$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3379/9N6_ftlW6fP9pko_0Sy4IJR5D-M.roa File: 9N6_ftlW6fP9pko_0Sy4IJR5D-M.roa (raw, json) Hash identifier: HDm3k5h1sfqyLnQmNMvNHosv+I3s5AORyNkXQmJTU78= Subject key identifier: F4:DE:BF:7E:D9:56:E9:F3:FD:A6:4A:3F:D1:2C:B8:20:94:79:0F:E3 Certificate issuer: /CN=2CB237ABE1A66A755DA9545795F1DD229F0E0311 Certificate serial: 025E Authority key identifier: 2C:B2:37:AB:E1:A6:6A:75:5D:A9:54:57:95:F1:DD:22:9F:0E:03:11 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LLI3q-GmanVdqVRXlfHdIp8OAxE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/9N6_ftlW6fP9pko_0Sy4IJR5D-M.roa Signing time: Fri 24 Oct 2025 05:37:02 +0000 ROA not before: Fri 24 Oct 2025 05:37:02 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 14618 IP address blocks: 165.101.71.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/LLI3q-GmanVdqVRXlfHdIp8OAxE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/LLI3q-GmanVdqVRXlfHdIp8OAxE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LLI3q-GmanVdqVRXlfHdIp8OAxE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 08:44:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 606 (0x25e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CB237ABE1A66A755DA9545795F1DD229F0E0311 Validity Not Before: Oct 24 05:37:02 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=F4DEBF7ED956E9F3FDA64A3FD12CB82094790FE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a8:eb:9c:10:51:83:c2:00:ce:b5:ec:d0:8d: 9b:a7:7f:ca:d1:aa:e9:8f:d7:e0:b9:37:19:1c:27: 66:e7:42:15:b1:fb:f5:55:b6:5d:33:5a:51:06:ca: e2:11:81:16:9d:87:ee:f0:cb:22:18:20:e9:ac:1b: 63:60:17:ce:d9:3a:78:f1:83:47:b7:87:41:07:6d: d9:aa:b7:a3:2e:2a:04:7d:e9:af:04:b3:23:f7:e2: d0:cf:ff:29:51:99:39:3f:f0:65:65:64:cc:a0:e4: 56:59:a8:3a:80:5a:56:7b:eb:f8:72:f8:08:2a:23: 6f:ab:b0:f2:ad:a5:9f:85:38:0d:57:90:b2:a0:a5: 63:fb:0d:44:e5:8c:00:65:c8:11:f6:46:4a:48:c2: ac:b4:0a:32:96:c2:b3:ad:36:ec:b9:84:e9:68:df: bc:1c:3c:3c:65:e1:4c:28:31:3c:79:cf:ed:a9:2e: e5:2e:10:db:ea:0d:59:b9:1f:94:c5:92:e9:2d:7d: 64:94:c9:59:22:c8:68:9b:32:e4:74:4f:a9:d8:1e: a0:40:27:a4:7a:7b:43:bb:c6:26:fb:b9:78:7f:45: 5d:20:0d:08:8f:b9:69:25:3e:79:bb:d3:1f:ba:6f: 6d:2b:d4:c5:bf:7a:ad:e6:c7:dd:61:e8:b1:71:e1: 55:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:DE:BF:7E:D9:56:E9:F3:FD:A6:4A:3F:D1:2C:B8:20:94:79:0F:E3 X509v3 Authority Key Identifier: keyid:2C:B2:37:AB:E1:A6:6A:75:5D:A9:54:57:95:F1:DD:22:9F:0E:03:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/LLI3q-GmanVdqVRXlfHdIp8OAxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LLI3q-GmanVdqVRXlfHdIp8OAxE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/9N6_ftlW6fP9pko_0Sy4IJR5D-M.