$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3188/AGriyG3XsaomyXY3wqP5qpGbufk.roa File: AGriyG3XsaomyXY3wqP5qpGbufk.roa (raw, json) Hash identifier: 43km3iEPjFQcdhRCmSjkh6AivcIkq02LE0ll+nx4s3g= Subject key identifier: 00:6A:E2:C8:6D:D7:B1:AA:26:C9:76:37:C2:A3:F9:AA:91:9B:B9:F9 Certificate issuer: /CN=D25F2B1DF845175D8993314AB3EF153AEB215103 Certificate serial: 23 Authority key identifier: D2:5F:2B:1D:F8:45:17:5D:89:93:31:4A:B3:EF:15:3A:EB:21:51:03 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0l8rHfhFF12JkzFKs-8VOushUQM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3188/AGriyG3XsaomyXY3wqP5qpGbufk.roa Signing time: Thu 23 Oct 2025 08:44:04 +0000 ROA not before: Thu 23 Oct 2025 08:44:04 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 151303 IP address blocks: 240b:a000:fc3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3188/0l8rHfhFF12JkzFKs-8VOushUQM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3188/0l8rHfhFF12JkzFKs-8VOushUQM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0l8rHfhFF12JkzFKs-8VOushUQM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 17:41:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D25F2B1DF845175D8993314AB3EF153AEB215103 Validity Not Before: Oct 23 08:44:04 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=006AE2C86DD7B1AA26C97637C2A3F9AA919BB9F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b2:ec:72:e7:d1:63:22:f5:52:6d:c0:41:d2: 3f:b2:56:6d:22:a7:64:2a:18:0e:b0:49:a7:71:e3: b2:bc:41:02:1d:3d:44:4f:db:19:38:7c:b4:13:33: 11:9b:99:ad:7c:16:3e:c4:67:5a:67:a5:6a:82:07: ad:55:da:53:fc:da:72:10:ce:71:e1:c4:0e:13:8e: 25:5c:e9:c1:30:4d:ed:40:ff:a1:63:e1:e3:25:4c: 14:33:05:9c:6b:ab:86:e9:33:ef:27:c4:66:67:62: 0b:bd:ba:9f:63:4d:08:0b:00:41:d0:de:fb:38:85: ac:98:99:b1:a2:d3:07:a5:58:5a:ef:d3:da:7b:61: e9:cc:c0:0f:6d:23:93:3b:de:16:fd:c4:b4:c0:00: 43:b2:28:6f:e6:66:1f:16:75:b5:d4:04:95:95:84: 07:e1:c3:94:e0:40:f8:e9:79:f1:0b:e7:a1:a4:c6: 54:0a:98:49:88:79:ba:fb:1e:44:fa:75:0c:43:f9: d0:10:73:ed:cb:2e:aa:20:25:77:c9:4d:69:91:a3: 83:d3:54:d1:41:47:3e:c2:f1:05:ff:2e:af:c7:8f: 47:85:2c:b9:5e:66:a0:f0:13:7e:87:47:89:ba:a1: 3e:5f:14:9c:b5:0c:5e:00:17:a5:65:83:df:36:ff: 71:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:6A:E2:C8:6D:D7:B1:AA:26:C9:76:37:C2:A3:F9:AA:91:9B:B9:F9 X509v3 Authority Key Identifier: keyid:D2:5F:2B:1D:F8:45:17:5D:89:93:31:4A:B3:EF:15:3A:EB:21:51:03 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3188/0l8rHfhFF12JkzFKs-8VOushUQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0l8rHfhFF12JkzFKs-8VOushUQM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3188/AGriyG3XsaomyXY3wqP5qpGbufk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 