$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/187/6lgNokrHquzfMY4o0Ue-xILR_FM.roa File: 6lgNokrHquzfMY4o0Ue-xILR_FM.roa (raw, json) Hash identifier: bnnFnI4gkAVdY9+fYPbtHDBHofbyD67V5npIc05vTNI= Subject key identifier: EA:58:0D:A2:4A:C7:AA:EC:DF:31:8E:28:D1:47:BE:C4:82:D1:FC:53 Certificate issuer: /CN=2E8C1DE19474035CBEA678054B6D94F5AFA53361 Certificate serial: 1CAB Authority key identifier: 2E:8C:1D:E1:94:74:03:5C:BE:A6:78:05:4B:6D:94:F5:AF:A5:33:61 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Lowd4ZR0A1y-pngFS22U9a-lM2E.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/187/6lgNokrHquzfMY4o0Ue-xILR_FM.roa Signing time: Wed 27 Aug 2025 06:17:42 +0000 ROA not before: Wed 27 Aug 2025 06:17:42 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 18118 IP address blocks: 219.72.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/187/Lowd4ZR0A1y-pngFS22U9a-lM2E.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/187/Lowd4ZR0A1y-pngFS22U9a-lM2E.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Lowd4ZR0A1y-pngFS22U9a-lM2E.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 18:05:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7339 (0x1cab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E8C1DE19474035CBEA678054B6D94F5AFA53361 Validity Not Before: Aug 27 06:17:42 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=EA580DA24AC7AAECDF318E28D147BEC482D1FC53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:85:74:4a:a3:1f:11:be:6d:b0:2b:fe:41:d7: ac:93:e2:ca:2d:83:80:91:b8:3f:8e:93:24:28:c8: 77:c4:05:72:6c:2a:8f:cc:d5:73:59:cc:18:1a:7a: 22:94:a6:54:b5:1b:de:c0:50:a5:31:6c:c1:a6:9e: cf:4f:c7:26:c3:4a:75:f8:27:4b:25:2a:eb:e4:9a: 8f:18:ca:e0:68:51:72:27:14:af:2b:4b:93:2f:44: db:b7:a5:74:66:50:d7:7d:c5:a5:a0:47:93:56:b4: 34:cd:1f:a3:1d:d2:ee:11:11:a1:ad:25:c4:dc:2e: d9:e5:16:c3:91:70:94:c9:61:d7:91:5c:66:2f:c6: 02:ea:ae:aa:3b:9e:ef:bd:d7:a7:46:98:f4:6d:48: 31:da:7a:96:d3:93:69:21:3c:8f:9a:24:0c:34:85: 37:d8:fc:e5:98:b6:53:a4:83:22:2e:e0:a1:80:9c: c9:e8:bf:07:9a:5b:28:fd:79:ff:42:a4:a0:e4:19: 9e:7a:2a:ee:9c:04:03:26:4b:57:3a:c6:bf:29:23: 60:03:bc:37:35:46:83:d2:b3:c5:76:b0:cb:9f:64: ab:3d:f0:db:e6:0f:18:13:36:af:1c:3a:50:a5:86: d6:fc:ab:94:52:a6:ca:3e:e9:cf:72:4c:5b:36:00: 15:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:58:0D:A2:4A:C7:AA:EC:DF:31:8E:28:D1:47:BE:C4:82:D1:FC:53 X509v3 Authority Key Identifier: keyid:2E:8C:1D:E1:94:74:03:5C:BE:A6:78:05:4B:6D:94:F5:AF:A5:33:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/187/Lowd4ZR0A1y-pngFS22U9a-lM2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Lowd4ZR0A1y-pngFS22U9a-lM2E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/187/6lgNokrHquzfMY4o0Ue-xILR_FM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 