$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3255/o20OnybD-WkAm5evvwhJNKnM-Ao.roa File: o20OnybD-WkAm5evvwhJNKnM-Ao.roa (raw, json) Hash identifier: 2bSg/d3A1gH/o2Wn28q7GzlM0t0VvvKRE0U+8yda8Rs= Subject key identifier: A3:6D:0E:9F:26:C3:F9:69:00:9B:97:AF:BF:08:49:34:A9:CC:F8:0A Certificate issuer: /CN=7F918CF26503D1F9BCFA77DC0AA592A57DDF8245 Certificate serial: 0B4C Authority key identifier: 7F:91:8C:F2:65:03:D1:F9:BC:FA:77:DC:0A:A5:92:A5:7D:DF:82:45 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/f5GM8mUD0fm8-nfcCqWSpX3fgkU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3255/o20OnybD-WkAm5evvwhJNKnM-Ao.roa Signing time: Wed 20 Aug 2025 06:37:05 +0000 ROA not before: Wed 20 Aug 2025 06:37:05 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 151295 IP address blocks: 157.119.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3255/f5GM8mUD0fm8-nfcCqWSpX3fgkU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3255/f5GM8mUD0fm8-nfcCqWSpX3fgkU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/f5GM8mUD0fm8-nfcCqWSpX3fgkU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 03:03:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2892 (0xb4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F918CF26503D1F9BCFA77DC0AA592A57DDF8245 Validity Not Before: Aug 20 06:37:05 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=A36D0E9F26C3F969009B97AFBF084934A9CCF80A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:63:d8:24:f6:2e:30:87:01:97:7e:f1:86:ef: c2:fc:5e:93:ca:0d:85:86:8b:c2:cf:00:6a:60:7c: c0:79:5a:bb:07:53:31:3b:fd:5e:28:a3:67:9b:9f: d5:40:ce:04:da:04:95:59:49:fa:4a:22:24:df:f1: 6e:ec:66:70:48:d5:13:b3:77:aa:68:61:7c:3f:17: 93:0a:4a:56:fb:39:d8:37:21:14:28:67:eb:f1:ec: ac:46:01:5f:30:0c:a9:4c:04:50:03:47:e1:f4:28: 5a:e5:87:60:b2:79:0d:f5:73:dc:99:4e:eb:44:08: 45:3a:9a:11:b1:04:e7:7a:de:60:8d:c1:6c:91:8d: 5f:a4:6d:83:68:55:98:c2:03:97:0d:25:d1:21:d7: 48:cc:ca:c8:28:29:ea:2d:53:fe:72:d8:d1:48:93: f5:c9:f2:af:a1:31:5f:71:5c:da:10:4a:14:c6:d1: eb:cf:90:d2:d8:e2:91:35:6c:b1:05:78:70:9b:ba: 1d:d3:56:07:96:e6:0a:dd:b6:01:5e:83:e4:1b:ee: 09:97:91:3d:fa:88:3e:3b:2f:2d:a2:fa:4e:12:bc: 67:62:23:cf:c4:5b:91:04:42:5a:7c:66:4f:30:8c: ac:a4:22:18:81:6c:72:af:06:9e:3c:2e:e1:71:12: f2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:6D:0E:9F:26:C3:F9:69:00:9B:97:AF:BF:08:49:34:A9:CC:F8:0A X509v3 Authority Key Identifier: keyid:7F:91:8C:F2:65:03:D1:F9:BC:FA:77:DC:0A:A5:92:A5:7D:DF:82:45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3255/f5GM8mUD0fm8-nfcCqWSpX3fgkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/f5GM8mUD0fm8-nfcCqWSpX3fgkU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3255/o20OnybD-WkAm5evvwhJNKnM-Ao.