$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2927/uZ-RjhDla49pmkkCc2x-hjnzRHA.roa File: uZ-RjhDla49pmkkCc2x-hjnzRHA.roa (raw, json) Hash identifier: tt22xdNbLV4EJMOwvGVKTNH+lbbq6f0hxEgv9XMa/BI= Subject key identifier: B9:9F:91:8E:10:E5:6B:8F:69:9A:49:02:73:6C:7E:86:39:F3:44:70 Certificate issuer: /CN=73D211D5B210E3B196054DB71892D8E38A4E09EF Certificate serial: 99 Authority key identifier: 73:D2:11:D5:B2:10:E3:B1:96:05:4D:B7:18:92:D8:E3:8A:4E:09:EF Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c9IR1bIQ47GWBU23GJLY44pOCe8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/uZ-RjhDla49pmkkCc2x-hjnzRHA.roa Signing time: Wed 23 Jul 2025 01:36:57 +0000 ROA not before: Wed 23 Jul 2025 01:36:57 +0000 ROA not after: Thu 25 Jun 2026 02:35:12 +0000 asID: 131574 IP address blocks: 43.249.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/c9IR1bIQ47GWBU23GJLY44pOCe8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/c9IR1bIQ47GWBU23GJLY44pOCe8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c9IR1bIQ47GWBU23GJLY44pOCe8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73D211D5B210E3B196054DB71892D8E38A4E09EF Validity Not Before: Jul 23 01:36:57 2025 GMT Not After : Jun 25 02:35:12 2026 GMT Subject: CN=B99F918E10E56B8F699A4902736C7E8639F34470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:05:87:b7:c4:1e:45:50:07:1c:4b:c8:01:f3: 4d:27:f0:94:66:f1:1c:35:13:c8:bd:0c:1a:52:cd: e5:03:31:68:fd:32:ab:bd:c7:d6:7e:91:8f:cb:27: e4:27:43:eb:81:7c:1d:f5:cf:99:c0:0e:cc:c9:3e: 86:b4:40:f6:82:9f:b8:1f:93:dc:b8:13:2a:7b:0e: ec:b7:bd:f5:21:65:36:a7:90:26:ea:a8:c2:c2:20: fe:07:81:80:59:59:9f:6c:0c:48:6b:67:c2:d5:21: 0e:49:f8:d3:9c:7e:a8:85:42:ce:e0:c9:6c:68:a4: a7:25:f5:1a:9a:6a:84:54:46:58:6b:ce:e4:46:7f: 1c:c4:5f:0c:8a:f6:24:83:0d:92:f4:99:93:08:a9: 0c:57:bf:61:57:56:7e:d6:bc:4b:41:52:86:70:1a: b1:bf:5f:9a:f3:50:b3:78:45:08:61:84:fa:a5:8d: 3b:26:64:2f:9b:7d:79:22:e7:30:f1:2b:66:7d:37: 77:dc:5d:16:f0:3b:36:0f:eb:e1:b5:66:47:be:d1: 7d:49:fd:e0:ce:c0:15:bb:da:2d:58:2e:f6:a2:e1: 37:f3:e5:ab:9f:5b:94:4c:18:80:c0:39:28:c5:e2: 3a:97:2b:24:78:18:e9:e9:05:a8:7e:68:3e:c3:47: 3b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:9F:91:8E:10:E5:6B:8F:69:9A:49:02:73:6C:7E:86:39:F3:44:70 X509v3 Authority Key Identifier: keyid:73:D2:11:D5:B2:10:E3:B1:96:05:4D:B7:18:92:D8:E3:8A:4E:09:EF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/c9IR1bIQ47GWBU23GJLY44pOCe8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c9IR1bIQ47GWBU23GJLY44pOCe8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/uZ-RjhDla49pmkkCc2x-hjnzRHA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.249.171.