$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/623/11yVo_2w6reNf8Mx14jUcAKif_Y.roa File: 11yVo_2w6reNf8Mx14jUcAKif_Y.roa (raw, json) Hash identifier: DkakxX1u+zl28TIJZt/Xvbj08V52WPPYS266N6dchyo= Subject key identifier: D7:5C:95:A3:FD:B0:EA:B7:8D:7F:C3:31:D7:88:D4:70:02:A2:7F:F6 Certificate issuer: /CN=DEBFC900EDC34F81DA4827F1F9F63D04E0E2F756 Certificate serial: 0B02 Authority key identifier: DE:BF:C9:00:ED:C3:4F:81:DA:48:27:F1:F9:F6:3D:04:E0:E2:F7:56 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/11yVo_2w6reNf8Mx14jUcAKif_Y.roa Signing time: Mon 27 Oct 2025 02:31:39 +0000 ROA not before: Mon 27 Oct 2025 02:31:39 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 58834 IP address blocks: 124.240.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/3r_JAO3DT4HaSCfx-fY9BODi91Y.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/3r_JAO3DT4HaSCfx-fY9BODi91Y.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 23:43:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2818 (0xb02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEBFC900EDC34F81DA4827F1F9F63D04E0E2F756 Validity Not Before: Oct 27 02:31:39 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=D75C95A3FDB0EAB78D7FC331D788D47002A27FF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:35:86:55:9b:b8:84:d1:ed:c8:b5:2e:a4:e2: 03:dc:b1:b4:dd:cc:f9:01:e3:35:c1:dc:5c:2a:53: 5c:b8:68:4b:e1:df:53:27:b0:e7:b9:29:88:b2:e1: 95:73:76:df:67:8a:22:e9:a9:11:9a:ef:6f:4a:79: d6:e5:ec:34:68:26:e3:df:c0:7a:c1:3f:6c:80:a9: 99:f0:84:74:92:ff:df:41:e1:57:0a:0c:55:22:dc: 84:7b:3c:89:0f:a4:27:49:54:85:12:c1:f2:98:2c: 13:ad:56:55:11:40:6f:5d:a3:bf:ee:d7:4a:3a:1d: 8c:ae:83:27:2f:6a:de:19:9c:8a:3a:85:2e:26:31: 0e:dd:8c:27:06:5f:40:1e:f2:68:d2:16:8e:c4:4d: 1c:d7:ff:95:23:43:04:0c:61:ef:36:d8:14:0c:15: d2:c4:7a:26:a9:e6:08:d1:c1:6b:80:3a:be:79:02: 2a:83:2a:84:56:be:6a:91:c1:c7:a0:56:45:ef:01: d9:a8:d9:13:88:f1:d3:34:4f:ac:ca:e8:27:38:6d: 63:25:db:b3:97:07:97:d6:10:0d:5f:bb:0e:0c:02: d1:4f:f7:08:02:80:af:3d:e3:b2:cb:07:11:21:c8: 90:07:64:31:61:99:70:36:15:9a:80:4b:83:db:d8: 4b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:5C:95:A3:FD:B0:EA:B7:8D:7F:C3:31:D7:88:D4:70:02:A2:7F:F6 X509v3 Authority Key Identifier: keyid:DE:BF:C9:00:ED:C3:4F:81:DA:48:27:F1:F9:F6:3D:04:E0:E2:F7:56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/3r_JAO3DT4HaSCfx-fY9BODi91Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/11yVo_2w6reNf8Mx14jUcAKif_Y.