219.72.0.0/16 Signature Algorithm: sha256WithRSAEncryption 43:ca:71:f0:a0:8a:54:d4:a7:20:a3:1c:c2:67:59:64:9c:74: 17:57:d4:d9:44:d6:f4:62:bb:00:6f:66:f8:c2:4c:b7:08:c8: cf:60:fd:29:86:3a:eb:3f:a0:6f:35:5e:5a:03:73:35:3e:23: 02:d3:31:01:2a:57:57:d2:27:20:ba:08:77:6f:d7:99:3e:86: 2b:c6:4d:42:02:be:19:6b:cd:17:12:39:81:a2:e0:03:84:27: bc:1c:23:e9:53:bc:17:3c:c2:93:65:bd:62:5b:ed:fa:b6:5b: fe:bc:41:5d:48:11:34:ac:44:3f:b2:b4:56:45:84:f8:5a:3c: 35:b4:ed:d3:a3:41:b6:12:bf:80:ff:af:0e:c4:24:f5:81:36: 34:be:b0:db:c5:c9:aa:1a:91:99:f7:20:49:88:25:0d:ac:10: ee:66:e8:46:d2:b6:39:d2:f2:02:15:3b:32:8f:95:f8:4d:4c: 91:dd:96:bc:46:44:b5:7d:ee:84:d7:95:ce:d1:ac:5b:1e:c1: 17:cc:78:03:6c:f5:51:1f:d8:22:ad:ab:43:05:a8:7d:9f:50: 12:68:d0:d8:93:46:18:11:7b:86:ec:ec:16:18:04:7c:93:ed: 46:31:b1:f7:ea:04:97:d9:e1:d7:28:dd:a7:d7:b3:9b:a1:28: 95:71:5e:2a -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICHKswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkU4 QzFERTE5NDc0MDM1Q0JFQTY3ODA1NEI2RDk0RjVBRkE1MzM2MTAeFw0yNTA4Mjcw NjE3NDJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEVBNTgwREEyNEFDN0FB RUNERjMxOEUyOEQxNDdCRUM0ODJEMUZDNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9hXRKox8Rvm2wK/5B16yT4sotg4CRuD+OkyQoyHfEBXJsKo/M 1XNZzBgaeiKUplS1G97AUKUxbMGmns9PxybDSnX4J0slKuvkmo8YyuBoUXInFK8r S5MvRNu3pXRmUNd9xaWgR5NWtDTNH6Md0u4REaGtJcTcLtnlFsORcJTJYdeRXGYv xgLqrqo7nu+916dGmPRtSDHaepbTk2khPI+aJAw0hTfY/OWYtlOkgyIu4KGAnMno vweaWyj9ef9CpKDkGZ56Ku6cBAMmS1c6xr8pI2ADvDc1RoPSs8V2sMufZKs98Nvm DxgTNq8cOlClhtb8q5RSpso+6c9yTFs2ABXPAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQU6lgNokrHquzfMY4o0Ue+xILR/FMwHwYDVR0jBBgwFoAULowd4ZR0A1y+pngF S22U9a+lM2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTg3 L0xvd2Q0WlIwQTF5LXBuZ0ZTMjJVOWEtbE0yRS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvTG93ZDRaUjBBMXktcG5nRlMyMlU5YS1sTTJFLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTg3LzZsZ05va3JIcXV6Zk1Z NG8wVWUteElMUl9GTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwDbSDANBgkqhkiG9w0BAQsFAAOCAQEAQ8px8KCKVNSnIKMcwmdZZJx0F1fU2UTW 9GK7AG9m+MJMtwjIz2D9KYY66z+gbzVeWgNzNT4jAtMxASpXV9InILoId2/XmT6G K8ZNQgK+GWvNFxI5gaLgA4QnvBwj6VO8FzzCk2W9Ylvt+rZb/rxBXUgRNKxEP7K0 VkWE+Fo8NbTt06NBthK/gP+vDsQk9YE2NL6w28XJqhqRmfcgSYglDawQ7mboRtK2 OdLyAhU7Mo+V+E1Mkd2WvEZEtX3uhNeVztGsWx7BF8x4A2z1UR/YIq2rQwWofZ9Q EmjQ2JNGGBF7huzsFhgEfJPtRjGx9+oEl9nh1yjdp9ezm6EolXFeKg== -----END CERTIFICATE-----Generated at Mon Oct 20 14:38:05 2025 by rpki-client