$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2739/rY_gTlaxMPe70YkloeB7ZVk6570.roa File: rY_gTlaxMPe70YkloeB7ZVk6570.roa (raw, json) Hash identifier: b3KWJSzTTKFbr+k2pZObja2Rk4KcWLa/Iv4T+UvBilo= Subject key identifier: AD:8F:E0:4E:56:B1:30:F7:BB:D1:89:25:A1:E0:7B:65:59:3A:E7:BD Certificate issuer: /CN=65DA61BDCA2CC0F8CA95D24D3942BC087D8C92A6 Certificate serial: 2030 Authority key identifier: 65:DA:61:BD:CA:2C:C0:F8:CA:95:D2:4D:39:42:BC:08:7D:8C:92:A6 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZdphvcoswPjKldJNOUK8CH2MkqY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/rY_gTlaxMPe70YkloeB7ZVk6570.roa Signing time: Sat 13 Sep 2025 03:03:46 +0000 ROA not before: Sat 13 Sep 2025 03:03:46 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 137797 IP address blocks: 2402:f9c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/ZdphvcoswPjKldJNOUK8CH2MkqY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/ZdphvcoswPjKldJNOUK8CH2MkqY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZdphvcoswPjKldJNOUK8CH2MkqY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 21:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8240 (0x2030) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65DA61BDCA2CC0F8CA95D24D3942BC087D8C92A6 Validity Not Before: Sep 13 03:03:46 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=AD8FE04E56B130F7BBD18925A1E07B65593AE7BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:15:d0:9b:7b:a2:a7:e9:09:d5:2b:20:43:ad: 99:27:95:79:4a:4d:ec:e4:84:d7:18:a2:7b:66:e1: ba:31:29:6b:c0:99:27:e6:7d:f4:d2:e3:c4:58:44: 04:49:cc:b3:0f:58:3c:3f:42:03:5a:03:fc:e7:8c: 63:16:f4:48:1e:06:a7:ab:c4:db:fe:50:82:d0:16: 20:32:d0:b4:d5:81:dc:fc:62:49:37:09:a2:24:95: 9d:0c:1d:f0:e7:c7:1d:14:93:22:ea:32:7d:98:48: d5:a1:89:bc:11:f6:0c:8d:eb:4a:f7:d4:0c:d3:a2: c0:c0:a0:ed:41:1c:d7:fe:e5:1b:ac:b5:15:e2:54: 34:82:fa:41:98:e5:ca:75:a0:9e:ea:ea:cb:a0:bb: 95:56:41:7c:fc:f7:bf:6a:76:7c:ea:30:05:b2:ac: a3:20:76:fc:a9:58:e8:2f:51:21:2a:7e:ce:36:c3: 5a:d6:e8:dd:38:82:3d:5d:e0:54:e8:57:42:b6:28: 83:de:f7:8b:f9:12:ac:94:47:ff:c0:8c:96:a4:b0: d5:fe:72:90:2e:c9:3c:2b:58:db:35:04:28:fd:6c: 18:d7:61:f4:d1:ad:0e:c9:7c:63:cb:89:5c:51:cf: 34:5e:00:78:f6:21:b1:e2:d6:01:57:0d:e5:a3:4f: 63:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:8F:E0:4E:56:B1:30:F7:BB:D1:89:25:A1:E0:7B:65:59:3A:E7:BD X509v3 Authority Key Identifier: keyid:65:DA:61:BD:CA:2C:C0:F8:CA:95:D2:4D:39:42:BC:08:7D:8C:92:A6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/ZdphvcoswPjKldJNOUK8CH2MkqY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZdphvcoswPjKldJNOUK8CH2MkqY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/rY_gTlaxMPe70YkloeB7ZVk6570.