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:44:a5:b5:57:8a:54:23:fa:1d:18:c2:04:1d:52:da:0e:4e: e5:c5:85:1f:5c:aa:20:01:57:5e:29:9f:af:1b:9c:ce:1d:44: bc:e7:49:23:e6:ff:9f:2e:1c:0f:aa:e6:59:d6:c2:58:a9:e6: de:92:bf:10:7b:3c:2e:b1:8c:4f:aa:5a:30:71:52:56:9f:38: 4b:47:0b:ef:82:5d:3c:1d:ca:99:d0:f2:1a:fd:3f:20:ed:69: ae:44:9e:5a:06:c5:6e:1c:b1:8a:f4:02:d2:a2:35:ec:66:28: 60:c9:7c:15:70:94:21:7c:6d:4c:2b:14:f1:94:74:b5:e2:77: 71:f0:fa:3c:7e:5d:07:09:ba:c6:88:38:b0:25:b5:f1:a6:3e: c6:c1:87:da:30:f8:ab:be:72:6a:a0:f5:d9:ef:60:a8:4a:ae: a7:b5:1f:4d:6b:65:ca:60:84:63:02:02:9b:1d:cb:7b:bd:85: 35:28:38:87:3e:af:85:0d:94:c5:d9:06:52:e9:49:70:dc:22: 63:d4:3d:d6:2b:59:77:73:04:87:a2:48:3d:00:13:14:3e:3e: d8:b2:ed:e5:8f:5c:9c:be:1c:ef:3a:d2:92:72:76:68:d7:a0: 8b:c7:dd:9b:5f:e5:1c:8f:7c:12:28:2c:b5:d5:c1:f9:43:d2: ff:f6:d0:be -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzNE MjExRDVCMjEwRTNCMTk2MDU0REI3MTg5MkQ4RTM4QTRFMDlFRjAeFw0yNTA3MjMw MTM2NTdaFw0yNjA2MjUwMjM1MTJaMDMxMTAvBgNVBAMTKEI5OUY5MThFMTBFNTZC OEY2OTlBNDkwMjczNkM3RTg2MzlGMzQ0NzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPBYe3xB5FUAccS8gB800n8JRm8Rw1E8i9DBpSzeUDMWj9Mqu9 x9Z+kY/LJ+QnQ+uBfB31z5nADszJPoa0QPaCn7gfk9y4Eyp7Duy3vfUhZTankCbq qMLCIP4HgYBZWZ9sDEhrZ8LVIQ5J+NOcfqiFQs7gyWxopKcl9RqaaoRURlhrzuRG fxzEXwyK9iSDDZL0mZMIqQxXv2FXVn7WvEtBUoZwGrG/X5rzULN4RQhhhPqljTsm ZC+bfXki5zDxK2Z9N3fcXRbwOzYP6+G1Zke+0X1J/eDOwBW72i1YLvai4Tfz5auf W5RMGIDAOSjF4jqXKyR4GOnpBah+aD7DRzv7AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUuZ+RjhDla49pmkkCc2x+hjnzRHAwHwYDVR0jBBgwFoAUc9IR1bIQ47GWBU23 GJLY44pOCe8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjky Ny9jOUlSMWJJUTQ3R1dCVTIzR0pMWTQ0cE9DZTguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2M5SVIxYklRNDdHV0JVMjNHSkxZNDRwT0NlOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI5MjcvdVotUmpoRGxhNDlw bWtrQ2MyeC1oam56UkhBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEACv5qzANBgkqhkiG9w0BAQsFAAOCAQEAOkSltVeKVCP6HRjCBB1S2g5O5cWF H1yqIAFXXimfrxuczh1EvOdJI+b/ny4cD6rmWdbCWKnm3pK/EHs8LrGMT6paMHFS Vp84S0cL74JdPB3KmdDyGv0/IO1prkSeWgbFbhyxivQC0qI17GYoYMl8FXCUIXxt TCsU8ZR0teJ3cfD6PH5dBwm6xog4sCW18aY+xsGH2jD4q75yaqD12e9gqEqup7Uf TWtlymCEYwICmx3Le72FNSg4hz6vhQ2UxdkGUulJcNwiY9Q91itZd3MEh6JIPQAT FD4+2LLt5Y9cnL4c7zrSknJ2aNegi8fdm1/lHI98EigstdXB+UPS//bQvg== -----END CERTIFICATE-----Generated at Mon Oct 20 19:59:35 2025 by rpki-client