$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/623/FpBasn-ejmv-s3L6xGwS7dgTb6E.roa File: FpBasn-ejmv-s3L6xGwS7dgTb6E.roa (raw, json) Hash identifier: QKjeGeylVm1Dkh+gPft5ejORQv2cGmj2Wip7I/GXmvw= Subject key identifier: 16:90:5A:B2:7F:9E:8E:6B:FE:B3:72:FA:C4:6C:12:ED:D8:13:6F:A1 Certificate issuer: /CN=DEBFC900EDC34F81DA4827F1F9F63D04E0E2F756 Certificate serial: 0AFE Authority key identifier: DE:BF:C9:00:ED:C3:4F:81:DA:48:27:F1:F9:F6:3D:04:E0:E2:F7:56 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/FpBasn-ejmv-s3L6xGwS7dgTb6E.roa Signing time: Mon 27 Oct 2025 02:31:38 +0000 ROA not before: Mon 27 Oct 2025 02:31:38 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 58834 IP address blocks: 124.240.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/3r_JAO3DT4HaSCfx-fY9BODi91Y.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/3r_JAO3DT4HaSCfx-fY9BODi91Y.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 23:43:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2814 (0xafe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEBFC900EDC34F81DA4827F1F9F63D04E0E2F756 Validity Not Before: Oct 27 02:31:38 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=16905AB27F9E8E6BFEB372FAC46C12EDD8136FA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:43:61:75:3a:67:02:0f:dd:99:0c:67:0c:cd: ec:08:d5:04:3f:bf:e8:35:0b:72:b9:57:a9:2e:ac: 7b:aa:d4:69:89:7d:30:c1:60:e7:d3:3c:00:c7:90: d1:e4:7b:d7:c1:f3:5b:2b:ef:e6:1c:95:eb:f9:d8: a8:57:59:ed:5f:ca:71:7b:d4:2b:9e:90:7e:a5:16: cf:dd:d8:2f:60:8d:af:76:69:49:ce:64:3b:76:99: 1e:d6:a7:6c:eb:82:81:79:68:14:b2:b5:14:85:98: 0d:fa:03:63:3d:58:87:06:18:3c:af:87:6b:39:8c: 15:1c:4b:2f:03:59:b1:cc:d9:fa:62:5b:1e:bf:72: 10:26:7d:57:df:0a:1f:56:ea:2f:3e:45:7e:3e:ff: e1:d9:01:55:4c:de:ce:4d:04:33:ec:bc:47:9b:6c: b5:bd:71:46:e6:3f:fd:61:53:c2:d1:9b:b9:47:0b: 75:74:e2:9b:32:1e:9b:b5:b8:e7:9f:2d:8e:87:41: c8:c1:b0:f8:1a:ac:18:ec:d7:e9:61:1e:9e:22:c1: c8:e0:28:9e:fd:2a:e0:c2:9e:2f:b2:2f:ad:cf:ff: f5:ba:6e:4a:31:bf:36:45:f7:2c:1d:7f:45:71:01: df:f7:c5:1a:2e:07:4e:54:8c:14:1b:02:08:f8:3e: 3b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:90:5A:B2:7F:9E:8E:6B:FE:B3:72:FA:C4:6C:12:ED:D8:13:6F:A1 X509v3 Authority Key Identifier: keyid:DE:BF:C9:00:ED:C3:4F:81:DA:48:27:F1:F9:F6:3D:04:E0:E2:F7:56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/3r_JAO3DT4HaSCfx-fY9BODi91Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/FpBasn-ejmv-s3L6xGwS7dgTb6E.