$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3309/N5T1V9JEe2hoUQkG3hJuNiSuYn8.roa File: N5T1V9JEe2hoUQkG3hJuNiSuYn8.roa (raw, json) Hash identifier: vzjXOq9gWNducRtzdYPGbix/Jawvkq34+JnAREKG1mY= Subject key identifier: 37:94:F5:57:D2:44:7B:68:68:51:09:06:DE:12:6E:36:24:AE:62:7F Certificate issuer: /CN=6699972716222138A45A39EB0BFAA814968340AE Certificate serial: 0739 Authority key identifier: 66:99:97:27:16:22:21:38:A4:5A:39:EB:0B:FA:A8:14:96:83:40:AE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZpmXJxYiITikWjnrC_qoFJaDQK4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3309/N5T1V9JEe2hoUQkG3hJuNiSuYn8.roa Signing time: Wed 27 Aug 2025 07:01:38 +0000 ROA not before: Wed 27 Aug 2025 07:01:38 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 151277 IP address blocks: 2401:bda0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZpmXJxYiITikWjnrC_qoFJaDQK4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 23:43:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1849 (0x739) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6699972716222138A45A39EB0BFAA814968340AE Validity Not Before: Aug 27 07:01:38 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=3794F557D2447B6868510906DE126E3624AE627F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e8:39:b4:e2:d0:59:55:93:df:6d:b0:7f:5e: ae:77:fb:78:15:af:74:b4:54:26:ef:e0:25:1d:77: b8:e0:03:ae:7e:0f:38:72:45:2a:95:08:33:67:9b: 99:20:d5:28:da:9f:1a:58:45:35:8a:aa:c2:65:21: 34:55:41:e0:80:0f:ca:e2:9c:82:93:b0:5b:4b:e7: f9:b2:1d:96:97:0e:66:cd:ac:ab:ef:5d:28:21:c7: 31:4d:9b:7b:59:97:d2:34:13:93:c0:ab:bc:4b:93: d3:b8:a7:26:5b:49:e4:2c:7c:d6:68:75:01:51:d2: 4b:c5:bf:d7:f8:f6:e2:49:2d:98:55:9f:c0:ca:de: 0b:98:29:3e:77:63:f9:3b:9f:42:78:8f:83:a8:64: 1b:2e:ac:b0:38:0c:a6:7c:c4:44:1b:31:0b:66:6b: ee:7b:17:ac:64:27:06:4b:ca:b3:66:e4:fe:1e:48: 8f:76:b4:e5:42:c8:54:20:a2:93:9e:fc:21:a4:ae: 02:86:37:17:42:28:a9:b3:27:2b:07:20:b0:0b:5b: e0:ca:ba:36:4e:2e:8e:9b:70:4d:72:3f:33:eb:87: f6:04:83:a8:19:d9:73:db:de:87:f5:aa:84:dc:09: a7:ba:22:61:dd:40:ea:c1:7f:4f:9c:04:70:46:27: 26:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:94:F5:57:D2:44:7B:68:68:51:09:06:DE:12:6E:36:24:AE:62:7F X509v3 Authority Key Identifier: keyid:66:99:97:27:16:22:21:38:A4:5A:39:EB:0B:FA:A8:14:96:83:40:AE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZpmXJxYiITikWjnrC_qoFJaDQK4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3309/N5T1V9JEe2hoUQkG3hJuNiSuYn8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:bda0::/32 