$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3095/LwqpANaQfgPYztUVixrCSwwSpb4.roa File: LwqpANaQfgPYztUVixrCSwwSpb4.roa (raw, json) Hash identifier: zRXAx7fdtjW6s8eYOV1hapaN/Lrdxhjvh/rsIcXhaHE= Subject key identifier: 2F:0A:A9:00:D6:90:7E:03:D8:CE:D5:15:8B:1A:C2:4B:0C:12:A5:BE Certificate issuer: /CN=CB16707EAF0BDFD1326AFD9BDEC6AFFA6E63BA98 Certificate serial: 0CB4 Authority key identifier: CB:16:70:7E:AF:0B:DF:D1:32:6A:FD:9B:DE:C6:AF:FA:6E:63:BA:98 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yxZwfq8L39Eyav2b3sav-m5jupg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/LwqpANaQfgPYztUVixrCSwwSpb4.roa Signing time: Wed 09 Jul 2025 10:27:19 +0000 ROA not before: Wed 09 Jul 2025 10:27:19 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 56040 IP address blocks: 202.46.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/yxZwfq8L39Eyav2b3sav-m5jupg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/yxZwfq8L39Eyav2b3sav-m5jupg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yxZwfq8L39Eyav2b3sav-m5jupg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Aug 2025 21:04:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3252 (0xcb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB16707EAF0BDFD1326AFD9BDEC6AFFA6E63BA98 Validity Not Before: Jul 9 10:27:19 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=2F0AA900D6907E03D8CED5158B1AC24B0C12A5BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:05:ce:47:d1:4f:89:44:4d:46:5e:2e:33:eb: 87:99:a5:0f:b6:17:b1:1a:77:75:bb:94:1a:a0:8b: f3:4e:c7:94:85:44:1a:21:b2:c4:c2:02:5d:5b:dc: 6e:12:ea:31:1f:f4:fc:e5:9b:48:8b:a4:2f:27:94: 5c:13:ed:04:42:5d:0c:1b:ea:26:49:d1:5c:38:70: 53:1d:01:20:ff:56:2d:d8:9e:56:b9:c5:60:23:a5: 3d:1e:2f:13:62:5a:5e:c0:44:7d:85:a9:a9:6f:42: ee:86:f5:f3:0b:42:91:f7:02:9b:ac:b0:79:10:c1: 67:8a:cb:bf:fc:c3:a5:76:20:60:34:25:33:ac:95: a6:c0:03:91:b5:79:c9:bf:cb:a0:b0:9e:36:48:60: 13:e1:7e:ee:7a:4d:d3:91:1c:93:0b:16:ae:42:f9: ca:b2:c8:ad:ae:ec:81:a4:29:ef:c7:bb:75:62:ac: 64:67:90:37:31:32:4f:d7:f9:78:7d:ee:6f:f8:d6: 3b:a4:de:8d:b7:ff:65:0a:dd:b7:38:06:0d:07:3e: 93:3e:e2:a0:59:7d:f7:80:63:35:e3:1f:a5:68:8a: 2a:6e:ff:95:1a:18:ac:78:59:e3:f4:36:3b:0a:63: ee:fd:be:60:09:f0:0b:71:f0:f2:9a:a5:d3:19:d3: 87:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:0A:A9:00:D6:90:7E:03:D8:CE:D5:15:8B:1A:C2:4B:0C:12:A5:BE X509v3 Authority Key Identifier: keyid:CB:16:70:7E:AF:0B:DF:D1:32:6A:FD:9B:DE:C6:AF:FA:6E:63:BA:98 