$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2943/iLTgL__ugrBwZAUnFNmvKYxeMBU.roa File: iLTgL__ugrBwZAUnFNmvKYxeMBU.roa (raw, json) Hash identifier: VsdRTDTFlGzbE2v3s9Tz4OvCdYFI9ztED+sWPOIkhP4= Subject key identifier: 88:B4:E0:2F:FF:EE:82:B0:70:64:05:27:14:D9:AF:29:8C:5E:30:15 Certificate issuer: /CN=D5C2CE1261E59FD76D3E3FB00E5EBA8E44DA30C9 Certificate serial: 06D0 Authority key identifier: D5:C2:CE:12:61:E5:9F:D7:6D:3E:3F:B0:0E:5E:BA:8E:44:DA:30:C9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1cLOEmHln9dtPj-wDl66jkTaMMk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2943/iLTgL__ugrBwZAUnFNmvKYxeMBU.roa Signing time: Tue 30 Sep 2025 04:34:01 +0000 ROA not before: Tue 30 Sep 2025 04:34:01 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 139148 IP address blocks: 115.172.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2943/1cLOEmHln9dtPj-wDl66jkTaMMk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2943/1cLOEmHln9dtPj-wDl66jkTaMMk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1cLOEmHln9dtPj-wDl66jkTaMMk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1744 (0x6d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5C2CE1261E59FD76D3E3FB00E5EBA8E44DA30C9 Validity Not Before: Sep 30 04:34:01 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=88B4E02FFFEE82B07064052714D9AF298C5E3015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4a:e6:8f:ab:a7:b1:11:b1:54:4b:68:17:54: a0:db:9d:31:e3:6b:32:34:ca:57:fc:21:64:ac:34: 5c:4c:83:64:b4:d8:66:a9:48:6e:a6:43:d9:04:f4: e6:0b:72:ae:41:17:fd:a2:9e:c0:e0:a4:09:0a:bc: 66:6f:56:c7:78:64:ec:7e:9e:65:b7:32:8d:47:b8: 97:3a:e9:a8:5e:a7:74:f9:c5:cc:c3:40:3f:3b:c5: 99:57:24:39:d3:dc:72:90:ed:46:45:c3:c4:a3:a6: 03:13:32:35:0e:82:6d:b3:6d:f0:bb:16:eb:ff:80: 7b:30:3b:c9:cc:73:f1:a3:32:6e:f1:d5:b7:9a:e9: 13:46:da:0f:75:4b:bd:74:da:86:52:fe:dd:c3:c9: ac:60:7a:8d:84:ef:49:21:be:f7:a4:f6:d3:33:57: c8:63:1b:4a:92:72:02:65:30:fd:96:4d:15:50:dc: b8:88:c0:01:80:a2:13:dc:4f:f9:99:cd:04:75:f3: 90:6d:24:43:7f:16:9e:ac:88:56:34:18:31:43:14: 83:4b:43:cf:3d:1d:9b:ba:0e:9e:60:96:a6:00:bb: 21:7c:4f:1a:bd:b3:22:65:4c:26:c5:79:68:a7:fc: 0c:fe:7f:27:8b:02:84:3a:d3:97:0a:31:d3:83:cf: 3b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:B4:E0:2F:FF:EE:82:B0:70:64:05:27:14:D9:AF:29:8C:5E:30:15 X509v3 Authority Key Identifier: keyid:D5:C2:CE:12:61:E5:9F:D7:6D:3E:3F:B0:0E:5E:BA:8E:44:DA:30:C9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2943/1cLOEmHln9dtPj-wDl66jkTaMMk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1cLOEmHln9dtPj-wDl66jkTaMMk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2943/iLTgL__ugrBwZAUnFNmvKYxeMBU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 