$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/jyFm0Kl8V4eb7GatulrlhoKMXM8.roa File: jyFm0Kl8V4eb7GatulrlhoKMXM8.roa (raw, json) Hash identifier: 9L6dRQNPbxNzKG5jPTcGx3qh1FLUHFNDF4YW3DyHUg8= Subject key identifier: 8F:21:66:D0:A9:7C:57:87:9B:EC:66:AD:BA:5A:E5:86:82:8C:5C:CF Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0 Certificate serial: 0F57 Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/jyFm0Kl8V4eb7GatulrlhoKMXM8.roa Signing time: Wed 05 Nov 2025 04:56:17 +0000 ROA not before: Wed 05 Nov 2025 04:56:17 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 4134 IP address blocks: 124.173.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 23:43:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3927 (0xf57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0 Validity Not Before: Nov 5 04:56:17 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=8F2166D0A97C57879BEC66ADBA5AE586828C5CCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:92:f3:07:76:61:e8:0b:80:aa:53:08:87:e8: d5:76:1d:83:1f:cf:34:d8:7d:e1:91:3c:cc:ea:cb: b4:ae:a0:62:2c:55:fc:16:a4:98:d5:17:91:1f:89: 1c:57:54:e4:4e:a0:b7:5b:b4:53:10:64:e2:e6:e2: 4c:a9:0d:9d:43:4f:9f:47:ca:32:f1:66:5a:c7:91: 62:de:d5:f6:d8:2f:0c:c3:93:16:e3:c6:8d:1d:b1: db:0f:48:27:f5:f2:ff:cc:2e:72:7b:2c:b1:c8:e2: 62:ee:a1:93:fa:00:44:f1:e2:a5:ac:c6:0e:fe:de: 2d:12:1d:df:fd:b5:d8:34:0b:1c:0c:ce:1e:a2:36: 98:52:3c:89:cf:05:2d:12:0d:03:e4:5e:51:ef:b7: 02:9a:a6:0c:95:16:f2:37:80:89:62:4b:56:ec:e1: a0:66:61:a0:1b:57:7e:c7:bb:5f:d4:88:02:6d:9d: e1:3f:62:1e:aa:e4:65:97:8e:b5:c6:ce:b2:b0:d3: 8a:2e:24:cf:a0:22:cd:95:c6:a6:7c:fe:4e:55:99: 19:15:95:82:aa:1e:b0:cf:1f:98:b0:18:48:26:2d: f1:61:62:11:57:61:30:89:8b:a8:fa:f8:58:62:b2: f9:26:c3:b4:bc:4f:11:9d:1a:97:57:1e:2e:b5:4a: ab:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:21:66:D0:A9:7C:57:87:9B:EC:66:AD:BA:5A:E5:86:82:8C:5C:CF X509v3 Authority Key Identifier: keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/jyFm0Kl8V4eb7GatulrlhoKMXM8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.173.192.0/18 Signature Algorithm: sha256WithRSAEncryption 29:c2:87:4f:53:38:0c:26:43:d1:ea:cd:43:1e:42:86:64:f9: 18:4f:7a:63:45:0e:6c:6b:a4:8c:49:08:f5:f4:bf:01:e5:10: 03:77:92:9a:d9:d6:6e:f3:4a:b5:28:e0:37:27:79:83:91:76: 76:8b:70:a9:13:8f:de:8c:a5:8c:cb:ee:b8:93:59:ba:c9:af: ce:20:60:58:01:da:d7:af:ac:97:b9:d0:b1:5b:58:ba:67:06: 43:05:98:a7:3e:f4:34:4a:10:7d:c5:91:e2:51:c7:8f:42:85: fd:41:5b:10:47:9c:91:0e:80:62:9f:4f:d3:25:2d:8c:53:92: 07:aa:b2:91:73:6e:9e:0e:4e:71:09:b4:e1:a4:7c:e6:c8:77: 80:e9:f9:de:10:e4:d2:e2:ac:ea:c0:a8:72:73:57:e4:7b:12: 38:e2:f9:45:44:84:ad:21:36:44:2e:72:ff:5f:3b:f4:26:be: df:36:c3:13:0f:32:07:de:98:3c:c4:e6:e4:14:09:98:d6:1a: f0:c7:1a:4f:17:57:ce:05:e2:38:5c:6f:66:53:51:7c:c7:05: a1:70:b9:9d:da:3b:aa:ef:e5:67:4b:51:d6:8a:bf:55:e1:be: 40:c4:06:c5:e6:46:3f:e0:29:54:eb:66:96:f5:e4:64:92:60: e1:9b:c6:bb -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICD1cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTQ4 MUI0RTQwOTAxNUQ4RUI3RDAzRjM2MDM4ODMwRUMxMDk4QUJDMDAeFw0yNTExMDUw NDU2MTdaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDhGMjE2NkQwQTk3QzU3 ODc5QkVDNjZBREJBNUFFNTg2ODI4QzVDQ0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCikvMHdmHoC4CqUwiH6NV2HYMfzzTYfeGRPMzqy7SuoGIsVfwW pJjVF5EfiRxXVOROoLdbtFMQZOLm4kypDZ1DT59HyjLxZlrHkWLe1fbYLwzDkxbj xo0dsdsPSCf18v/MLnJ7LLHI4mLuoZP6AETx4qWsxg7+3i0SHd/9tdg0CxwMzh6i NphSPInPBS0SDQPkXlHvtwKapgyVFvI3gIliS1bs4aBmYaAbV37Hu1/UiAJtneE/ Yh6q5GWXjrXGzrKw04ouJM+gIs2VxqZ8/k5VmRkVlYKqHrDPH5iwGEgmLfFhYhFX YTCJi6j6+Fhisvkmw7S8TxGdGpdXHi61SqsHAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUjyFm0Kl8V4eb7GatulrlhoKMXM8wHwYDVR0jBBgwFoAUlIG05AkBXY630D82 A4gw7BCYq8AwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNi9s SUcwNUFrQlhZNjMwRDgyQTRndzdCQ1lxOEEuY3JsMGMGCCsGAQUFBwEBBFcwVTBT BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw MDAwL2xJRzA1QWtCWFk2MzBEODJBNGd3N0JDWXE4QS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtp LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzYvanlGbTBLbDhWNGViN0dhdHVs cmxob0tNWE04LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNu L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBnyt wDANBgkqhkiG9w0BAQsFAAOCAQEAKcKHT1M4DCZD0erNQx5ChmT5GE96Y0UObGuk jEkI9fS/AeUQA3eSmtnWbvNKtSjgNyd5g5F2dotwqROP3oyljMvuuJNZusmvziBg WAHa16+sl7nQsVtYumcGQwWYpz70NEoQfcWR4lHHj0KF/UFbEEeckQ6AYp9P0yUt jFOSB6qykXNung5OcQm04aR85sh3gOn53hDk0uKs6sCocnNX5HsSOOL5RUSErSE2 RC5y/1879Ca+3zbDEw8yB96YPMTm5BQJmNYa8McaTxdXzgXiOFxvZlNRfMcFoXC5 ndo7qu/lZ0tR1oq/VeG+QMQGxeZGP+ApVOtmlvXkZJJg4ZvGuw== -----END CERTIFICATE-----Generated at Wed Nov 5 21:08:07 2025 by rpki-client