$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/721/6x6hqo0Cnu2DY80d0M2a1T3hILw.roa File: 6x6hqo0Cnu2DY80d0M2a1T3hILw.roa (raw, json) Hash identifier: suL4eu4ACTdMQ8EhG3IwPC8L4xiiawA4SSbx7c7QEeU= Subject key identifier: EB:1E:A1:AA:8D:02:9E:ED:83:63:CD:1D:D0:CD:9A:D5:3D:E1:20:BC Certificate issuer: /CN=EE887ACC7CE4B5F66CCF4946F02BFACBDE28B76A Certificate serial: 1E79 Authority key identifier: EE:88:7A:CC:7C:E4:B5:F6:6C:CF:49:46:F0:2B:FA:CB:DE:28:B7:6A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7oh6zHzktfZsz0lG8Cv6y94ot2o.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/6x6hqo0Cnu2DY80d0M2a1T3hILw.roa Signing time: Sat 06 Sep 2025 08:02:56 +0000 ROA not before: Sat 06 Sep 2025 08:02:56 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 136958 IP address blocks: 43.255.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/7oh6zHzktfZsz0lG8Cv6y94ot2o.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/7oh6zHzktfZsz0lG8Cv6y94ot2o.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7oh6zHzktfZsz0lG8Cv6y94ot2o.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7801 (0x1e79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE887ACC7CE4B5F66CCF4946F02BFACBDE28B76A Validity Not Before: Sep 6 08:02:56 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=EB1EA1AA8D029EED8363CD1DD0CD9AD53DE120BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:41:a0:b1:69:e1:43:e4:af:c6:1e:76:29:7b: 14:ed:74:11:da:2c:f7:14:96:e2:e8:83:3f:be:30: 75:d0:dd:9e:13:49:dc:fe:d1:86:8a:a7:4c:a1:e6: 19:7e:e2:da:be:5b:9e:69:18:bc:dc:28:58:25:cd: 92:47:64:5a:14:2f:00:c4:19:04:86:a0:5d:00:65: 0f:3e:83:1d:a9:2e:75:a4:97:13:df:3b:b3:ca:5a: 82:ec:bc:0d:9c:c0:a0:c4:f9:ed:47:f5:41:8b:9e: 73:59:e0:76:9b:7b:19:ba:c2:71:6c:8f:69:40:03: 67:65:7a:33:31:48:16:3d:5a:cc:68:f4:7c:9e:93: dc:8a:f5:91:fb:0d:3a:b3:86:64:3a:e8:b3:e2:7a: 50:72:46:fe:62:f5:fc:a1:39:66:49:06:4f:23:ca: 64:c4:50:2c:85:99:8f:fb:32:8f:0f:3d:ef:6c:89: e2:31:b0:bb:92:23:86:9b:5c:da:a9:ca:c1:e9:fb: 21:cb:52:62:8f:6f:ae:ed:79:91:7c:e4:8c:de:fc: 57:fc:00:8d:65:b9:c5:bf:34:67:ab:5d:be:46:ea: 25:bf:fc:8d:fb:6a:bb:6d:a2:9f:bc:25:20:e6:19: 66:5d:77:10:08:cf:67:a4:fe:19:78:38:34:d8:7a: a4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:1E:A1:AA:8D:02:9E:ED:83:63:CD:1D:D0:CD:9A:D5:3D:E1:20:BC X509v3 Authority Key Identifier: keyid:EE:88:7A:CC:7C:E4:B5:F6:6C:CF:49:46:F0:2B:FA:CB:DE:28:B7:6A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/7oh6zHzktfZsz0lG8Cv6y94ot2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7oh6zHzktfZsz0lG8Cv6y94ot2o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/6x6hqo0Cnu2DY80d0M2a1T3hILw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.255.212.0/22 