$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/399/tPYxTqS-GcLLoILoTuk3kWzd_Nc.roa File: tPYxTqS-GcLLoILoTuk3kWzd_Nc.roa (raw, json) Hash identifier: ZmtyINcvvpD9HByrAKW/1iOK2POP7KN/fiFNjbfmL/U= Subject key identifier: B4:F6:31:4E:A4:BE:19:C2:CB:A0:82:E8:4E:E9:37:91:6C:DD:FC:D7 Certificate issuer: /CN=51C4C1D52D2E3FE6BF3D9BF1B3D6924B49C5D4E5 Certificate serial: 4F74 Authority key identifier: 51:C4:C1:D5:2D:2E:3F:E6:BF:3D:9B:F1:B3:D6:92:4B:49:C5:D4:E5 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UcTB1S0uP-a_PZvxs9aSS0nF1OU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/399/tPYxTqS-GcLLoILoTuk3kWzd_Nc.roa Signing time: Mon 26 Jan 2026 06:54:53 +0000 ROA not before: Mon 26 Jan 2026 06:54:53 +0000 ROA not after: Sat 09 Jan 2027 08:23:18 +0000 asID: 132203 IP address blocks: 203.205.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/399/UcTB1S0uP-a_PZvxs9aSS0nF1OU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/399/UcTB1S0uP-a_PZvxs9aSS0nF1OU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UcTB1S0uP-a_PZvxs9aSS0nF1OU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 20:59:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20340 (0x4f74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51C4C1D52D2E3FE6BF3D9BF1B3D6924B49C5D4E5 Validity Not Before: Jan 26 06:54:53 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=B4F6314EA4BE19C2CBA082E84EE937916CDDFCD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c9:c6:00:60:77:dc:65:b1:ae:d3:e0:2a:66: 9d:44:07:c2:af:1f:25:41:4a:04:e6:e4:ab:54:dd: 3b:12:f5:48:1b:de:d2:ec:83:86:7f:32:1e:bb:d3: de:7c:f7:4e:90:79:0d:d6:3d:24:1f:92:f3:2a:d1: 28:85:08:44:a3:86:c0:56:2d:cd:b1:84:27:c2:08: 3a:ba:90:02:d7:64:ef:f2:ee:ce:60:cd:a7:e0:0c: ef:27:7f:ca:41:b6:42:4c:ff:bd:48:59:07:c7:e7: 58:9b:a2:50:1d:20:02:22:b3:9b:8d:2f:e8:4a:6b: a7:ec:4e:8e:a7:b0:33:6c:6e:b3:97:9b:d7:ff:2d: cd:e1:3c:dd:6a:69:df:0e:b2:4e:42:13:5a:f4:10: 30:66:d5:76:6c:fb:1d:d2:dc:82:5a:12:0d:0d:b3: 35:c3:12:d7:ef:73:f0:98:a7:f6:5b:f1:2e:e3:19: b1:2e:98:7d:80:e7:16:51:3f:29:ed:95:9a:cb:18: 22:6a:fc:af:b6:9a:bb:d2:81:ed:df:52:0f:c3:09: 58:ab:b8:7d:26:77:97:b2:64:eb:16:88:e7:2e:5f: ca:5f:86:04:8b:ea:33:dd:dc:61:de:fc:fb:ef:60: d4:f2:39:06:e3:7b:4c:e1:64:79:f4:64:ab:a0:44: b0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:F6:31:4E:A4:BE:19:C2:CB:A0:82:E8:4E:E9:37:91:6C:DD:FC:D7 X509v3 Authority Key Identifier: keyid:51:C4:C1:D5:2D:2E:3F:E6:BF:3D:9B:F1:B3:D6:92:4B:49:C5:D4:E5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/399/UcTB1S0uP-a_PZvxs9aSS0nF1OU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UcTB1S0uP-a_PZvxs9aSS0nF1OU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/399/tPYxTqS-GcLLoILoTuk3kWzd_Nc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.205.155.