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/yxZwfq8L39Eyav2b3sav-m5jupg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yxZwfq8L39Eyav2b3sav-m5jupg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/LwqpANaQfgPYztUVixrCSwwSpb4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.46.224.0/20 Signature Algorithm: sha256WithRSAEncryption 11:fb:38:e8:49:4d:28:95:47:e8:21:1c:87:e8:51:25:9c:bd: cc:e7:4e:01:59:99:ae:b6:90:7e:d9:41:f6:b7:d1:0c:59:50: 89:b8:4b:fd:83:70:8a:a4:2f:29:8e:20:f1:c2:4f:ab:4b:62: 20:d2:fe:4d:42:1a:2d:a3:53:cf:96:43:71:02:08:ca:2d:52: 48:8c:38:f3:c3:a9:d6:94:92:5f:b3:85:d4:7e:fc:37:34:06: ec:aa:b8:0a:a1:36:97:2f:32:eb:85:8f:cc:ae:6c:45:67:37: 74:d7:96:91:df:99:d2:7a:07:f6:1c:a6:da:dd:ae:45:45:f2: 89:71:5e:9b:36:78:ad:16:90:0e:0c:1d:02:3c:fe:c8:a6:0e: 88:83:94:83:56:41:61:1d:dc:27:fc:8e:d8:e5:15:19:56:2e: d4:36:35:ac:22:53:5c:09:cc:4f:24:14:4b:30:34:00:fc:2e: 1d:27:0e:b0:4f:2a:b0:a0:f3:13:88:09:6c:c3:fe:65:8a:d3: af:08:de:2d:cc:d7:1e:c7:bc:31:af:a2:8b:26:8b:3a:09:e5: ae:1d:56:69:a2:1c:6c:a4:93:2a:d7:b9:58:09:8b:e5:30:a6: e5:d0:1d:7a:41:50:34:4b:e3:a5:44:45:f5:66:b9:2f:af:1f: 90:96:73:95 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICDLQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Ix NjcwN0VBRjBCREZEMTMyNkFGRDlCREVDNkFGRkE2RTYzQkE5ODAeFw0yNTA3MDkx MDI3MTlaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDJGMEFBOTAwRDY5MDdF MDNEOENFRDUxNThCMUFDMjRCMEMxMkE1QkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDvBc5H0U+JRE1GXi4z64eZpQ+2F7Ead3W7lBqgi/NOx5SFRBoh ssTCAl1b3G4S6jEf9Pzlm0iLpC8nlFwT7QRCXQwb6iZJ0Vw4cFMdASD/Vi3Ynla5 xWAjpT0eLxNiWl7ARH2FqalvQu6G9fMLQpH3ApussHkQwWeKy7/8w6V2IGA0JTOs labAA5G1ecm/y6CwnjZIYBPhfu56TdORHJMLFq5C+cqyyK2u7IGkKe/Hu3VirGRn kDcxMk/X+Xh97m/41juk3o23/2UK3bc4Bg0HPpM+4qBZffeAYzXjH6Voiipu/5Ua GKx4WeP0NjsKY+79vmAJ8Atx8PKapdMZ04fRAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQULwqpANaQfgPYztUVixrCSwwSpb4wHwYDVR0jBBgwFoAUyxZwfq8L39Eyav2b 3sav+m5jupgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5 NS95eFp3ZnE4TDM5RXlhdjJiM3Nhdi1tNWp1cGcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3l4WndmcThMMzlFeWF2MmIzc2F2LW01anVwZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTUvTHdxcEFOYVFmZ1BZ enRVVml4ckNTd3dTcGI0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBMou4DANBgkqhkiG9w0BAQsFAAOCAQEAEfs46ElNKJVH6CEch+hRJZy9zOdO AVmZrraQftlB9rfRDFlQibhL/YNwiqQvKY4g8cJPq0tiINL+TUIaLaNTz5ZDcQII yi1SSIw488Op1pSSX7OF1H78NzQG7Kq4CqE2ly8y64WPzK5sRWc3dNeWkd+Z0noH 9hym2t2uRUXyiXFemzZ4rRaQDgwdAjz+yKYOiIOUg1ZBYR3cJ/yO2OUVGVYu1DY1 rCJTXAnMTyQUSzA0APwuHScOsE8qsKDzE4gJbMP+ZYrTrwjeLczXHse8Ma+iiyaL Ognlrh1WaaIcbKSTKte5WAmL5TCm5dAdekFQNEvjpURF9Wa5L68fkJZzlQ== -----END CERTIFICATE-----Generated at Sat Aug 23 20:38:38 2025 by rpki-client