$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/623/TxzLKsmk4AmxcM8w89tXEYgBR1U.roa File: TxzLKsmk4AmxcM8w89tXEYgBR1U.roa (raw, json) Hash identifier: RdSJdbcnCPD5f5bo8S5IVYGZNwvDLOEv74K/g6KkR4E= Subject key identifier: 4F:1C:CB:2A:C9:A4:E0:09:B1:70:CF:30:F3:DB:57:11:88:01:47:55 Certificate issuer: /CN=DEBFC900EDC34F81DA4827F1F9F63D04E0E2F756 Certificate serial: 0B01 Authority key identifier: DE:BF:C9:00:ED:C3:4F:81:DA:48:27:F1:F9:F6:3D:04:E0:E2:F7:56 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/TxzLKsmk4AmxcM8w89tXEYgBR1U.roa Signing time: Mon 27 Oct 2025 02:31:39 +0000 ROA not before: Mon 27 Oct 2025 02:31:39 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 58834 IP address blocks: 124.240.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/3r_JAO3DT4HaSCfx-fY9BODi91Y.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/3r_JAO3DT4HaSCfx-fY9BODi91Y.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 23:43:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2817 (0xb01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEBFC900EDC34F81DA4827F1F9F63D04E0E2F756 Validity Not Before: Oct 27 02:31:39 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=4F1CCB2AC9A4E009B170CF30F3DB571188014755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f2:bc:c6:e7:f2:4c:af:66:13:bf:a3:3a:9d: 35:d9:bd:6c:81:1e:3c:71:34:4a:21:1c:9c:71:98: 2b:e5:e0:6c:07:ed:6b:9d:ab:08:31:25:50:05:23: 8d:9c:30:bd:f2:89:9a:65:5b:6f:9c:b8:f2:c1:80: 63:0f:9e:99:25:66:92:c1:77:85:dc:0d:1d:19:aa: d3:e4:5c:be:fd:19:ba:0d:6d:aa:0e:36:15:a4:ec: e9:4e:07:99:7b:b2:68:71:18:bb:bf:9e:76:27:50: 27:2c:35:0d:43:65:69:e3:f0:dd:ae:d2:b0:fc:f4: 96:3f:88:ec:cc:39:a1:18:43:e2:4e:28:e9:73:db: d1:b9:92:2f:02:7e:61:49:4d:cf:c6:20:21:35:a3: 70:ac:13:a4:17:ed:13:43:11:d5:25:9b:87:fc:84: a2:92:55:20:3c:a2:8a:65:1c:0d:87:c1:7a:eb:be: 03:d5:96:34:00:cf:55:d6:a7:9b:2b:e2:70:16:56: 0b:3d:19:14:d3:d8:33:77:0b:9c:fc:b3:db:ba:e7: 1e:d4:86:c6:f0:86:31:62:e9:c8:88:7d:33:42:0a: 14:dc:a5:e3:cf:78:19:4f:de:f7:15:c1:ad:72:cb: 2b:b0:f5:08:5d:b2:f0:90:a1:c1:c1:db:9e:1f:f0: 54:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:1C:CB:2A:C9:A4:E0:09:B1:70:CF:30:F3:DB:57:11:88:01:47:55 X509v3 Authority Key Identifier: keyid:DE:BF:C9:00:ED:C3:4F:81:DA:48:27:F1:F9:F6:3D:04:E0:E2:F7:56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/3r_JAO3DT4HaSCfx-fY9BODi91Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/TxzLKsmk4AmxcM8w89tXEYgBR1U.