$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/187/450N7fwLv8pQflKVuwsapP8RTas.roa File: 450N7fwLv8pQflKVuwsapP8RTas.roa (raw, json) Hash identifier: v1E9iG1FEaxd+t/wnGLaGAbJ4H6g39idwuIVRcR48QM= Subject key identifier: E3:9D:0D:ED:FC:0B:BF:CA:50:7E:52:95:BB:0B:1A:A4:FF:11:4D:AB Certificate issuer: /CN=2E8C1DE19474035CBEA678054B6D94F5AFA53361 Certificate serial: 1CAC Authority key identifier: 2E:8C:1D:E1:94:74:03:5C:BE:A6:78:05:4B:6D:94:F5:AF:A5:33:61 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Lowd4ZR0A1y-pngFS22U9a-lM2E.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/187/450N7fwLv8pQflKVuwsapP8RTas.roa Signing time: Wed 27 Aug 2025 06:17:42 +0000 ROA not before: Wed 27 Aug 2025 06:17:42 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 4847 IP address blocks: 120.47.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/187/Lowd4ZR0A1y-pngFS22U9a-lM2E.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/187/Lowd4ZR0A1y-pngFS22U9a-lM2E.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Lowd4ZR0A1y-pngFS22U9a-lM2E.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 15:34:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7340 (0x1cac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E8C1DE19474035CBEA678054B6D94F5AFA53361 Validity Not Before: Aug 27 06:17:42 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=E39D0DEDFC0BBFCA507E5295BB0B1AA4FF114DAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7e:c7:e5:53:50:20:47:20:38:ea:64:3a:07: 6f:48:2c:6c:86:3e:16:cd:cd:7a:12:ae:54:bf:52: 0e:61:f0:a0:a9:e5:51:02:ad:a6:55:c9:3e:70:33: e3:e7:d6:29:1b:a3:6e:27:42:67:29:0d:61:f3:06: df:63:46:c2:7f:9f:8a:57:dd:4c:b0:2d:d1:f1:41: e2:e2:df:2b:1b:8b:86:84:64:71:ef:ac:01:a7:d2: 32:c3:de:76:43:4d:52:d9:6b:b3:24:3f:c5:ae:a1: f4:9d:27:9f:f6:ab:5e:a2:8f:db:31:50:5d:2f:a2: d7:98:60:df:0a:57:9f:cc:89:7a:50:9f:91:76:55: 8c:41:f5:b6:9e:a8:16:a2:e1:35:3c:8d:d9:62:6f: 96:03:2a:83:61:ca:5c:50:05:2c:31:47:d5:1e:92: 36:47:db:e4:4b:49:bf:da:a5:fa:49:30:b4:9d:67: 8a:15:95:cf:b9:d9:2b:76:41:34:9d:8d:5f:12:a0: bb:dd:f4:83:88:0a:f7:e3:ff:6e:9a:52:1c:38:62: 49:ba:a8:fd:ff:9f:17:67:52:96:b4:fd:e4:65:d1: 0a:36:2e:b2:a2:6b:94:0c:0c:b0:df:b1:07:a2:65: aa:a5:17:19:5a:38:73:c6:eb:0f:08:d6:78:88:32: d3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:9D:0D:ED:FC:0B:BF:CA:50:7E:52:95:BB:0B:1A:A4:FF:11:4D:AB X509v3 Authority Key Identifier: keyid:2E:8C:1D:E1:94:74:03:5C:BE:A6:78:05:4B:6D:94:F5:AF:A5:33:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/187/Lowd4ZR0A1y-pngFS22U9a-lM2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Lowd4ZR0A1y-pngFS22U9a-lM2E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/187/450N7fwLv8pQflKVuwsapP8RTas.