$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/623/ODF2vbzyBzS5CPpnzXsrpZZzKy8.roa File: ODF2vbzyBzS5CPpnzXsrpZZzKy8.roa (raw, json) Hash identifier: FcgVsCov7/h3m2WVfKx8P2DC6vnx3bF4aj4J0wIQ0OE= Subject key identifier: 38:31:76:BD:BC:F2:07:34:B9:08:FA:67:CD:7B:2B:A5:96:73:2B:2F Certificate issuer: /CN=DEBFC900EDC34F81DA4827F1F9F63D04E0E2F756 Certificate serial: 0B06 Authority key identifier: DE:BF:C9:00:ED:C3:4F:81:DA:48:27:F1:F9:F6:3D:04:E0:E2:F7:56 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/ODF2vbzyBzS5CPpnzXsrpZZzKy8.roa Signing time: Mon 27 Oct 2025 02:31:40 +0000 ROA not before: Mon 27 Oct 2025 02:31:40 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 58834 IP address blocks: 119.2.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/3r_JAO3DT4HaSCfx-fY9BODi91Y.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/3r_JAO3DT4HaSCfx-fY9BODi91Y.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2822 (0xb06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEBFC900EDC34F81DA4827F1F9F63D04E0E2F756 Validity Not Before: Oct 27 02:31:40 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=383176BDBCF20734B908FA67CD7B2BA596732B2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:cf:43:fe:34:42:a2:9a:1a:53:cf:ba:3c:e6: 9b:bc:8f:64:c4:dd:a9:70:fa:e7:74:90:0b:3f:06: 53:2a:ef:7a:0b:69:d2:29:41:fb:4a:76:38:e0:52: 09:5d:dd:4e:15:3e:f3:9e:1d:3f:97:a5:c9:30:d7: 5e:27:85:02:e8:60:e0:9b:da:19:e6:28:28:38:ed: 67:e7:3b:6f:2e:89:a2:7f:be:a0:66:fd:27:c1:ba: 6c:76:4d:30:a1:6e:54:2b:81:5b:f4:cb:ed:e8:73: 9c:61:16:7e:fa:63:07:b0:b9:93:40:a4:cd:36:f5: 82:6d:4c:36:4b:fe:00:0f:ec:fe:d3:27:e5:b1:5c: c0:a6:69:2d:e1:3a:ca:0a:1f:45:24:6d:44:a1:55: 3b:d6:7a:ae:20:e7:7d:d6:51:81:97:9f:48:86:c3: 84:36:50:42:ee:98:f8:f5:50:1a:a6:21:f9:01:6f: 84:4f:a4:08:6f:66:3d:41:97:d3:02:bf:26:54:d3: b9:3d:3d:1d:a8:b6:05:e7:a6:9e:fc:a3:7d:96:ab: 28:5f:9d:58:d2:58:d1:8e:dc:d8:66:a2:22:29:22: 88:8e:5b:3d:e4:f6:7f:b3:8a:f2:e7:77:7c:8e:e5: 3f:55:48:b5:d7:20:a1:d1:b0:d0:5b:e1:3e:13:f3: 1f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:31:76:BD:BC:F2:07:34:B9:08:FA:67:CD:7B:2B:A5:96:73:2B:2F X509v3 Authority Key Identifier: keyid:DE:BF:C9:00:ED:C3:4F:81:DA:48:27:F1:F9:F6:3D:04:E0:E2:F7:56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/3r_JAO3DT4HaSCfx-fY9BODi91Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/ODF2vbzyBzS5CPpnzXsrpZZzKy8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.2.128.0/19 