$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1630/LPgCeljI_ZVbxoMdtzQXf2nSvzg.roa File: LPgCeljI_ZVbxoMdtzQXf2nSvzg.roa (raw, json) Hash identifier: LJPQpknVI2351DLnJTd+3o5hMujraGBO1JYNYtf8ac4= Subject key identifier: 2C:F8:02:7A:58:C8:FD:95:5B:C6:83:1D:B7:34:17:7F:69:D2:BF:38 Certificate issuer: /CN=4C1FB553FF23312CD9C25DE1DA72048F06483C5A Certificate serial: 206C Authority key identifier: 4C:1F:B5:53:FF:23:31:2C:D9:C2:5D:E1:DA:72:04:8F:06:48:3C:5A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/LPgCeljI_ZVbxoMdtzQXf2nSvzg.roa Signing time: Sat 13 Sep 2025 03:07:31 +0000 ROA not before: Sat 13 Sep 2025 03:07:31 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 23650 IP address blocks: 27.0.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 18:06:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8300 (0x206c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C1FB553FF23312CD9C25DE1DA72048F06483C5A Validity Not Before: Sep 13 03:07:31 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=2CF8027A58C8FD955BC6831DB734177F69D2BF38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:13:3a:df:03:f4:f4:dc:c5:f2:e3:00:80:af: 48:39:e8:3d:5b:69:69:4e:04:ca:cd:07:fd:ff:af: ed:ce:98:38:8f:92:ed:06:6d:5b:09:7e:98:6f:a1: 5e:4e:14:d2:7e:eb:20:26:b5:85:66:bc:42:89:c0: 6f:cd:81:15:d0:53:49:83:90:3d:14:35:50:b7:f8: 0c:98:1e:a8:f5:76:4d:40:8b:ce:11:09:ff:a4:f4: a9:bc:92:9e:c8:f9:d9:95:ce:ab:27:0e:a8:7b:fd: f6:ec:8b:a2:59:ba:1b:36:8a:62:a5:c2:1a:93:20: 9b:06:18:89:67:0c:63:8f:f3:0d:8c:15:e3:27:39: b9:6a:92:f8:ac:54:85:41:db:f9:e1:4c:82:0a:2b: 99:d7:80:3a:1c:c0:65:96:3a:bc:40:0a:10:80:12: b6:a8:ef:53:9a:da:39:fa:a7:f5:66:8d:5e:8a:8a: 68:34:8c:8d:06:ca:38:40:04:fd:e8:e7:24:d6:fe: d0:35:58:f2:c7:ca:84:9d:f2:92:d2:de:11:c9:2d: 1a:6d:c5:2c:3c:7b:a8:27:9f:99:ef:d1:b7:da:09: 54:fd:87:2c:6d:2c:1b:ac:5e:c1:b1:3f:b9:95:04: db:6a:a3:7a:b9:c3:65:0e:dd:bd:0f:ca:dc:a2:dc: 57:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:F8:02:7A:58:C8:FD:95:5B:C6:83:1D:B7:34:17:7F:69:D2:BF:38 X509v3 Authority Key Identifier: keyid:4C:1F:B5:53:FF:23:31:2C:D9:C2:5D:E1:DA:72:04:8F:06:48:3C:5A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/LPgCeljI_ZVbxoMdtzQXf2nSvzg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.0.204.0/22 Signature Algorithm: sha256WithRSAEncryption 79:3c:8b:7a:96:44:6d:1d:ea:d8:0d:40:87:13:bc:ed:0e:53: 75:33:40:89:7a:b6:36:bd:e0:2e:85:b0:14:23:28:74:60:8b: 12:e5:f2:9a:25:33:0e:67:05:af:f6:cd:62:19:5e:1b:72:42: 70:34:01:98:33:32:c5:34:a4:23:9d:79:e8:66:a3:85:09:7f: f0:16:f3:b8:28:83:ff:da:45:e3:a2:91:7e:f6:80:44:e1:4c: 01:6d:c5:24:0a:ac:c2:0f:cc:90:c1:fb:fa:3b:19:2a:4a:e6: 25:bc:ad:90:70:2f:e2:aa:fe:65:8c:c2:46:14:aa:bc:83:7c: 4c:8e:8a:5f:ab:30:0d:f1:ef:d2:06:ec:55:8c:fa:c2:ae:18: 5d:06:00:ee:7d:87:2b:7e:a1:6c:36:5b:b0:19:c5:f9:d8:72: de:45:5c:c7:89:d3:80:8c:b9:5a:21:d3:46:e9:85:2f:20:c3: 1b:e2:70:12:a3:24:4e:c1:e8:58:b9:e0:2b:f3:8f:ae:bd:a3: ae:d4:56:c1:85:42:7c:53:31:a3:b3:c7:a1:b5:e1:15:2f:1b: 63:86:4b:4f:ff:6d:f4:01:de:32:3e:75:a8:29:50:e0:52:44: 06:1f:15:70:bf:b2:ef:27:c0:46:9d:2d:79:98:6a:36:59:c6: 7c:88:f9:a8 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIGwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEMx RkI1NTNGRjIzMzEyQ0Q5QzI1REUxREE3MjA0OEYwNjQ4M0M1QTAeFw0yNTA5MTMw MzA3MzFaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDJDRjgwMjdBNThDOEZE OTU1QkM2ODMxREI3MzQxNzdGNjlEMkJGMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnEzrfA/T03MXy4wCAr0g56D1baWlOBMrNB/3/r+3OmDiPku0G bVsJfphvoV5OFNJ+6yAmtYVmvEKJwG/NgRXQU0mDkD0UNVC3+AyYHqj1dk1Ai84R Cf+k9Km8kp7I+dmVzqsnDqh7/fbsi6JZuhs2imKlwhqTIJsGGIlnDGOP8w2MFeMn OblqkvisVIVB2/nhTIIKK5nXgDocwGWWOrxAChCAErao71Oa2jn6p/VmjV6Kimg0 jI0GyjhABP3o5yTW/tA1WPLHyoSd8pLS3hHJLRptxSw8e6gnn5nv0bfaCVT9hyxt LBusXsGxP7mVBNtqo3q5w2UO3b0Pytyi3FdTAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQULPgCeljI/ZVbxoMdtzQXf2nSvzgwHwYDVR0jBBgwFoAUTB+1U/8jMSzZwl3h 2nIEjwZIPFowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTYz MC9UQi0xVV84ak1Telp3bDNoMm5JRWp3WklQRm8uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1RCLTFVXzhqTVN6WndsM2gybklFandaSVBGby5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2MzAvTFBnQ2VsaklfWlZi eG9NZHR6UVhmMm5TdnpnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAhsAzDANBgkqhkiG9w0BAQsFAAOCAQEAeTyLepZEbR3q2A1AhxO87Q5TdTNA iXq2Nr3gLoWwFCModGCLEuXymiUzDmcFr/bNYhleG3JCcDQBmDMyxTSkI5156Gaj hQl/8BbzuCiD/9pF46KRfvaAROFMAW3FJAqswg/MkMH7+jsZKkrmJbytkHAv4qr+ ZYzCRhSqvIN8TI6KX6swDfHv0gbsVYz6wq4YXQYA7n2HK36hbDZbsBnF+dhy3kVc x4nTgIy5WiHTRumFLyDDG+JwEqMkTsHoWLngK/OPrr2jrtRWwYVCfFMxo7PHobXh FS8bY4ZLT/9t9AHeMj51qClQ4FJEBh8VcL+y7yfARp0teZhqNlnGfIj5qA== -----END CERTIFICATE-----Generated at Mon Oct 20 15:35:32 2025 by rpki-client