$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/623/8gyk5cATlEQNIuS6D-ddt8anaPw.roa File: 8gyk5cATlEQNIuS6D-ddt8anaPw.roa (raw, json) Hash identifier: mLrA9YfFxGymNSzFFfPr/NIVuDqSBJ2TrWtlkXEvAzU= Subject key identifier: F2:0C:A4:E5:C0:13:94:44:0D:22:E4:BA:0F:E7:5D:B7:C6:A7:68:FC Certificate issuer: /CN=DEBFC900EDC34F81DA4827F1F9F63D04E0E2F756 Certificate serial: 0B07 Authority key identifier: DE:BF:C9:00:ED:C3:4F:81:DA:48:27:F1:F9:F6:3D:04:E0:E2:F7:56 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/8gyk5cATlEQNIuS6D-ddt8anaPw.roa Signing time: Mon 27 Oct 2025 02:31:40 +0000 ROA not before: Mon 27 Oct 2025 02:31:40 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 58834 IP address blocks: 124.240.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/3r_JAO3DT4HaSCfx-fY9BODi91Y.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/3r_JAO3DT4HaSCfx-fY9BODi91Y.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 23:43:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2823 (0xb07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEBFC900EDC34F81DA4827F1F9F63D04E0E2F756 Validity Not Before: Oct 27 02:31:40 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=F20CA4E5C01394440D22E4BA0FE75DB7C6A768FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:46:9b:01:a0:80:86:51:d3:eb:de:26:65:9a: ed:e8:ab:f4:f3:d7:ca:64:e6:3d:53:b4:7e:8f:56: 1d:05:a2:c6:a9:88:cd:4a:1e:a4:05:4f:2a:eb:9f: fa:1d:87:c4:be:8b:1c:6f:88:e8:78:62:a8:bc:c2: 53:01:25:3a:42:86:c3:6f:f9:e7:7f:c2:45:34:b0: 5a:73:c6:be:d3:f3:c7:2c:4d:56:46:fd:3f:12:b7: dd:f0:6d:a8:b6:f2:c0:16:29:6d:52:55:a5:42:0f: 82:ec:3f:23:56:48:97:18:7a:ca:7c:80:06:51:0f: 42:bc:2f:3e:2a:77:a6:45:c0:59:aa:90:72:3d:c7: af:ac:55:26:b9:f1:c9:90:08:5f:de:a9:aa:a8:24: 73:75:bd:17:c8:2c:cc:8e:37:b4:47:ba:6d:a5:71: ba:55:02:80:b8:82:3a:df:1c:6f:1e:4b:fe:be:6e: c1:c5:f4:a5:9d:bc:d4:46:98:6b:a5:c8:05:8e:35: e8:d2:67:39:79:14:16:d0:23:92:9c:28:81:14:09: b0:76:69:a8:59:36:5c:20:73:1b:62:4b:63:8d:46: 9c:52:92:89:ad:3b:a1:5e:3a:04:6e:d0:41:db:21: 82:68:5c:b5:22:83:2e:62:69:db:d2:48:b7:7b:7e: af:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:0C:A4:E5:C0:13:94:44:0D:22:E4:BA:0F:E7:5D:B7:C6:A7:68:FC X509v3 Authority Key Identifier: keyid:DE:BF:C9:00:ED:C3:4F:81:DA:48:27:F1:F9:F6:3D:04:E0:E2:F7:56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/3r_JAO3DT4HaSCfx-fY9BODi91Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/8gyk5cATlEQNIuS6D-ddt8anaPw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.240.0.0/17 