$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3095/C3rraOFQOzyr2t_liETQ7LXyT_s.roa File: C3rraOFQOzyr2t_liETQ7LXyT_s.roa (raw, json) Hash identifier: KvWCQOvwuyDnltKjiO/WIke3NfDmO4O9idygqvPUVZ0= Subject key identifier: 0B:7A:EB:68:E1:50:3B:3C:AB:DA:DF:E5:88:44:D0:EC:B5:F2:4F:FB Certificate issuer: /CN=CB16707EAF0BDFD1326AFD9BDEC6AFFA6E63BA98 Certificate serial: 0CCF Authority key identifier: CB:16:70:7E:AF:0B:DF:D1:32:6A:FD:9B:DE:C6:AF:FA:6E:63:BA:98 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yxZwfq8L39Eyav2b3sav-m5jupg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/C3rraOFQOzyr2t_liETQ7LXyT_s.roa Signing time: Thu 10 Jul 2025 09:33:34 +0000 ROA not before: Thu 10 Jul 2025 09:33:34 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 4816 IP address blocks: 202.46.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/yxZwfq8L39Eyav2b3sav-m5jupg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/yxZwfq8L39Eyav2b3sav-m5jupg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yxZwfq8L39Eyav2b3sav-m5jupg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 10:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3279 (0xccf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB16707EAF0BDFD1326AFD9BDEC6AFFA6E63BA98 Validity Not Before: Jul 10 09:33:34 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=0B7AEB68E1503B3CABDADFE58844D0ECB5F24FFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ab:66:76:94:d5:a4:8e:ff:a3:76:22:03:94: 3b:6c:bf:3e:4a:67:d7:2a:e6:b2:9d:ab:74:a1:a5: 36:13:fe:d1:91:d2:47:20:f4:e6:3b:99:fd:e2:81: 77:ea:03:aa:20:7b:34:15:ac:e4:bc:43:37:c7:e6: b5:c8:ea:10:13:81:89:19:84:30:b2:8f:8c:9a:3e: 3e:55:7d:e0:23:61:c6:de:2c:b6:d1:32:2e:a5:37: 18:da:e6:f2:72:59:60:57:9b:65:ef:be:0a:51:f5: 8f:56:41:37:b4:20:16:d1:96:47:0b:e3:76:9e:58: df:65:b0:3d:05:46:f5:3e:3f:61:6a:0b:7b:e7:da: 47:4c:31:b6:92:8c:e4:f4:a6:96:31:07:c9:39:17: 06:e1:a6:d1:02:3e:c4:fd:77:ab:e2:a2:a0:f8:c2: 9a:b0:fb:36:0e:88:cc:ce:6b:01:19:8c:18:40:31: 2b:4a:1a:3a:f6:1c:7a:ee:db:c6:bf:13:2b:1b:ea: 8e:14:36:b3:c8:78:33:ea:86:09:d2:e7:ae:38:91: c1:b8:42:07:e8:ee:ca:ac:9d:9e:95:63:7e:1b:92: 03:ed:59:83:e5:0e:7f:c6:21:8b:11:f8:a5:c5:ed: e1:f6:fd:0c:ed:24:0f:b0:08:e4:95:38:da:e3:50: 66:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:7A:EB:68:E1:50:3B:3C:AB:DA:DF:E5:88:44:D0:EC:B5:F2:4F:FB X509v3 Authority Key Identifier: keyid:CB:16:70:7E:AF:0B:DF:D1:32:6A:FD:9B:DE:C6:AF:FA:6E:63:BA:98 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/yxZwfq8L39Eyav2b3sav-m5jupg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yxZwfq8L39Eyav2b3sav-m5jupg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/C3rraOFQOzyr2t_liETQ7LXyT_s.