$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/623/bufXhGFZUhYOqh528brqSFn2dOA.roa File: bufXhGFZUhYOqh528brqSFn2dOA.roa (raw, json) Hash identifier: Qtg4shD+sK4mNzSq5RMxkVODtlQ8rguB5r/et39YrKM= Subject key identifier: 6E:E7:D7:84:61:59:52:16:0E:AA:1E:76:F1:BA:EA:48:59:F6:74:E0 Certificate issuer: /CN=DEBFC900EDC34F81DA4827F1F9F63D04E0E2F756 Certificate serial: 0B12 Authority key identifier: DE:BF:C9:00:ED:C3:4F:81:DA:48:27:F1:F9:F6:3D:04:E0:E2:F7:56 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/bufXhGFZUhYOqh528brqSFn2dOA.roa Signing time: Mon 27 Oct 2025 02:39:24 +0000 ROA not before: Mon 27 Oct 2025 02:39:24 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 58834 IP address blocks: 203.132.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/3r_JAO3DT4HaSCfx-fY9BODi91Y.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/3r_JAO3DT4HaSCfx-fY9BODi91Y.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2834 (0xb12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEBFC900EDC34F81DA4827F1F9F63D04E0E2F756 Validity Not Before: Oct 27 02:39:24 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=6EE7D784615952160EAA1E76F1BAEA4859F674E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:96:94:5d:01:75:43:89:6a:f2:12:83:d8:1e: c8:c0:56:34:a1:9b:7b:49:3b:81:e2:3d:1f:d5:f5: 7f:4b:09:f5:0b:54:fc:f8:f4:3d:3e:7e:b2:b2:7d: 59:05:70:fb:bc:a3:12:17:b0:92:29:39:78:62:81: 58:7c:04:8a:bd:e4:c3:06:b7:c4:e0:a7:7b:88:85: a2:7f:2b:fd:27:93:15:fb:52:c1:8f:f0:d2:5c:50: b6:4a:c2:7e:f2:25:b2:51:84:4e:82:a8:f0:48:cc: 0c:06:a6:b1:c7:dc:a6:08:56:a2:39:2f:34:74:54: 5a:5e:66:ac:c9:fb:be:2b:dc:c5:f1:d4:8e:c1:24: e5:b9:84:f8:74:5d:cd:9a:25:9a:6e:f4:05:25:fa: 2e:77:8e:7b:9a:a3:b4:f9:b8:ab:3a:7f:2e:b2:9c: a2:82:00:04:8d:59:7b:fe:c0:4c:b5:0d:af:94:79: 0a:77:a4:12:7c:7d:6c:33:2c:c7:0c:18:f9:98:bf: ce:99:e7:19:03:69:f7:45:17:20:81:ed:40:09:ab: 35:60:2c:78:0d:a1:49:b1:32:f7:d0:47:17:9b:4a: e0:77:b2:60:fc:3a:e2:f7:3c:64:53:b1:14:ad:7c: 55:6b:75:57:44:24:72:49:db:df:e9:7e:11:95:57: 00:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:E7:D7:84:61:59:52:16:0E:AA:1E:76:F1:BA:EA:48:59:F6:74:E0 X509v3 Authority Key Identifier: keyid:DE:BF:C9:00:ED:C3:4F:81:DA:48:27:F1:F9:F6:3D:04:E0:E2:F7:56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/3r_JAO3DT4HaSCfx-fY9BODi91Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/bufXhGFZUhYOqh528brqSFn2dOA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.132.56.0/21 