$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1630/bcuGU_LZdBKf0rjoAeB7vCusDrc.roa File: bcuGU_LZdBKf0rjoAeB7vCusDrc.roa (raw, json) Hash identifier: bK0+BCNlbFcbIp8Cpp4YYE8n913yHgvv4sKJ4d67BN4= Subject key identifier: 6D:CB:86:53:F2:D9:74:12:9F:D2:B8:E8:01:E0:7B:BC:2B:AC:0E:B7 Certificate issuer: /CN=4C1FB553FF23312CD9C25DE1DA72048F06483C5A Certificate serial: 206D Authority key identifier: 4C:1F:B5:53:FF:23:31:2C:D9:C2:5D:E1:DA:72:04:8F:06:48:3C:5A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/bcuGU_LZdBKf0rjoAeB7vCusDrc.roa Signing time: Sat 13 Sep 2025 03:07:32 +0000 ROA not before: Sat 13 Sep 2025 03:07:32 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 63678 IP address blocks: 27.0.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 18:06:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8301 (0x206d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C1FB553FF23312CD9C25DE1DA72048F06483C5A Validity Not Before: Sep 13 03:07:32 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=6DCB8653F2D974129FD2B8E801E07BBC2BAC0EB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:32:e9:0f:74:ad:b3:22:cc:eb:7f:8e:7f:3f: d3:36:cb:a2:e9:43:73:1d:bb:c7:ea:c7:63:2f:ee: a0:62:52:91:69:c9:9f:25:69:7b:0e:b4:19:9e:69: c4:19:c7:d1:4e:af:b2:98:3e:a3:ed:ad:ac:52:a7: a1:d4:c2:44:36:2d:db:86:60:ea:2c:59:6b:fc:dd: 25:7f:d1:42:c9:35:cf:5b:31:1f:40:e7:1f:2b:db: 0b:e6:28:48:c3:bb:32:69:87:b6:fa:d6:96:1b:10: 71:47:56:d7:7c:1c:9b:89:e7:7c:04:03:3d:65:80: 6c:f0:2f:22:de:79:ae:4f:1b:a3:8b:2f:f9:3a:a7: b0:85:d7:6f:2c:34:54:97:1c:45:89:b2:5d:8f:d0: a0:85:ee:af:11:81:79:8a:28:73:70:3a:c7:bb:6e: 60:1b:c7:82:84:51:4b:c7:33:80:2f:54:c6:68:e5: 04:13:fb:65:18:f9:4a:e6:5f:60:0e:66:c2:42:57: 37:25:9d:b8:61:ab:40:2f:63:87:1e:63:36:4c:52: 86:82:11:75:38:a7:e3:dd:92:5f:d3:5b:86:1e:c6: 87:c3:6b:f9:f5:f9:8c:9e:d5:65:07:d8:cb:ee:81: 9a:4a:65:74:8c:e9:fc:41:dc:82:0f:66:6c:a9:33: 10:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:CB:86:53:F2:D9:74:12:9F:D2:B8:E8:01:E0:7B:BC:2B:AC:0E:B7 X509v3 Authority Key Identifier: keyid:4C:1F:B5:53:FF:23:31:2C:D9:C2:5D:E1:DA:72:04:8F:06:48:3C:5A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/bcuGU_LZdBKf0rjoAeB7vCusDrc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.0.204.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:ff:1d:c3:6a:cd:d1:66:27:c6:92:df:91:64:b6:46:3e:19: ca:92:e5:fa:1c:09:be:ca:ad:31:cf:6b:94:11:e5:b9:22:cd: bb:5b:d5:1c:a9:10:63:4e:f9:c2:f3:d4:6a:94:37:e4:68:b7: 1d:bc:9b:1b:2d:ff:e8:14:19:d8:df:10:26:39:7b:b2:8f:7e: 14:1f:3a:29:79:e0:15:64:e2:ec:f6:5e:60:ea:73:d0:f1:95: 9e:00:f9:8e:fc:c9:dc:80:90:07:f6:f5:8b:c2:da:68:98:5e: ae:7e:49:47:bb:4a:77:75:86:51:ff:f9:46:0c:7b:ca:02:70: 9e:c8:ce:63:b6:c9:78:56:6a:0e:b4:ae:f9:f3:74:23:a9:bd: 3c:ad:13:4e:89:b8:57:d9:cc:21:85:5e:05:49:2d:c8:e1:69: fe:56:5b:16:9d:b2:c8:bf:1b:5c:6d:bd:75:fd:f2:3f:de:e8: e8:fa:d6:2f:d5:9e:04:60:b2:a6:ff:03:74:cf:a9:e4:ab:2d: 33:a2:ba:15:18:bf:80:61:2d:72:1c:c0:b7:b4:a7:de:31:33: fb:9d:7e:03:46:41:e0:a8:59:9c:e7:30:8c:11:ea:d9:a3:79: 8b:f6:98:db:4e:cb:fe:2e:76:c6:c9:df:19:8e:e2:b8:63:1b: 28:71:1d:1f -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIG0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEMx RkI1NTNGRjIzMzEyQ0Q5QzI1REUxREE3MjA0OEYwNjQ4M0M1QTAeFw0yNTA5MTMw MzA3MzJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDZEQ0I4NjUzRjJEOTc0 MTI5RkQyQjhFODAxRTA3QkJDMkJBQzBFQjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFMukPdK2zIszrf45/P9M2y6LpQ3Mdu8fqx2Mv7qBiUpFpyZ8l aXsOtBmeacQZx9FOr7KYPqPtraxSp6HUwkQ2LduGYOosWWv83SV/0ULJNc9bMR9A 5x8r2wvmKEjDuzJph7b61pYbEHFHVtd8HJuJ53wEAz1lgGzwLyLeea5PG6OLL/k6 p7CF128sNFSXHEWJsl2P0KCF7q8RgXmKKHNwOse7bmAbx4KEUUvHM4AvVMZo5QQT +2UY+UrmX2AOZsJCVzclnbhhq0AvY4ceYzZMUoaCEXU4p+Pdkl/TW4YexofDa/n1 +Yye1WUH2MvugZpKZXSM6fxB3IIPZmypMxC9AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUbcuGU/LZdBKf0rjoAeB7vCusDrcwHwYDVR0jBBgwFoAUTB+1U/8jMSzZwl3h 2nIEjwZIPFowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTYz MC9UQi0xVV84ak1Telp3bDNoMm5JRWp3WklQRm8uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1RCLTFVXzhqTVN6WndsM2gybklFandaSVBGby5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2MzAvYmN1R1VfTFpkQktm MHJqb0FlQjd2Q3VzRHJjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEABsAzDANBgkqhkiG9w0BAQsFAAOCAQEAnP8dw2rN0WYnxpLfkWS2Rj4ZypLl +hwJvsqtMc9rlBHluSLNu1vVHKkQY075wvPUapQ35Gi3HbybGy3/6BQZ2N8QJjl7 so9+FB86KXngFWTi7PZeYOpz0PGVngD5jvzJ3ICQB/b1i8LaaJhern5JR7tKd3WG Uf/5Rgx7ygJwnsjOY7bJeFZqDrSu+fN0I6m9PK0TTom4V9nMIYVeBUktyOFp/lZb Fp2yyL8bXG29df3yP97o6PrWL9WeBGCypv8DdM+p5KstM6K6FRi/gGEtchzAt7Sn 3jEz+51+A0ZB4KhZnOcwjBHq2aN5i/aY207L/i52xsnfGY7iuGMbKHEdHw== -----END CERTIFICATE-----Generated at Mon Oct 20 15:35:44 2025 by rpki-client