$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2154/LO8HMVPffvruOjzIbuw1ImZtHR0.roa File: LO8HMVPffvruOjzIbuw1ImZtHR0.roa (raw, json) Hash identifier: 8un8V406hwQMw02wGz5lRlh72V8cmTt9t+wyq3X9cBc= Subject key identifier: 2C:EF:07:31:53:DF:7E:FA:EE:3A:3C:C8:6E:EC:35:22:66:6D:1D:1D Certificate issuer: /CN=E502DE2C6086A66284B80CDB7B5AC0C12CC3F3C2 Certificate serial: 0826 Authority key identifier: E5:02:DE:2C:60:86:A6:62:84:B8:0C:DB:7B:5A:C0:C1:2C:C3:F3:C2 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5QLeLGCGpmKEuAzbe1rAwSzD88I.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2154/LO8HMVPffvruOjzIbuw1ImZtHR0.roa Signing time: Sat 13 Sep 2025 03:04:08 +0000 ROA not before: Sat 13 Sep 2025 03:04:08 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 63631 IP address blocks: 119.161.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2154/5QLeLGCGpmKEuAzbe1rAwSzD88I.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2154/5QLeLGCGpmKEuAzbe1rAwSzD88I.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5QLeLGCGpmKEuAzbe1rAwSzD88I.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 04:05:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2086 (0x826) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E502DE2C6086A66284B80CDB7B5AC0C12CC3F3C2 Validity Not Before: Sep 13 03:04:08 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=2CEF073153DF7EFAEE3A3CC86EEC3522666D1D1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:57:9c:24:58:97:ae:94:c6:20:49:b0:35:04: e5:c3:71:94:7b:5d:65:a3:d0:e3:8c:e1:cd:56:ab: d6:dc:87:b4:d0:ba:79:2d:cb:93:2b:37:cb:72:70: 6c:04:64:f0:d0:26:84:96:33:3b:52:5d:0d:3b:ad: aa:30:9c:dc:0b:63:f3:93:20:8f:34:a8:14:f5:6e: 34:1b:5c:10:cb:9f:91:a3:81:c7:7e:e3:0b:b4:92: a0:40:4c:1a:b0:a1:55:ae:44:34:61:3e:3c:63:30: d3:ab:4d:82:95:81:bd:ac:e4:1c:09:83:a9:26:15: 42:64:d3:ae:66:7f:a0:6d:03:46:6c:4e:cb:f0:b3: 4c:c6:6b:b8:71:38:e7:28:d2:e3:d1:07:1a:02:f0: 45:49:72:9b:c1:1f:b5:14:ef:d5:4a:2b:dd:1c:16: ad:54:8f:50:95:39:11:89:23:24:1b:cc:09:a8:91: 0b:f2:af:a1:4d:5e:dd:66:c3:f4:f1:bb:c8:66:2f: 43:46:d0:20:01:ab:c5:4f:7b:0a:45:0d:ed:5e:e0: d3:02:fe:a1:c4:2d:52:05:85:10:69:a6:0f:27:c8: 8b:c6:bc:ed:4d:50:52:d1:11:a8:62:44:a1:06:c8: 24:e2:20:d8:ac:8a:a4:77:96:f4:33:62:3a:cc:5c: 7f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:EF:07:31:53:DF:7E:FA:EE:3A:3C:C8:6E:EC:35:22:66:6D:1D:1D X509v3 Authority Key Identifier: keyid:E5:02:DE:2C:60:86:A6:62:84:B8:0C:DB:7B:5A:C0:C1:2C:C3:F3:C2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2154/5QLeLGCGpmKEuAzbe1rAwSzD88I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5QLeLGCGpmKEuAzbe1rAwSzD88I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2154/LO8HMVPffvruOjzIbuw1ImZtHR0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.161.136.0/21 