Signature Algorithm: sha256WithRSAEncryption 69:bd:14:44:f4:ee:c3:ea:2b:0c:01:2e:8a:7c:db:a4:a4:59: af:d4:9a:b0:38:4c:60:47:95:0b:67:b9:ae:43:33:7b:63:13: 39:99:45:20:ee:44:d6:25:fb:84:e1:02:8c:a2:6e:95:1a:f7: 12:a0:ad:d7:2b:d2:1f:7a:42:eb:36:b3:ca:6f:0e:b6:5e:31: 03:1a:73:67:42:c3:5a:70:38:9f:31:09:cf:37:f4:9f:16:83: 02:f2:f7:62:1a:a0:e3:d0:90:c9:a9:08:ce:b4:9d:3d:0d:0b: f5:e9:0a:75:df:15:97:49:ed:c5:b0:e3:7e:b6:26:22:a3:91: e2:93:1c:bc:04:7e:dd:c0:e9:c1:e8:b8:59:ef:da:9a:90:89: d4:1d:5f:06:67:ed:28:f5:24:ef:2e:e4:f4:e1:67:93:74:4b: 5a:af:85:06:3c:0b:9f:03:07:c0:08:ef:39:9b:1b:69:b6:c9: ea:24:8e:a8:78:13:02:e0:57:75:84:2e:23:a3:2c:45:74:3b: b4:20:f8:18:5a:ff:02:65:36:1f:f7:1e:b4:52:91:15:5d:01: 64:24:9c:6d:6b:be:45:03:2e:7d:14:38:83:59:c6:eb:b6:e9: ef:09:64:7d:e6:5d:d6:48:86:fa:7d:cc:14:11:44:7f:29:ee: d4:dd:77:1b -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICBzkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjY5 OTk3MjcxNjIyMjEzOEE0NUEzOUVCMEJGQUE4MTQ5NjgzNDBBRTAeFw0yNTA4Mjcw NzAxMzhaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDM3OTRGNTU3RDI0NDdC Njg2ODUxMDkwNkRFMTI2RTM2MjRBRTYyN0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDI6Dm04tBZVZPfbbB/Xq53+3gVr3S0VCbv4CUdd7jgA65+Dzhy RSqVCDNnm5kg1SjanxpYRTWKqsJlITRVQeCAD8rinIKTsFtL5/myHZaXDmbNrKvv XSghxzFNm3tZl9I0E5PAq7xLk9O4pyZbSeQsfNZodQFR0kvFv9f49uJJLZhVn8DK 3guYKT53Y/k7n0J4j4OoZBsurLA4DKZ8xEQbMQtma+57F6xkJwZLyrNm5P4eSI92 tOVCyFQgopOe/CGkrgKGNxdCKKmzJysHILALW+DKujZOLo6bcE1yPzPrh/YEg6gZ 2XPb3of1qoTcCae6ImHdQOrBf0+cBHBGJybvAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUN5T1V9JEe2hoUQkG3hJuNiSuYn8wHwYDVR0jBBgwFoAUZpmXJxYiITikWjnr C/qoFJaDQK4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMw OS9acG1YSnhZaUlUaWtXam5yQ19xb0ZKYURRSzQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1pwbVhKeFlpSVRpa1dqbnJDX3FvRkphRFFLNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMDkvTjVUMVY5SkVlMmhv VVFrRzNoSnVOaVN1WW44LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQBvaAwDQYJKoZIhvcNAQELBQADggEBAGm9FET07sPqKwwBLop826SkWa/U mrA4TGBHlQtnua5DM3tjEzmZRSDuRNYl+4ThAoyibpUa9xKgrdcr0h96Qus2s8pv DrZeMQMac2dCw1pwOJ8xCc839J8WgwLy92IaoOPQkMmpCM60nT0NC/XpCnXfFZdJ 7cWw4362JiKjkeKTHLwEft3A6cHouFnv2pqQidQdXwZn7Sj1JO8u5PThZ5N0S1qv hQY8C58DB8AI7zmbG2m2yeokjqh4EwLgV3WELiOjLEV0O7Qg+Bha/wJlNh/3HrRS kRVdAWQknG1rvkUDLn0UOINZxuu26e8JZH3mXdZIhvp9zBQRRH8p7tTddxs= -----END CERTIFICATE-----Generated at Wed Nov 5 21:24:02 2025 by rpki-client