Signature Algorithm: sha256WithRSAEncryption 03:d7:23:e7:26:ef:f7:92:ba:30:45:b5:e6:5b:4d:6f:40:57: 53:a2:47:3d:35:3e:d9:5d:e3:cb:a5:35:d0:85:2c:c5:c7:a8: 35:c2:12:17:47:68:ec:4e:a6:6e:1b:13:cc:3b:71:e1:ac:32: 82:e4:c4:03:be:99:9a:52:b1:b2:db:32:78:56:c2:47:12:30: d6:2f:75:2a:a2:cb:37:8a:78:6b:dc:d5:70:80:eb:0e:b8:ea: a9:1d:51:38:4e:eb:85:7b:7f:0e:72:8f:4c:a2:28:90:7a:67: d4:e6:cc:10:e2:31:f1:06:0c:d1:90:86:00:3a:c6:8f:7e:80: 06:78:d9:70:13:23:e9:4a:18:49:23:64:4c:b8:65:6d:30:2c: 5b:88:f8:b0:44:b6:41:16:d9:ef:22:b6:6f:30:2f:9f:46:04: 0f:70:87:72:12:7e:88:2e:01:30:69:54:e7:f4:1a:f7:52:8d: 99:2d:eb:f8:3b:29:88:6d:8b:b4:e1:c7:3f:38:47:07:d2:bd: 1e:3f:c7:79:02:4a:bb:f6:e3:c4:57:9e:a0:ec:9a:66:10:71: 07:c3:47:98:8b:52:17:a6:68:54:12:cb:71:39:85:3b:d5:2f: 03:f5:18:06:46:a1:f8:f4:08:4c:ef:56:a6:dc:fb:70:ba:59: dc:04:7d:5f -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICCxIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREVC RkM5MDBFREMzNEY4MURBNDgyN0YxRjlGNjNEMDRFMEUyRjc1NjAeFw0yNTEwMjcw MjM5MjRaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDZFRTdENzg0NjE1OTUy MTYwRUFBMUU3NkYxQkFFQTQ4NTlGNjc0RTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDlpRdAXVDiWryEoPYHsjAVjShm3tJO4HiPR/V9X9LCfULVPz4 9D0+frKyfVkFcPu8oxIXsJIpOXhigVh8BIq95MMGt8Tgp3uIhaJ/K/0nkxX7UsGP 8NJcULZKwn7yJbJRhE6CqPBIzAwGprHH3KYIVqI5LzR0VFpeZqzJ+74r3MXx1I7B JOW5hPh0Xc2aJZpu9AUl+i53jnuao7T5uKs6fy6ynKKCAASNWXv+wEy1Da+UeQp3 pBJ8fWwzLMcMGPmYv86Z5xkDafdFFyCB7UAJqzVgLHgNoUmxMvfQRxebSuB3smD8 OuL3PGRTsRStfFVrdVdEJHJJ29/pfhGVVwBzAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUbufXhGFZUhYOqh528brqSFn2dOAwHwYDVR0jBBgwFoAU3r/JAO3DT4HaSCfx +fY9BODi91YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIz LzNyX0pBTzNEVDRIYVNDZngtZlk5Qk9EaTkxWS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvM3JfSkFPM0RUNEhhU0NmeC1mWTlCT0RpOTFZLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIzL2J1ZlhoR0ZaVWhZT3Fo NTI4YnJxU0ZuMmRPQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAPLhDgwDQYJKoZIhvcNAQELBQADggEBAAPXI+cm7/eSujBFteZbTW9AV1OiRz01 Ptld48ulNdCFLMXHqDXCEhdHaOxOpm4bE8w7ceGsMoLkxAO+mZpSsbLbMnhWwkcS MNYvdSqiyzeKeGvc1XCA6w646qkdUThO64V7fw5yj0yiKJB6Z9TmzBDiMfEGDNGQ hgA6xo9+gAZ42XATI+lKGEkjZEy4ZW0wLFuI+LBEtkEW2e8itm8wL59GBA9wh3IS foguATBpVOf0GvdSjZkt6/g7KYhti7Thxz84RwfSvR4/x3kCSrv248RXnqDsmmYQ cQfDR5iLUhemaFQSy3E5hTvVLwP1GAZGofj0CEzvVqbc+3C6WdwEfV8= -----END CERTIFICATE-----Generated at Wed Nov 5 23:58:23 2025 by rpki-client