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:78:ba:58:2e:ca:3a:b4:03:25:b7:2f:88:3e:ba:3b:9b:73: b0:4b:4d:66:1f:fa:53:7c:06:e0:6a:38:c5:e6:db:34:bc:11: df:fe:12:78:71:61:22:de:07:a9:04:8d:09:fe:86:9a:a8:14: b8:15:e6:2f:15:6f:06:d8:9e:3f:ad:5d:0d:f5:e7:db:b2:38: 9a:d6:a6:1d:e2:7c:89:bc:f9:b9:4f:53:52:41:8d:3f:ff:7d: 48:43:06:c5:20:f6:63:92:66:2d:da:25:d1:a0:0a:c6:47:bf: 74:54:16:ce:e4:99:c4:c4:c5:45:b3:2d:df:51:fb:cb:bf:8b: 8b:a6:97:1c:58:db:20:86:6b:a6:68:29:4f:cd:e2:9f:04:23: ed:61:a6:56:8b:a8:98:e3:32:73:2e:cd:37:b0:bb:c6:0b:c3: 8e:b4:4a:4e:16:dc:d2:32:f2:85:2d:f1:10:9e:46:d3:2a:e7: 99:04:11:60:fc:d0:3a:89:54:d0:98:b9:3c:29:b9:2f:e6:6c: 89:d2:f9:8e:d5:b9:d6:e6:89:28:1b:2f:0e:7a:6f:8c:13:0b: 6d:58:c8:25:db:18:4a:14:98:70:05:33:80:32:d3:45:5d:50: 1a:9f:26:53:bc:f8:a2:cf:fd:7d:fe:bd:13:bc:68:42:f8:76: 69:44:bc:94 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICT3QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTFD NEMxRDUyRDJFM0ZFNkJGM0Q5QkYxQjNENjkyNEI0OUM1RDRFNTAeFw0yNjAxMjYw NjU0NTNaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEI0RjYzMTRFQTRCRTE5 QzJDQkEwODJFODRFRTkzNzkxNkNEREZDRDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHycYAYHfcZbGu0+AqZp1EB8KvHyVBSgTm5KtU3TsS9Ugb3tLs g4Z/Mh670958906QeQ3WPSQfkvMq0SiFCESjhsBWLc2xhCfCCDq6kALXZO/y7s5g zafgDO8nf8pBtkJM/71IWQfH51ibolAdIAIis5uNL+hKa6fsTo6nsDNsbrOXm9f/ Lc3hPN1qad8Osk5CE1r0EDBm1XZs+x3S3IJaEg0NszXDEtfvc/CYp/Zb8S7jGbEu mH2A5xZRPyntlZrLGCJq/K+2mrvSge3fUg/DCViruH0md5eyZOsWiOcuX8pfhgSL 6jPd3GHe/PvvYNTyOQbje0zhZHn0ZKugRLATAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUtPYxTqS+GcLLoILoTuk3kWzd/NcwHwYDVR0jBBgwFoAUUcTB1S0uP+a/PZvx s9aSS0nF1OUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzk5 L1VjVEIxUzB1UC1hX1BadnhzOWFTUzBuRjFPVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvVWNUQjFTMHVQLWFfUFp2eHM5YVNTMG5GMU9VLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzk5L3RQWXhUcVMtR2NMTG9J TG9UdWsza1d6ZF9OYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADLzZswDQYJKoZIhvcNAQELBQADggEBAG94ulguyjq0AyW3L4g+ujubc7BLTWYf +lN8BuBqOMXm2zS8Ed/+EnhxYSLeB6kEjQn+hpqoFLgV5i8VbwbYnj+tXQ3159uy OJrWph3ifIm8+blPU1JBjT//fUhDBsUg9mOSZi3aJdGgCsZHv3RUFs7kmcTExUWz Ld9R+8u/i4umlxxY2yCGa6ZoKU/N4p8EI+1hplaLqJjjMnMuzTewu8YLw460Sk4W 3NIy8oUt8RCeRtMq55kEEWD80DqJVNCYuTwpuS/mbInS+Y7VudbmiSgbLw56b4wT C21YyCXbGEoUmHAFM4Ay00VdUBqfJlO8+KLP/X3+vRO8aEL4dmlEvJQ= -----END CERTIFICATE-----Generated at Mon Mar 2 20:05:20 2026 by rpki-client