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.240.0.0/20 Signature Algorithm: sha256WithRSAEncryption 07:d7:6b:06:5a:65:c8:9f:6f:8f:d1:c9:ec:e0:dc:21:d0:07: 58:9f:63:51:27:9b:21:37:37:ea:93:b6:ff:c8:22:64:3c:89: e6:6b:81:25:06:99:a6:91:38:b6:eb:0e:0e:93:c3:3b:b3:52: aa:06:0c:28:54:25:bf:09:79:94:1a:b6:8b:5e:07:51:d0:85: 31:ca:f9:60:00:12:07:9d:70:38:5b:fe:18:44:1a:f8:9a:f1: 4d:63:81:f2:64:81:c8:99:6e:45:01:1a:3e:52:8f:35:93:b7: 35:b5:8f:4f:06:07:63:88:6a:9d:61:fb:aa:e9:26:e7:bb:2d: 91:b1:55:16:63:c3:76:e1:fb:f9:54:0d:9b:8b:37:f6:48:8b: 38:44:e7:ee:79:36:04:86:ca:9f:9b:28:b1:4d:06:b9:13:c5: fd:d7:fc:d6:d5:f5:f9:16:bf:c5:6e:37:c5:18:5b:c4:3f:d4: 8e:62:67:cd:df:ec:3b:b4:a6:49:5b:0d:87:0c:66:6c:01:28: e8:bd:53:e9:ec:e2:6e:b4:62:2b:2c:01:4b:f4:33:ac:f2:40: a7:f5:8e:8c:15:b5:e9:4f:46:7a:99:4c:3b:f9:e5:ac:69:e3: 7b:62:8e:ab:c0:5a:bf:6f:b7:00:9f:8d:61:a7:b2:76:93:d3: 31:38:87:8f -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICCwEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREVC RkM5MDBFREMzNEY4MURBNDgyN0YxRjlGNjNEMDRFMEUyRjc1NjAeFw0yNTEwMjcw MjMxMzlaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDRGMUNDQjJBQzlBNEUw MDlCMTcwQ0YzMEYzREI1NzExODgwMTQ3NTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCr8rzG5/JMr2YTv6M6nTXZvWyBHjxxNEohHJxxmCvl4GwH7Wud qwgxJVAFI42cML3yiZplW2+cuPLBgGMPnpklZpLBd4XcDR0ZqtPkXL79GboNbaoO NhWk7OlOB5l7smhxGLu/nnYnUCcsNQ1DZWnj8N2u0rD89JY/iOzMOaEYQ+JOKOlz 29G5ki8CfmFJTc/GICE1o3CsE6QX7RNDEdUlm4f8hKKSVSA8ooplHA2HwXrrvgPV ljQAz1XWp5sr4nAWVgs9GRTT2DN3C5z8s9u65x7UhsbwhjFi6ciIfTNCChTcpePP eBlP3vcVwa1yyyuw9QhdsvCQocHB254f8FTpAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUTxzLKsmk4AmxcM8w89tXEYgBR1UwHwYDVR0jBBgwFoAU3r/JAO3DT4HaSCfx +fY9BODi91YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIz LzNyX0pBTzNEVDRIYVNDZngtZlk5Qk9EaTkxWS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvM3JfSkFPM0RUNEhhU0NmeC1mWTlCT0RpOTFZLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIzL1R4ekxLc21rNEFteGNN OHc4OXRYRVlnQlIxVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAR88AAwDQYJKoZIhvcNAQELBQADggEBAAfXawZaZcifb4/Ryezg3CHQB1ifY1En myE3N+qTtv/IImQ8ieZrgSUGmaaROLbrDg6TwzuzUqoGDChUJb8JeZQatoteB1HQ hTHK+WAAEgedcDhb/hhEGvia8U1jgfJkgciZbkUBGj5SjzWTtzW1j08GB2OIap1h +6rpJue7LZGxVRZjw3bh+/lUDZuLN/ZIizhE5+55NgSGyp+bKLFNBrkTxf3X/NbV 9fkWv8VuN8UYW8Q/1I5iZ83f7Du0pklbDYcMZmwBKOi9U+ns4m60YissAUv0M6zy QKf1jowVtelPRnqZTDv55axp43tijqvAWr9vtwCfjWGnsnaT0zE4h48= -----END CERTIFICATE-----Generated at Wed Nov 5 22:30:15 2025 by rpki-client