$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/623/NAcLo33Mhq80QEz4gQcwBKKAtO4.roa File: NAcLo33Mhq80QEz4gQcwBKKAtO4.roa (raw, json) Hash identifier: sENFFl7nsdemKH3Q3zwb5L9djNRr55I2g6B8dwlGQpI= Subject key identifier: 34:07:0B:A3:7D:CC:86:AF:34:40:4C:F8:81:07:30:04:A2:80:B4:EE Certificate issuer: /CN=DEBFC900EDC34F81DA4827F1F9F63D04E0E2F756 Certificate serial: 0B14 Authority key identifier: DE:BF:C9:00:ED:C3:4F:81:DA:48:27:F1:F9:F6:3D:04:E0:E2:F7:56 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/NAcLo33Mhq80QEz4gQcwBKKAtO4.roa Signing time: Mon 27 Oct 2025 02:39:25 +0000 ROA not before: Mon 27 Oct 2025 02:39:25 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 58834 IP address blocks: 202.168.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/3r_JAO3DT4HaSCfx-fY9BODi91Y.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/3r_JAO3DT4HaSCfx-fY9BODi91Y.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 23:43:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2836 (0xb14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEBFC900EDC34F81DA4827F1F9F63D04E0E2F756 Validity Not Before: Oct 27 02:39:25 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=34070BA37DCC86AF34404CF881073004A280B4EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2a:62:58:c5:73:82:c1:8a:cf:a9:fa:ed:8e: b2:d6:13:26:ab:c1:1b:1c:5a:db:5c:ba:ab:07:8f: 4e:1b:4a:ca:fe:46:85:ce:91:b9:e7:a4:ea:ef:d0: 5a:0b:a7:49:e8:1d:3b:0c:cd:77:c8:78:7c:01:8d: 8e:ae:5b:41:bd:4d:40:29:ed:de:81:24:73:63:50: 05:82:35:72:21:87:d4:79:09:d9:23:53:6e:d8:c1: 49:14:c5:0b:54:d0:e0:b2:35:bd:97:77:f5:33:52: e4:b5:e3:96:5d:c2:11:e8:60:a7:98:23:bb:d4:8a: 48:17:d0:69:89:d5:4b:e8:0f:ad:e6:15:24:44:f7: e4:fe:44:73:e4:61:d5:98:40:d2:bc:ed:83:d4:4f: 15:4b:56:6b:9b:d3:46:b9:cb:ef:6a:ca:34:7d:87: 4a:60:7d:6d:63:ae:bd:a8:da:4e:6b:65:fa:d9:9e: de:78:ce:ce:79:5f:c9:27:9d:ce:36:74:57:e8:ae: a8:7f:b0:38:00:d1:8e:ee:4d:ff:a6:9c:c9:5c:06: d7:3f:e5:68:32:5e:2f:74:11:a6:3b:88:c9:84:78: 2a:74:c8:6d:eb:2c:dc:07:cd:bd:c0:76:9c:5d:f6: 1e:81:be:5e:c6:53:69:68:38:b3:81:b5:1b:b5:12: e0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:07:0B:A3:7D:CC:86:AF:34:40:4C:F8:81:07:30:04:A2:80:B4:EE X509v3 Authority Key Identifier: keyid:DE:BF:C9:00:ED:C3:4F:81:DA:48:27:F1:F9:F6:3D:04:E0:E2:F7:56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/3r_JAO3DT4HaSCfx-fY9BODi91Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/NAcLo33Mhq80QEz4gQcwBKKAtO4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.168.160.0/21 