$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/623/wTHDbEqPkCAckFGTN-YMrwaEC74.roa File: wTHDbEqPkCAckFGTN-YMrwaEC74.roa (raw, json) Hash identifier: wD2eg9ZTNXcFnX24ewMgdi8JjNLFf89JIsWn2tUcZRU= Subject key identifier: C1:31:C3:6C:4A:8F:90:20:1C:90:51:93:37:E6:0C:AF:06:84:0B:BE Certificate issuer: /CN=DEBFC900EDC34F81DA4827F1F9F63D04E0E2F756 Certificate serial: 0B0E Authority key identifier: DE:BF:C9:00:ED:C3:4F:81:DA:48:27:F1:F9:F6:3D:04:E0:E2:F7:56 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/wTHDbEqPkCAckFGTN-YMrwaEC74.roa Signing time: Mon 27 Oct 2025 02:39:23 +0000 ROA not before: Mon 27 Oct 2025 02:39:23 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 58834 IP address blocks: 203.132.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/3r_JAO3DT4HaSCfx-fY9BODi91Y.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/3r_JAO3DT4HaSCfx-fY9BODi91Y.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 23:43:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2830 (0xb0e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEBFC900EDC34F81DA4827F1F9F63D04E0E2F756 Validity Not Before: Oct 27 02:39:23 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=C131C36C4A8F90201C90519337E60CAF06840BBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:d4:f6:22:cd:70:a2:51:17:e6:75:74:c3:43: bd:95:62:c2:eb:12:55:d1:e6:bd:68:ec:89:1c:56: c2:85:b1:52:4a:1b:2b:8e:ca:e2:2e:5c:3a:7f:02: ac:dd:3a:42:41:f2:39:ba:82:89:34:0f:11:09:dd: 83:3e:a6:e3:22:68:7e:19:5a:0a:3a:11:ad:14:6f: 02:ef:57:18:5b:ce:b0:62:a7:c3:43:f0:02:fb:d1: 67:c3:1e:2b:69:d1:37:aa:ba:b9:8d:9d:82:df:c4: 9c:24:f3:cc:91:81:c9:2c:7c:99:09:fe:ae:55:42: 7f:3b:bf:ff:9e:8f:10:a3:c4:78:7a:0f:63:69:14: 38:04:68:f1:de:3d:ed:14:bb:6d:29:56:14:cd:12: fa:58:60:7e:1d:21:f6:be:3e:47:33:ff:f2:34:d4: ad:93:0b:d7:67:d6:58:80:be:83:76:5d:f8:e7:55: 88:50:1b:93:57:73:0e:41:fa:c3:c8:08:6c:52:ac: 3a:9c:d0:ea:04:60:bb:45:e3:fa:7e:3e:34:74:7a: e5:a3:60:7f:0e:45:3d:31:d7:e6:e6:35:20:61:b2: c4:61:21:db:2c:0a:08:0b:92:f5:87:90:eb:f9:58: f2:28:40:df:34:27:cc:25:b8:46:1d:53:e7:a4:2b: 22:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:31:C3:6C:4A:8F:90:20:1C:90:51:93:37:E6:0C:AF:06:84:0B:BE X509v3 Authority Key Identifier: keyid:DE:BF:C9:00:ED:C3:4F:81:DA:48:27:F1:F9:F6:3D:04:E0:E2:F7:56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/3r_JAO3DT4HaSCfx-fY9BODi91Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/wTHDbEqPkCAckFGTN-YMrwaEC74.