$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/40/OZPMOw5nM8ki69OrNr_Wm3LWAEY.roa File: OZPMOw5nM8ki69OrNr_Wm3LWAEY.roa (raw, json) Hash identifier: dO/cGCG0zEmArlGTSxK+o262zAi7lNagKc+xr1sGtpc= Subject key identifier: 39:93:CC:3B:0E:67:33:C9:22:EB:D3:AB:36:BF:D6:9B:72:D6:00:46 Certificate issuer: /CN=AECCCCB79DFE6C466CCADB39896710ECAC37B847 Certificate serial: 1CE7 Authority key identifier: AE:CC:CC:B7:9D:FE:6C:46:6C:CA:DB:39:89:67:10:EC:AC:37:B8:47 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rszMt53-bEZsyts5iWcQ7Kw3uEc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/OZPMOw5nM8ki69OrNr_Wm3LWAEY.roa Signing time: Sat 13 Sep 2025 03:09:43 +0000 ROA not before: Sat 13 Sep 2025 03:09:43 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 17429 IP address blocks: 43.247.236.0/22 maxlen: 24 103.238.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/rszMt53-bEZsyts5iWcQ7Kw3uEc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/rszMt53-bEZsyts5iWcQ7Kw3uEc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rszMt53-bEZsyts5iWcQ7Kw3uEc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 21:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7399 (0x1ce7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AECCCCB79DFE6C466CCADB39896710ECAC37B847 Validity Not Before: Sep 13 03:09:43 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=3993CC3B0E6733C922EBD3AB36BFD69B72D60046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:57:6a:b3:97:60:49:ff:23:b9:e0:18:1e:ba: 72:4a:82:61:8c:a3:ca:81:1d:67:fa:93:34:3f:6a: 20:4b:eb:12:a3:45:34:c4:2c:f7:3a:81:55:29:f9: c5:5b:b9:fd:70:69:d0:28:0b:f1:7a:2e:e5:7c:b1: 90:40:c6:28:8d:c9:14:2b:2f:38:d5:7b:62:02:2f: ac:52:ec:15:e4:67:c7:4e:a3:9d:fb:de:11:ba:6d: 8b:a9:01:d5:e4:ca:07:54:c5:d4:f1:08:4a:ad:af: 57:94:cf:8b:73:f4:ae:0e:94:6c:c6:43:c4:23:6e: 77:65:1a:bc:e4:b5:10:09:61:d1:3e:70:6d:7a:6c: 69:ec:14:53:d5:4f:b6:96:ec:93:ef:12:1c:f1:d8: c6:64:f3:28:a3:38:7b:ed:1e:3d:f6:ac:11:d1:72: 8c:7f:73:3a:c3:68:88:ab:9c:8a:b6:63:a5:dd:77: e0:22:fe:17:b1:e6:5c:8e:90:f9:f5:bb:37:3c:fc: e3:5d:b2:96:89:f8:78:90:5c:d8:48:a5:69:56:ba: fc:00:62:b6:4e:42:16:d9:d6:bf:22:d2:5c:7e:45: 1a:6b:bb:e5:0f:0d:45:5c:a2:b2:ee:f0:7d:77:6f: 00:ac:d3:e3:63:12:b4:8a:58:4f:33:fc:ba:53:f1: 00:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:93:CC:3B:0E:67:33:C9:22:EB:D3:AB:36:BF:D6:9B:72:D6:00:46 X509v3 Authority Key Identifier: keyid:AE:CC:CC:B7:9D:FE:6C:46:6C:CA:DB:39:89:67:10:EC:AC:37:B8:47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/rszMt53-bEZsyts5iWcQ7Kw3uEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rszMt53-bEZsyts5iWcQ7Kw3uEc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/OZPMOw5nM8ki69OrNr_Wm3LWAEY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.247.236.0/22 