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.119.252.0/22 Signature Algorithm: sha256WithRSAEncryption 31:0e:0b:35:03:43:42:ea:49:b5:5f:bf:ca:74:c5:5d:39:55: 72:be:81:fc:38:cc:17:db:0b:d3:33:35:e0:e2:ba:9b:37:40: 41:fc:87:ce:69:67:0d:20:4f:99:95:73:f9:6e:0e:f3:80:05: f3:28:4c:7f:dd:83:9d:28:37:c1:55:4f:6e:8c:09:8b:c0:42: a3:0d:e0:41:22:a9:e2:68:b2:4e:5a:75:95:53:25:a5:14:00: b1:84:45:fb:95:d4:76:ff:ff:6e:6b:ab:66:71:a2:c9:43:4b: 47:4b:99:f4:10:8d:19:17:97:50:44:8c:92:40:dc:7c:83:9b: f4:87:37:14:80:c8:0c:16:b0:6b:cd:88:23:91:c6:e9:e6:cc: 1f:bf:31:54:eb:6c:85:71:ff:6f:a9:75:70:28:b8:00:aa:36: 23:b3:4d:3e:32:6f:ab:80:42:43:a9:43:e1:69:20:bf:07:61: 8f:aa:fd:c7:c9:44:72:af:e6:8b:db:53:1a:5f:0f:dd:a4:fa: cd:d6:4e:d0:1b:21:66:8a:4c:ce:7a:40:22:16:a3:bf:e9:c6: 5a:cf:d9:2a:1f:09:06:bc:bd:4f:15:99:5f:2e:bf:fe:78:c9: 60:6c:0f:44:d9:22:aa:b8:a3:42:f2:42:27:f4:a4:93:4b:ee: 63:73:ea:c3 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICC0wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0Y5 MThDRjI2NTAzRDFGOUJDRkE3N0RDMEFBNTkyQTU3RERGODI0NTAeFw0yNTA4MjAw NjM3MDVaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEEzNkQwRTlGMjZDM0Y5 NjkwMDlCOTdBRkJGMDg0OTM0QTlDQ0Y4MEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDvY9gk9i4whwGXfvGG78L8XpPKDYWGi8LPAGpgfMB5WrsHUzE7 /V4oo2ebn9VAzgTaBJVZSfpKIiTf8W7sZnBI1ROzd6poYXw/F5MKSlb7Odg3IRQo Z+vx7KxGAV8wDKlMBFADR+H0KFrlh2CyeQ31c9yZTutECEU6mhGxBOd63mCNwWyR jV+kbYNoVZjCA5cNJdEh10jMysgoKeotU/5y2NFIk/XJ8q+hMV9xXNoQShTG0evP kNLY4pE1bLEFeHCbuh3TVgeW5grdtgFeg+Qb7gmXkT36iD47Ly2i+k4SvGdiI8/E W5EEQlp8Zk8wjKykIhiBbHKvBp48LuFxEvIHAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUo20OnybD+WkAm5evvwhJNKnM+AowHwYDVR0jBBgwFoAUf5GM8mUD0fm8+nfc CqWSpX3fgkUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI1 NS9mNUdNOG1VRDBmbTgtbmZjQ3FXU3BYM2Zna1UuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2Y1R004bVVEMGZtOC1uZmNDcVdTcFgzZmdrVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNTUvbzIwT255YkQtV2tB bTVldnZ3aEpOS25NLUFvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAp13/DANBgkqhkiG9w0BAQsFAAOCAQEAMQ4LNQNDQupJtV+/ynTFXTlVcr6B /DjMF9sL0zM14OK6mzdAQfyHzmlnDSBPmZVz+W4O84AF8yhMf92DnSg3wVVPbowJ i8BCow3gQSKp4miyTlp1lVMlpRQAsYRF+5XUdv//bmurZnGiyUNLR0uZ9BCNGReX UESMkkDcfIOb9Ic3FIDIDBawa82II5HG6ebMH78xVOtshXH/b6l1cCi4AKo2I7NN PjJvq4BCQ6lD4Wkgvwdhj6r9x8lEcq/mi9tTGl8P3aT6zdZO0BshZopMznpAIhaj v+nGWs/ZKh8JBry9TxWZXy6//njJYGwPRNkiqrijQvJCJ/Skk0vuY3Pqww== -----END CERTIFICATE-----Generated at Sun Aug 24 02:41:55 2025 by rpki-client