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 120.47.0.0/16 Signature Algorithm: sha256WithRSAEncryption 41:04:80:3a:fc:c3:fd:b5:6d:81:6f:dd:55:c9:d4:66:f3:03: 79:0b:75:d2:cc:56:fd:de:e3:56:c3:9e:cf:aa:21:5a:74:06: 14:1d:a2:3c:82:e3:52:26:03:bc:53:00:22:b3:dc:ad:ac:b4: 4e:93:9e:43:61:9a:c0:fc:85:69:27:6b:ec:52:b1:ec:80:91: 74:b9:4e:cb:5c:21:82:85:d7:ca:d7:b8:19:36:dd:5d:21:cf: 81:8e:4e:46:64:45:b3:67:57:87:8f:1a:57:af:fa:4e:78:57: 59:6a:32:06:1c:48:b9:2a:b2:68:21:bf:6a:70:ca:e0:27:17: 0e:a2:b0:62:9e:ac:86:62:d0:81:72:fc:75:17:33:57:39:d9: 50:76:1a:c4:bb:7d:cf:bb:24:e6:2c:21:5a:c1:ae:52:55:fa: f0:d9:e0:73:ce:9e:cd:7c:b4:da:f9:e3:50:71:23:93:83:51: a3:41:6f:e8:59:ab:85:90:f1:02:b6:c8:5d:05:4f:82:1d:38: 86:b3:e6:78:fa:b3:91:83:bb:2e:8d:cb:93:ef:91:fb:64:e9: c8:61:d8:2e:54:cb:d7:51:f4:f1:a4:3f:15:f0:7e:73:8c:6c: 1b:9e:22:f1:d7:7e:db:ee:65:6f:fe:0e:58:16:e2:35:fa:55: d8:5d:65:99 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICHKwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkU4 QzFERTE5NDc0MDM1Q0JFQTY3ODA1NEI2RDk0RjVBRkE1MzM2MTAeFw0yNTA4Mjcw NjE3NDJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEUzOUQwREVERkMwQkJG Q0E1MDdFNTI5NUJCMEIxQUE0RkYxMTREQUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCfsflU1AgRyA46mQ6B29ILGyGPhbNzXoSrlS/Ug5h8KCp5VEC raZVyT5wM+Pn1ikbo24nQmcpDWHzBt9jRsJ/n4pX3UywLdHxQeLi3ysbi4aEZHHv rAGn0jLD3nZDTVLZa7MkP8WuofSdJ5/2q16ij9sxUF0voteYYN8KV5/MiXpQn5F2 VYxB9baeqBai4TU8jdlib5YDKoNhylxQBSwxR9UekjZH2+RLSb/apfpJMLSdZ4oV lc+52St2QTSdjV8SoLvd9IOICvfj/26aUhw4Ykm6qP3/nxdnUpa0/eRl0Qo2LrKi a5QMDLDfsQeiZaqlFxlaOHPG6w8I1niIMtOBAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQU450N7fwLv8pQflKVuwsapP8RTaswHwYDVR0jBBgwFoAULowd4ZR0A1y+pngF S22U9a+lM2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTg3 L0xvd2Q0WlIwQTF5LXBuZ0ZTMjJVOWEtbE0yRS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvTG93ZDRaUjBBMXktcG5nRlMyMlU5YS1sTTJFLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTg3LzQ1ME43ZndMdjhwUWZs S1Z1d3NhcFA4UlRhcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwB4LzANBgkqhkiG9w0BAQsFAAOCAQEAQQSAOvzD/bVtgW/dVcnUZvMDeQt10sxW /d7jVsOez6ohWnQGFB2iPILjUiYDvFMAIrPcray0TpOeQ2GawPyFaSdr7FKx7ICR dLlOy1whgoXXyte4GTbdXSHPgY5ORmRFs2dXh48aV6/6TnhXWWoyBhxIuSqyaCG/ anDK4CcXDqKwYp6shmLQgXL8dRczVznZUHYaxLt9z7sk5iwhWsGuUlX68Nngc86e zXy02vnjUHEjk4NRo0Fv6FmrhZDxArbIXQVPgh04hrPmePqzkYO7Lo3Lk++R+2Tp yGHYLlTL11H08aQ/FfB+c4xsG54i8dd+2+5lb/4OWBbiNfpV2F1lmQ== -----END CERTIFICATE-----Generated at Sat Sep 6 13:18:18 2025 by rpki-client