103.238.48.0/22 Signature Algorithm: sha256WithRSAEncryption 5a:ec:e1:94:af:c9:90:7a:67:ca:94:d7:47:32:8e:70:26:82: 64:37:67:5b:85:8e:0b:b2:bf:aa:68:31:5f:2c:ba:64:f6:11: 00:31:31:c2:fc:3b:f7:2d:96:f2:28:d5:21:ac:49:eb:33:98: 9b:2e:5a:67:66:b0:79:09:85:ef:02:a1:ef:de:6c:81:69:69: 37:8c:81:81:38:52:52:97:03:2f:b5:db:fe:69:8a:1a:ea:58: 6c:d5:bc:82:3e:67:60:91:79:3a:73:37:b6:79:05:9f:b4:b2: 5c:8f:39:25:0d:b6:41:78:10:0f:7b:9b:e1:f6:8a:89:d3:6e: c5:ff:85:50:62:52:70:12:61:e3:0b:1d:ad:45:c7:10:3e:e1: 32:8e:1b:50:c9:69:55:4e:9d:7b:7b:93:15:f1:9e:35:af:f4: 3b:f3:51:5a:97:6c:6d:a5:2d:3b:8a:6c:f4:c7:c9:55:82:d1: d3:96:ac:af:9e:c6:8b:fb:41:39:ab:5c:86:10:86:6a:11:9e: b1:d3:8a:55:75:fa:d6:5c:f7:57:c0:93:98:e9:2d:21:e5:0d: 00:b3:1b:d2:3a:d5:66:91:fe:9c:50:cf:6e:cd:de:b5:dc:c6: a9:14:67:a8:66:99:7d:27:80:bd:77:16:8f:cc:df:b0:41:b5: 56:0b:3f:13 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgICHOcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUVD Q0NDQjc5REZFNkM0NjZDQ0FEQjM5ODk2NzEwRUNBQzM3Qjg0NzAeFw0yNTA5MTMw MzA5NDNaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDM5OTNDQzNCMEU2NzMz QzkyMkVCRDNBQjM2QkZENjlCNzJENjAwNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtV2qzl2BJ/yO54BgeunJKgmGMo8qBHWf6kzQ/aiBL6xKjRTTE LPc6gVUp+cVbuf1wadAoC/F6LuV8sZBAxiiNyRQrLzjVe2ICL6xS7BXkZ8dOo537 3hG6bYupAdXkygdUxdTxCEqtr1eUz4tz9K4OlGzGQ8QjbndlGrzktRAJYdE+cG16 bGnsFFPVT7aW7JPvEhzx2MZk8yijOHvtHj32rBHRcox/czrDaIirnIq2Y6Xdd+Ai /hex5lyOkPn1uzc8/ONdspaJ+HiQXNhIpWlWuvwAYrZOQhbZ1r8i0lx+RRpru+UP DUVcorLu8H13bwCs0+NjErSKWE8z/LpT8QDZAgMBAAGjggH1MIIB8TAdBgNVHQ4E FgQUOZPMOw5nM8ki69OrNr/Wm3LWAEYwHwYDVR0jBBgwFoAUrszMt53+bEZsyts5 iWcQ7Kw3uEcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDAv cnN6TXQ1My1iRVpzeXRzNWlXY1E3S3czdUVjLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9yc3pNdDUzLWJFWnN5dHM1aVdjUTdLdzN1RWMuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC80MC9PWlBNT3c1bk04a2k2OU9y TnJfV20zTFdBRVkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQC K/fsAwQCZ+4wMA0GCSqGSIb3DQEBCwUAA4IBAQBa7OGUr8mQemfKlNdHMo5wJoJk N2dbhY4Lsr+qaDFfLLpk9hEAMTHC/Dv3LZbyKNUhrEnrM5ibLlpnZrB5CYXvAqHv 3myBaWk3jIGBOFJSlwMvtdv+aYoa6lhs1byCPmdgkXk6cze2eQWftLJcjzklDbZB eBAPe5vh9oqJ027F/4VQYlJwEmHjCx2tRccQPuEyjhtQyWlVTp17e5MV8Z41r/Q7 81Fal2xtpS07imz0x8lVgtHTlqyvnsaL+0E5q1yGEIZqEZ6x04pVdfrWXPdXwJOY 6S0h5Q0AsxvSOtVmkf6cUM9uzd613MapFGeoZpl9J4C9dxaPzN+wQbVWCz8T -----END CERTIFICATE-----Generated at Wed Nov 5 19:58:45 2025 by rpki-client