$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/119/_K85EDzCVCt1pVVYSb2NSlH5sJs.roa File: _K85EDzCVCt1pVVYSb2NSlH5sJs.roa (raw, json) Hash identifier: eSDB40TI669OfppSy2WcGhDz0KocFI5RU5LpLB+t1Ng= Subject key identifier: FC:AF:39:10:3C:C2:54:2B:75:A5:55:58:49:BD:8D:4A:51:F9:B0:9B Certificate issuer: /CN=F556C3AAA1001F89DC0FCED5436A21BB4FF35D7A Certificate serial: 13B6 Authority key identifier: F5:56:C3:AA:A1:00:1F:89:DC:0F:CE:D5:43:6A:21:BB:4F:F3:5D:7A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9VbDqqEAH4ncD87VQ2ohu0_zXXo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/119/_K85EDzCVCt1pVVYSb2NSlH5sJs.roa Signing time: Sat 06 Sep 2025 08:03:19 +0000 ROA not before: Sat 06 Sep 2025 08:03:19 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 9807 IP address blocks: 219.235.128.0/21 maxlen: 21 219.235.136.0/21 maxlen: 21 219.235.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/119/9VbDqqEAH4ncD87VQ2ohu0_zXXo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/119/9VbDqqEAH4ncD87VQ2ohu0_zXXo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9VbDqqEAH4ncD87VQ2ohu0_zXXo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 11:04:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5046 (0x13b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F556C3AAA1001F89DC0FCED5436A21BB4FF35D7A Validity Not Before: Sep 6 08:03:19 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=FCAF39103CC2542B75A5555849BD8D4A51F9B09B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4d:56:e7:ae:da:cb:5b:c8:98:24:b7:8e:04: ee:da:a4:01:d0:53:85:1b:0c:db:10:6e:e8:f6:fa: 24:a3:e7:15:8a:80:e8:d4:68:91:5a:78:20:c5:4c: d0:b7:44:a3:a5:2d:07:21:ad:90:05:0d:95:a8:3e: f7:de:3e:df:5e:ef:f1:53:7f:82:80:45:a4:95:33: 9c:4f:af:71:95:36:1c:27:1a:fc:fd:a5:bf:11:3d: ab:f5:01:30:15:43:0f:ba:26:c2:b6:d7:82:7e:f2: 34:8b:79:85:9e:52:f7:56:be:f4:7b:71:c5:bd:aa: 40:39:02:7a:64:97:e5:9c:b6:59:7a:3a:9d:30:42: 4e:a3:de:29:98:b6:82:51:5a:2c:af:54:74:81:f4: 5d:8c:b4:a2:a4:b8:ac:9e:67:03:9c:db:38:b3:2e: 05:2b:0d:94:14:08:ac:b7:57:cb:e2:eb:8d:8e:8a: fb:e7:b0:77:77:47:de:db:6f:f4:45:77:80:a6:6d: 5b:f3:a3:34:03:ca:21:93:24:08:e9:52:1e:bd:fd: a3:35:f7:6b:cf:0d:68:a1:66:53:bb:ff:d3:f3:90: 94:01:9f:56:95:d9:57:fc:f6:5f:07:43:ec:9a:a3: 59:8f:c1:4a:7d:91:f4:6c:a3:e5:73:42:2e:fb:d4: 2b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:AF:39:10:3C:C2:54:2B:75:A5:55:58:49:BD:8D:4A:51:F9:B0:9B X509v3 Authority Key Identifier: keyid:F5:56:C3:AA:A1:00:1F:89:DC:0F:CE:D5:43:6A:21:BB:4F:F3:5D:7A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/119/9VbDqqEAH4ncD87VQ2ohu0_zXXo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9VbDqqEAH4ncD87VQ2ohu0_zXXo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/119/_K85EDzCVCt1pVVYSb2NSlH5sJs.