$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1232/CFeF5mfw_13nEbPVRYqsRx0Twu0.roa File: CFeF5mfw_13nEbPVRYqsRx0Twu0.roa (raw, json) Hash identifier: mgLP6kWaaizhpGKX81yV2mYPuNYH89JBITGz5zV5P3Q= Subject key identifier: 08:57:85:E6:67:F0:FF:5D:E7:11:B3:D5:45:8A:AC:47:1D:13:C2:ED Certificate issuer: /CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4 Certificate serial: 35 Authority key identifier: F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/CFeF5mfw_13nEbPVRYqsRx0Twu0.roa Signing time: Fri 22 Aug 2025 06:27:19 +0000 ROA not before: Fri 22 Aug 2025 06:27:19 +0000 ROA not after: Thu 20 Aug 2026 07:49:18 +0000 asID: 139137 IP address blocks: 45.120.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 04:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4 Validity Not Before: Aug 22 06:27:19 2025 GMT Not After : Aug 20 07:49:18 2026 GMT Subject: CN=085785E667F0FF5DE711B3D5458AAC471D13C2ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:18:8c:3c:db:03:f4:f8:62:18:1a:79:55:8b: 82:47:72:c6:13:0c:63:38:11:70:a3:b2:b3:ca:0b: 08:60:b1:e1:66:3f:01:61:1e:50:91:4f:d3:52:51: 04:95:e0:fc:f4:20:34:6f:1e:3b:8f:cd:0e:90:eb: d2:a2:cc:b1:8d:31:cf:6d:5f:07:30:b4:aa:17:92: 63:1a:80:a1:d3:dd:c6:90:5d:05:dc:f8:30:e3:1d: 05:e0:da:ce:aa:bc:e6:ca:fb:a4:d2:45:4a:cc:ef: 8b:b6:fe:d9:0f:00:5c:6b:6b:27:fb:29:a3:5a:fb: 5e:89:fa:84:5f:b9:f2:a7:c7:8b:75:b8:76:43:a1: dd:36:ae:af:23:ae:e2:16:16:90:ad:af:81:9b:bd: 97:2b:5f:56:90:9f:2e:a4:d8:a0:4f:4f:ae:bb:bb: 02:50:85:fd:71:69:01:ac:d8:03:c2:6a:b0:83:b9: 9e:23:fb:c4:f1:44:27:a3:49:0d:3f:a8:4c:72:ad: f3:1e:7c:6e:53:45:ed:09:4e:91:a6:67:8a:40:66: 63:34:9d:08:b5:92:7e:d5:c4:4e:1a:13:10:6e:95: 50:27:a4:a0:65:85:98:b1:df:5b:f0:fe:1b:25:e5: 05:40:33:42:22:9a:ac:52:19:61:35:ad:4d:26:49: 38:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:57:85:E6:67:F0:FF:5D:E7:11:B3:D5:45:8A:AC:47:1D:13:C2:ED X509v3 Authority Key Identifier: keyid:F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/CFeF5mfw_13nEbPVRYqsRx0Twu0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.120.242.0/24 Signature Algorithm: sha256WithRSAEncryption 36:c1:59:0c:73:4b:5b:4c:f1:37:1a:9e:91:67:f2:df:64:e0: 66:c4:d9:58:72:72:f1:00:c3:4e:47:e9:22:23:79:03:5a:78: 43:56:15:af:b5:ab:95:4c:04:03:b1:38:53:a4:6b:bd:c0:25: 27:6c:f4:2c:51:c4:21:34:c2:cc:5a:c4:38:32:b1:be:c3:01: 9a:57:ec:81:a4:ef:7b:33:1b:dc:82:3a:60:8d:71:8f:d8:50: f6:7f:07:89:2f:26:64:53:5b:69:a1:fe:13:36:68:06:47:51: 9f:81:63:f7:cd:09:1d:f6:e8:02:ab:6e:62:65:b6:49:d7:9d: 2a:39:a8:f4:5f:eb:c5:0e:a7:ec:3b:01:aa:33:af:8c:a8:a2: 91:f1:90:d2:11:e7:13:98:8e:e9:9e:be:26:08:fa:d4:60:fc: 2c:f7:71:91:df:0b:d4:e0:5f:34:8a:e4:47:08:f9:2c:f8:5e: 35:1a:e2:2f:cf:2f:e0:98:36:68:5b:34:d6:93:15:ae:c4:a0: 41:5f:eb:7d:43:7b:f5:dd:e7:f8:aa:85:73:dc:b5:fb:cb:1c: 25:f1:2c:98:9b:84:4c:ab:ac:e9:2d:da:35:2f:e8:25:bb:af: 86:cd:51:7f:35:02:09:76:db:2b:4b:d7:f2:a4:54:54:62:f0: 7f:a6:dd:0b -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBNTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGMTk4 OUI0MDY5MDFBREY4ODEwQjlEQ0RDNEUwRkM5RTdFODVFRUI0MB4XDTI1MDgyMjA2 MjcxOVoXDTI2MDgyMDA3NDkxOFowMzExMC8GA1UEAxMoMDg1Nzg1RTY2N0YwRkY1 REU3MTFCM0Q1NDU4QUFDNDcxRDEzQzJFRDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMIYjDzbA/T4YhgaeVWLgkdyxhMMYzgRcKOys8oLCGCx4WY/AWEe UJFP01JRBJXg/PQgNG8eO4/NDpDr0qLMsY0xz21fBzC0qheSYxqAodPdxpBdBdz4 MOMdBeDazqq85sr7pNJFSszvi7b+2Q8AXGtrJ/spo1r7Xon6hF+58qfHi3W4dkOh 3TauryOu4hYWkK2vgZu9lytfVpCfLqTYoE9Prru7AlCF/XFpAazYA8JqsIO5niP7 xPFEJ6NJDT+oTHKt8x58blNF7QlOkaZnikBmYzSdCLWSftXEThoTEG6VUCekoGWF mLHfW/D+GyXlBUAzQiKarFIZYTWtTSZJOK8CAwEAAaOCAfMwggHvMB0GA1UdDgQW BBQIV4XmZ/D/XecRs9VFiqxHHRPC7TAfBgNVHSMEGDAWgBTxmJtAaQGt+IELnc3E 4PyefoXutDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xMjMy LzhaaWJRR2tCcmZpQkM1M054T0Q4bm42RjdyUS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOFppYlFHa0JyZmlCQzUzTnhPRDhubjZGN3JRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIzMi9DRmVGNW1md18xM25F YlBWUllxc1J4MFR3dTAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQALXjyMA0GCSqGSIb3DQEBCwUAA4IBAQA2wVkMc0tbTPE3Gp6RZ/LfZOBmxNlY cnLxAMNOR+kiI3kDWnhDVhWvtauVTAQDsThTpGu9wCUnbPQsUcQhNMLMWsQ4MrG+ wwGaV+yBpO97MxvcgjpgjXGP2FD2fweJLyZkU1tpof4TNmgGR1GfgWP3zQkd9ugC q25iZbZJ150qOaj0X+vFDqfsOwGqM6+MqKKR8ZDSEecTmI7pnr4mCPrUYPws93GR 3wvU4F80iuRHCPks+F41GuIvzy/gmDZoWzTWkxWuxKBBX+t9Q3v13ef4qoVz3LX7 yxwl8SyYm4RMq6zpLdo1L+glu6+GzVF/NQIJdtsrS9fypFRUYvB/pt0L -----END CERTIFICATE-----Generated at Sun Aug 24 02:39:20 2025 by rpki-client