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.132.48.0/20 Signature Algorithm: sha256WithRSAEncryption 82:e6:f1:81:b7:34:a9:0b:ee:de:42:d7:84:8a:25:84:01:00: ec:cc:d8:f8:3a:a5:77:66:f7:00:ce:ad:81:02:2b:01:34:52: b6:d0:cd:7f:74:4a:3c:e4:d3:bb:0e:ed:97:7a:8e:f5:6f:37: 59:3c:70:a9:58:a8:ab:4b:1e:0c:77:95:e9:9f:65:7d:e6:8b: 9e:b0:2f:aa:bb:11:1d:4f:93:ac:e8:69:79:d6:40:74:37:40: dd:f8:ac:f1:9d:c4:16:21:f1:8a:2c:e3:12:3c:61:40:4b:3f: ea:f3:fe:91:67:d5:c6:d3:98:68:58:8d:9b:6a:a7:c3:4e:cb: ad:c2:e7:05:f5:71:a3:78:71:1d:91:c9:cf:85:31:52:22:02: 4e:e3:22:64:cc:a3:1d:78:27:e1:04:e3:f9:fa:4e:f4:1f:3d: e2:8e:d0:75:e1:20:be:61:25:1d:5c:ef:ca:03:7f:2b:af:53: 8d:b6:a1:e5:39:d9:54:5c:dd:c7:d0:b8:74:d0:61:ad:97:5e: 42:83:16:81:38:1d:8b:c0:00:9b:d8:ec:35:f4:e8:93:f3:88: 5d:4f:f8:8d:2c:ed:c6:96:28:b9:b5:14:2f:6f:ff:21:8a:a6: 11:2b:e1:4d:c0:74:5e:a5:96:f2:c7:af:44:24:c4:ff:01:cd: 22:01:49:19 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICCw4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREVC RkM5MDBFREMzNEY4MURBNDgyN0YxRjlGNjNEMDRFMEUyRjc1NjAeFw0yNTEwMjcw MjM5MjNaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEMxMzFDMzZDNEE4Rjkw MjAxQzkwNTE5MzM3RTYwQ0FGMDY4NDBCQkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD21PYizXCiURfmdXTDQ72VYsLrElXR5r1o7IkcVsKFsVJKGyuO yuIuXDp/AqzdOkJB8jm6gok0DxEJ3YM+puMiaH4ZWgo6Ea0UbwLvVxhbzrBip8ND 8AL70WfDHitp0TequrmNnYLfxJwk88yRgcksfJkJ/q5VQn87v/+ejxCjxHh6D2Np FDgEaPHePe0Uu20pVhTNEvpYYH4dIfa+Pkcz//I01K2TC9dn1liAvoN2XfjnVYhQ G5NXcw5B+sPICGxSrDqc0OoEYLtF4/p+PjR0euWjYH8ORT0x1+bmNSBhssRhIdss CggLkvWHkOv5WPIoQN80J8wluEYdU+ekKyJdAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUwTHDbEqPkCAckFGTN+YMrwaEC74wHwYDVR0jBBgwFoAU3r/JAO3DT4HaSCfx +fY9BODi91YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIz LzNyX0pBTzNEVDRIYVNDZngtZlk5Qk9EaTkxWS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvM3JfSkFPM0RUNEhhU0NmeC1mWTlCT0RpOTFZLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIzL3dUSERiRXFQa0NBY2tG R1ROLVlNcndhRUM3NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BATLhDAwDQYJKoZIhvcNAQELBQADggEBAILm8YG3NKkL7t5C14SKJYQBAOzM2Pg6 pXdm9wDOrYECKwE0UrbQzX90Sjzk07sO7Zd6jvVvN1k8cKlYqKtLHgx3lemfZX3m i56wL6q7ER1Pk6zoaXnWQHQ3QN34rPGdxBYh8Yos4xI8YUBLP+rz/pFn1cbTmGhY jZtqp8NOy63C5wX1caN4cR2Ryc+FMVIiAk7jImTMox14J+EE4/n6TvQfPeKO0HXh IL5hJR1c78oDfyuvU422oeU52VRc3cfQuHTQYa2XXkKDFoE4HYvAAJvY7DX06JPz iF1P+I0s7caWKLm1FC9v/yGKphEr4U3AdF6llvLHr0QkxP8BzSIBSRk= -----END CERTIFICATE-----Generated at Wed Nov 5 22:30:16 2025 by rpki-client