$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2411/eQZgbRktkJ93WGifr4NOtX4uGLY.roa File: eQZgbRktkJ93WGifr4NOtX4uGLY.roa (raw, json) Hash identifier: L+j9YAcvm1m8U4fzhi3sTXMafQHgPYzU69YFWiv/OV4= Subject key identifier: 79:06:60:6D:19:2D:90:9F:77:58:68:9F:AF:83:4E:B5:7E:2E:18:B6 Certificate issuer: /CN=1F552F6E8AC2F97E1447BFAC810059695E2B32A9 Certificate serial: 28 Authority key identifier: 1F:55:2F:6E:8A:C2:F9:7E:14:47:BF:AC:81:00:59:69:5E:2B:32:A9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/H1UvborC-X4UR7-sgQBZaV4rMqk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2411/eQZgbRktkJ93WGifr4NOtX4uGLY.roa Signing time: Mon 18 Aug 2025 01:57:55 +0000 ROA not before: Mon 18 Aug 2025 01:57:55 +0000 ROA not after: Sun 16 Aug 2026 01:52:01 +0000 asID: 137690 IP address blocks: 202.189.32.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2411/H1UvborC-X4UR7-sgQBZaV4rMqk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2411/H1UvborC-X4UR7-sgQBZaV4rMqk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/H1UvborC-X4UR7-sgQBZaV4rMqk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 02:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F552F6E8AC2F97E1447BFAC810059695E2B32A9 Validity Not Before: Aug 18 01:57:55 2025 GMT Not After : Aug 16 01:52:01 2026 GMT Subject: CN=7906606D192D909F7758689FAF834EB57E2E18B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:6b:9a:e7:4d:57:db:cb:eb:b6:97:73:34:59: 1a:39:37:bb:e3:bb:38:8f:51:ec:9c:64:d7:d1:92: 42:da:43:59:75:9d:a1:e9:b9:df:3e:eb:97:ee:bb: e5:e5:fb:a7:45:4f:c6:e7:e0:63:30:d1:c1:8c:c9: 4d:7f:3e:69:e5:80:b1:81:98:da:69:4c:d7:63:a5: b9:d1:0a:5f:66:cc:49:a2:d8:05:4b:8b:30:74:72: 4d:1a:05:ed:7a:6c:da:51:1d:21:b1:d0:0a:b4:44: 97:f8:c6:ac:90:b4:3a:2f:cd:85:b1:50:fb:7e:fd: e2:fa:5d:32:f0:6e:d7:4e:9f:ba:f9:99:23:a9:d4: e5:37:5b:f6:8e:3d:bd:49:be:a2:9a:8a:1c:7a:91: bd:4a:eb:da:b5:5d:19:8a:45:8d:3f:f9:dd:8a:5a: ce:6c:74:a7:b7:16:33:18:f3:e2:a9:c7:f3:ca:eb: 42:78:9b:c2:fe:9d:20:1a:96:96:5b:c2:88:89:b8: fd:b1:33:da:54:ab:1b:2a:0f:30:7e:05:48:c8:df: 47:65:d4:b8:7c:7e:3c:ce:64:45:1c:fc:b0:ac:e1: 9d:c6:61:43:a6:e3:62:59:ca:13:61:11:50:d7:e7: af:b6:ca:7a:f7:d5:fa:04:96:72:e8:e5:e2:be:53: e8:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:06:60:6D:19:2D:90:9F:77:58:68:9F:AF:83:4E:B5:7E:2E:18:B6 X509v3 Authority Key Identifier: keyid:1F:55:2F:6E:8A:C2:F9:7E:14:47:BF:AC:81:00:59:69:5E:2B:32:A9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2411/H1UvborC-X4UR7-sgQBZaV4rMqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/H1UvborC-X4UR7-sgQBZaV4rMqk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2411/eQZgbRktkJ93WGifr4NOtX4uGLY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.189.32.0/22 