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.240.0.0/18 Signature Algorithm: sha256WithRSAEncryption b1:8d:83:7a:b8:6c:ed:ef:47:c8:29:67:4e:23:3e:4d:35:ce: 75:ad:96:40:28:ee:75:89:91:8b:d8:92:7c:c6:aa:fd:df:a2: e2:91:d0:04:7e:c6:68:58:69:86:11:9c:37:1d:bb:bb:a0:05: ba:bc:d8:ed:19:8c:74:76:2f:c9:4f:23:31:7b:9d:61:a1:03: e1:01:6d:e6:5c:0b:ee:5a:b6:6e:c1:02:c8:9d:1a:c7:ad:a0: 2c:c0:ee:31:2e:5d:e2:c9:24:02:8c:ed:39:e1:55:ff:38:ea: 73:05:16:5b:1e:5d:e6:be:73:7e:77:bf:12:a3:cb:57:8a:7d: 13:41:f9:aa:b9:61:0d:45:16:e9:7f:92:1c:ba:e1:64:c7:fb: 45:c0:a6:4c:41:d5:f1:df:78:78:b6:6a:ba:39:86:ba:66:b0: 19:54:bb:48:02:0a:0f:29:a8:ae:f5:47:e8:be:6b:e4:c4:c4: c5:87:99:c3:21:48:92:66:7c:aa:03:59:57:04:19:f8:bd:f3: 05:89:ea:3c:b9:6e:2e:89:7d:50:f6:13:5b:a9:87:4f:e9:34: 0e:b9:2c:c4:6d:e9:e8:16:cb:fa:9b:e8:68:17:f5:bb:ee:17: 1e:f6:ce:22:ea:93:bf:14:d6:0d:8a:de:c4:ab:44:cf:f3:04: 61:d0:8e:a0 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICCv4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREVC RkM5MDBFREMzNEY4MURBNDgyN0YxRjlGNjNEMDRFMEUyRjc1NjAeFw0yNTEwMjcw MjMxMzhaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDE2OTA1QUIyN0Y5RThF NkJGRUIzNzJGQUM0NkMxMkVERDgxMzZGQTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDaQ2F1OmcCD92ZDGcMzewI1QQ/v+g1C3K5V6kurHuq1GmJfTDB YOfTPADHkNHke9fB81sr7+Yclev52KhXWe1fynF71CuekH6lFs/d2C9gja92aUnO ZDt2mR7Wp2zrgoF5aBSytRSFmA36A2M9WIcGGDyvh2s5jBUcSy8DWbHM2fpiWx6/ chAmfVffCh9W6i8+RX4+/+HZAVVM3s5NBDPsvEebbLW9cUbmP/1hU8LRm7lHC3V0 4psyHpu1uOefLY6HQcjBsPgarBjs1+lhHp4iwcjgKJ79KuDCni+yL63P//W6bkox vzZF9ywdf0VxAd/3xRouB05UjBQbAgj4PjsBAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUFpBasn+ejmv+s3L6xGwS7dgTb6EwHwYDVR0jBBgwFoAU3r/JAO3DT4HaSCfx +fY9BODi91YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIz LzNyX0pBTzNEVDRIYVNDZngtZlk5Qk9EaTkxWS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvM3JfSkFPM0RUNEhhU0NmeC1mWTlCT0RpOTFZLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIzL0ZwQmFzbi1lam12LXMz TDZ4R3dTN2RnVGI2RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAZ88AAwDQYJKoZIhvcNAQELBQADggEBALGNg3q4bO3vR8gpZ04jPk01znWtlkAo 7nWJkYvYknzGqv3fouKR0AR+xmhYaYYRnDcdu7ugBbq82O0ZjHR2L8lPIzF7nWGh A+EBbeZcC+5atm7BAsidGsetoCzA7jEuXeLJJAKM7TnhVf846nMFFlseXea+c353 vxKjy1eKfRNB+aq5YQ1FFul/khy64WTH+0XApkxB1fHfeHi2aro5hrpmsBlUu0gC Cg8pqK71R+i+a+TExMWHmcMhSJJmfKoDWVcEGfi98wWJ6jy5bi6JfVD2E1uph0/p NA65LMRt6egWy/qb6GgX9bvuFx72ziLqk78U1g2K3sSrRM/zBGHQjqA= -----END CERTIFICATE-----Generated at Wed Nov 5 22:34:06 2025 by rpki-client