115.172.32.0/19 Signature Algorithm: sha256WithRSAEncryption 9f:35:5f:f3:30:d5:f3:8a:7e:d7:f4:a4:05:71:e3:27:6b:bd: b0:9c:cc:8e:a1:69:48:e9:6c:29:88:35:46:d2:cc:e9:1a:7d: 7f:20:22:c3:a3:2c:d0:7a:a7:49:dc:41:16:68:9d:db:89:f3: 27:f8:3c:62:5d:37:28:f7:29:7b:1c:78:c3:1e:e8:e1:4f:f1: cc:66:51:d2:a7:10:a4:40:0f:0f:ac:f2:43:5e:e0:93:d7:43: 84:ee:ac:10:17:8f:e1:67:05:e2:ca:b8:67:97:77:a2:25:ad: 5c:5e:96:25:95:98:ac:c8:ac:ec:b4:3c:95:e2:54:5b:e2:62: 49:6f:b1:f8:7a:1d:1d:6e:f2:8f:40:54:84:95:dc:57:da:6e: f1:09:64:42:01:6b:bc:ec:2a:ef:35:9f:2e:a3:53:61:50:d4: 58:c3:90:99:51:ae:8b:0e:da:ca:f6:78:e8:b2:85:27:47:27: f7:84:ae:8f:da:63:e2:da:07:fc:fe:20:30:c0:8d:5b:02:e3: 75:01:fa:16:39:45:ed:6d:07:28:b4:49:c2:69:8d:7a:e2:68: 34:4e:84:6c:43:7c:fc:1d:18:48:29:6e:ae:3c:9c:6f:f5:f9: 42:17:dd:bc:86:72:cd:07:9a:af:52:43:06:c1:b0:35:9b:81: 7f:27:57:39 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICBtAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDVD MkNFMTI2MUU1OUZENzZEM0UzRkIwMEU1RUJBOEU0NERBMzBDOTAeFw0yNTA5MzAw NDM0MDFaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDg4QjRFMDJGRkZFRTgy QjA3MDY0MDUyNzE0RDlBRjI5OEM1RTMwMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDISuaPq6exEbFUS2gXVKDbnTHjazI0ylf8IWSsNFxMg2S02Gap SG6mQ9kE9OYLcq5BF/2insDgpAkKvGZvVsd4ZOx+nmW3Mo1HuJc66ahep3T5xczD QD87xZlXJDnT3HKQ7UZFw8SjpgMTMjUOgm2zbfC7Fuv/gHswO8nMc/GjMm7x1bea 6RNG2g91S7102oZS/t3Dyaxgeo2E70khvvek9tMzV8hjG0qScgJlMP2WTRVQ3LiI wAGAohPcT/mZzQR185BtJEN/Fp6siFY0GDFDFINLQ889HZu6Dp5glqYAuyF8Txq9 syJlTCbFeWin/Az+fyeLAoQ605cKMdODzzuVAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUiLTgL//ugrBwZAUnFNmvKYxeMBUwHwYDVR0jBBgwFoAU1cLOEmHln9dtPj+w Dl66jkTaMMkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjk0 My8xY0xPRW1IbG45ZHRQai13RGw2NmprVGFNTWsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzFjTE9FbUhsbjlkdFBqLXdEbDY2amtUYU1Nay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI5NDMvaUxUZ0xfX3VnckJ3 WkFVbkZObXZLWXhlTUJVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBXOsIDANBgkqhkiG9w0BAQsFAAOCAQEAnzVf8zDV84p+1/SkBXHjJ2u9sJzM jqFpSOlsKYg1RtLM6Rp9fyAiw6Ms0HqnSdxBFmid24nzJ/g8Yl03KPcpexx4wx7o 4U/xzGZR0qcQpEAPD6zyQ17gk9dDhO6sEBeP4WcF4sq4Z5d3oiWtXF6WJZWYrMis 7LQ8leJUW+JiSW+x+HodHW7yj0BUhJXcV9pu8QlkQgFrvOwq7zWfLqNTYVDUWMOQ mVGuiw7ayvZ46LKFJ0cn94Suj9pj4toH/P4gMMCNWwLjdQH6FjlF7W0HKLRJwmmN euJoNE6EbEN8/B0YSClurjycb/X5QhfdvIZyzQear1JDBsGwNZuBfydXOQ== -----END CERTIFICATE-----Generated at Mon Oct 20 19:56:05 2025 by rpki-client