$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2988/YtgPMpzsRzGXBs45mr1kyGJf1Os.roa File: YtgPMpzsRzGXBs45mr1kyGJf1Os.roa (raw, json) Hash identifier: 98gJqd8+/J+xFOWdPMc/FU4rHgZx0N080kCzwFikk9U= Subject key identifier: 62:D8:0F:32:9C:EC:47:31:97:06:CE:39:9A:BD:64:C8:62:5F:D4:EB Certificate issuer: /CN=012D4317BCA1660F88066F890F8C04AF557000CB Certificate serial: 2682 Authority key identifier: 01:2D:43:17:BC:A1:66:0F:88:06:6F:89:0F:8C:04:AF:55:70:00:CB Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/YtgPMpzsRzGXBs45mr1kyGJf1Os.roa Signing time: Sat 13 Sep 2025 03:08:54 +0000 ROA not before: Sat 13 Sep 2025 03:08:54 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 4538 IP address blocks: 2406:3340::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 23:43:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9858 (0x2682) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=012D4317BCA1660F88066F890F8C04AF557000CB Validity Not Before: Sep 13 03:08:54 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=62D80F329CEC47319706CE399ABD64C8625FD4EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:12:fd:0b:f2:26:db:8a:19:26:78:2e:7a:d6: 27:73:fc:96:eb:ff:fa:74:f6:60:49:ad:ee:02:6d: 95:83:bd:44:dd:11:61:ad:8c:a2:c8:ff:fa:d2:4f: e9:02:2f:6e:e0:22:5d:b7:c9:aa:40:85:a9:3a:68: 01:90:51:5d:49:29:88:5e:52:e9:3d:c7:14:2e:25: 4d:a7:de:8a:f8:5c:0d:d0:0c:ad:d9:7e:87:31:0b: 35:2b:42:18:50:18:79:16:f5:d2:bf:4e:b6:d6:7b: 13:85:4a:63:80:42:11:2a:c5:c2:41:b1:c1:78:d0: b0:77:45:c1:6b:23:95:b5:99:6c:17:52:55:ca:6c: f2:cc:c5:7f:ae:30:d7:47:82:1c:be:b1:e1:4e:ad: a0:07:57:69:e9:27:a4:97:36:ab:a2:01:d4:75:c2: ae:97:60:4d:86:a2:47:6b:64:30:63:04:e0:41:a3: f8:1f:08:f9:b8:30:fc:62:b4:ec:98:ad:14:a4:59: 8b:2c:0d:47:b8:be:df:1b:62:b2:e9:18:d6:01:b3: 4b:50:b7:4c:78:9b:44:e8:06:54:f3:3d:09:05:7d: b7:2a:39:18:87:f5:18:e9:39:bf:5a:8a:53:7f:f2: 7b:17:82:bf:91:b2:76:ae:26:fe:9a:06:84:60:82: 93:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:D8:0F:32:9C:EC:47:31:97:06:CE:39:9A:BD:64:C8:62:5F:D4:EB X509v3 Authority Key Identifier: keyid:01:2D:43:17:BC:A1:66:0F:88:06:6F:89:0F:8C:04:AF:55:70:00:CB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/YtgPMpzsRzGXBs45mr1kyGJf1Os.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2406:3340::/32 Signature Algorithm: sha256WithRSAEncryption 5f:71:79:94:18:0e:8b:21:dc:70:15:27:bf:79:8a:d2:84:43: 0f:0c:37:65:cc:ce:85:9a:20:09:5c:51:6d:91:2d:f0:2c:84: 12:fc:99:ec:5e:f6:26:50:a5:a3:63:4f:60:79:f8:08:74:2d: ba:4d:d8:74:02:a5:f3:b2:7f:17:33:77:c2:f9:3a:97:30:de: 9c:eb:8a:d8:86:31:38:bb:46:91:10:f9:2e:7d:5c:c0:a9:c7: fa:a7:53:38:2e:f8:39:9d:ea:7f:56:15:39:27:bf:b0:47:9a: 67:7e:bf:3d:f6:c0:63:15:8d:23:00:6a:62:01:74:79:af:9d: f2:29:10:56:24:25:d1:14:7f:f8:74:64:19:4c:bf:24:fd:34: 40:7e:f4:d5:a5:69:89:f9:26:26:59:7b:3b:03:59:63:fb:e0: 2c:c6:7a:aa:8a:f0:d5:89:e8:76:ea:83:79:63:e7:1a:64:55: 39:e5:c2:1e:31:39:24:b3:f1:f2:b3:36:5a:46:71:62:55:e4: 34:f0:b6:7c:68:cd:20:65:85:d6:3d:58:1d:13:f6:49:a8:6f: a4:6b:6e:12:2b:25:4d:71:1b:6b:6b:84:6b:c9:79:ad:19:0b: e2:c4:95:e8:86:88:fc:7e:e1:0d:0e:81:89:f9:59:2a:6a:59: 98:b0:be:25 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICJoIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDEy RDQzMTdCQ0ExNjYwRjg4MDY2Rjg5MEY4QzA0QUY1NTcwMDBDQjAeFw0yNTA5MTMw MzA4NTRaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDYyRDgwRjMyOUNFQzQ3 MzE5NzA2Q0UzOTlBQkQ2NEM4NjI1RkQ0RUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDxEv0L8ibbihkmeC561idz/Jbr//p09mBJre4CbZWDvUTdEWGt jKLI//rST+kCL27gIl23yapAhak6aAGQUV1JKYheUuk9xxQuJU2n3or4XA3QDK3Z focxCzUrQhhQGHkW9dK/TrbWexOFSmOAQhEqxcJBscF40LB3RcFrI5W1mWwXUlXK bPLMxX+uMNdHghy+seFOraAHV2npJ6SXNquiAdR1wq6XYE2GokdrZDBjBOBBo/gf CPm4MPxitOyYrRSkWYssDUe4vt8bYrLpGNYBs0tQt0x4m0ToBlTzPQkFfbcqORiH 9RjpOb9ailN/8nsXgr+RsnauJv6aBoRggpMlAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUYtgPMpzsRzGXBs45mr1kyGJf1OswHwYDVR0jBBgwFoAUAS1DF7yhZg+IBm+J D4wEr1VwAMswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjk4 OC9BUzFERjd5aFpnLUlCbS1KRDR3RXIxVndBTXMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0FTMURGN3loWmctSUJtLUpENHdFcjFWd0FNcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI5ODgvWXRnUE1wenNSekdY QnM0NW1yMWt5R0pmMU9zLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQGM0AwDQYJKoZIhvcNAQELBQADggEBAF9xeZQYDosh3HAVJ795itKEQw8M N2XMzoWaIAlcUW2RLfAshBL8mexe9iZQpaNjT2B5+Ah0LbpN2HQCpfOyfxczd8L5 Opcw3pzritiGMTi7RpEQ+S59XMCpx/qnUzgu+Dmd6n9WFTknv7BHmmd+vz32wGMV jSMAamIBdHmvnfIpEFYkJdEUf/h0ZBlMvyT9NEB+9NWlaYn5JiZZezsDWWP74CzG eqqK8NWJ6Hbqg3lj5xpkVTnlwh4xOSSz8fKzNlpGcWJV5DTwtnxozSBlhdY9WB0T 9kmob6RrbhIrJU1xG2trhGvJea0ZC+LEleiGiPx+4Q0OgYn5WSpqWZiwviU= -----END CERTIFICATE-----Generated at Wed Nov 5 21:49:26 2025 by rpki-client