Signature Algorithm: sha256WithRSAEncryption 0f:4b:0f:30:f4:85:44:3f:a0:05:ba:3f:e3:d4:81:88:62:7d: a2:63:c7:74:c8:07:01:b5:f0:31:5a:88:cd:18:37:80:a4:d7: 16:a1:dc:21:cb:17:b9:0c:90:61:79:c8:ba:b5:78:bf:b5:14: fd:ee:4c:62:f8:2b:ef:8d:ac:3c:52:35:90:e9:04:f3:e8:15: 31:00:f3:c5:ab:e3:53:11:86:7a:dc:76:ef:21:e9:00:2a:05: 33:c7:0f:14:3f:4e:95:57:d3:7b:b2:9a:94:8d:d5:9e:4b:bc: 60:53:dc:41:65:54:8a:a7:49:dc:53:e2:87:62:29:6b:b0:7b: 2d:fb:85:8c:f8:e1:90:6b:b0:c3:ff:fd:98:af:15:a5:43:3b: 3c:48:2f:e1:57:b1:fd:4c:10:1f:b3:21:87:c1:91:4c:c3:67: f0:58:f1:97:52:f4:70:21:e4:45:b2:13:48:91:d9:8c:b1:1c: 34:e3:08:10:c6:27:44:cc:26:dd:38:e3:a5:d5:00:13:73:02: fa:f5:ca:7c:36:25:d7:bf:3c:aa:ec:bd:1e:94:2c:cb:50:5c: cb:fa:33:a5:d7:c4:ba:61:0d:be:df:23:16:7d:e0:3c:01:d8: 68:97:60:e6:ae:1a:b4:c1:22:02:2d:df:96:6c:a3:9b:c3:b0: c9:1a:fe:f7 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBKDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxRjU1 MkY2RThBQzJGOTdFMTQ0N0JGQUM4MTAwNTk2OTVFMkIzMkE5MB4XDTI1MDgxODAx NTc1NVoXDTI2MDgxNjAxNTIwMVowMzExMC8GA1UEAxMoNzkwNjYwNkQxOTJEOTA5 Rjc3NTg2ODlGQUY4MzRFQjU3RTJFMThCNjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOVrmudNV9vL67aXczRZGjk3u+O7OI9R7Jxk19GSQtpDWXWdoem5 3z7rl+675eX7p0VPxufgYzDRwYzJTX8+aeWAsYGY2mlM12OludEKX2bMSaLYBUuL MHRyTRoF7Xps2lEdIbHQCrREl/jGrJC0Oi/NhbFQ+3794vpdMvBu106fuvmZI6nU 5Tdb9o49vUm+opqKHHqRvUrr2rVdGYpFjT/53Ypazmx0p7cWMxjz4qnH88rrQnib wv6dIBqWllvCiIm4/bEz2lSrGyoPMH4FSMjfR2XUuHx+PM5kRRz8sKzhncZhQ6bj YlnKE2ERUNfnr7bKevfV+gSWcujl4r5T6N8CAwEAAaOCAfMwggHvMB0GA1UdDgQW BBR5BmBtGS2Qn3dYaJ+vg061fi4YtjAfBgNVHSMEGDAWgBQfVS9uisL5fhRHv6yB AFlpXisyqTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNDEx L0gxVXZib3JDLVg0VVI3LXNnUUJaYVY0ck1xay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvSDFVdmJvckMtWDRVUjctc2dRQlphVjRyTXFrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjQxMS9lUVpnYlJrdGtKOTNX R2lmcjROT3RYNHVHTFkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCyr0gMA0GCSqGSIb3DQEBCwUAA4IBAQAPSw8w9IVEP6AFuj/j1IGIYn2iY8d0 yAcBtfAxWojNGDeApNcWodwhyxe5DJBheci6tXi/tRT97kxi+Cvvjaw8UjWQ6QTz 6BUxAPPFq+NTEYZ63HbvIekAKgUzxw8UP06VV9N7spqUjdWeS7xgU9xBZVSKp0nc U+KHYilrsHst+4WM+OGQa7DD//2YrxWlQzs8SC/hV7H9TBAfsyGHwZFMw2fwWPGX UvRwIeRFshNIkdmMsRw04wgQxidEzCbdOOOl1QATcwL69cp8NiXXvzyq7L0elCzL UFzL+jOl18S6YQ2+3yMWfeA8Adhol2Dmrhq0wSICLd+WbKObw7DJGv73 -----END CERTIFICATE-----Generated at Sun Aug 24 00:58:23 2025 by rpki-client