$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/A-A3Fe8GsD2b9fWHz5VWAppyr68.roa File: A-A3Fe8GsD2b9fWHz5VWAppyr68.roa (raw, json) Hash identifier: OIrsnm3Rw6KVkkTmg09v3rbq3Gu4zHZzpWlc7b94RmQ= Subject key identifier: 03:E0:37:15:EF:06:B0:3D:9B:F5:F5:87:CF:95:56:02:9A:72:AF:AF Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA Certificate serial: 0A6E Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/A-A3Fe8GsD2b9fWHz5VWAppyr68.roa Signing time: Sat 13 Sep 2025 03:03:19 +0000 ROA not before: Sat 13 Sep 2025 03:03:19 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 7641 IP address blocks: 211.146.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 04:43:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2670 (0xa6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA Validity Not Before: Sep 13 03:03:19 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=03E03715EF06B03D9BF5F587CF9556029A72AFAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f2:b6:2c:fd:90:4e:b7:c7:65:7c:11:74:d1: 27:5e:f9:63:d2:6e:5c:d8:48:9a:6a:48:f6:81:72: c2:f7:a2:9b:58:38:d4:af:51:7d:a5:b6:34:d2:80: fb:50:fe:df:fc:71:8e:12:b1:3e:98:22:e0:5f:7c: 38:51:96:3f:50:4f:33:b0:1c:29:a1:fa:7c:7d:77: e3:0f:c1:9f:f2:95:ec:f0:a4:66:d4:92:a3:c0:60: 1f:71:ef:4b:a7:f8:b8:d5:10:e0:e1:4e:72:63:87: fc:ef:90:c4:c5:45:da:eb:51:eb:8c:f9:84:aa:00: ed:ab:c3:5b:d5:a9:eb:84:76:f0:f1:a4:ee:20:e2: df:50:f8:3b:9b:b5:36:9a:c1:57:90:bf:b0:f0:cd: d1:77:ba:76:7e:e0:de:29:14:c8:0e:fb:f8:19:31: 09:a2:aa:ca:82:9b:46:78:5c:12:62:93:e7:91:34: e3:5d:90:83:09:12:cd:ea:03:2a:d7:db:3c:67:81: c2:4c:df:fb:52:2d:af:b6:6b:b0:72:2a:cb:70:16: 6e:b3:7c:8d:c9:92:98:d5:f5:ff:6c:d6:75:2b:24: ff:5c:64:89:1e:42:ca:98:dc:43:3f:49:7c:0e:22: 90:85:1e:8f:6c:01:28:c7:7d:c8:d8:2e:1e:cf:87: 44:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E0:37:15:EF:06:B0:3D:9B:F5:F5:87:CF:95:56:02:9A:72:AF:AF X509v3 Authority Key Identifier: keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/A-A3Fe8GsD2b9fWHz5VWAppyr68.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.146.20.0/22 Signature Algorithm: sha256WithRSAEncryption 62:79:58:2f:1b:33:4a:bf:d1:90:d9:d4:4e:49:46:cc:af:08: 18:7a:b3:83:88:2d:e5:f6:82:b0:4c:63:d8:29:e3:28:2b:3e: ce:4c:41:6a:da:89:6f:11:1d:87:f8:47:4f:8a:06:f1:66:f4: 0f:7e:d6:06:f1:b4:7f:10:8f:91:11:64:be:c4:5e:ab:22:3f: e8:0b:20:ea:a3:03:e3:8d:af:87:1f:35:aa:53:f9:6c:1b:a3: 92:12:45:33:ed:5f:05:4d:73:87:a2:a3:74:69:0a:de:52:41: 36:06:ac:6a:30:45:20:3f:ad:ac:7a:45:79:35:3b:63:56:63: ea:74:11:e5:1a:59:6e:ad:64:7a:20:30:41:41:6e:00:10:cd: d8:38:1e:1a:7b:be:f8:74:2f:74:ea:f4:52:ad:3b:81:17:a0: b8:84:9f:4a:bf:fd:8a:e0:bd:e4:ea:76:ad:e0:e7:7e:89:ea: b8:92:b2:96:fb:ac:0a:7a:84:1c:a5:b1:3a:e0:b6:20:fb:04: 48:4a:a0:2f:84:ef:4b:f3:d5:fd:bf:77:36:2d:a0:b2:75:94: 95:60:e7:c2:26:ba:73:ad:42:f3:8b:b7:76:d1:52:50:79:e7: f8:86:b2:d9:9d:69:ab:f5:f4:ea:6d:26:04:2d:15:be:0b:c4: e3:ca:ee:2e -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICCm4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkMw MzE0REZERUQ0MUFCNjExRDk5RjU0MjA2Mzk4MkZFMzgwODBCQTAeFw0yNTA5MTMw MzAzMTlaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDAzRTAzNzE1RUYwNkIw M0Q5QkY1RjU4N0NGOTU1NjAyOUE3MkFGQUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDW8rYs/ZBOt8dlfBF00Sde+WPSblzYSJpqSPaBcsL3optYONSv UX2ltjTSgPtQ/t/8cY4SsT6YIuBffDhRlj9QTzOwHCmh+nx9d+MPwZ/ylezwpGbU kqPAYB9x70un+LjVEODhTnJjh/zvkMTFRdrrUeuM+YSqAO2rw1vVqeuEdvDxpO4g 4t9Q+DubtTaawVeQv7DwzdF3unZ+4N4pFMgO+/gZMQmiqsqCm0Z4XBJik+eRNONd kIMJEs3qAyrX2zxngcJM3/tSLa+2a7ByKstwFm6zfI3JkpjV9f9s1nUrJP9cZIke QsqY3EM/SXwOIpCFHo9sASjHfcjYLh7Ph0QrAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUA+A3Fe8GsD2b9fWHz5VWAppyr68wHwYDVR0jBBgwFoAULAMU397UGrYR2Z9U IGOYL+OAgLowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMv TEFNVTM5N1VHcllSMlo5VUlHT1lMLU9BZ0xvLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MQU1VMzk3VUdyWVIyWjlVSUdPWUwtT0FnTG8uY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMy9BLUEzRmU4R3NEMmI5ZldI ejVWV0FwcHlyNjgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC 05IUMA0GCSqGSIb3DQEBCwUAA4IBAQBieVgvGzNKv9GQ2dROSUbMrwgYerODiC3l 9oKwTGPYKeMoKz7OTEFq2olvER2H+EdPigbxZvQPftYG8bR/EI+REWS+xF6rIj/o CyDqowPjja+HHzWqU/lsG6OSEkUz7V8FTXOHoqN0aQreUkE2BqxqMEUgP62sekV5 NTtjVmPqdBHlGllurWR6IDBBQW4AEM3YOB4ae774dC906vRSrTuBF6C4hJ9Kv/2K 4L3k6nat4Od+ieq4krKW+6wKeoQcpbE64LYg+wRISqAvhO9L89X9v3c2LaCydZSV YOfCJrpzrULzi7d20VJQeef4hrLZnWmr9fTqbSYELRW+C8Tjyu4u -----END CERTIFICATE-----Generated at Thu Nov 6 02:51:55 2025 by rpki-client