$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2927/ZvLhd7aTkc-Zf7rp82hTMIBBKEI.roa File: ZvLhd7aTkc-Zf7rp82hTMIBBKEI.roa (raw, json) Hash identifier: LkSHoQGt2WGRKwQ7o3yNPZum1jyoyXyPJ/rusj7iQPM= Subject key identifier: 66:F2:E1:77:B6:93:91:CF:99:7F:BA:E9:F3:68:53:30:80:41:28:42 Certificate issuer: /CN=73D211D5B210E3B196054DB71892D8E38A4E09EF Certificate serial: 9A Authority key identifier: 73:D2:11:D5:B2:10:E3:B1:96:05:4D:B7:18:92:D8:E3:8A:4E:09:EF Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c9IR1bIQ47GWBU23GJLY44pOCe8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/ZvLhd7aTkc-Zf7rp82hTMIBBKEI.roa Signing time: Wed 23 Jul 2025 01:36:58 +0000 ROA not before: Wed 23 Jul 2025 01:36:58 +0000 ROA not after: Thu 25 Jun 2026 02:35:12 +0000 asID: 151302 IP address blocks: 43.249.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/c9IR1bIQ47GWBU23GJLY44pOCe8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/c9IR1bIQ47GWBU23GJLY44pOCe8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c9IR1bIQ47GWBU23GJLY44pOCe8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73D211D5B210E3B196054DB71892D8E38A4E09EF Validity Not Before: Jul 23 01:36:58 2025 GMT Not After : Jun 25 02:35:12 2026 GMT Subject: CN=66F2E177B69391CF997FBAE9F368533080412842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:85:f5:a7:33:62:6a:aa:e0:55:f2:e8:ff:8c: e0:07:b2:2b:6a:09:51:f0:b7:e5:1c:1b:fa:45:98: e0:9d:e8:6e:fb:59:ac:4e:31:eb:83:76:eb:9a:97: c3:1a:2e:ac:75:e8:d8:0b:71:e6:ad:96:8b:56:de: 4d:6b:39:17:ce:16:c8:3f:4c:09:61:29:49:85:6a: 6a:49:6d:5a:8d:dc:f1:5d:68:be:f4:a9:fe:9a:63: 7a:db:94:05:1b:34:88:0a:0e:a5:b9:16:dd:b5:c8: 0c:56:25:99:6c:97:5f:56:19:09:0a:d1:31:39:f6: 59:20:d7:2b:a9:dc:83:91:e2:d8:09:d9:b2:10:59: ed:7d:00:6e:d7:46:0b:60:c9:90:5e:74:71:7d:04: 24:bb:66:fc:ce:ec:e2:59:79:61:ab:5a:2f:46:e2: 19:37:d8:7e:3f:af:ac:e0:64:3c:f8:9d:18:45:39: 9b:06:6f:1e:a8:99:3b:bc:0c:c6:f7:bb:46:07:90: 47:3b:7c:77:70:c7:96:29:e0:cd:3d:fa:e2:e1:31: 83:43:2d:f0:92:02:00:fd:e7:c3:f6:19:ad:f1:fb: d3:62:d1:36:e8:08:21:80:13:bc:b3:64:47:d7:98: 8b:0b:53:2c:d8:46:cc:91:e1:06:2d:db:e0:d7:44: cd:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:F2:E1:77:B6:93:91:CF:99:7F:BA:E9:F3:68:53:30:80:41:28:42 X509v3 Authority Key Identifier: keyid:73:D2:11:D5:B2:10:E3:B1:96:05:4D:B7:18:92:D8:E3:8A:4E:09:EF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/c9IR1bIQ47GWBU23GJLY44pOCe8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c9IR1bIQ47GWBU23GJLY44pOCe8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/ZvLhd7aTkc-Zf7rp82hTMIBBKEI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.249.168.0/24 