$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/775/gDLooqo61cW4ELEjMHUqf6lNUOo.roa File: gDLooqo61cW4ELEjMHUqf6lNUOo.roa (raw, json) Hash identifier: GKHBn3alZIpjJZe3i8slVi6XBHRZTK/7qbql7Fxl1gQ= Subject key identifier: 80:32:E8:A2:AA:3A:D5:C5:B8:10:B1:23:30:75:2A:7F:A9:4D:50:EA Certificate issuer: /CN=CD65DDFFCA490F695E12F3A53EEBAFF0EDA77050 Certificate serial: 0E4E Authority key identifier: CD:65:DD:FF:CA:49:0F:69:5E:12:F3:A5:3E:EB:AF:F0:ED:A7:70:50 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zWXd_8pJD2leEvOlPuuv8O2ncFA.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/775/gDLooqo61cW4ELEjMHUqf6lNUOo.roa Signing time: Sat 13 Sep 2025 03:04:37 +0000 ROA not before: Sat 13 Sep 2025 03:04:37 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 59078 IP address blocks: 2402:e7c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/775/zWXd_8pJD2leEvOlPuuv8O2ncFA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/775/zWXd_8pJD2leEvOlPuuv8O2ncFA.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zWXd_8pJD2leEvOlPuuv8O2ncFA.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:43:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3662 (0xe4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD65DDFFCA490F695E12F3A53EEBAFF0EDA77050 Validity Not Before: Sep 13 03:04:37 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=8032E8A2AA3AD5C5B810B12330752A7FA94D50EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0d:22:6e:39:fe:59:bb:01:7b:a2:65:8b:be: 8b:0c:b8:b2:21:79:5b:b0:a0:72:80:01:48:9e:dc: 6f:12:81:8b:c4:54:fc:13:04:3a:5a:9c:14:1b:8b: 8e:90:ef:4c:62:ae:bb:4a:09:f1:b5:6f:05:99:65: 60:9f:45:52:c9:f4:5e:fb:c9:02:ed:0b:37:d8:c4: e3:cf:4f:40:1a:d2:59:a4:81:cc:f1:a5:20:01:6c: 00:b0:fc:a4:49:0a:c3:77:8f:82:35:9e:4d:1e:52: 9d:73:d3:38:46:07:6a:65:4f:d3:67:e4:78:4c:38: 3a:c9:31:ea:ac:ca:4b:d4:fe:a4:34:89:fd:2a:9e: 6a:1d:ca:d5:9d:10:e0:4c:27:bf:62:de:af:1d:e8: 1a:f4:5f:65:17:fe:cc:d9:a8:fb:23:af:e9:31:b4: 14:a4:7d:de:97:a2:12:ba:ca:b8:67:ee:e1:b3:c0: a3:ef:39:42:47:38:ae:14:09:29:c1:41:9c:d2:8b: fc:8c:1a:9d:09:b8:8d:18:5f:c3:a5:d2:3a:c9:95: 4e:23:99:a0:2f:59:69:de:63:82:31:c2:3d:05:2f: 5b:e3:61:5d:34:c3:f9:47:98:0c:d2:d2:16:6f:48: 97:94:22:ad:fe:86:2e:3d:51:bc:5a:cf:04:64:9e: 7b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:32:E8:A2:AA:3A:D5:C5:B8:10:B1:23:30:75:2A:7F:A9:4D:50:EA X509v3 Authority Key Identifier: keyid:CD:65:DD:FF:CA:49:0F:69:5E:12:F3:A5:3E:EB:AF:F0:ED:A7:70:50 