$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/NFFkxmtYenhprksfWfHZQLwl36Y.roa File: NFFkxmtYenhprksfWfHZQLwl36Y.roa (raw, json) Hash identifier: XFEg79YvUh54pNtL39eJkoHEkS74rmrQo2Q83Es3EbY= Subject key identifier: 34:51:64:C6:6B:58:7A:78:69:AE:4B:1F:59:F1:D9:40:BC:25:DF:A6 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1E25 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/NFFkxmtYenhprksfWfHZQLwl36Y.roa Signing time: Sat 13 Sep 2025 03:04:52 +0000 ROA not before: Sat 13 Sep 2025 03:04:52 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 4812 IP address blocks: 202.89.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 18:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7717 (0x1e25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:04:52 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=345164C66B587A7869AE4B1F59F1D940BC25DFA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:25:12:bf:da:0c:e6:55:f5:01:cf:96:67:21: b1:e6:0d:80:0b:ba:e8:3b:6d:c4:55:bf:cb:3c:b8: 84:ca:e4:c8:f3:5c:34:72:bf:fc:c7:69:a2:3a:13: 65:c2:54:12:3f:7a:63:1c:55:0c:bf:03:67:6a:3f: ff:81:08:81:bc:15:0c:2f:86:c3:cf:79:03:d0:98: b8:8b:d5:13:1e:64:bb:b3:b3:38:ab:58:bc:39:a4: ce:92:84:b5:6d:8c:31:09:a9:0a:51:1c:cf:04:e4: 95:c1:c7:7a:f2:d6:92:b0:6c:c0:09:e3:8a:a8:d9: ee:81:09:14:f0:86:e6:8a:e1:6d:f8:3a:1b:ba:30: 47:6c:ec:8d:5a:cc:9e:d9:f2:8b:b0:09:0a:ec:d1: 7d:92:65:2c:ae:db:e6:4e:2c:93:a8:68:9b:41:52: 8f:11:e3:87:21:28:c0:30:9f:9c:86:fc:d4:35:4a: e0:20:6a:81:77:f2:71:7c:cf:87:3d:11:1f:67:1c: 50:be:b4:1d:f4:0e:96:d3:bf:73:a2:2f:db:f1:5a: 74:e4:24:f4:4b:da:f3:65:c6:c0:4f:16:18:40:65: da:f5:5e:96:fd:f0:67:16:0c:35:34:8d:b9:16:28: 3e:d9:14:24:30:2d:e3:dd:f5:56:1c:23:b2:af:22: 3d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:51:64:C6:6B:58:7A:78:69:AE:4B:1F:59:F1:D9:40:BC:25:DF:A6 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/NFFkxmtYenhprksfWfHZQLwl36Y.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.89.96.0/24 Signature Algorithm: sha256WithRSAEncryption 13:2e:0d:ac:50:94:fb:59:ab:64:72:65:92:e1:3a:b6:8f:79: 5e:fc:78:7a:d5:69:a9:02:e5:6d:e0:2c:a8:75:86:d9:b7:57: 56:d9:8f:52:d6:27:3c:46:e4:95:7a:79:84:e6:81:28:53:a6: c6:19:d1:cd:0d:94:a4:65:72:1a:71:88:60:ce:e2:2f:d4:f5: eb:7c:85:68:0d:73:fe:88:26:2a:7d:15:71:fc:02:fc:23:79: 67:0d:9e:ce:72:bd:30:fa:42:f7:de:03:71:4e:99:da:46:0d: f7:e2:d0:b9:51:64:2a:7c:3f:c6:d0:92:2f:36:f1:4f:8d:80: ba:b2:9f:5c:3f:0c:99:48:ab:48:14:14:a2:e5:26:52:83:c2: 90:ef:8a:42:54:30:59:41:05:30:56:e0:b8:39:1f:0b:7b:c6: 5e:f8:66:05:77:a5:73:3a:00:2b:9c:77:91:9d:18:d3:43:d7: 0a:24:de:35:e3:b9:41:7f:0a:bb:fe:70:f1:83:ab:d9:3a:5a: dc:60:14:41:f6:d7:b4:4b:96:6b:d8:71:bf:99:d4:ae:19:ae: a1:c2:a0:db:1f:b3:08:33:86:e2:e6:ed:51:a7:d7:c0:c5:e8: f3:15:cc:9f:e8:07:5b:67:eb:2e:e2:ee:61:b8:cc:8e:0d:12: 54:7e:72:cd -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHiUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA0NTJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDM0NTE2NEM2NkI1ODdB Nzg2OUFFNEIxRjU5RjFEOTQwQkMyNURGQTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJJRK/2gzmVfUBz5ZnIbHmDYALuug7bcRVv8s8uITK5MjzXDRy v/zHaaI6E2XCVBI/emMcVQy/A2dqP/+BCIG8FQwvhsPPeQPQmLiL1RMeZLuzszir WLw5pM6ShLVtjDEJqQpRHM8E5JXBx3ry1pKwbMAJ44qo2e6BCRTwhuaK4W34Ohu6 MEds7I1azJ7Z8ouwCQrs0X2SZSyu2+ZOLJOoaJtBUo8R44chKMAwn5yG/NQ1SuAg aoF38nF8z4c9ER9nHFC+tB30DpbTv3OiL9vxWnTkJPRL2vNlxsBPFhhAZdr1Xpb9 8GcWDDU0jbkWKD7ZFCQwLePd9VYcI7KvIj3TAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUNFFkxmtYenhprksfWfHZQLwl36YwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L05GRmt4bXRZZW5ocHJr c2ZXZkhaUUx3bDM2WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADKWWAwDQYJKoZIhvcNAQELBQADggEBABMuDaxQlPtZq2RyZZLhOraPeV78eHrV aakC5W3gLKh1htm3V1bZj1LWJzxG5JV6eYTmgShTpsYZ0c0NlKRlchpxiGDO4i/U 9et8hWgNc/6IJip9FXH8AvwjeWcNns5yvTD6QvfeA3FOmdpGDffi0LlRZCp8P8bQ ki828U+NgLqyn1w/DJlIq0gUFKLlJlKDwpDvikJUMFlBBTBW4Lg5Hwt7xl74ZgV3 pXM6ACucd5GdGNND1wok3jXjuUF/Crv+cPGDq9k6WtxgFEH217RLlmvYcb+Z1K4Z rqHCoNsfswgzhuLm7VGn18DF6PMVzJ/oB1tn6y7i7mG4zI4NElR+cs0= -----END CERTIFICATE-----Generated at Mon Oct 20 17:52:07 2025 by rpki-client