$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/EYtpg2Fpt004YOeleKbQ5n2KMKE.roa File: EYtpg2Fpt004YOeleKbQ5n2KMKE.roa (raw, json) Hash identifier: xykkMtbe/DPlhm+qihoVPEMoIuK1LIQt1hlLozqNnIc= Subject key identifier: 11:8B:69:83:61:69:B7:4D:38:60:E7:A5:78:A6:D0:E6:7D:8A:30:A1 Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708 Certificate serial: 21F9 Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/EYtpg2Fpt004YOeleKbQ5n2KMKE.roa Signing time: Sat 13 Sep 2025 03:09:10 +0000 ROA not before: Sat 13 Sep 2025 03:09:10 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 137718 IP address blocks: 118.145.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8697 (0x21f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708 Validity Not Before: Sep 13 03:09:10 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=118B69836169B74D3860E7A578A6D0E67D8A30A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b5:f4:6d:1b:0d:d6:2b:ea:15:62:6b:6e:9f: 9c:6b:7b:6c:43:9b:be:dd:87:32:b9:8e:b3:55:f8: e8:4f:8a:30:e3:a7:bb:50:90:b3:40:40:aa:83:5b: f8:a8:30:45:fe:69:e8:ee:a1:2b:1a:23:47:d9:fb: 4c:b7:03:27:0f:d2:ef:de:d0:28:89:cc:21:41:16: 3b:56:20:70:a2:93:84:4f:29:2a:5f:13:98:73:89: fa:2c:c9:2f:0d:bc:7e:57:01:46:60:bd:3c:6d:ed: e2:0d:7f:c4:69:17:dc:54:db:70:81:9a:c8:9e:df: c5:2a:d1:84:48:9b:63:40:de:e6:a1:d9:c5:0b:f1: 67:32:3f:db:0b:f5:e8:23:1d:6d:89:ec:5f:18:87: e3:58:fe:97:f3:1a:14:9d:42:79:c6:25:ca:1d:dc: f7:b6:47:71:71:fa:78:5e:7a:c0:e3:5d:ff:36:87: f5:f1:df:5d:1e:51:5b:0d:3b:02:c5:ff:07:52:ff: 53:65:07:3e:1b:fa:01:39:8a:85:cd:c5:08:57:00: d4:75:d1:9b:e3:34:30:c3:a1:91:1a:2e:08:3b:d4: 61:3b:34:87:7a:7b:fd:4c:43:7f:98:9f:e6:ef:58: 4a:85:b9:fe:7b:d5:c1:73:4c:6f:23:ff:b0:ff:54: 7e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:8B:69:83:61:69:B7:4D:38:60:E7:A5:78:A6:D0:E6:7D:8A:30:A1 X509v3 Authority Key Identifier: keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/EYtpg2Fpt004YOeleKbQ5n2KMKE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.145.128.0/17 Signature Algorithm: sha256WithRSAEncryption a9:53:6c:7f:57:0e:71:8c:97:63:92:d1:0a:49:f9:0b:0a:b0: 2f:10:f9:6b:c9:f8:f4:5b:d6:40:ec:7c:73:19:85:19:56:7f: 71:ca:fe:da:6c:7e:9a:cd:10:f5:c7:c9:0d:6f:e7:81:bd:fd: a3:9e:eb:57:81:39:52:5e:e8:31:2e:0e:2a:93:26:41:ef:2a: 16:06:4d:af:2b:16:22:e7:14:04:f8:2c:7f:49:bf:6c:c3:6f: b9:d6:75:ef:19:10:99:eb:91:82:42:d7:2f:35:b2:bf:25:41: 29:82:a3:dd:6e:33:af:fc:bf:0b:24:58:90:22:63:d7:b5:96: 89:41:37:64:21:b6:01:cc:a7:18:e8:ad:b9:a9:52:e5:14:69: df:0e:fc:9c:cf:ee:99:0c:6c:66:a9:44:84:8a:12:ea:85:f5: 0b:72:a9:0c:13:ac:a8:fc:82:ff:45:89:39:bc:cd:64:38:65: 6c:21:2b:00:9b:e2:05:ff:c8:91:a9:5a:ef:2f:62:1c:95:9a: be:89:03:e7:f6:79:37:de:70:fa:e1:78:9a:21:98:43:bc:bf: ed:8a:f2:da:cc:df:3b:7f:40:44:4a:f9:a1:aa:85:d6:74:bb: d8:14:0f:65:32:c7:33:88:d6:21:24:04:39:14:52:c7:dd:eb: 38:3b:0d:f1 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIfkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4 QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTA5MTMw MzA5MTBaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDExOEI2OTgzNjE2OUI3 NEQzODYwRTdBNTc4QTZEMEU2N0Q4QTMwQTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2tfRtGw3WK+oVYmtun5xre2xDm77dhzK5jrNV+OhPijDjp7tQ kLNAQKqDW/ioMEX+aejuoSsaI0fZ+0y3AycP0u/e0CiJzCFBFjtWIHCik4RPKSpf E5hzifosyS8NvH5XAUZgvTxt7eINf8RpF9xU23CBmsie38Uq0YRIm2NA3uah2cUL 8WcyP9sL9egjHW2J7F8Yh+NY/pfzGhSdQnnGJcod3Pe2R3Fx+nheesDjXf82h/Xx 310eUVsNOwLF/wdS/1NlBz4b+gE5ioXNxQhXANR10ZvjNDDDoZEaLgg71GE7NId6 e/1MQ3+Yn+bvWEqFuf571cFzTG8j/7D/VH5bAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUEYtpg2Fpt004YOeleKbQ5n2KMKEwHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvRVl0cGcyRnB0MDA0 WU9lbGVLYlE1bjJLTUtFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEB3aRgDANBgkqhkiG9w0BAQsFAAOCAQEAqVNsf1cOcYyXY5LRCkn5CwqwLxD5 a8n49FvWQOx8cxmFGVZ/ccr+2mx+ms0Q9cfJDW/ngb39o57rV4E5Ul7oMS4OKpMm Qe8qFgZNrysWIucUBPgsf0m/bMNvudZ17xkQmeuRgkLXLzWyvyVBKYKj3W4zr/y/ CyRYkCJj17WWiUE3ZCG2AcynGOitualS5RRp3w78nM/umQxsZqlEhIoS6oX1C3Kp DBOsqPyC/0WJObzNZDhlbCErAJviBf/Ikala7y9iHJWavokD5/Z5N95w+uF4miGY Q7y/7Yry2szfO39AREr5oaqF1nS72BQPZTLHM4jWISQEORRSx93rODsN8Q== -----END CERTIFICATE-----Generated at Mon Oct 20 22:37:04 2025 by rpki-client