
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/846/SZVv0d8wmaj2M9td0BSd4841GMs.roa
File: SZVv0d8wmaj2M9td0BSd4841GMs.roa (raw, json)
Hash identifier: WIihbieqLoWkrNlubEmmUEkPBvTK3qRwJxS+f+cCACY=
Subject key identifier: 49:95:6F:D1:DF:30:99:A8:F6:33:DB:5D:D0:14:9D:E3:CE:35:18:CB
Certificate issuer: /CN=88A408EEB5D3A6FE2CB928C50C9FB6802F90267F
Certificate serial: 10
Authority key identifier: 88:A4:08:EE:B5:D3:A6:FE:2C:B9:28:C5:0C:9F:B6:80:2F:90:26:7F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iKQI7rXTpv4suSjFDJ-2gC-QJn8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/846/SZVv0d8wmaj2M9td0BSd4841GMs.roa
Signing time: Thu 23 Oct 2025 00:33:28 +0000
ROA not before: Thu 23 Oct 2025 00:33:28 +0000
ROA not after: Wed 21 Oct 2026 02:14:57 +0000
asID: 59073
IP address blocks: 2402:93c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/846/iKQI7rXTpv4suSjFDJ-2gC-QJn8.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/846/iKQI7rXTpv4suSjFDJ-2gC-QJn8.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iKQI7rXTpv4suSjFDJ-2gC-QJn8.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 13:43:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88A408EEB5D3A6FE2CB928C50C9FB6802F90267F
Validity
Not Before: Oct 23 00:33:28 2025 GMT
Not After : Oct 21 02:14:57 2026 GMT
Subject: CN=49956FD1DF3099A8F633DB5DD0149DE3CE3518CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c6:3d:e2:86:63:54:e2:5f:54:84:75:e5:e2:
8d:bf:98:01:db:94:e8:b2:35:18:36:66:30:da:47:
43:08:22:69:ce:4b:8e:98:22:98:5e:43:a4:bd:c7:
4b:d9:1c:6e:93:d1:08:8f:bc:7b:53:4e:28:b6:de:
03:73:9c:b5:fc:ee:67:37:4c:5d:be:5d:f4:03:1a:
46:7c:99:33:a0:3b:f2:ed:98:9d:45:1a:1d:2f:f2:
86:b2:21:c1:5a:d2:61:8c:ab:6e:53:91:fc:c1:b4:
82:97:93:0f:1c:42:e0:a8:b9:44:fe:6a:9e:86:06:
54:f8:ac:f5:ee:d3:b1:57:c8:88:8e:bd:67:6c:ca:
ae:26:a3:3d:b3:dc:d4:e6:bc:a1:3d:79:2b:90:57:
6e:29:21:51:6c:61:c7:eb:3f:59:3d:60:1f:12:4e:
f6:6c:39:a3:8f:e6:36:2f:62:10:bc:de:3b:25:91:
49:17:84:09:e3:7b:79:87:39:05:9a:95:15:bc:88:
d8:15:e0:be:14:57:66:26:3d:62:67:45:1e:2e:f5:
90:59:7c:91:4b:eb:55:aa:9a:d1:1f:c1:e9:01:29:
56:f6:c7:d2:b3:0a:e2:29:5e:ec:48:c7:54:01:42:
cc:dc:49:f4:40:f6:8b:a0:1f:f9:0a:4c:cc:42:c7:
b2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:95:6F:D1:DF:30:99:A8:F6:33:DB:5D:D0:14:9D:E3:CE:35:18:CB
X509v3 Authority Key Identifier:
keyid:88:A4:08:EE:B5:D3:A6:FE:2C:B9:28:C5:0C:9F:B6:80:2F:90:26:7F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/846/iKQI7rXTpv4suSjFDJ-2gC-QJn8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iKQI7rXTpv4suSjFDJ-2gC-QJn8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/846/SZVv0d8wmaj2M9td0BSd4841GMs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:93c0::/48
Signature Algorithm: sha256WithRSAEncryption
82:77:78:f1:d3:3a:42:31:cc:8f:78:be:66:65:e5:95:b9:a4:
9a:e6:0b:42:da:fd:e7:1d:62:a8:81:11:08:c5:43:ea:d6:0c:
54:f0:6b:f8:ed:d2:32:53:af:d3:d8:20:d5:a8:2f:8b:7a:d8:
90:c4:df:0e:14:e1:e0:00:5c:48:d6:ff:98:fc:4b:df:07:01:
f6:9c:dd:8d:9b:66:49:10:ea:5a:d5:0d:01:d9:35:0c:ef:ae:
fb:28:c9:2a:28:05:da:16:9e:9d:7d:13:58:77:88:7b:88:5f:
3c:4a:26:98:c7:8a:e5:8e:28:15:c4:79:1f:96:54:02:10:3c:
71:55:45:e0:88:31:6e:b8:43:93:24:38:d2:58:34:e4:f2:f3:
60:c4:13:2f:db:fd:58:f9:1a:82:34:f4:0a:c0:4a:5e:71:81:
30:95:91:2f:1b:98:82:de:d0:76:be:d9:18:b2:e5:2d:71:da:
87:6c:15:1d:82:dd:6d:37:bf:46:22:85:4f:bb:1e:62:7d:48:
e6:31:7d:a7:37:a3:27:86:02:5a:b0:18:31:35:15:a5:aa:34:
cc:9c:4a:57:58:24:4c:9c:b9:55:75:88:2b:29:61:4a:83:af:
cb:22:38:84:bc:6c:a0:a0:6a:da:4c:ae:a5:eb:f5:03:dc:89:
0e:45:84:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 12:39:02 2025 by rpki-client