Signature Algorithm: sha256WithRSAEncryption 7e:ea:43:5a:7e:75:ac:4e:22:bd:f7:9e:71:53:51:57:a7:e4: b1:5c:42:03:ef:23:e0:f8:cc:31:fb:80:53:cf:9a:4c:e3:a1: 5c:63:41:f5:0d:17:c2:2a:99:f0:97:35:12:5c:c0:19:b1:4e: e4:e5:08:0a:7f:e5:03:af:f9:1a:08:81:3d:0c:58:ff:30:e4: 19:b8:c3:42:f6:80:8a:58:e6:b0:51:21:85:e1:4c:ce:15:ed: 23:42:36:0f:87:9e:9d:09:96:ce:42:9c:47:b4:d1:9d:86:39: 4a:f9:83:b9:7e:27:c3:2a:5f:96:fb:40:53:b3:86:8a:45:30: b4:3c:ae:db:a3:22:2e:52:06:89:7b:60:ae:b5:c3:ee:3b:68: f6:91:01:0c:c0:cb:c6:44:d1:64:84:80:4f:c5:43:85:75:7b: e6:e2:81:41:2d:cf:cc:ea:fa:54:cf:bc:5f:0b:f3:80:e0:ed: 2e:aa:3f:e9:7a:d8:0a:23:44:0a:70:01:03:1b:a8:88:82:f9: a2:44:46:95:cd:4a:31:32:fe:c8:96:0d:25:df:75:4f:77:c1: b3:a3:63:c0:39:a3:af:9b:fd:2f:93:58:3a:c8:c3:a0:c3:44: 71:63:bf:87:c9:a5:38:a8:60:96:61:6a:1f:28:35:ec:15:de: c7:81:a2:60 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHnkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUU4 ODdBQ0M3Q0U0QjVGNjZDQ0Y0OTQ2RjAyQkZBQ0JERTI4Qjc2QTAeFw0yNTA5MDYw ODAyNTZaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEVCMUVBMUFBOEQwMjlF RUQ4MzYzQ0QxREQwQ0Q5QUQ1M0RFMTIwQkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD2QaCxaeFD5K/GHnYpexTtdBHaLPcUluLogz++MHXQ3Z4TSdz+ 0YaKp0yh5hl+4tq+W55pGLzcKFglzZJHZFoULwDEGQSGoF0AZQ8+gx2pLnWklxPf O7PKWoLsvA2cwKDE+e1H9UGLnnNZ4Habexm6wnFsj2lAA2dlejMxSBY9Wsxo9Hye k9yK9ZH7DTqzhmQ66LPielByRv5i9fyhOWZJBk8jymTEUCyFmY/7Mo8PPe9sieIx sLuSI4abXNqpysHp+yHLUmKPb67teZF85Ize/Ff8AI1lucW/NGerXb5G6iW//I37 arttop+8JSDmGWZddxAIz2ek/hl4ODTYeqTxAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU6x6hqo0Cnu2DY80d0M2a1T3hILwwHwYDVR0jBBgwFoAU7oh6zHzktfZsz0lG 8Cv6y94ot2owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzIx LzdvaDZ6SHprdGZac3owbEc4Q3Y2eTk0b3Qyby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvN29oNnpIemt0ZlpzejBsRzhDdjZ5OTRvdDJvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzIxLzZ4NmhxbzBDbnUyRFk4 MGQwTTJhMVQzaElMdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIr/9QwDQYJKoZIhvcNAQELBQADggEBAH7qQ1p+daxOIr33nnFTUVen5LFcQgPv I+D4zDH7gFPPmkzjoVxjQfUNF8IqmfCXNRJcwBmxTuTlCAp/5QOv+RoIgT0MWP8w 5Bm4w0L2gIpY5rBRIYXhTM4V7SNCNg+Hnp0Jls5CnEe00Z2GOUr5g7l+J8MqX5b7 QFOzhopFMLQ8rtujIi5SBol7YK61w+47aPaRAQzAy8ZE0WSEgE/FQ4V1e+bigUEt z8zq+lTPvF8L84Dg7S6qP+l62AojRApwAQMbqIiC+aJERpXNSjEy/siWDSXfdU93 wbOjY8A5o6+b/S+TWDrIw6DDRHFjv4fJpTioYJZhah8oNewV3seBomA= -----END CERTIFICATE-----Generated at Mon Oct 20 08:42:48 2025 by rpki-client