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2402:f9c0::/48 Signature Algorithm: sha256WithRSAEncryption 18:ae:6e:15:fa:15:39:b1:34:75:c1:14:ff:d6:27:ed:69:c5: 86:69:31:70:6f:59:35:93:ba:40:14:c7:c3:4d:4d:d7:6a:13: 52:60:01:3b:9f:28:0b:61:8a:d5:34:8b:e5:68:67:16:1b:57: 95:cc:62:06:cb:31:1b:ed:bd:f8:b5:86:36:69:0c:81:c7:68: 16:af:64:4c:19:5a:5f:c2:50:0a:5f:31:76:6e:4f:4e:01:b5: 4a:0c:9c:53:57:bf:17:90:1b:3b:b7:e2:9d:10:1d:c7:8f:e5: f2:8f:f7:45:ec:e0:63:be:a7:dc:e2:de:7d:eb:5b:a4:b2:49: e1:14:d0:21:92:27:56:fe:a0:78:e7:38:01:dc:8c:d1:0f:e5: 7c:fd:dc:e0:fc:a3:e9:51:ed:b8:11:ea:7b:52:8d:83:16:55: 7b:40:27:9f:37:c0:36:09:da:13:2a:6a:ba:66:19:ad:61:79: f1:e6:67:06:b8:5f:d4:c7:53:a1:2e:fe:01:16:89:0c:53:91: ad:90:54:e6:64:a2:25:45:90:a3:d5:0a:21:60:3e:4a:70:a8: 2f:c2:7d:55:f8:de:c2:64:ae:ed:70:32:57:9c:79:f8:a9:dc: e5:91:28:46:af:fc:a2:f8:19:42:aa:a8:1e:ba:58:e8:62:f7: 2d:f7:e7:dd -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICIDAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjVE QTYxQkRDQTJDQzBGOENBOTVEMjREMzk0MkJDMDg3RDhDOTJBNjAeFw0yNTA5MTMw MzAzNDZaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEFEOEZFMDRFNTZCMTMw RjdCQkQxODkyNUExRTA3QjY1NTkzQUU3QkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWFdCbe6Kn6QnVKyBDrZknlXlKTezkhNcYontm4boxKWvAmSfm ffTS48RYRARJzLMPWDw/QgNaA/znjGMW9EgeBqerxNv+UILQFiAy0LTVgdz8Ykk3 CaIklZ0MHfDnxx0UkyLqMn2YSNWhibwR9gyN60r31AzTosDAoO1BHNf+5RustRXi VDSC+kGY5cp1oJ7q6sugu5VWQXz8979qdnzqMAWyrKMgdvypWOgvUSEqfs42w1rW 6N04gj1d4FToV0K2KIPe94v5EqyUR//AjJaksNX+cpAuyTwrWNs1BCj9bBjXYfTR rQ7JfGPLiVxRzzReAHj2IbHi1gFXDeWjT2OLAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUrY/gTlaxMPe70YkloeB7ZVk6570wHwYDVR0jBBgwFoAUZdphvcoswPjKldJN OUK8CH2MkqYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcz OS9aZHBodmNvc3dQaktsZEpOT1VLOENIMk1rcVkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1pkcGh2Y29zd1BqS2xkSk5PVUs4Q0gyTWtxWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3MzkvcllfZ1RsYXhNUGU3 MFlrbG9lQjdaVms2NTcwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHACQC+cAAADANBgkqhkiG9w0BAQsFAAOCAQEAGK5uFfoVObE0dcEU/9Yn7WnF hmkxcG9ZNZO6QBTHw01N12oTUmABO58oC2GK1TSL5WhnFhtXlcxiBssxG+29+LWG NmkMgcdoFq9kTBlaX8JQCl8xdm5PTgG1SgycU1e/F5AbO7finRAdx4/l8o/3Rezg Y76n3OLefetbpLJJ4RTQIZInVv6geOc4AdyM0Q/lfP3c4Pyj6VHtuBHqe1KNgxZV e0AnnzfANgnaEypqumYZrWF58eZnBrhf1MdToS7+ARaJDFORrZBU5mSiJUWQo9UK IWA+SnCoL8J9VfjewmSu7XAyV5x5+Knc5ZEoRq/8ovgZQqqoHrpY6GL3Lffn3Q== -----END CERTIFICATE-----Generated at Wed Nov 5 19:59:18 2025 by rpki-client