Signature Algorithm: sha256WithRSAEncryption 76:b1:33:c3:6d:77:b0:da:09:e8:7f:29:d7:cd:3a:d5:62:9f: 8e:f8:7b:7c:db:2a:9a:45:df:8d:6a:a3:d2:40:bd:19:e2:9b: cc:43:2c:0e:27:4e:39:80:c4:0c:ad:69:d1:4e:79:3c:40:62: 3b:6c:72:80:d1:63:44:00:db:64:ed:9a:ff:ce:ba:85:0c:0d: 27:08:91:14:c1:97:d2:77:79:17:ad:5d:bb:a5:60:d1:38:7d: 6b:ab:1a:04:f4:b9:41:0f:61:fb:a9:b1:40:d6:e6:f6:63:0c: d8:f3:cf:75:23:fe:fe:c7:5a:dd:8f:7d:a4:ca:01:25:1f:0f: 50:db:1a:1f:e0:9f:a6:f9:33:a2:8f:c0:c0:4d:88:44:99:01: 86:da:b6:0e:9e:09:cc:4d:2b:87:0b:14:8a:5a:45:d2:fa:be: 40:3f:8c:07:cc:24:78:4f:52:3f:fb:27:78:d6:9d:e3:74:71: 73:66:18:d2:58:94:58:58:96:eb:b0:3d:c4:fb:24:b2:58:70: 0c:41:95:c4:e5:1e:7c:71:c5:34:34:c1:f4:91:19:a2:8d:74: 46:e3:4f:85:e6:4c:8f:48:45:8c:79:40:ee:54:fd:de:e9:75: 06:d9:85:a6:d5:ee:b9:0d:c1:9c:1f:7d:15:72:6e:9e:25:91: f1:a7:c4:83 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICCwcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREVC RkM5MDBFREMzNEY4MURBNDgyN0YxRjlGNjNEMDRFMEUyRjc1NjAeFw0yNTEwMjcw MjMxNDBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEYyMENBNEU1QzAxMzk0 NDQwRDIyRTRCQTBGRTc1REI3QzZBNzY4RkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9RpsBoICGUdPr3iZlmu3oq/Tz18pk5j1TtH6PVh0FosapiM1K HqQFTyrrn/odh8S+ixxviOh4Yqi8wlMBJTpChsNv+ed/wkU0sFpzxr7T88csTVZG /T8St93wbai28sAWKW1SVaVCD4LsPyNWSJcYesp8gAZRD0K8Lz4qd6ZFwFmqkHI9 x6+sVSa58cmQCF/eqaqoJHN1vRfILMyON7RHum2lcbpVAoC4gjrfHG8eS/6+bsHF 9KWdvNRGmGulyAWONejSZzl5FBbQI5KcKIEUCbB2aahZNlwgcxtiS2ONRpxSkomt O6FeOgRu0EHbIYJoXLUigy5iadvSSLd7fq+dAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU8gyk5cATlEQNIuS6D+ddt8anaPwwHwYDVR0jBBgwFoAU3r/JAO3DT4HaSCfx +fY9BODi91YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIz LzNyX0pBTzNEVDRIYVNDZngtZlk5Qk9EaTkxWS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvM3JfSkFPM0RUNEhhU0NmeC1mWTlCT0RpOTFZLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIzLzhneWs1Y0FUbEVRTkl1 UzZELWRkdDhhbmFQdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAd88AAwDQYJKoZIhvcNAQELBQADggEBAHaxM8Ntd7DaCeh/KdfNOtVin474e3zb KppF341qo9JAvRnim8xDLA4nTjmAxAytadFOeTxAYjtscoDRY0QA22Ttmv/OuoUM DScIkRTBl9J3eRetXbulYNE4fWurGgT0uUEPYfupsUDW5vZjDNjzz3Uj/v7HWt2P faTKASUfD1DbGh/gn6b5M6KPwMBNiESZAYbatg6eCcxNK4cLFIpaRdL6vkA/jAfM JHhPUj/7J3jWneN0cXNmGNJYlFhYluuwPcT7JLJYcAxBlcTlHnxxxTQ0wfSRGaKN dEbjT4XmTI9IRYx5QO5U/d7pdQbZhabV7rkNwZwffRVybp4lkfGnxIM= -----END CERTIFICATE-----Generated at Wed Nov 5 22:30:18 2025 by rpki-client