Signature Algorithm: sha256WithRSAEncryption 06:f8:55:a8:93:f8:68:dc:cc:9f:17:bc:1b:a8:22:f8:35:76: a8:28:a7:88:b7:ee:c2:cb:e3:9f:a8:43:d8:c0:15:9c:7a:da: 33:1c:28:3a:f4:c4:c2:bc:f2:8d:3c:be:6b:2e:b7:e7:10:46: 5a:35:2b:40:c6:f0:7d:98:b3:58:1b:b3:96:32:72:63:7b:04: a2:f5:ae:e7:09:5d:9c:90:e0:f6:f3:67:bf:bb:ca:f9:e8:38: 36:82:ee:80:f0:89:8d:02:cb:5d:84:cf:af:0f:da:40:45:15: d4:d5:4e:d7:4d:5c:db:11:02:4f:8f:16:ec:92:69:99:5a:64: 65:2f:55:be:4f:8c:82:21:48:a3:a3:70:ad:0f:88:d9:4a:62: 1a:d6:7d:9f:03:ea:30:7f:14:4a:a4:34:93:fc:20:d6:19:4e: 79:20:75:0e:4a:57:17:5f:17:7d:e2:a7:70:e0:73:e4:57:3d: 6f:f8:00:0e:3f:73:ca:9e:dd:93:f3:23:90:c7:d5:cd:74:a1: b2:9a:d5:33:85:39:23:aa:b3:63:e5:ba:4d:7a:b5:e6:05:f9: 0d:e9:ff:3f:a3:82:c0:21:62:f7:fe:b2:2b:82:ae:bd:ef:e6: 7a:10:2d:a9:1d:6a:4d:99:ef:c1:a0:83:19:62:a7:d5:41:91: 50:25:6b:fb -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICCCYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTUw MkRFMkM2MDg2QTY2Mjg0QjgwQ0RCN0I1QUMwQzEyQ0MzRjNDMjAeFw0yNTA5MTMw MzA0MDhaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDJDRUYwNzMxNTNERjdF RkFFRTNBM0NDODZFRUMzNTIyNjY2RDFEMUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDkV5wkWJeulMYgSbA1BOXDcZR7XWWj0OOM4c1Wq9bch7TQunkt y5MrN8tycGwEZPDQJoSWMztSXQ07raownNwLY/OTII80qBT1bjQbXBDLn5Gjgcd+ 4wu0kqBATBqwoVWuRDRhPjxjMNOrTYKVgb2s5BwJg6kmFUJk065mf6BtA0ZsTsvw s0zGa7hxOOco0uPRBxoC8EVJcpvBH7UU79VKK90cFq1Uj1CVORGJIyQbzAmokQvy r6FNXt1mw/Txu8hmL0NG0CABq8VPewpFDe1e4NMC/qHELVIFhRBppg8nyIvGvO1N UFLREahiRKEGyCTiINisiqR3lvQzYjrMXH/XAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQULO8HMVPffvruOjzIbuw1ImZtHR0wHwYDVR0jBBgwFoAU5QLeLGCGpmKEuAzb e1rAwSzD88IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjE1 NC81UUxlTEdDR3BtS0V1QXpiZTFyQXdTekQ4OEkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzVRTGVMR0NHcG1LRXVBemJlMXJBd1N6RDg4SS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIxNTQvTE84SE1WUGZmdnJ1 T2p6SWJ1dzFJbVp0SFIwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA3ehiDANBgkqhkiG9w0BAQsFAAOCAQEABvhVqJP4aNzMnxe8G6gi+DV2qCin iLfuwsvjn6hD2MAVnHraMxwoOvTEwrzyjTy+ay635xBGWjUrQMbwfZizWBuzljJy Y3sEovWu5wldnJDg9vNnv7vK+eg4NoLugPCJjQLLXYTPrw/aQEUV1NVO101c2xEC T48W7JJpmVpkZS9Vvk+MgiFIo6NwrQ+I2UpiGtZ9nwPqMH8USqQ0k/wg1hlOeSB1 DkpXF18XfeKncOBz5Fc9b/gADj9zyp7dk/MjkMfVzXShsprVM4U5I6qzY+W6TXq1 5gX5Den/P6OCwCFi9/6yK4Kuve/mehAtqR1qTZnvwaCDGWKn1UGRUCVr+w== -----END CERTIFICATE-----Generated at Tue Oct 21 01:57:14 2025 by rpki-client