Signature Algorithm: sha256WithRSAEncryption 74:3f:fe:b7:54:8e:49:af:f7:3e:4d:3e:84:79:6b:b5:b8:ca: a4:57:e7:7b:ef:81:dd:d2:26:be:86:77:ce:bf:66:53:aa:6f: 11:fa:c1:23:7f:af:b6:2e:86:3d:7c:19:5f:40:22:ee:d3:35: bc:c3:9d:d7:8b:fc:53:d0:8a:2f:83:cb:95:13:ae:25:d2:86: 11:56:f2:09:1f:1a:3b:9c:a0:f5:f4:26:d9:cb:03:e9:1f:e3: 0b:0b:fb:b2:db:4b:39:69:a0:dd:fe:bc:0d:86:47:8c:7c:73: a6:5f:72:3a:aa:19:d0:8b:1b:a7:57:4b:67:e9:b2:b2:83:10: c7:4b:62:09:39:fc:21:33:13:f3:2e:d7:d7:db:71:6e:e7:20: 58:2c:9e:10:80:1e:7b:c0:db:2c:61:6c:04:d6:ee:73:aa:3d: 39:be:73:0d:ec:c8:8e:1d:48:68:27:88:69:89:34:ca:c5:e1: 0f:9f:df:5b:41:75:01:e1:33:16:b9:68:fe:ef:d0:a6:f1:b3: 5a:36:35:09:11:94:ac:ef:28:fc:53:89:20:1a:61:3c:29:75: 60:23:47:30:54:64:8b:da:6e:35:ea:88:64:21:76:6c:26:0d: 84:cb:72:66:79:13:cd:2d:15:63:e4:da:f8:cb:70:95:3a:b3: 4b:00:5a:24 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICCxQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREVC RkM5MDBFREMzNEY4MURBNDgyN0YxRjlGNjNEMDRFMEUyRjc1NjAeFw0yNTEwMjcw MjM5MjVaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDM0MDcwQkEzN0RDQzg2 QUYzNDQwNENGODgxMDczMDA0QTI4MEI0RUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrKmJYxXOCwYrPqfrtjrLWEyarwRscWttcuqsHj04bSsr+RoXO kbnnpOrv0FoLp0noHTsMzXfIeHwBjY6uW0G9TUAp7d6BJHNjUAWCNXIhh9R5Cdkj U27YwUkUxQtU0OCyNb2Xd/UzUuS145ZdwhHoYKeYI7vUikgX0GmJ1UvoD63mFSRE 9+T+RHPkYdWYQNK87YPUTxVLVmub00a5y+9qyjR9h0pgfW1jrr2o2k5rZfrZnt54 zs55X8knnc42dFforqh/sDgA0Y7uTf+mnMlcBtc/5WgyXi90EaY7iMmEeCp0yG3r LNwHzb3Adpxd9h6Bvl7GU2loOLOBtRu1EuA9AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUNAcLo33Mhq80QEz4gQcwBKKAtO4wHwYDVR0jBBgwFoAU3r/JAO3DT4HaSCfx +fY9BODi91YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIz LzNyX0pBTzNEVDRIYVNDZngtZlk5Qk9EaTkxWS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvM3JfSkFPM0RUNEhhU0NmeC1mWTlCT0RpOTFZLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIzL05BY0xvMzNNaHE4MFFF ejRnUWN3QktLQXRPNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAPKqKAwDQYJKoZIhvcNAQELBQADggEBAHQ//rdUjkmv9z5NPoR5a7W4yqRX53vv gd3SJr6Gd86/ZlOqbxH6wSN/r7Yuhj18GV9AIu7TNbzDndeL/FPQii+Dy5UTriXS hhFW8gkfGjucoPX0JtnLA+kf4wsL+7LbSzlpoN3+vA2GR4x8c6ZfcjqqGdCLG6dX S2fpsrKDEMdLYgk5/CEzE/Mu19fbcW7nIFgsnhCAHnvA2yxhbATW7nOqPTm+cw3s yI4dSGgniGmJNMrF4Q+f31tBdQHhMxa5aP7v0Kbxs1o2NQkRlKzvKPxTiSAaYTwp dWAjRzBUZIvabjXqiGQhdmwmDYTLcmZ5E80tFWPk2vjLcJU6s0sAWiQ= -----END CERTIFICATE-----Generated at Wed Nov 5 22:30:21 2025 by rpki-client