$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/187/M8L4ONjaKBoFJOwyFIfN_QL2Tn4.roa File: M8L4ONjaKBoFJOwyFIfN_QL2Tn4.roa (raw, json) Hash identifier: 6JL10RiuFvg5F0bZseuVtZv3iY+6VEd+5IItQvVfiV8= Subject key identifier: 33:C2:F8:38:D8:DA:28:1A:05:24:EC:32:14:87:CD:FD:02:F6:4E:7E Certificate issuer: /CN=2E8C1DE19474035CBEA678054B6D94F5AFA53361 Certificate serial: 1CA8 Authority key identifier: 2E:8C:1D:E1:94:74:03:5C:BE:A6:78:05:4B:6D:94:F5:AF:A5:33:61 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Lowd4ZR0A1y-pngFS22U9a-lM2E.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/187/M8L4ONjaKBoFJOwyFIfN_QL2Tn4.roa Signing time: Wed 27 Aug 2025 06:17:41 +0000 ROA not before: Wed 27 Aug 2025 06:17:41 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 18118 IP address blocks: 120.47.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/187/Lowd4ZR0A1y-pngFS22U9a-lM2E.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/187/Lowd4ZR0A1y-pngFS22U9a-lM2E.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Lowd4ZR0A1y-pngFS22U9a-lM2E.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7336 (0x1ca8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E8C1DE19474035CBEA678054B6D94F5AFA53361 Validity Not Before: Aug 27 06:17:41 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=33C2F838D8DA281A0524EC321487CDFD02F64E7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:80:37:f9:5f:a7:bf:b4:f6:e1:45:10:2c:cb: 44:51:6b:5e:e7:2a:85:d2:f1:42:88:2e:39:f1:d7: 2d:d5:93:9b:02:32:d3:3e:d9:fc:0c:9e:ab:43:7e: 33:2e:ac:23:0b:aa:20:8e:c4:19:ab:ee:64:d8:ca: e9:5f:af:f0:6a:65:c5:2d:7b:c8:0f:c2:d4:c8:c7: 0e:7f:2a:9a:b8:5f:4a:9a:4c:7f:3b:08:ae:b4:26: e4:72:77:a6:ae:f3:71:b5:44:e5:57:56:31:24:c0: 10:c9:b2:c8:80:a9:62:c1:d5:d2:58:d7:bb:f6:c5: 77:a9:eb:be:dc:c8:15:e0:e5:89:25:33:c7:92:68: 6e:3e:5e:f8:f5:02:da:53:7d:1b:cb:f9:9c:7b:ab: a3:7f:1d:9a:c8:ac:6a:8a:d8:b4:8d:bf:4f:f4:0b: 76:cc:fd:ca:fb:21:d5:bb:a1:66:87:43:db:b6:36: cf:8b:8c:be:6b:c4:3b:11:5b:2f:04:18:47:1b:98: bf:2b:49:18:e3:73:bf:d8:a4:3e:f3:a1:d8:bb:75: 6e:67:aa:8d:8b:f5:53:d1:28:44:2e:31:09:90:67: ca:d4:a8:70:31:85:e1:83:bb:41:45:bc:00:c2:dc: 8b:aa:8f:8b:bb:8e:45:1a:ea:4c:10:8c:67:05:b1: 2d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:C2:F8:38:D8:DA:28:1A:05:24:EC:32:14:87:CD:FD:02:F6:4E:7E X509v3 Authority Key Identifier: keyid:2E:8C:1D:E1:94:74:03:5C:BE:A6:78:05:4B:6D:94:F5:AF:A5:33:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/187/Lowd4ZR0A1y-pngFS22U9a-lM2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Lowd4ZR0A1y-pngFS22U9a-lM2E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/187/M8L4ONjaKBoFJOwyFIfN_QL2Tn4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 