240b:a000:fc3::/48 Signature Algorithm: sha256WithRSAEncryption 52:d2:23:87:45:ce:b6:c6:08:e9:e2:a7:1c:d3:b9:c6:07:36: f3:0d:5b:a8:c4:fd:39:26:ed:74:a5:ae:20:1e:db:42:d0:0e: 37:d0:87:4f:9a:97:d3:bd:db:59:dc:9b:69:48:9b:df:5c:4f: d1:95:3e:ad:cf:e3:6e:74:42:e9:df:8e:f6:e9:37:b1:f5:00: 70:88:17:70:55:0b:da:60:ab:d1:0b:d7:a4:d1:8b:0a:6f:05: 51:15:a8:79:11:c5:13:35:bf:9d:4c:40:fb:71:9c:28:83:9b: ab:7a:97:01:77:87:c4:58:51:c0:f5:a7:be:79:c4:0f:41:d7: 14:e1:23:94:43:8f:a2:cb:7d:5c:f9:9f:17:fe:f2:28:6d:28: 1d:01:4a:3a:e2:32:5d:2f:46:f4:40:b1:4a:80:21:fb:75:d5: 96:3d:fa:92:e2:47:2e:32:49:e3:e0:8d:3a:39:13:27:45:b6: 6a:48:bb:6d:a2:38:8f:91:6b:c9:88:e2:33:cc:da:d1:c0:9b: 76:3b:52:23:e5:01:98:eb:35:64:58:f2:34:ca:5a:1a:7a:db: ef:1e:f3:8b:66:a3:10:de:43:0d:40:e4:00:f4:f0:64:8c:b7: ff:70:ff:2b:e8:22:d3:2f:d6:f2:3f:cf:d0:b2:4b:21:3d:b9: 71:34:30:80 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIBIzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMjVG MkIxREY4NDUxNzVEODk5MzMxNEFCM0VGMTUzQUVCMjE1MTAzMB4XDTI1MTAyMzA4 NDQwNFoXDTI2MTAyMzAzMDEwM1owMzExMC8GA1UEAxMoMDA2QUUyQzg2REQ3QjFB QTI2Qzk3NjM3QzJBM0Y5QUE5MTlCQjlGOTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALqy7HLn0WMi9VJtwEHSP7JWbSKnZCoYDrBJp3HjsrxBAh09RE/b GTh8tBMzEZuZrXwWPsRnWmelaoIHrVXaU/zachDOceHEDhOOJVzpwTBN7UD/oWPh 4yVMFDMFnGurhukz7yfEZmdiC726n2NNCAsAQdDe+ziFrJiZsaLTB6VYWu/T2nth 6czAD20jkzveFv3EtMAAQ7Iob+ZmHxZ1tdQElZWEB+HDlOBA+Ol58QvnoaTGVAqY SYh5uvseRPp1DEP50BBz7csuqiAld8lNaZGjg9NU0UFHPsLxBf8ur8ePR4UsuV5m oPATfodHibqhPl8UnLUMXgAXpWWD3zb/cfMCAwEAAaOCAfYwggHyMB0GA1UdDgQW BBQAauLIbdexqibJdjfCo/mqkZu5+TAfBgNVHSMEGDAWgBTSXysd+EUXXYmTMUqz 7xU66yFRAzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMTg4 LzBsOHJIZmhGRjEySmt6RktzLThWT3VzaFVRTS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvMGw4ckhmaEZGMTJKa3pGS3MtOFZPdXNoVVFNLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE4OC9BR3JpeUczWHNhb215 WFkzd3FQNXFwR2J1Zmsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcAJAugAA/DMA0GCSqGSIb3DQEBCwUAA4IBAQBS0iOHRc62xgjp4qcc07nGBzbz DVuoxP05Ju10pa4gHttC0A430IdPmpfTvdtZ3JtpSJvfXE/RlT6tz+NudELp3472 6Tex9QBwiBdwVQvaYKvRC9ek0YsKbwVRFah5EcUTNb+dTED7cZwog5urepcBd4fE WFHA9ae+ecQPQdcU4SOUQ4+iy31c+Z8X/vIobSgdAUo64jJdL0b0QLFKgCH7ddWW PfqS4kcuMknj4I06ORMnRbZqSLttojiPkWvJiOIzzNrRwJt2O1Ij5QGY6zVkWPI0 yloaetvvHvOLZqMQ3kMNQOQA9PBkjLf/cP8r6CLTL9byP8/QskshPblxNDCA -----END CERTIFICATE-----Generated at Wed Nov 5 15:07:29 2025 by rpki-client