$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/pCng83Af7hJzLMKZfuTGJ012Wek.roa File: pCng83Af7hJzLMKZfuTGJ012Wek.roa (raw, json) Hash identifier: rO1qr69AEgZbXhAXQqhXAC4PDRvkxczrHbODEWq8mng= Subject key identifier: A4:29:E0:F3:70:1F:EE:12:73:2C:C2:99:7E:E4:C6:27:4D:76:59:E9 Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0 Certificate serial: 0DE0 Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/pCng83Af7hJzLMKZfuTGJ012Wek.roa Signing time: Fri 22 Aug 2025 05:01:09 +0000 ROA not before: Fri 22 Aug 2025 05:01:09 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 2914 IP address blocks: 124.173.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Aug 2025 21:03:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3552 (0xde0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0 Validity Not Before: Aug 22 05:01:09 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=A429E0F3701FEE12732CC2997EE4C6274D7659E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:6f:9d:8f:f7:1e:e6:bc:32:37:ad:b1:72:de: 87:10:63:7b:2b:ff:f4:9b:ce:96:97:6f:85:39:a5: 2e:c9:4f:63:ac:dc:91:66:2c:e4:ad:22:1a:ef:aa: f9:de:f5:d2:fe:e7:f2:0f:dd:05:37:d3:ec:bd:08: 65:79:c2:76:d8:05:b5:fe:d9:bb:6a:82:bd:2e:87: fb:ee:bb:e8:42:ee:97:ef:86:cc:ec:e8:a2:1c:6c: 4f:ea:6a:15:86:2f:5d:e9:05:52:28:19:ca:b9:45: 22:7f:d2:1e:2c:55:15:e3:61:3c:5b:cc:2f:80:4f: cc:74:e4:1a:ea:b4:08:8d:18:e1:21:6c:14:fc:70: c3:f5:75:6e:4b:78:e7:02:c3:e6:14:83:27:c5:93: 29:f5:15:c6:e6:e8:0f:f2:be:3c:39:cf:64:5e:5b: e3:26:09:8b:5b:b8:e9:05:80:ae:c4:85:6d:fe:7b: 3b:f8:8e:82:f5:94:5a:ea:fc:c5:38:1b:c3:75:fa: 26:56:42:8c:51:1b:f5:bd:ad:f6:1e:d6:cc:e2:2f: 1a:a7:97:36:7f:e8:b7:ee:a3:86:8a:b5:84:9e:5e: 5b:00:ac:5a:b9:a0:02:09:6a:0e:b4:fd:25:a1:16: f4:4b:b1:f6:ea:ee:4d:37:0c:88:73:20:34:6c:10: 17:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:29:E0:F3:70:1F:EE:12:73:2C:C2:99:7E:E4:C6:27:4D:76:59:E9 X509v3 Authority Key Identifier: keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/pCng83Af7hJzLMKZfuTGJ012Wek.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.173.192.0/18 Signature Algorithm: sha256WithRSAEncryption 22:b9:a9:02:01:89:4f:73:5f:22:fe:73:f2:5c:a2:c9:2d:73: 2a:dc:d0:2a:5a:80:f8:ec:bd:cb:77:f7:71:f0:b4:05:2b:04: 76:73:3c:76:9b:8d:05:ee:ad:7e:24:5d:7e:f4:a5:40:98:7e: 34:62:e6:d8:19:ba:90:e6:25:48:c8:40:17:72:d2:1f:10:07: de:6c:2e:bd:80:4f:b0:b6:e5:61:11:89:12:ce:4c:28:21:5e: 68:04:66:7d:c3:e0:4e:67:48:a9:da:e1:d0:f8:84:2a:f9:37: 09:b1:69:2a:0b:2d:cc:3c:df:3a:42:fa:0a:24:83:b3:33:a1: b0:6d:b2:dc:d6:a2:80:37:67:4a:5d:03:f0:20:c3:3b:8f:02: 3d:3b:c0:82:88:75:ec:35:c5:6b:2b:9b:37:9a:ec:5f:fd:01: 98:f8:3c:1f:6c:f8:fe:1b:53:ec:cf:ec:e8:de:0f:b6:5c:f2: d1:53:13:d3:d4:db:78:49:8f:75:2c:75:4b:e4:11:e2:71:d7: 90:da:ce:17:6c:15:83:96:c6:8f:7f:dd:6d:85:26:41:2c:ef: 6b:91:fb:3b:0c:4e:b3:b8:69:2d:13:28:13:c6:ae:73:f3:b0: 6d:0c:ce:35:71:83:91:0f:e4:d0:fb:25:15:d6:f1:5d:1b:c2: 24:aa:ed:c3 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICDeAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTQ4 MUI0RTQwOTAxNUQ4RUI3RDAzRjM2MDM4ODMwRUMxMDk4QUJDMDAeFw0yNTA4MjIw NTAxMDlaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEE0MjlFMEYzNzAxRkVF MTI3MzJDQzI5OTdFRTRDNjI3NEQ3NjU5RTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDpb52P9x7mvDI3rbFy3ocQY3sr//SbzpaXb4U5pS7JT2Os3JFm LOStIhrvqvne9dL+5/IP3QU30+y9CGV5wnbYBbX+2btqgr0uh/vuu+hC7pfvhszs 6KIcbE/qahWGL13pBVIoGcq5RSJ/0h4sVRXjYTxbzC+AT8x05BrqtAiNGOEhbBT8 cMP1dW5LeOcCw+YUgyfFkyn1Fcbm6A/yvjw5z2ReW+MmCYtbuOkFgK7EhW3+ezv4 joL1lFrq/MU4G8N1+iZWQoxRG/W9rfYe1sziLxqnlzZ/6Lfuo4aKtYSeXlsArFq5 oAIJag60/SWhFvRLsfbq7k03DIhzIDRsEBcRAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUpCng83Af7hJzLMKZfuTGJ012WekwHwYDVR0jBBgwFoAUlIG05AkBXY630D82 A4gw7BCYq8AwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNi9s SUcwNUFrQlhZNjMwRDgyQTRndzdCQ1lxOEEuY3JsMGMGCCsGAQUFBwEBBFcwVTBT BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw MDAwL2xJRzA1QWtCWFk2MzBEODJBNGd3N0JDWXE4QS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtp LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzYvcENuZzgzQWY3aEp6TE1LWmZ1 VEdKMDEyV2VrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNu L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBnyt wDANBgkqhkiG9w0BAQsFAAOCAQEAIrmpAgGJT3NfIv5z8lyiyS1zKtzQKlqA+Oy9 y3f3cfC0BSsEdnM8dpuNBe6tfiRdfvSlQJh+NGLm2Bm6kOYlSMhAF3LSHxAH3mwu vYBPsLblYRGJEs5MKCFeaARmfcPgTmdIqdrh0PiEKvk3CbFpKgstzDzfOkL6CiSD szOhsG2y3NaigDdnSl0D8CDDO48CPTvAgoh17DXFayubN5rsX/0BmPg8H2z4/htT 7M/s6N4Ptlzy0VMT09TbeEmPdSx1S+QR4nHXkNrOF2wVg5bGj3/dbYUmQSzva5H7 OwxOs7hpLRMoE8auc/OwbQzONXGDkQ/k0PslFdbxXRvCJKrtww== -----END CERTIFICATE-----Generated at Sat Aug 23 20:40:34 2025 by rpki-client