Signature Algorithm: sha256WithRSAEncryption 28:b2:13:a8:89:f2:95:9e:58:6a:c7:ce:79:53:46:8f:d8:8f: 7a:5a:c5:7b:f4:7c:0c:51:46:69:5d:d5:b5:ca:5c:84:6e:3a: a1:f2:37:17:6f:6c:d8:bc:0e:d1:ca:ea:61:9d:5e:db:24:58: 09:3d:cc:77:09:80:26:85:1d:39:a5:c7:24:9c:d1:03:96:d9: 83:60:22:ec:90:a1:28:13:6e:58:18:cf:04:ae:d4:f1:61:25: aa:75:a6:b4:aa:4a:03:91:49:f5:52:1e:45:7a:86:7c:d2:91: 76:b7:c0:42:e9:33:3d:f4:24:dd:9a:1d:0c:b9:d1:da:58:c9: 3d:4e:81:f3:64:97:04:7b:e9:76:20:83:64:30:95:66:52:5e: 21:b9:8c:04:ca:26:a4:66:96:3c:2c:01:6a:55:85:f9:64:fd: 88:7b:ef:d6:99:0b:04:84:65:35:ae:5f:df:5c:89:0e:7a:ba: 4c:2c:3c:62:f2:01:a7:94:45:b1:a4:b0:80:b6:d1:9c:e7:2b: 1b:6d:35:75:85:28:47:5a:e6:6d:07:02:d6:f9:e3:72:46:f1: 23:44:18:68:ac:0f:74:7e:2d:77:48:76:a1:c1:47:01:ad:be: 28:6d:90:b5:1e:2a:5f:8b:13:d7:d4:09:d6:36:25:24:26:4c: 2e:ba:07:c1 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICCwYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREVC RkM5MDBFREMzNEY4MURBNDgyN0YxRjlGNjNEMDRFMEUyRjc1NjAeFw0yNTEwMjcw MjMxNDBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDM4MzE3NkJEQkNGMjA3 MzRCOTA4RkE2N0NEN0IyQkE1OTY3MzJCMkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDnz0P+NEKimhpTz7o85pu8j2TE3alw+ud0kAs/BlMq73oLadIp QftKdjjgUgld3U4VPvOeHT+Xpckw114nhQLoYOCb2hnmKCg47WfnO28uiaJ/vqBm /SfBumx2TTChblQrgVv0y+3oc5xhFn76YwewuZNApM029YJtTDZL/gAP7P7TJ+Wx XMCmaS3hOsoKH0UkbUShVTvWeq4g533WUYGXn0iGw4Q2UELumPj1UBqmIfkBb4RP pAhvZj1Bl9MCvyZU07k9PR2otgXnpp78o32WqyhfnVjSWNGO3NhmoiIpIoiOWz3k 9n+zivLnd3yO5T9VSLXXIKHRsNBb4T4T8x+vAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUODF2vbzyBzS5CPpnzXsrpZZzKy8wHwYDVR0jBBgwFoAU3r/JAO3DT4HaSCfx +fY9BODi91YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIz LzNyX0pBTzNEVDRIYVNDZngtZlk5Qk9EaTkxWS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvM3JfSkFPM0RUNEhhU0NmeC1mWTlCT0RpOTFZLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIzL09ERjJ2Ynp5QnpTNUNQ cG56WHNycFpaekt5OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAV3AoAwDQYJKoZIhvcNAQELBQADggEBACiyE6iJ8pWeWGrHznlTRo/Yj3paxXv0 fAxRRmld1bXKXIRuOqHyNxdvbNi8DtHK6mGdXtskWAk9zHcJgCaFHTmlxySc0QOW 2YNgIuyQoSgTblgYzwSu1PFhJap1prSqSgORSfVSHkV6hnzSkXa3wELpMz30JN2a HQy50dpYyT1OgfNklwR76XYgg2QwlWZSXiG5jATKJqRmljwsAWpVhflk/Yh779aZ CwSEZTWuX99ciQ56ukwsPGLyAaeURbGksIC20ZznKxttNXWFKEda5m0HAtb543JG 8SNEGGisD3R+LXdIdqHBRwGtvihtkLUeKl+LE9fUCdY2JSQmTC66B8E= -----END CERTIFICATE-----Generated at Wed Nov 5 23:58:22 2025 by rpki-client