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.240.64.0/19 Signature Algorithm: sha256WithRSAEncryption b8:42:a6:e1:b2:ae:3e:f8:0a:c2:46:b2:f1:bc:62:cf:c5:66: 3c:c1:9d:c3:13:24:7c:c1:31:8a:bf:07:ea:88:c1:0e:5c:af: 64:fb:97:f2:cb:04:8c:df:ea:6b:2f:13:7b:a8:5f:f3:86:c9: 6c:35:85:05:4c:02:6b:31:ec:f6:c9:7f:f5:f8:96:ab:b7:e9: 53:46:6a:23:c8:6c:19:31:a1:df:07:d7:83:29:c6:d7:08:42: 08:26:37:3e:83:af:e4:7a:79:8d:f6:23:be:89:53:83:03:7d: 5a:ca:16:13:28:e9:df:fb:72:28:6d:0f:8b:82:af:7b:6b:95: 7e:82:12:d9:ef:8f:fd:e0:9a:18:6e:19:8a:53:21:63:36:71: 1d:e9:31:69:fe:be:4d:b0:59:ee:46:24:0b:35:72:58:98:9b: bf:ab:92:75:6a:57:c4:72:cb:4e:22:f8:55:51:62:91:b4:20: 69:19:90:5a:63:fa:fa:dd:e8:ad:6f:85:eb:fd:9c:ab:7b:1c: f4:01:25:11:d6:01:64:63:52:42:d5:57:67:d0:a8:63:65:09: 0d:a7:4c:52:e4:8a:96:08:1a:48:78:49:0f:1a:13:0c:ef:b7: c8:54:b0:01:fb:6d:ed:2e:0f:c7:84:d0:65:a2:18:f3:87:b6: 17:9d:74:fc -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICCwIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREVC RkM5MDBFREMzNEY4MURBNDgyN0YxRjlGNjNEMDRFMEUyRjc1NjAeFw0yNTEwMjcw MjMxMzlaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEQ3NUM5NUEzRkRCMEVB Qjc4RDdGQzMzMUQ3ODhENDcwMDJBMjdGRjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqNYZVm7iE0e3ItS6k4gPcsbTdzPkB4zXB3FwqU1y4aEvh31Mn sOe5KYiy4ZVzdt9niiLpqRGa729Kedbl7DRoJuPfwHrBP2yAqZnwhHSS/99B4VcK DFUi3IR7PIkPpCdJVIUSwfKYLBOtVlURQG9do7/u10o6HYyugycvat4ZnIo6hS4m MQ7djCcGX0Ae8mjSFo7ETRzX/5UjQwQMYe822BQMFdLEeiap5gjRwWuAOr55AiqD KoRWvmqRwcegVkXvAdmo2ROI8dM0T6zK6Cc4bWMl27OXB5fWEA1fuw4MAtFP9wgC gK8947LLBxEhyJAHZDFhmXA2FZqAS4Pb2EsnAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU11yVo/2w6reNf8Mx14jUcAKif/YwHwYDVR0jBBgwFoAU3r/JAO3DT4HaSCfx +fY9BODi91YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIz LzNyX0pBTzNEVDRIYVNDZngtZlk5Qk9EaTkxWS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvM3JfSkFPM0RUNEhhU0NmeC1mWTlCT0RpOTFZLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIzLzExeVZvXzJ3NnJlTmY4 TXgxNGpVY0FLaWZfWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAV88EAwDQYJKoZIhvcNAQELBQADggEBALhCpuGyrj74CsJGsvG8Ys/FZjzBncMT JHzBMYq/B+qIwQ5cr2T7l/LLBIzf6msvE3uoX/OGyWw1hQVMAmsx7PbJf/X4lqu3 6VNGaiPIbBkxod8H14MpxtcIQggmNz6Dr+R6eY32I76JU4MDfVrKFhMo6d/7ciht D4uCr3trlX6CEtnvj/3gmhhuGYpTIWM2cR3pMWn+vk2wWe5GJAs1cliYm7+rknVq V8Ryy04i+FVRYpG0IGkZkFpj+vrd6K1vhev9nKt7HPQBJRHWAWRjUkLVV2fQqGNl CQ2nTFLkipYIGkh4SQ8aEwzvt8hUsAH7be0uD8eE0GWiGPOHtheddPw= -----END CERTIFICATE-----Generated at Wed Nov 5 22:30:15 2025 by rpki-client