$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1232/ApSjw0OvsN4O70l2eOh-cH84plw.roa File: ApSjw0OvsN4O70l2eOh-cH84plw.roa (raw, json) Hash identifier: v2pee83wb+K7wnhg26ptskD5UZvkEqhpNv+PgpXtUQM= Subject key identifier: 02:94:A3:C3:43:AF:B0:DE:0E:EF:49:76:78:E8:7E:70:7F:38:A6:5C Certificate issuer: /CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4 Certificate serial: 2B Authority key identifier: F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/ApSjw0OvsN4O70l2eOh-cH84plw.roa Signing time: Fri 22 Aug 2025 06:27:17 +0000 ROA not before: Fri 22 Aug 2025 06:27:17 +0000 ROA not after: Thu 20 Aug 2026 07:49:18 +0000 asID: 63583 IP address blocks: 45.120.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 04:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4 Validity Not Before: Aug 22 06:27:17 2025 GMT Not After : Aug 20 07:49:18 2026 GMT Subject: CN=0294A3C343AFB0DE0EEF497678E87E707F38A65C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bc:c5:b0:14:23:e4:46:89:b8:1e:ad:38:ac: ca:e0:c8:49:38:44:c3:18:29:07:84:b1:d4:db:d3: 64:2a:ff:9e:32:2c:21:4e:08:d7:03:1b:de:58:f5: 68:2e:73:77:ed:2d:c2:bf:65:6e:d3:64:7d:1d:51: bf:77:73:8b:21:be:cd:b1:38:14:60:38:a9:3a:e1: 0b:58:e8:f8:a1:c5:2c:77:65:4f:65:fe:17:a8:72: 14:6d:75:06:4d:65:6a:a3:ac:6b:da:41:92:12:09: be:6f:13:f0:4a:f5:e9:62:fc:a6:48:46:12:7c:ef: e4:8b:2c:f2:0d:12:cf:c4:0c:6b:e8:a1:ae:fd:24: 70:34:d9:0c:59:59:3f:e3:d8:ee:ef:75:ec:6f:5d: 93:d6:2d:c9:e7:78:15:d4:6a:49:a5:2b:4e:fa:c6: 43:32:6e:47:bf:6f:0e:54:b9:4b:08:38:0f:05:3a: 43:b3:a5:fe:f8:c6:a1:f8:0b:a5:cf:e2:73:3e:c9: 36:69:8e:1d:56:f1:67:71:d1:c7:5f:21:fe:04:41: 58:90:ce:aa:f3:0b:5c:d8:2a:97:45:22:81:b1:5b: ec:cf:e2:7b:a3:de:c1:b7:9b:d9:03:b6:6a:44:62: 92:5b:93:bc:7d:2b:33:11:c4:91:e9:72:d1:3f:2b: 06:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:94:A3:C3:43:AF:B0:DE:0E:EF:49:76:78:E8:7E:70:7F:38:A6:5C X509v3 Authority Key Identifier: keyid:F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/ApSjw0OvsN4O70l2eOh-cH84plw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.120.242.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:e4:3a:18:51:22:22:49:f8:d2:cb:8a:c3:a7:db:0a:13:91: 36:66:46:cc:4b:09:98:8e:0e:fa:a8:fe:59:dd:0c:c8:e6:a0: ef:0f:7f:62:5c:01:46:37:a0:78:4e:cb:81:16:27:55:17:9d: d2:12:50:14:05:b6:fe:3a:83:15:e2:b4:d3:02:ac:5b:c6:4f: a3:84:bf:06:80:ed:60:a2:65:92:9c:cc:f9:e4:f7:09:49:47: 91:f1:9f:0e:88:28:ac:e5:7f:a7:f9:81:9a:38:ee:e3:51:c4: 98:f4:71:64:c0:64:55:ba:49:c4:2b:2c:44:f9:97:25:2f:86: f8:d5:fb:2a:f5:b3:d2:da:e4:ad:54:6b:59:9d:93:a8:f5:0b: df:86:a4:3a:70:cb:8e:0e:c1:f0:ac:18:52:3b:06:96:87:c4: 8b:43:b3:ce:bc:e3:65:02:2d:1b:9f:24:5c:0b:7a:a8:0c:14: e5:b1:4e:aa:f7:46:c3:e7:42:95:e7:43:32:de:d3:2a:a2:1b: db:05:83:c3:38:3f:6b:84:43:b2:9f:e9:dc:bf:bc:f1:5d:1a: 95:c4:c3:e0:31:1d:4c:57:14:65:41:ec:e4:f4:de:24:6d:0f: d1:7d:2b:76:c1:c7:be:78:a4:b8:5e:a0:ff:6b:34:66:5d:eb: 04:a0:25:7f -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBKzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGMTk4 OUI0MDY5MDFBREY4ODEwQjlEQ0RDNEUwRkM5RTdFODVFRUI0MB4XDTI1MDgyMjA2 MjcxN1oXDTI2MDgyMDA3NDkxOFowMzExMC8GA1UEAxMoMDI5NEEzQzM0M0FGQjBE RTBFRUY0OTc2NzhFODdFNzA3RjM4QTY1QzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM28xbAUI+RGibgerTisyuDISThEwxgpB4Sx1NvTZCr/njIsIU4I 1wMb3lj1aC5zd+0twr9lbtNkfR1Rv3dziyG+zbE4FGA4qTrhC1jo+KHFLHdlT2X+ F6hyFG11Bk1laqOsa9pBkhIJvm8T8Er16WL8pkhGEnzv5Iss8g0Sz8QMa+ihrv0k cDTZDFlZP+PY7u917G9dk9Ytyed4FdRqSaUrTvrGQzJuR79vDlS5Swg4DwU6Q7Ol /vjGofgLpc/icz7JNmmOHVbxZ3HRx18h/gRBWJDOqvMLXNgql0UigbFb7M/ie6Pe wbeb2QO2akRikluTvH0rMxHEkely0T8rBgcCAwEAAaOCAfMwggHvMB0GA1UdDgQW BBQClKPDQ6+w3g7vSXZ46H5wfzimXDAfBgNVHSMEGDAWgBTxmJtAaQGt+IELnc3E 4PyefoXutDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xMjMy LzhaaWJRR2tCcmZpQkM1M054T0Q4bm42RjdyUS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOFppYlFHa0JyZmlCQzUzTnhPRDhubjZGN3JRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIzMi9BcFNqdzBPdnNONE83 MGwyZU9oLWNIODRwbHcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQALXjyMA0GCSqGSIb3DQEBCwUAA4IBAQAM5DoYUSIiSfjSy4rDp9sKE5E2ZkbM SwmYjg76qP5Z3QzI5qDvD39iXAFGN6B4TsuBFidVF53SElAUBbb+OoMV4rTTAqxb xk+jhL8GgO1gomWSnMz55PcJSUeR8Z8OiCis5X+n+YGaOO7jUcSY9HFkwGRVuknE KyxE+ZclL4b41fsq9bPS2uStVGtZnZOo9QvfhqQ6cMuODsHwrBhSOwaWh8SLQ7PO vONlAi0bnyRcC3qoDBTlsU6q90bD50KV50My3tMqohvbBYPDOD9rhEOyn+ncv7zx XRqVxMPgMR1MVxRlQezk9N4kbQ/RfSt2wce+eKS4XqD/azRmXesEoCV/ -----END CERTIFICATE-----Generated at Sun Aug 24 02:32:59 2025 by rpki-client