$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2411/ZPBDn_-2VH8FGytqw-5eaL7hRCg.roa File: ZPBDn_-2VH8FGytqw-5eaL7hRCg.roa (raw, json) Hash identifier: aSyw+/vJsuZSosCdmfiZH7lPkBecE7CLyHR6dRA/G0k= Subject key identifier: 64:F0:43:9F:FF:B6:54:7F:05:1B:2B:6A:C3:EE:5E:68:BE:E1:44:28 Certificate issuer: /CN=1F552F6E8AC2F97E1447BFAC810059695E2B32A9 Certificate serial: 2D Authority key identifier: 1F:55:2F:6E:8A:C2:F9:7E:14:47:BF:AC:81:00:59:69:5E:2B:32:A9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/H1UvborC-X4UR7-sgQBZaV4rMqk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2411/ZPBDn_-2VH8FGytqw-5eaL7hRCg.roa Signing time: Mon 18 Aug 2025 01:57:56 +0000 ROA not before: Mon 18 Aug 2025 01:57:56 +0000 ROA not after: Sun 16 Aug 2026 01:52:01 +0000 asID: 137690 IP address blocks: 202.189.16.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2411/H1UvborC-X4UR7-sgQBZaV4rMqk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2411/H1UvborC-X4UR7-sgQBZaV4rMqk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/H1UvborC-X4UR7-sgQBZaV4rMqk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 02:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F552F6E8AC2F97E1447BFAC810059695E2B32A9 Validity Not Before: Aug 18 01:57:56 2025 GMT Not After : Aug 16 01:52:01 2026 GMT Subject: CN=64F0439FFFB6547F051B2B6AC3EE5E68BEE14428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ee:a0:2d:42:4b:31:15:5e:62:89:93:e4:51: bf:8d:85:e8:f8:85:81:f9:58:e9:9a:6f:bc:c4:62: 7d:d6:a8:96:d5:d1:07:b3:b9:8d:23:57:f3:32:5f: 0b:34:62:95:f2:c1:18:e0:b9:46:6b:3c:6f:82:c0: 94:25:bb:b8:8b:31:71:ab:76:18:ba:67:0a:f4:7d: 34:30:b3:cf:05:21:17:e3:69:05:f7:51:51:15:6a: 23:d9:0d:3e:29:88:2d:3f:fe:84:95:1a:84:a4:d0: d7:68:9b:41:5d:c2:ca:5c:2a:ce:22:5d:8a:3d:ca: d0:32:df:ae:2e:d4:af:9b:97:6b:f8:5c:ad:0f:01: df:6a:af:39:39:23:09:11:b5:f4:8c:3d:35:f7:67: 2f:cc:e5:92:ac:8c:ce:6f:a0:3d:d2:3a:80:f5:90: fd:ea:4a:f8:c3:1a:ad:6c:47:d1:ab:7b:54:2d:c7: 79:e3:7e:9c:ee:6f:46:92:1e:38:50:f5:aa:a3:7b: a6:a7:00:00:1a:cb:8c:6b:68:22:2d:dc:0a:c4:55: 5a:bd:c6:37:3f:82:76:fd:cc:fe:63:60:37:f9:d2: 4e:39:df:30:d2:6c:54:8d:f5:63:bd:52:ef:3d:29: c7:e2:8f:02:71:fc:ae:ef:41:43:7f:18:29:2e:51: bf:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:F0:43:9F:FF:B6:54:7F:05:1B:2B:6A:C3:EE:5E:68:BE:E1:44:28 X509v3 Authority Key Identifier: keyid:1F:55:2F:6E:8A:C2:F9:7E:14:47:BF:AC:81:00:59:69:5E:2B:32:A9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2411/H1UvborC-X4UR7-sgQBZaV4rMqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/H1UvborC-X4UR7-sgQBZaV4rMqk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2411/ZPBDn_-2VH8FGytqw-5eaL7hRCg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.189.16.0/22 