$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2682/xwNLPe_StZMG1iv5jjnMb3WeiqY.roa File: xwNLPe_StZMG1iv5jjnMb3WeiqY.roa (raw, json) Hash identifier: T6hWSlRGulCuF3HHzGqvyeRktxl6HgxezfKP3kslbP4= Subject key identifier: C7:03:4B:3D:EF:D2:B5:93:06:D6:2B:F9:8E:39:CC:6F:75:9E:8A:A6 Certificate issuer: /CN=F4729CAF435D698D27C7387914801EFDB8478B8B Certificate serial: 06 Authority key identifier: F4:72:9C:AF:43:5D:69:8D:27:C7:38:79:14:80:1E:FD:B8:47:8B:8B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9HKcr0NdaY0nxzh5FIAe_bhHi4s.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2682/xwNLPe_StZMG1iv5jjnMb3WeiqY.roa Signing time: Thu 28 Aug 2025 06:33:06 +0000 ROA not before: Thu 28 Aug 2025 06:33:06 +0000 ROA not after: Fri 28 Aug 2026 05:53:00 +0000 asID: 151252 IP address blocks: 2402:7740::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2682/9HKcr0NdaY0nxzh5FIAe_bhHi4s.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2682/9HKcr0NdaY0nxzh5FIAe_bhHi4s.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9HKcr0NdaY0nxzh5FIAe_bhHi4s.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 18:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F4729CAF435D698D27C7387914801EFDB8478B8B Validity Not Before: Aug 28 06:33:06 2025 GMT Not After : Aug 28 05:53:00 2026 GMT Subject: CN=C7034B3DEFD2B59306D62BF98E39CC6F759E8AA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f8:54:24:32:e4:12:42:c7:31:47:78:da:4f: 4b:d6:57:e7:48:de:af:a0:6b:25:cd:74:0c:fe:a7: e6:e4:55:76:e0:a3:1d:47:fe:dd:6d:97:0b:d7:b8: 5f:f8:bd:78:4f:bf:59:09:dd:df:46:58:da:a0:fb: 24:de:33:b6:57:0c:9e:ba:6f:93:a5:20:cd:40:61: 00:0e:bb:5f:da:fb:8e:54:fa:03:e5:62:b0:5a:2e: 65:2c:df:25:2c:75:5f:9a:13:00:bf:0d:ec:4f:fe: 8c:cf:58:af:9e:e1:24:a7:78:93:8b:ee:91:c9:2d: 2d:c7:cc:e0:ef:a2:2a:76:17:08:a8:ad:23:13:3f: 26:1e:bd:0a:e7:92:cf:4e:42:e2:27:4f:4f:41:89: 90:3f:4d:3e:13:4a:ee:92:ef:99:7a:be:2c:cf:bb: 43:cd:1c:2c:9a:63:79:8d:25:e0:96:f7:14:7f:8a: f6:ee:7d:f7:8b:21:ab:ef:b9:0a:3c:df:3b:68:2d: 36:c5:74:91:4e:0e:40:6d:98:eb:37:fc:2b:c4:cc: 21:ee:bc:ec:91:f1:7f:fe:b3:1d:11:1d:bc:f6:38: 69:35:2c:48:94:e2:d5:d2:c9:41:30:a7:20:30:0d: 29:c0:66:58:7c:30:f0:ab:58:5c:7e:84:04:92:b0: d3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:03:4B:3D:EF:D2:B5:93:06:D6:2B:F9:8E:39:CC:6F:75:9E:8A:A6 X509v3 Authority Key Identifier: keyid:F4:72:9C:AF:43:5D:69:8D:27:C7:38:79:14:80:1E:FD:B8:47:8B:8B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2682/9HKcr0NdaY0nxzh5FIAe_bhHi4s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9HKcr0NdaY0nxzh5FIAe_bhHi4s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2682/xwNLPe_StZMG1iv5jjnMb3WeiqY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2402:7740::/32 