$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1211/czz2PRoRcCOkERcLyhrs5z2AseM.roa File: czz2PRoRcCOkERcLyhrs5z2AseM.roa (raw, json) Hash identifier: tkzuxr75X7aghKS2WD2mYAdB+2Suk3zTC8Z0VtMhE+0= Subject key identifier: 73:3C:F6:3D:1A:11:70:23:A4:11:17:0B:CA:1A:EC:E7:3D:80:B1:E3 Certificate issuer: /CN=183D882201945BE13993B4C6DAC954F8EE426C97 Certificate serial: 1404 Authority key identifier: 18:3D:88:22:01:94:5B:E1:39:93:B4:C6:DA:C9:54:F8:EE:42:6C:97 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GD2IIgGUW-E5k7TG2slU-O5CbJc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/czz2PRoRcCOkERcLyhrs5z2AseM.roa Signing time: Sat 13 Sep 2025 03:06:55 +0000 ROA not before: Sat 13 Sep 2025 03:06:55 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 63701 IP address blocks: 2407:4980::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/GD2IIgGUW-E5k7TG2slU-O5CbJc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/GD2IIgGUW-E5k7TG2slU-O5CbJc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GD2IIgGUW-E5k7TG2slU-O5CbJc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 13:36:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5124 (0x1404) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=183D882201945BE13993B4C6DAC954F8EE426C97 Validity Not Before: Sep 13 03:06:55 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=733CF63D1A117023A411170BCA1AECE73D80B1E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2f:47:48:62:a7:a6:16:a8:37:11:1e:9d:7d: 0b:55:bf:75:a8:85:3b:27:dc:79:2e:bc:9c:17:15: 62:b3:dc:bf:7a:59:48:3f:e3:3b:df:eb:0b:c2:90: 3c:e7:e2:ff:82:2c:fe:96:60:7f:b3:a9:2b:cb:02: 46:2a:aa:8c:97:86:ff:2d:f2:15:43:44:db:2a:11: 49:b9:24:c0:35:8e:29:a5:4e:e4:fb:ae:95:de:6a: 9f:05:11:8a:23:e0:85:7c:7d:1c:9d:e1:4d:27:c8: 15:54:d9:38:c5:04:0c:3b:df:cd:bd:40:8e:22:66: 4f:dd:30:0b:c6:4f:de:93:96:84:de:7b:5d:8a:c0: c5:e4:bf:b8:be:f5:0a:a4:f5:6d:6e:30:2b:b5:19: 15:e0:cc:bc:25:76:c7:1e:9b:a0:ce:0b:5f:c8:18: 75:8c:6e:7d:12:d6:9a:db:86:e7:85:7c:d5:d0:bb: c1:36:b6:d5:cc:b8:c8:93:50:91:2f:1f:ea:08:8b: 50:a3:74:e7:a3:49:b3:d1:b4:45:85:06:57:67:01: 21:62:d5:c6:38:e3:ec:0b:f7:ea:ea:1c:f2:43:cb: 49:52:4e:1f:7e:56:ca:01:bb:51:ff:a8:5c:da:19: 27:a5:ce:f0:ac:3c:6e:d1:36:30:52:73:f9:a3:a0: 45:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:3C:F6:3D:1A:11:70:23:A4:11:17:0B:CA:1A:EC:E7:3D:80:B1:E3 X509v3 Authority Key Identifier: keyid:18:3D:88:22:01:94:5B:E1:39:93:B4:C6:DA:C9:54:F8:EE:42:6C:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/GD2IIgGUW-E5k7TG2slU-O5CbJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GD2IIgGUW-E5k7TG2slU-O5CbJc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/czz2PRoRcCOkERcLyhrs5z2AseM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:4980::/32 