$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/Lzd2UazZEZK4D-Vi_LM5PwLTTJw.roa File: Lzd2UazZEZK4D-Vi_LM5PwLTTJw.roa (raw, json) Hash identifier: RYhKyfjdDrdFS+vtO7CbGxUt9WkZpShCr4z/pVEDnNo= Subject key identifier: 2F:37:76:51:AC:D9:11:92:B8:0F:E5:62:FC:B3:39:3F:02:D3:4C:9C Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Certificate serial: 5CF7 Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/Lzd2UazZEZK4D-Vi_LM5PwLTTJw.roa Signing time: Sat 13 Sep 2025 03:06:28 +0000 ROA not before: Sat 13 Sep 2025 03:06:28 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 134762 IP address blocks: 43.226.32.0/20 maxlen: 22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23799 (0x5cf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Validity Not Before: Sep 13 03:06:28 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=2F377651ACD91192B80FE562FCB3393F02D34C9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b2:20:b2:ac:7e:a9:f3:79:b5:0f:51:75:52: 25:10:36:ff:17:3f:2b:27:b1:fd:cd:86:34:d2:1f: 11:c1:54:b7:95:43:9d:e0:63:47:ea:31:32:2a:f3: 1b:dd:24:d3:3a:ac:15:e9:90:2e:28:ba:0a:03:8c: f7:78:52:95:42:f7:d0:3c:50:61:c9:9b:78:12:9c: cd:9a:76:a4:81:3f:df:86:75:e2:c8:ab:39:84:f6: c9:b1:5b:16:17:8a:55:b3:59:68:36:48:95:72:a7: 0b:86:9f:ee:8d:84:8e:f7:24:ca:31:b4:86:43:2c: e6:e2:8d:d8:db:6a:c7:5d:51:77:fa:8b:11:fc:de: df:f4:37:b2:26:ae:7d:cc:2a:4c:4c:2b:74:18:7a: 57:19:c3:b3:58:94:5f:4d:0e:ff:67:64:ff:fc:27: c4:28:ce:f1:e0:4c:de:01:4b:45:6c:5c:63:52:da: 94:11:35:b7:21:7b:f2:89:7f:0e:a8:91:01:bd:fe: 1a:e5:fe:7e:1e:f6:68:5c:47:4e:1b:79:92:c7:98: 75:8c:4c:b2:be:be:cf:77:85:c5:7d:4e:22:3c:72: cd:09:e4:79:f7:40:71:62:19:3f:83:50:ba:dc:5f: 28:36:59:80:42:ca:c2:75:3c:16:ab:a5:46:64:3e: 66:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:37:76:51:AC:D9:11:92:B8:0F:E5:62:FC:B3:39:3F:02:D3:4C:9C X509v3 Authority Key Identifier: keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/Lzd2UazZEZK4D-Vi_LM5PwLTTJw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.226.32.0/20 Signature Algorithm: sha256WithRSAEncryption 1b:d9:7d:7f:6a:b2:31:cd:b8:dc:01:ad:3b:1a:32:cf:9a:45: 23:11:ee:eb:bf:a1:07:8c:09:1f:c6:d5:86:43:ed:c9:67:e1: bf:c6:c8:8e:95:2e:6b:4e:ba:9f:16:ab:02:fc:de:16:4b:ff: a6:93:19:b2:89:15:de:0f:27:7b:16:f3:7f:eb:9c:93:32:ef: 29:d4:96:c6:ec:be:ae:2c:70:ce:53:7d:0b:71:00:e6:7f:92: 8a:69:ea:f7:91:dd:6b:a1:36:ac:bc:26:e0:7d:c8:dc:3e:fa: ab:d5:ee:65:5c:5e:4b:ed:52:42:17:30:1e:d8:6f:95:8d:b9: 03:89:25:a5:41:43:97:47:ec:ce:63:bf:be:83:f8:75:85:0e: 97:45:12:66:bd:59:dc:b1:3a:dc:6c:91:36:3f:3d:e6:9e:f4: 26:49:f2:f3:9d:63:61:f7:9c:0e:a5:dd:32:a1:ef:93:bc:93: 9b:05:0d:f9:bc:58:58:f3:74:8e:54:5e:f8:90:f3:9b:ea:f5: 4d:ab:69:cf:5e:ce:56:82:96:28:55:4d:28:71:36:e9:c1:b9: b0:d9:da:77:d6:f1:aa:03:e1:c6:6b:31:d4:e2:db:d9:4d:d3: 4c:46:2a:20:c6:db:a8:e6:2f:45:fe:38:9b:ac:09:da:5f:d4: 16:82:ad:d9 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICXPcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEFF NENGNzhCNDlERjBCMkMxRDI5RDMyRTQ4QTk0M0FFNEY0MUFDQzAeFw0yNTA5MTMw MzA2MjhaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDJGMzc3NjUxQUNEOTEx OTJCODBGRTU2MkZDQjMzOTNGMDJEMzRDOUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCosiCyrH6p83m1D1F1UiUQNv8XPysnsf3NhjTSHxHBVLeVQ53g Y0fqMTIq8xvdJNM6rBXpkC4ougoDjPd4UpVC99A8UGHJm3gSnM2adqSBP9+GdeLI qzmE9smxWxYXilWzWWg2SJVypwuGn+6NhI73JMoxtIZDLObijdjbasddUXf6ixH8 3t/0N7Imrn3MKkxMK3QYelcZw7NYlF9NDv9nZP/8J8QozvHgTN4BS0VsXGNS2pQR Nbche/KJfw6okQG9/hrl/n4e9mhcR04beZLHmHWMTLK+vs93hcV9TiI8cs0J5Hn3 QHFiGT+DULrcXyg2WYBCysJ1PBarpUZkPmb/AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQULzd2UazZEZK4D+Vi/LM5PwLTTJwwHwYDVR0jBBgwFoAUiuTPeLSd8LLB0p0y 5IqUOuT0GswwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTY2 My9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2l1VFBlTFNkOExMQjBwMHk1SXFVT3VUMEdzdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2NjMvTHpkMlVhelpFWks0 RC1WaV9MTTVQd0xUVEp3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBCviIDANBgkqhkiG9w0BAQsFAAOCAQEAG9l9f2qyMc243AGtOxoyz5pFIxHu 67+hB4wJH8bVhkPtyWfhv8bIjpUua066nxarAvzeFkv/ppMZsokV3g8nexbzf+uc kzLvKdSWxuy+rixwzlN9C3EA5n+Simnq95Hda6E2rLwm4H3I3D76q9XuZVxeS+1S QhcwHthvlY25A4klpUFDl0fszmO/voP4dYUOl0USZr1Z3LE63GyRNj895p70Jkny 851jYfecDqXdMqHvk7yTmwUN+bxYWPN0jlRe+JDzm+r1Tatpz17OVoKWKFVNKHE2 6cG5sNnad9bxqgPhxmsx1OLb2U3TTEYqIMbbqOYvRf44m6wJ2l/UFoKt2Q== -----END CERTIFICATE-----Generated at Mon Oct 20 08:42:52 2025 by rpki-client