Signature Algorithm: sha256WithRSAEncryption 83:fc:8a:9d:b3:73:85:c3:45:2b:f6:23:9a:d2:a9:e3:6c:a3: 6d:e3:1c:10:7c:66:1f:ad:d2:a0:84:a4:ed:9b:fb:94:e5:e8: a6:a6:5e:ce:03:28:82:21:9b:bc:41:27:a8:d1:8d:6b:a2:55: 0f:24:a0:bc:9d:f2:cf:71:d6:fb:63:e0:a4:7d:bb:c0:5e:47: e1:f3:29:cc:95:1c:fd:2e:f4:dd:9c:18:4d:72:82:5f:09:31: 1e:e1:8b:eb:9f:eb:7e:29:10:f1:28:7f:a6:73:3d:1f:5c:60: 2a:ef:46:03:fd:89:c7:58:b3:c0:f9:c0:39:e5:1f:cc:d4:5f: be:ec:b6:30:1d:9b:f5:62:eb:ca:27:bf:0e:9c:69:a9:61:76: 19:04:c9:d3:b5:1b:05:12:8a:ec:54:1d:95:41:e1:8c:f7:5d: 5c:91:80:23:58:0e:49:0b:ba:89:27:3e:21:d8:76:69:f7:88: d2:5d:60:b7:34:48:11:9e:73:7f:54:91:52:4a:7d:38:2c:85: dc:8e:45:9a:e0:5a:47:52:88:53:d7:5b:c8:35:8a:8e:f1:4d: cf:91:e8:bf:90:27:f0:93:eb:ec:d4:4e:4d:d4:53:5a:e5:1c: 6d:2c:55:af:8b:82:c3:cb:d0:b9:7d:78:53:2d:c0:7a:93:b0: d4:a1:89:e2 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBLTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxRjU1 MkY2RThBQzJGOTdFMTQ0N0JGQUM4MTAwNTk2OTVFMkIzMkE5MB4XDTI1MDgxODAx NTc1NloXDTI2MDgxNjAxNTIwMVowMzExMC8GA1UEAxMoNjRGMDQzOUZGRkI2NTQ3 RjA1MUIyQjZBQzNFRTVFNjhCRUUxNDQyODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKnuoC1CSzEVXmKJk+RRv42F6PiFgflY6ZpvvMRifdaoltXRB7O5 jSNX8zJfCzRilfLBGOC5Rms8b4LAlCW7uIsxcat2GLpnCvR9NDCzzwUhF+NpBfdR URVqI9kNPimILT/+hJUahKTQ12ibQV3CylwqziJdij3K0DLfri7Ur5uXa/hcrQ8B 32qvOTkjCRG19Iw9NfdnL8zlkqyMzm+gPdI6gPWQ/epK+MMarWxH0at7VC3HeeN+ nO5vRpIeOFD1qqN7pqcAABrLjGtoIi3cCsRVWr3GNz+Cdv3M/mNgN/nSTjnfMNJs VI31Y71S7z0px+KPAnH8ru9BQ38YKS5Rv08CAwEAAaOCAfMwggHvMB0GA1UdDgQW BBRk8EOf/7ZUfwUbK2rD7l5ovuFEKDAfBgNVHSMEGDAWgBQfVS9uisL5fhRHv6yB AFlpXisyqTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNDEx L0gxVXZib3JDLVg0VVI3LXNnUUJaYVY0ck1xay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvSDFVdmJvckMtWDRVUjctc2dRQlphVjRyTXFrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjQxMS9aUEJEbl8tMlZIOEZH eXRxdy01ZWFMN2hSQ2cucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCyr0QMA0GCSqGSIb3DQEBCwUAA4IBAQCD/Iqds3OFw0Ur9iOa0qnjbKNt4xwQ fGYfrdKghKTtm/uU5eimpl7OAyiCIZu8QSeo0Y1rolUPJKC8nfLPcdb7Y+CkfbvA Xkfh8ynMlRz9LvTdnBhNcoJfCTEe4Yvrn+t+KRDxKH+mcz0fXGAq70YD/YnHWLPA +cA55R/M1F++7LYwHZv1YuvKJ78OnGmpYXYZBMnTtRsFEorsVB2VQeGM911ckYAj WA5JC7qJJz4h2HZp94jSXWC3NEgRnnN/VJFSSn04LIXcjkWa4FpHUohT11vINYqO 8U3Pkei/kCfwk+vs1E5N1FNa5RxtLFWvi4LDy9C5fXhTLcB6k7DUoYni -----END CERTIFICATE-----Generated at Sun Aug 24 01:01:20 2025 by rpki-client