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.46.224.0/20 Signature Algorithm: sha256WithRSAEncryption 30:a0:df:8e:af:10:ae:58:12:50:6c:01:f7:45:2a:b9:da:33: 60:aa:7f:52:5c:d5:29:82:43:ea:2d:7e:18:cb:39:35:ea:50: fc:fd:b7:cd:d6:08:50:7a:0a:69:d9:35:c1:4f:1a:48:00:09: f9:6f:dd:75:8f:9d:c0:cb:8a:2c:5c:b6:b9:7e:e9:8f:71:a7: 3d:48:7a:1d:3f:87:df:06:9a:b9:31:46:13:72:dc:02:d1:b9: ac:a6:27:da:36:95:1c:c7:87:bd:08:85:2f:92:bb:22:df:03: 72:18:d7:71:91:c6:2c:36:0e:b1:0d:ac:75:9d:c9:b0:00:43: dd:c5:45:a6:d9:7d:25:37:b1:7f:5a:a7:93:11:64:3f:b2:6e: 1f:56:cf:4d:a8:c5:c2:4d:38:1d:72:a1:99:35:f3:0c:78:93: f5:e9:ee:ab:77:07:4a:f1:a2:a1:3e:d0:46:69:dc:53:f9:be: 0d:23:32:0f:19:6c:79:b4:22:fa:16:4d:d1:39:40:99:72:ad: 25:8c:dc:10:13:e3:83:15:30:e9:dd:9e:6c:0f:cd:49:f9:a1: c9:6a:56:4d:2b:e7:53:83:01:37:35:dd:d6:11:75:f2:ec:99: 5c:de:47:d9:ab:fa:6e:15:fa:c0:72:a4:84:19:e4:51:0f:b4: 24:34:08:25 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICDM8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Ix NjcwN0VBRjBCREZEMTMyNkFGRDlCREVDNkFGRkE2RTYzQkE5ODAeFw0yNTA3MTAw OTMzMzRaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDBCN0FFQjY4RTE1MDNC M0NBQkRBREZFNTg4NDREMEVDQjVGMjRGRkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLq2Z2lNWkjv+jdiIDlDtsvz5KZ9cq5rKdq3ShpTYT/tGR0kcg 9OY7mf3igXfqA6ogezQVrOS8QzfH5rXI6hATgYkZhDCyj4yaPj5VfeAjYcbeLLbR Mi6lNxja5vJyWWBXm2XvvgpR9Y9WQTe0IBbRlkcL43aeWN9lsD0FRvU+P2FqC3vn 2kdMMbaSjOT0ppYxB8k5FwbhptECPsT9d6vioqD4wpqw+zYOiMzOawEZjBhAMStK Gjr2HHru28a/Eysb6o4UNrPIeDPqhgnS5644kcG4Qgfo7sqsnZ6VY34bkgPtWYPl Dn/GIYsR+KXF7eH2/QztJA+wCOSVONrjUGZfAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUC3rraOFQOzyr2t/liETQ7LXyT/swHwYDVR0jBBgwFoAUyxZwfq8L39Eyav2b 3sav+m5jupgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5 NS95eFp3ZnE4TDM5RXlhdjJiM3Nhdi1tNWp1cGcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3l4WndmcThMMzlFeWF2MmIzc2F2LW01anVwZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTUvQzNycmFPRlFPenly MnRfbGlFVFE3TFh5VF9zLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBMou4DANBgkqhkiG9w0BAQsFAAOCAQEAMKDfjq8QrlgSUGwB90UqudozYKp/ UlzVKYJD6i1+GMs5NepQ/P23zdYIUHoKadk1wU8aSAAJ+W/ddY+dwMuKLFy2uX7p j3GnPUh6HT+H3waauTFGE3LcAtG5rKYn2jaVHMeHvQiFL5K7It8DchjXcZHGLDYO sQ2sdZ3JsABD3cVFptl9JTexf1qnkxFkP7JuH1bPTajFwk04HXKhmTXzDHiT9enu q3cHSvGioT7QRmncU/m+DSMyDxlsebQi+hZN0TlAmXKtJYzcEBPjgxUw6d2ebA/N SfmhyWpWTSvnU4MBNzXd1hF18uyZXN5H2av6bhX6wHKkhBnkUQ+0JDQIJQ== -----END CERTIFICATE-----Generated at Mon Aug 11 07:37:14 2025 by rpki-client