Signature Algorithm: sha256WithRSAEncryption 64:fb:04:da:02:fc:8e:06:e5:2f:60:3f:ad:68:74:38:7b:fc: 60:c4:64:5b:24:3b:0d:fa:3b:eb:3c:36:a2:a9:b6:71:e8:76: 5a:23:89:fd:7d:73:52:84:fc:e0:1d:0a:ad:be:b9:60:30:9a: c4:0f:f5:62:be:0d:8a:1b:dd:25:b3:ab:ed:d9:30:3c:13:9c: 14:52:c0:d8:df:35:77:b7:2a:9d:ae:00:16:2b:ff:45:46:4d: 1d:92:62:7f:7e:72:6e:84:22:59:fb:47:43:da:09:ea:6c:e5: 5c:1a:20:f1:01:f6:e2:9e:4d:6f:bb:da:04:60:3d:44:ec:90: 80:1e:56:12:1d:5b:3c:3e:29:62:fb:26:dc:ee:85:ed:f8:52: 77:00:b7:2a:01:aa:bb:9c:69:9e:fc:ed:41:a6:2d:03:08:ce: 3c:4c:f3:9a:89:34:80:59:0c:03:8d:cb:d2:3d:05:64:b2:50: 54:a9:2e:17:5d:e2:18:cd:34:60:5c:e1:65:8a:2a:23:8b:9e: c8:dc:0d:e5:b6:eb:d8:8c:c5:65:e4:67:74:01:84:c2:91:f1: 8d:4f:31:a9:44:c6:87:10:6a:fa:f3:d4:db:98:31:2e:e7:ed: 14:c2:51:33:26:2d:fb:a7:fc:44:b1:af:53:39:1f:03:9e:d1: bc:28:e0:ac -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICAJowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzNE MjExRDVCMjEwRTNCMTk2MDU0REI3MTg5MkQ4RTM4QTRFMDlFRjAeFw0yNTA3MjMw MTM2NThaFw0yNjA2MjUwMjM1MTJaMDMxMTAvBgNVBAMTKDY2RjJFMTc3QjY5Mzkx Q0Y5OTdGQkFFOUYzNjg1MzMwODA0MTI4NDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDahfWnM2JqquBV8uj/jOAHsitqCVHwt+UcG/pFmOCd6G77WaxO MeuDduual8MaLqx16NgLceatlotW3k1rORfOFsg/TAlhKUmFampJbVqN3PFdaL70 qf6aY3rblAUbNIgKDqW5Ft21yAxWJZlsl19WGQkK0TE59lkg1yup3IOR4tgJ2bIQ We19AG7XRgtgyZBedHF9BCS7ZvzO7OJZeWGrWi9G4hk32H4/r6zgZDz4nRhFOZsG bx6omTu8DMb3u0YHkEc7fHdwx5Yp4M09+uLhMYNDLfCSAgD958P2Ga3x+9Ni0Tbo CCGAE7yzZEfXmIsLUyzYRsyR4QYt2+DXRM2vAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUZvLhd7aTkc+Zf7rp82hTMIBBKEIwHwYDVR0jBBgwFoAUc9IR1bIQ47GWBU23 GJLY44pOCe8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjky Ny9jOUlSMWJJUTQ3R1dCVTIzR0pMWTQ0cE9DZTguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2M5SVIxYklRNDdHV0JVMjNHSkxZNDRwT0NlOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI5MjcvWnZMaGQ3YVRrYy1a ZjdycDgyaFRNSUJCS0VJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEACv5qDANBgkqhkiG9w0BAQsFAAOCAQEAZPsE2gL8jgblL2A/rWh0OHv8YMRk WyQ7Dfo76zw2oqm2ceh2WiOJ/X1zUoT84B0Krb65YDCaxA/1Yr4NihvdJbOr7dkw PBOcFFLA2N81d7cqna4AFiv/RUZNHZJif35yboQiWftHQ9oJ6mzlXBog8QH24p5N b7vaBGA9ROyQgB5WEh1bPD4pYvsm3O6F7fhSdwC3KgGqu5xpnvztQaYtAwjOPEzz mok0gFkMA43L0j0FZLJQVKkuF13iGM00YFzhZYoqI4ueyNwN5bbr2IzFZeRndAGE wpHxjU8xqUTGhxBq+vPU25gxLuftFMJRMyYt+6f8RLGvUzkfA57RvCjgrA== -----END CERTIFICATE-----Generated at Mon Oct 20 19:59:07 2025 by rpki-client