Signature Algorithm: sha256WithRSAEncryption 6a:d0:35:a0:b7:b4:61:a7:07:56:9e:d4:bd:1e:51:d7:8e:76: 17:58:f0:68:57:53:f2:e6:57:04:c2:54:e3:5d:29:e9:dd:18: 03:39:9c:67:0b:21:8d:b0:59:30:7b:d6:11:12:6b:18:19:2c: 66:d9:36:92:6b:f3:1d:e9:46:1b:35:a8:e5:71:b0:b0:00:1b: 67:59:7a:d1:40:65:71:c1:ef:aa:b3:b2:8b:89:13:5e:3a:90: a9:da:4b:65:e9:55:76:d0:26:f5:f4:10:8d:21:48:f0:3f:55: 14:aa:3d:7b:f0:30:23:6c:38:4a:d5:58:60:f1:93:64:a0:2c: 59:dc:34:01:19:37:55:99:71:82:46:15:7d:31:15:29:ac:03: 2e:ad:98:42:72:8a:df:d5:c6:6d:96:19:e9:cc:2f:6d:8f:a5: a1:d0:03:6a:3a:4b:22:d5:21:65:da:05:78:87:5c:96:4b:e5: f2:8f:ae:ad:2f:d7:30:4c:09:b5:26:1c:49:16:1c:a3:f0:7e: 72:ff:14:ae:3f:bb:37:a1:07:62:ef:6b:fd:58:c1:b0:38:3c: c9:f3:f9:e7:0d:3a:cd:85:fa:78:fb:bd:34:07:06:b2:c6:94: a4:74:cb:86:4b:16:d7:ab:89:4a:82:1f:da:a2:7a:09:ae:8f: 23:6e:36:e3 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgIBBjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGNDcy OUNBRjQzNUQ2OThEMjdDNzM4NzkxNDgwMUVGREI4NDc4QjhCMB4XDTI1MDgyODA2 MzMwNloXDTI2MDgyODA1NTMwMFowMzExMC8GA1UEAxMoQzcwMzRCM0RFRkQyQjU5 MzA2RDYyQkY5OEUzOUNDNkY3NTlFOEFBNjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANj4VCQy5BJCxzFHeNpPS9ZX50jer6BrJc10DP6n5uRVduCjHUf+ 3W2XC9e4X/i9eE+/WQnd30ZY2qD7JN4ztlcMnrpvk6UgzUBhAA67X9r7jlT6A+Vi sFouZSzfJSx1X5oTAL8N7E/+jM9Yr57hJKd4k4vukcktLcfM4O+iKnYXCKitIxM/ Jh69CueSz05C4idPT0GJkD9NPhNK7pLvmXq+LM+7Q80cLJpjeY0l4Jb3FH+K9u59 94shq++5CjzfO2gtNsV0kU4OQG2Y6zf8K8TMIe687JHxf/6zHREdvPY4aTUsSJTi 1dLJQTCnIDANKcBmWHww8KtYXH6EBJKw0zkCAwEAAaOCAfQwggHwMB0GA1UdDgQW BBTHA0s979K1kwbWK/mOOcxvdZ6KpjAfBgNVHSMEGDAWgBT0cpyvQ11pjSfHOHkU gB79uEeLizAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNjgy LzlIS2NyME5kYVkwbnh6aDVGSUFlX2JoSGk0cy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOUhLY3IwTmRhWTBueHpoNUZJQWVfYmhIaTRzLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY4Mi94d05MUGVfU3RaTUcx aXY1ampuTWIzV2VpcVkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH AwUAJAJ3QDANBgkqhkiG9w0BAQsFAAOCAQEAatA1oLe0YacHVp7UvR5R1452F1jw aFdT8uZXBMJU410p6d0YAzmcZwshjbBZMHvWERJrGBksZtk2kmvzHelGGzWo5XGw sAAbZ1l60UBlccHvqrOyi4kTXjqQqdpLZelVdtAm9fQQjSFI8D9VFKo9e/AwI2w4 StVYYPGTZKAsWdw0ARk3VZlxgkYVfTEVKawDLq2YQnKK39XGbZYZ6cwvbY+lodAD ajpLItUhZdoFeIdclkvl8o+urS/XMEwJtSYcSRYco/B+cv8Urj+7N6EHYu9r/VjB sDg8yfP55w06zYX6ePu9NAcGssaUpHTLhksW16uJSoIf2qJ6Ca6PI2424w== -----END CERTIFICATE-----Generated at Wed Nov 5 18:01:33 2025 by rpki-client