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 219.235.128.0-219.235.151.255 Signature Algorithm: sha256WithRSAEncryption 06:4c:78:49:da:d6:0a:d1:f5:72:69:e5:2a:57:e0:cb:04:7d: 5a:df:c2:6c:d1:da:d1:fc:aa:da:11:46:b1:74:a3:32:78:70: c5:02:1c:ab:4f:c6:a9:57:db:38:de:02:6a:90:33:67:14:49: d8:2b:aa:16:2c:fc:98:57:25:68:68:2d:bc:3f:6a:d1:e6:0b: 82:38:12:2e:dd:38:b6:a3:a7:42:8e:72:26:d1:18:9d:c8:34: ac:3f:fb:93:bc:be:88:70:08:0e:bf:ab:47:3e:d7:e8:bb:df: dc:c3:50:35:99:d9:45:ef:b7:8b:e9:7c:a3:e3:3e:c1:94:b3: 44:b5:7b:11:59:6d:d0:4e:bf:2f:5d:5f:ba:07:46:20:cb:6a: 69:d6:af:81:cf:f9:c8:a1:cf:28:eb:ea:a0:a6:32:2d:7b:f5: 70:49:95:1e:80:1a:15:03:d6:14:cf:e3:87:4e:e0:c0:91:80: 66:d5:2f:4e:ed:1e:0c:45:89:74:a6:a8:a1:4f:f6:b4:c8:34: f4:4c:1f:df:05:74:7e:60:9b:df:ef:47:38:3d:9b:49:35:f3: 77:ed:1b:ae:84:4a:bc:c4:75:f0:7f:74:44:f7:e0:12:6f:1e: e2:e1:99:00:e5:6b:ff:0c:cc:57:d0:15:27:f7:2a:3a:08:95: 8d:bb:24:cb -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgICE7YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjU1 NkMzQUFBMTAwMUY4OURDMEZDRUQ1NDM2QTIxQkI0RkYzNUQ3QTAeFw0yNTA5MDYw ODAzMTlaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEZDQUYzOTEwM0NDMjU0 MkI3NUE1NTU1ODQ5QkQ4RDRBNTFGOUIwOUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJTVbnrtrLW8iYJLeOBO7apAHQU4UbDNsQbuj2+iSj5xWKgOjU aJFaeCDFTNC3RKOlLQchrZAFDZWoPvfePt9e7/FTf4KARaSVM5xPr3GVNhwnGvz9 pb8RPav1ATAVQw+6JsK214J+8jSLeYWeUvdWvvR7ccW9qkA5Anpkl+Wctll6Op0w Qk6j3imYtoJRWiyvVHSB9F2MtKKkuKyeZwOc2zizLgUrDZQUCKy3V8vi642Oivvn sHd3R97bb/RFd4CmbVvzozQDyiGTJAjpUh69/aM192vPDWihZlO7/9PzkJQBn1aV 2Vf89l8HQ+yao1mPwUp9kfRso+VzQi771CvpAgMBAAGjggH5MIIB9TAdBgNVHQ4E FgQU/K85EDzCVCt1pVVYSb2NSlH5sJswHwYDVR0jBBgwFoAU9VbDqqEAH4ncD87V Q2ohu0/zXXowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTE5 LzlWYkRxcUVBSDRuY0Q4N1ZRMm9odTBfelhYby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOVZiRHFxRUFING5jRDg3VlEyb2h1MF96WFhvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTE5L19LODVFRHpDVkN0MXBW VllTYjJOU2xINXNKcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwJwYIKwYBBQUHAQcBAf8EGDAWMBQEAgABMA4w DAMEB9vrgAMEA9vrkDANBgkqhkiG9w0BAQsFAAOCAQEABkx4SdrWCtH1cmnlKlfg ywR9Wt/CbNHa0fyq2hFGsXSjMnhwxQIcq0/GqVfbON4CapAzZxRJ2CuqFiz8mFcl aGgtvD9q0eYLgjgSLt04tqOnQo5yJtEYncg0rD/7k7y+iHAIDr+rRz7X6Lvf3MNQ NZnZRe+3i+l8o+M+wZSzRLV7EVlt0E6/L11fugdGIMtqadavgc/5yKHPKOvqoKYy LXv1cEmVHoAaFQPWFM/jh07gwJGAZtUvTu0eDEWJdKaooU/2tMg09Ewf3wV0fmCb 3+9HOD2bSTXzd+0broRKvMR18H90RPfgEm8e4uGZAOVr/wzMV9AVJ/cqOgiVjbsk yw== -----END CERTIFICATE-----Generated at Mon Sep 8 09:07:42 2025 by rpki-client