Signature Algorithm: sha256WithRSAEncryption 56:8c:81:9c:91:bc:1d:30:61:fa:a5:71:36:30:d9:ed:28:13: 28:0d:3f:4a:53:d2:23:70:1c:69:8d:b5:76:d2:81:38:28:e5: 72:9b:0c:4b:2b:73:99:32:1e:49:9f:51:91:a6:cd:ef:ee:b9: 68:98:78:e2:69:0c:aa:32:54:02:80:83:95:1b:09:b8:04:f0: 86:e7:c6:1f:4f:80:03:ac:d2:53:ee:25:f8:b9:65:b6:3c:15: 8c:4f:31:b7:72:18:06:be:51:4e:9a:d4:e1:be:86:86:56:39: b9:cd:5b:3c:94:ee:b4:41:88:85:f6:27:66:8a:76:f5:66:3c: 5a:8b:fc:45:66:a6:60:67:f0:33:d5:30:9d:52:c9:0b:67:43: a7:6d:ae:98:58:71:85:77:8b:de:f3:ba:56:4d:9b:b9:ef:c0: 5d:4b:ae:33:b3:29:bc:3a:9f:a6:50:a8:16:36:7e:60:93:3d: 86:95:c4:12:05:fb:d8:67:db:f5:45:7e:a2:f8:4b:5e:83:33: d2:21:01:a1:93:b7:34:08:57:0f:c4:bb:2d:4b:11:70:39:a6: d5:57:0d:6b:52:43:0c:2e:52:15:08:45:ad:b7:73:9a:74:5b: dc:07:09:4c:7d:7c:74:93:c4:28:72:69:96:4b:75:b6:31:87: ef:1a:1f:44 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICFAQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTgz RDg4MjIwMTk0NUJFMTM5OTNCNEM2REFDOTU0RjhFRTQyNkM5NzAeFw0yNTA5MTMw MzA2NTVaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDczM0NGNjNEMUExMTcw MjNBNDExMTcwQkNBMUFFQ0U3M0Q4MEIxRTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCaL0dIYqemFqg3ER6dfQtVv3WohTsn3HkuvJwXFWKz3L96WUg/ 4zvf6wvCkDzn4v+CLP6WYH+zqSvLAkYqqoyXhv8t8hVDRNsqEUm5JMA1jimlTuT7 rpXeap8FEYoj4IV8fRyd4U0nyBVU2TjFBAw73829QI4iZk/dMAvGT96TloTee12K wMXkv7i+9Qqk9W1uMCu1GRXgzLwldscem6DOC1/IGHWMbn0S1prbhueFfNXQu8E2 ttXMuMiTUJEvH+oIi1CjdOejSbPRtEWFBldnASFi1cY44+wL9+rqHPJDy0lSTh9+ VsoBu1H/qFzaGSelzvCsPG7RNjBSc/mjoEXFAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUczz2PRoRcCOkERcLyhrs5z2AseMwHwYDVR0jBBgwFoAUGD2IIgGUW+E5k7TG 2slU+O5CbJcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIx MS9HRDJJSWdHVVctRTVrN1RHMnNsVS1PNUNiSmMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0dEMklJZ0dVVy1FNWs3VEcyc2xVLU81Q2JKYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEyMTEvY3p6MlBSb1JjQ09r RVJjTHlocnM1ejJBc2VNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQHSYAwDQYJKoZIhvcNAQELBQADggEBAFaMgZyRvB0wYfqlcTYw2e0oEygN P0pT0iNwHGmNtXbSgTgo5XKbDEsrc5kyHkmfUZGmze/uuWiYeOJpDKoyVAKAg5Ub CbgE8Ibnxh9PgAOs0lPuJfi5ZbY8FYxPMbdyGAa+UU6a1OG+hoZWObnNWzyU7rRB iIX2J2aKdvVmPFqL/EVmpmBn8DPVMJ1SyQtnQ6dtrphYcYV3i97zulZNm7nvwF1L rjOzKbw6n6ZQqBY2fmCTPYaVxBIF+9hn2/VFfqL4S16DM9IhAaGTtzQIVw/Euy1L EXA5ptVXDWtSQwwuUhUIRa23c5p0W9wHCUx9fHSTxChyaZZLdbYxh+8aH0Q= -----END CERTIFICATE-----Generated at Tue Oct 21 11:28:40 2025 by rpki-client