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/775/zWXd_8pJD2leEvOlPuuv8O2ncFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zWXd_8pJD2leEvOlPuuv8O2ncFA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/775/gDLooqo61cW4ELEjMHUqf6lNUOo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2402:e7c0::/32 Signature Algorithm: sha256WithRSAEncryption 7a:0a:00:33:04:81:e2:36:7f:1f:fb:76:34:4b:51:ef:db:22: 8b:67:cf:2e:ae:5c:7e:28:83:af:42:46:5c:54:d4:63:8c:1f: 51:ba:cc:b3:f0:a0:67:9e:d8:1d:66:04:cb:8c:1f:56:61:cf: 0e:fc:fb:a7:12:f1:36:16:f3:7d:c5:87:a5:25:f6:ea:ba:6c: 9c:1d:c9:56:57:d4:c4:55:8c:81:89:be:4e:76:78:6f:2e:45: ff:17:6b:59:66:10:82:d7:9b:94:9c:28:ac:c9:62:22:c4:a8: 92:d4:29:d0:05:8e:ed:a4:58:a4:d7:e8:b1:b9:7a:c9:ed:48: d5:8a:64:b9:a5:5b:54:91:1b:aa:7e:d4:7f:31:1f:b3:0f:0f: 8b:5d:d1:e6:a8:de:f7:52:4c:8f:94:43:7c:38:cc:17:83:d5: 09:e9:28:16:b8:4f:83:7d:8f:88:c2:61:6d:85:15:4c:b5:74: 4b:73:78:5f:c3:ff:c5:aa:07:6a:25:51:4f:9d:76:c5:fd:73: 26:e2:c5:4d:65:79:1d:42:e8:f7:d8:99:7a:6e:13:7e:5c:af: 28:d8:56:48:d3:05:95:ee:de:0d:f9:d4:24:08:80:58:6b:ad: b4:81:32:bc:21:7a:d6:f7:b4:02:85:bc:ab:aa:55:77:ec:15: 26:72:5d:99 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICDk4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Q2 NURERkZDQTQ5MEY2OTVFMTJGM0E1M0VFQkFGRjBFREE3NzA1MDAeFw0yNTA5MTMw MzA0MzdaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDgwMzJFOEEyQUEzQUQ1 QzVCODEwQjEyMzMwNzUyQTdGQTk0RDUwRUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMDSJuOf5ZuwF7omWLvosMuLIheVuwoHKAAUie3G8SgYvEVPwT BDpanBQbi46Q70xirrtKCfG1bwWZZWCfRVLJ9F77yQLtCzfYxOPPT0Aa0lmkgczx pSABbACw/KRJCsN3j4I1nk0eUp1z0zhGB2plT9Nn5HhMODrJMeqsykvU/qQ0if0q nmodytWdEOBMJ79i3q8d6Br0X2UX/szZqPsjr+kxtBSkfd6XohK6yrhn7uGzwKPv OUJHOK4UCSnBQZzSi/yMGp0JuI0YX8Ol0jrJlU4jmaAvWWneY4Ixwj0FL1vjYV00 w/lHmAzS0hZvSJeUIq3+hi49UbxazwRknnsRAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUgDLooqo61cW4ELEjMHUqf6lNUOowHwYDVR0jBBgwFoAUzWXd/8pJD2leEvOl Puuv8O2ncFAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzc1 L3pXWGRfOHBKRDJsZUV2T2xQdXV2OE8ybmNGQS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAveldYZF84cEpEMmxlRXZPbFB1dXY4TzJuY0ZBLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzc1L2dETG9vcW82MWNXNEVM RWpNSFVxZjZsTlVPby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcD BQAkAufAMA0GCSqGSIb3DQEBCwUAA4IBAQB6CgAzBIHiNn8f+3Y0S1Hv2yKLZ88u rlx+KIOvQkZcVNRjjB9Rusyz8KBnntgdZgTLjB9WYc8O/PunEvE2FvN9xYelJfbq umycHclWV9TEVYyBib5OdnhvLkX/F2tZZhCC15uUnCisyWIixKiS1CnQBY7tpFik 1+ixuXrJ7UjVimS5pVtUkRuqftR/MR+zDw+LXdHmqN73UkyPlEN8OMwXg9UJ6SgW uE+DfY+IwmFthRVMtXRLc3hfw//FqgdqJVFPnXbF/XMm4sVNZXkdQuj32Jl6bhN+ XK8o2FZI0wWV7t4N+dQkCIBYa620gTK8IXrW97QChbyrqlV37BUmcl2Z -----END CERTIFICATE-----Generated at Fri Nov 7 12:37:55 2025 by rpki-client