120.47.0.0/16 Signature Algorithm: sha256WithRSAEncryption 76:88:a3:35:1c:d7:2a:9c:6b:53:5d:4a:0a:2e:63:08:a1:e5: d2:2f:c6:a2:62:ee:10:f7:ae:bb:ec:a9:91:85:f3:2a:52:8b: e6:32:de:90:6b:44:fa:13:c8:87:75:52:a0:8b:a1:b3:bd:34: 93:fc:61:0a:34:a1:e7:fd:9b:19:18:c2:5f:b8:ae:03:a0:43: 68:66:a9:51:88:98:2c:c7:a9:4f:36:1e:a7:63:2d:57:19:57: 91:50:03:05:bd:34:cb:a8:fe:80:2b:a5:9e:6b:ef:9c:fb:69: a5:28:7d:68:37:fa:69:d9:37:dd:81:69:ca:b5:0f:f3:34:f0: cb:cb:a9:ed:7b:06:40:8e:84:56:13:0c:c9:2f:9e:ce:cc:52: 8b:95:7c:92:07:aa:6b:ec:33:ef:5e:54:3a:6b:95:50:20:c9: d5:59:d4:b3:6d:4f:d1:63:3c:32:64:d2:02:a4:2f:31:83:ed: 8b:d5:3a:7c:85:f2:e0:ad:82:1c:e5:0c:84:4f:92:16:5e:75: 6f:6d:70:89:b9:1d:db:c0:13:9c:0b:10:e7:84:da:ae:f8:ac: 2c:ad:59:00:64:a1:ee:0f:23:ae:b4:fa:aa:51:37:aa:60:cd: 99:d8:ce:a9:4b:8d:1e:6f:e2:40:4b:91:e3:89:2b:4f:a3:24: 65:ed:e1:5d -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICHKgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkU4 QzFERTE5NDc0MDM1Q0JFQTY3ODA1NEI2RDk0RjVBRkE1MzM2MTAeFw0yNTA4Mjcw NjE3NDFaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDMzQzJGODM4RDhEQTI4 MUEwNTI0RUMzMjE0ODdDREZEMDJGNjRFN0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDrgDf5X6e/tPbhRRAsy0RRa17nKoXS8UKILjnx1y3Vk5sCMtM+ 2fwMnqtDfjMurCMLqiCOxBmr7mTYyulfr/BqZcUte8gPwtTIxw5/Kpq4X0qaTH87 CK60JuRyd6au83G1ROVXVjEkwBDJssiAqWLB1dJY17v2xXep677cyBXg5YklM8eS aG4+Xvj1AtpTfRvL+Zx7q6N/HZrIrGqK2LSNv0/0C3bM/cr7IdW7oWaHQ9u2Ns+L jL5rxDsRWy8EGEcbmL8rSRjjc7/YpD7zodi7dW5nqo2L9VPRKEQuMQmQZ8rUqHAx heGDu0FFvADC3Iuqj4u7jkUa6kwQjGcFsS17AgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUM8L4ONjaKBoFJOwyFIfN/QL2Tn4wHwYDVR0jBBgwFoAULowd4ZR0A1y+pngF S22U9a+lM2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTg3 L0xvd2Q0WlIwQTF5LXBuZ0ZTMjJVOWEtbE0yRS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvTG93ZDRaUjBBMXktcG5nRlMyMlU5YS1sTTJFLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTg3L004TDRPTmphS0JvRkpP d3lGSWZOX1FMMlRuNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwB4LzANBgkqhkiG9w0BAQsFAAOCAQEAdoijNRzXKpxrU11KCi5jCKHl0i/GomLu EPeuu+ypkYXzKlKL5jLekGtE+hPIh3VSoIuhs700k/xhCjSh5/2bGRjCX7iuA6BD aGapUYiYLMepTzYep2MtVxlXkVADBb00y6j+gCulnmvvnPtppSh9aDf6adk33YFp yrUP8zTwy8up7XsGQI6EVhMMyS+ezsxSi5V8kgeqa+wz715UOmuVUCDJ1VnUs21P 0WM8MmTSAqQvMYPti9U6fIXy4K2CHOUMhE+SFl51b21wibkd28ATnAsQ54Tarvis LK1ZAGSh7g8jrrT6qlE3qmDNmdjOqUuNHm/iQEuR44krT6MkZe3hXQ== -----END CERTIFICATE-----Generated at Mon Oct 20 08:42:44 2025 by rpki-client