c8:bb:9c:eb:58: eb:7b:0c:fa:e3:bc:f3:fa:53:70:da:52:ec:5d:ee: ba:ac:33:72:ed:b2:96:b1:a2:7a:27:cb:4b:61:a3: 2d:7c:8e:5a:f4:54:f8:0a:72:77:31:02:dc:0d:71: e3:91:7b:64:6d:ca:a1:fd:4a:4b:7c:6b:c8:2f:50: 9a:1a:5b:15:bb:be:5f:5f:35:6c:1c:ec:87:2e:74: 2a:7b:58:7d:05:c5:c3:28:43:8c:72:91:d6:34:7c: 1d:b2:b6:3e:95:03:e8:ad:50:10:14:de:a5:d3:18: 0a:c6:35:10:a7:b2:b0:33:d0:62:d2:33:8b:95:ab: f1:81:be:17:29:f7:f0:f9:69:8b:ab:fa:23:b1:00: 5e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:9C:9A:D8:9F:4C:45:77:B0:25:2D:14:B2:B4:45:1C:74:B5:F5:F6 X509v3 Authority Key Identifier: keyid:0A:6F:97:2D:24:07:8F:89:08:8E:D1:10:A2:6D:CD:F9:0A:9E:BC:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/242/Cm-XLSQHj4kIjtEQom3N-QqevOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Cm-XLSQHj4kIjtEQom3N-QqevOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/242/FJya2J9MRXewJS0UsrRFHHS19fY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 59.82.136.0/21 Signature Algorithm: sha256WithRSAEncryption 77:5b:ea:ae:a3:2d:1f:8c:80:14:5b:97:74:0a:59:38:20:82: 02:83:a2:3a:89:80:5f:9e:2a:20:18:72:b6:01:ca:2d:0a:e6: c1:cf:ef:b8:f8:2d:af:fc:05:8e:14:b8:4d:11:a0:5f:04:92: 9c:ff:12:3e:e7:4b:94:e7:2c:f7:2b:ab:30:20:ad:51:23:a4: b4:99:32:fa:fb:80:d7:4c:0d:59:f4:06:5d:f5:9e:ff:66:39: a5:60:27:90:ee:af:36:c8:8f:42:c1:1c:75:8f:94:e6:9c:50: 3e:51:67:f3:c8:fe:a8:b6:a1:f7:5a:7c:f0:39:ff:72:44:5c: 24:90:e4:38:01:2a:e0:4f:57:45:b7:a4:8d:38:ff:08:56:c4: 45:e3:b9:75:10:f8:64:44:01:96:c5:ae:33:a3:62:ce:c5:30: 67:4d:e0:f0:ae:28:10:11:c0:c4:ce:c1:f1:be:b5:a2:c9:b1: 94:15:9d:c5:aa:d5:1e:99:e4:b1:48:7b:56:30:03:f1:20:20: 9d:87:4f:fc:30:16:c4:8b:44:c5:da:36:e8:9b:e1:25:e5:0e: 9c:3f:f3:ad:db:a0:61:27:94:71:17:e0:0f:32:45:a0:9e:95: d1:26:e4:f3:49:6c:d6:00:2d:c2:25:5d:61:72:75:17:03:4a: dd:b5:80:78 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFzMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEE2 Rjk3MkQyNDA3OEY4OTA4OEVEMTEwQTI2RENERjkwQTlFQkNFQTAeFw0yNTA5MTMw MzA4MDVaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDE0OUM5QUQ4OUY0QzQ1 NzdCMDI1MkQxNEIyQjQ0NTFDNzRCNUY1RjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDI/gS9OHZ+hwIJbd1/oLcFrBIoNbtyh5EPrI3GiDDheQsP3ovN mgnQhM+/1rqNR+XjSvZmuABkt+tpIACM1v3jJp+o2DdSVyHhiLxP8XACiPwPPNNR NFeF7pPdPbeK4zSeFi0XBIxlrXQuy33adt2LNHrIu5zrWOt7DPrjvPP6U3DaUuxd 7rqsM3Ltspaxonony0thoy18jlr0VPgKcncxAtwNceORe2RtyqH9Skt8a8gvUJoa WxW7vl9fNWwc7IcudCp7WH0FxcMoQ4xykdY0fB2ytj6VA+itUBAU3qXTGArGNRCn srAz0GLSM4uVq/GBvhcp9/D5aYur+iOxAF5JAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUFJya2J9MRXewJS0UsrRFHHS19fYwHwYDVR0jBBgwFoAUCm+XLSQHj4kIjtEQ om3N+QqevOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjQy L0NtLVhMU1FIajRrSWp0RVFvbTNOLVFxZXZPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvQ20tWExTUUhqNGtJanRFUW9tM04tUXFldk9vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjQyL0ZKeWEySjlNUlhld0pT MFVzclJGSEhTMTlmWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAM7UogwDQYJKoZIhvcNAQELBQADggEBAHdb6q6jLR+MgBRbl3QKWTggggKDojqJ gF+eKiAYcrYByi0K5sHP77j4La/8BY4UuE0RoF8Ekpz/Ej7nS5TnLPcrqzAgrVEj pLSZMvr7gNdMDVn0Bl31nv9mOaVgJ5DurzbIj0LBHHWPlOacUD5RZ/PI/qi2ofda fPA5/3JEXCSQ5DgBKuBPV0W3pI04/whWxEXjuXUQ+GREAZbFrjOjYs7FMGdN4PCu KBARwMTOwfG+taLJsZQVncWq1R6Z5LFIe1YwA/EgIJ2HT/wwFsSLRMXaNuib4SXl Dpw/863boGEnlHEX4A8yRaCeldEm5PNJbNYALcIlXWFydRcDSt21gHg= -----END CERTIFICATE-----Generated at Wed Nov 5 09:38:15 2025 by rpki-client