$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/Gt2SYwEaS4OnXlTH8BucbXwc5TQ.roa File: Gt2SYwEaS4OnXlTH8BucbXwc5TQ.roa (raw, json) Hash identifier: e3NkncCyYCxORb2h45qzklmdgMzXMn7RHt0F+UUN3MY= Subject key identifier: 1A:DD:92:63:01:1A:4B:83:A7:5E:54:C7:F0:1B:9C:6D:7C:1C:E5:34 Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0 Certificate serial: 0D31 Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/Gt2SYwEaS4OnXlTH8BucbXwc5TQ.roa Signing time: Mon 21 Jul 2025 14:03:01 +0000 ROA not before: Mon 21 Jul 2025 14:03:01 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 6079 IP address blocks: 124.173.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 06:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3377 (0xd31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0 Validity Not Before: Jul 21 14:03:01 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=1ADD9263011A4B83A75E54C7F01B9C6D7C1CE534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4c:7a:2e:36:22:d0:09:a4:0a:d1:40:a4:e0: ab:6d:64:f1:83:4e:e4:ce:4c:2a:b2:98:27:da:fe: fd:23:c1:7b:45:0e:3a:68:42:f4:56:d9:54:6f:a4: b3:39:1f:fd:5a:5e:6c:67:bd:fc:47:68:d5:f1:60: 15:44:2f:13:4e:f7:19:27:8d:d7:6f:7d:30:1f:91: f5:90:85:d2:ad:1a:1b:39:11:90:6c:c2:e7:84:47: 0a:86:9d:cb:35:93:7e:ff:30:44:cf:29:7b:85:fa: c7:c3:04:33:aa:a0:41:40:06:6f:1a:80:8d:82:a4: f9:80:46:b7:b4:f7:3b:b0:9d:6a:89:18:9e:31:54: 81:e9:37:63:47:5d:38:b7:18:06:7a:ba:bc:4c:33: 59:61:3d:8c:b8:48:7a:d0:55:cf:fe:ab:77:ff:7c: 38:0b:2c:2e:6a:9e:87:7c:f3:46:66:f9:7d:8f:5b: ab:c0:f0:b6:42:c1:86:ca:a3:16:92:3b:14:ac:ca: 12:8c:3b:55:97:db:f5:39:f9:40:f1:9d:84:4a:ee: 76:56:32:98:6a:36:2f:4f:d1:09:15:9b:e8:51:ea: ed:18:63:46:10:19:31:a5:e6:64:f3:b1:73:44:7b: 03:d1:2d:86:a3:79:65:e7:fe:0c:06:f9:fb:75:4d: b2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:DD:92:63:01:1A:4B:83:A7:5E:54:C7:F0:1B:9C:6D:7C:1C:E5:34 X509v3 Authority Key Identifier: keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/Gt2SYwEaS4OnXlTH8BucbXwc5TQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.173.192.0/18 Signature Algorithm: sha256WithRSAEncryption ba:e3:c8:5e:53:3c:08:e2:2e:b0:7e:78:fe:d3:21:90:44:16: 97:66:d6:d3:16:7f:c9:c0:af:09:f4:4b:4c:ee:c5:0b:80:ae: 38:cd:d6:1a:64:f0:17:17:e1:1a:b6:05:57:79:96:48:82:96: e3:5c:b2:f8:ec:30:39:46:31:28:83:93:36:2f:6a:8b:dd:bf: da:17:f7:b0:f3:42:4f:cf:e1:ac:b6:1c:72:41:a7:e8:3c:2b: cb:64:05:c0:11:ca:03:6a:b3:06:16:15:b5:26:44:be:c1:8b: 7f:9d:f7:4a:50:90:7b:33:2a:f0:82:a7:76:08:98:ca:09:37: 8b:bb:d3:43:b3:5c:be:64:10:a9:25:5d:0e:9b:1c:67:7b:db: d9:54:c8:e4:e0:3a:8c:7a:ea:b6:d8:db:00:55:5a:a8:3d:c0: 3b:59:9b:b4:2c:1f:57:f4:30:e4:1e:35:a8:35:72:40:dc:56: 12:c7:1e:f2:ed:ea:24:b3:f0:70:77:2b:b8:dd:d5:39:f7:8f: 39:13:55:cb:95:d9:c5:33:59:52:92:3d:06:52:67:67:b3:b8: 39:bb:46:2a:94:f4:b3:91:02:b4:77:ff:31:a9:8a:c2:86:38: b6:ec:c9:b4:93:b9:1b:0a:35:45:94:69:4e:d5:3e:5f:0c:ce: 81:f8:ed:ea -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICDTEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTQ4 MUI0RTQwOTAxNUQ4RUI3RDAzRjM2MDM4ODMwRUMxMDk4QUJDMDAeFw0yNTA3MjEx NDAzMDFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDFBREQ5MjYzMDExQTRC ODNBNzVFNTRDN0YwMUI5QzZEN0MxQ0U1MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBTHouNiLQCaQK0UCk4KttZPGDTuTOTCqymCfa/v0jwXtFDjpo QvRW2VRvpLM5H/1aXmxnvfxHaNXxYBVELxNO9xknjddvfTAfkfWQhdKtGhs5EZBs wueERwqGncs1k37/METPKXuF+sfDBDOqoEFABm8agI2CpPmARre09zuwnWqJGJ4x VIHpN2NHXTi3GAZ6urxMM1lhPYy4SHrQVc/+q3f/fDgLLC5qnod880Zm+X2PW6vA 8LZCwYbKoxaSOxSsyhKMO1WX2/U5+UDxnYRK7nZWMphqNi9P0QkVm+hR6u0YY0YQ GTGl5mTzsXNEewPRLYajeWXn/gwG+ft1TbIzAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUGt2SYwEaS4OnXlTH8BucbXwc5TQwHwYDVR0jBBgwFoAUlIG05AkBXY630D82 A4gw7BCYq8AwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNi9s SUcwNUFrQlhZNjMwRDgyQTRndzdCQ1lxOEEuY3JsMGMGCCsGAQUFBwEBBFcwVTBT BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw MDAwL2xJRzA1QWtCWFk2MzBEODJBNGd3N0JDWXE4QS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtp LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzYvR3QyU1l3RWFTNE9uWGxUSDhC dWNiWHdjNVRRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNu L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBnyt wDANBgkqhkiG9w0BAQsFAAOCAQEAuuPIXlM8COIusH54/tMhkEQWl2bW0xZ/ycCv CfRLTO7FC4CuOM3WGmTwFxfhGrYFV3mWSIKW41yy+OwwOUYxKIOTNi9qi92/2hf3 sPNCT8/hrLYcckGn6Dwry2QFwBHKA2qzBhYVtSZEvsGLf533SlCQezMq8IKndgiY ygk3i7vTQ7NcvmQQqSVdDpscZ3vb2VTI5OA6jHrqttjbAFVaqD3AO1mbtCwfV/Qw 5B41qDVyQNxWEsce8u3qJLPwcHcruN3VOfePORNVy5XZxTNZUpI9BlJnZ7O4ObtG KpT0s5ECtHf/MamKwoY4tuzJtJO5Gwo1RZRpTtU+XwzOgfjt6g== -----END CERTIFICATE-----Generated at Mon Aug 11 04:40:30 2025 by rpki-client