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 165.101.71.0/24 Signature Algorithm: sha256WithRSAEncryption ac:b4:80:a4:c2:4a:6d:04:d6:15:c8:d5:5e:36:0d:54:8a:71: 76:db:6c:d4:74:cb:49:e6:43:76:72:31:17:0a:84:fb:8c:90: 63:8b:1c:15:e1:0c:39:89:2c:ee:6d:b8:80:a1:33:a6:55:57: f8:0a:04:dc:03:f2:64:92:c3:27:f7:de:33:1b:2f:20:b6:e1: bf:e5:55:23:69:24:53:8c:8b:2e:f5:90:c0:1c:5e:6e:cf:34: 25:81:62:af:06:b8:3c:41:55:3b:3a:78:db:43:3d:04:cf:eb: c3:32:a6:68:98:8c:62:8b:fb:42:11:9b:f1:57:a8:bf:77:c8: d1:49:99:48:53:f4:f4:27:0c:8b:ee:c3:ca:c9:b3:e6:cb:14: 32:3b:a5:2f:db:6a:14:fc:e1:cd:5b:0c:bb:d2:6b:88:e6:52: 61:31:6f:22:d9:c5:ff:f6:4a:2c:e9:e5:c6:82:6e:e8:94:2b: 2a:2f:75:9c:a5:0d:66:f3:d8:af:1c:50:93:9d:0e:3a:27:ea: 6e:34:69:54:7b:c6:7a:e6:a9:5d:c7:b1:97:a3:9f:67:75:51: 38:cd:f2:c4:94:aa:ce:67:33:4d:8d:53:e7:b2:bb:60:b8:ad: f4:75:f4:4b:96:1e:b9:c7:b5:c7:b1:cf:0f:9d:db:50:fb:6b: 15:9e:15:46 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICAl4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkNC MjM3QUJFMUE2NkE3NTVEQTk1NDU3OTVGMUREMjI5RjBFMDMxMTAeFw0yNTEwMjQw NTM3MDJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEY0REVCRjdFRDk1NkU5 RjNGREE2NEEzRkQxMkNCODIwOTQ3OTBGRTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUqOucEFGDwgDOtezQjZunf8rRqumP1+C5NxkcJ2bnQhWx+/VV tl0zWlEGyuIRgRadh+7wyyIYIOmsG2NgF87ZOnjxg0e3h0EHbdmqt6MuKgR96a8E syP34tDP/ylRmTk/8GVlZMyg5FZZqDqAWlZ76/hy+AgqI2+rsPKtpZ+FOA1XkLKg pWP7DUTljABlyBH2RkpIwqy0CjKWwrOtNuy5hOlo37wcPDxl4UwoMTx5z+2pLuUu ENvqDVm5H5TFkuktfWSUyVkiyGibMuR0T6nYHqBAJ6R6e0O7xib7uXh/RV0gDQiP uWklPnm70x+6b20r1MW/eq3mx91h6LFx4VWTAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU9N6/ftlW6fP9pko/0Sy4IJR5D+MwHwYDVR0jBBgwFoAULLI3q+GmanVdqVRX lfHdIp8OAxEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM3 OS9MTEkzcS1HbWFuVmRxVlJYbGZIZElwOE9BeEUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0xMSTNxLUdtYW5WZHFWUlhsZkhkSXA4T0F4RS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNzkvOU42X2Z0bFc2ZlA5 cGtvXzBTeTRJSlI1RC1NLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAKVlRzANBgkqhkiG9w0BAQsFAAOCAQEArLSApMJKbQTWFcjVXjYNVIpxdtts 1HTLSeZDdnIxFwqE+4yQY4scFeEMOYks7m24gKEzplVX+AoE3APyZJLDJ/feMxsv ILbhv+VVI2kkU4yLLvWQwBxebs80JYFirwa4PEFVOzp420M9BM/rwzKmaJiMYov7 QhGb8Veov3fI0UmZSFP09CcMi+7Dysmz5ssUMjulL9tqFPzhzVsMu9JriOZSYTFv ItnF//ZKLOnlxoJu6JQrKi91nKUNZvPYrxxQk50OOifqbjRpVHvGeuapXcexl6Of Z3VROM3yxJSqzmczTY1T57K7YLit9HX0S5Yeuce1x7HPD53bUPtrFZ4VRg== -----END CERTIFICATE-----Generated at Wed Nov 5 05:37:35 2025 by rpki-client