$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2411/G-_EUah9OXXnRYOJw30MerVDppU.roa File: G-_EUah9OXXnRYOJw30MerVDppU.roa (raw, json) Hash identifier: UUNV1l93qUPA2xNRVe2U7WGTQJmnzlOqvCDgaKHZotc= Subject key identifier: 1B:EF:C4:51:A8:7D:39:75:E7:45:83:89:C3:7D:0C:7A:B5:43:A6:95 Certificate issuer: /CN=1F552F6E8AC2F97E1447BFAC810059695E2B32A9 Certificate serial: 2C Authority key identifier: 1F:55:2F:6E:8A:C2:F9:7E:14:47:BF:AC:81:00:59:69:5E:2B:32:A9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/H1UvborC-X4UR7-sgQBZaV4rMqk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2411/G-_EUah9OXXnRYOJw30MerVDppU.roa Signing time: Mon 18 Aug 2025 01:57:56 +0000 ROA not before: Mon 18 Aug 2025 01:57:56 +0000 ROA not after: Sun 16 Aug 2026 01:52:01 +0000 asID: 137690 IP address blocks: 202.189.40.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2411/H1UvborC-X4UR7-sgQBZaV4rMqk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2411/H1UvborC-X4UR7-sgQBZaV4rMqk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/H1UvborC-X4UR7-sgQBZaV4rMqk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 12:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F552F6E8AC2F97E1447BFAC810059695E2B32A9 Validity Not Before: Aug 18 01:57:56 2025 GMT Not After : Aug 16 01:52:01 2026 GMT Subject: CN=1BEFC451A87D3975E7458389C37D0C7AB543A695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:25:2f:b3:07:63:ef:b4:b3:5b:34:e6:08:02: dd:cf:65:fe:a2:b6:a9:b6:3c:61:31:f1:81:7b:29: 1e:f7:93:a1:70:a4:76:9f:58:48:f7:c1:18:9d:fa: a8:cd:3b:12:ec:ef:9c:c4:ad:58:3a:3e:6b:5d:95: 3d:7b:eb:88:39:cd:ec:23:4a:d3:95:6d:fb:40:ba: 13:2b:6b:65:b5:dd:35:2c:98:bb:c3:a6:59:b3:dc: 38:01:68:cc:22:0f:91:f9:99:d7:6b:9f:98:c3:1d: d0:d6:34:98:59:be:64:70:a5:1b:eb:ed:38:a1:d4: 48:b3:0e:7e:34:2a:18:c2:32:72:fa:25:7c:17:e1: da:c8:d6:48:72:ee:63:a7:fb:8c:43:e7:ed:c5:6b: d5:01:c3:29:25:51:61:c0:92:b4:71:fc:b7:2e:e3: f9:9d:0c:1d:c1:49:a5:4a:b0:a3:4c:3d:d5:66:f1: 4d:08:eb:1a:54:fd:64:1c:5a:02:18:d2:4c:e7:00: bb:6d:14:d8:21:6c:31:ed:d9:77:57:53:6d:02:03: ab:b9:d5:d5:c8:4c:91:87:23:c1:c0:e3:60:2a:29: 5f:25:b3:5f:9d:03:fc:6f:97:c5:c6:82:6e:57:c4: 15:20:84:ae:09:5f:49:f6:55:ce:3f:c0:1c:43:fd: 2f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:EF:C4:51:A8:7D:39:75:E7:45:83:89:C3:7D:0C:7A:B5:43:A6:95 X509v3 Authority Key Identifier: keyid:1F:55:2F:6E:8A:C2:F9:7E:14:47:BF:AC:81:00:59:69:5E:2B:32:A9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2411/H1UvborC-X4UR7-sgQBZaV4rMqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/H1UvborC-X4UR7-sgQBZaV4rMqk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2411/G-_EUah9OXXnRYOJw30MerVDppU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.189.40.0/22 Signature Algorithm: sha256WithRSAEncryption 6c:dc:4a:2c:d3:52:85:23:c1:87:9d:86:9d:8b:ed:07:96:6f: a3:b4:b3:01:08:b4:e4:51:72:84:f7:00:56:9d:e9:70:27:23: a5:6c:7b:4f:cf:0a:23:ad:83:a6:95:97:47:65:67:d8:7b:f4: 0c:cc:7e:6d:6d:3e:63:bc:23:54:86:47:b9:1f:be:3a:71:de: a9:6e:4e:32:92:d8:74:ce:de:52:e7:ac:8f:e5:e0:69:ac:47: af:7b:82:2e:b7:05:e9:eb:5e:bd:c9:65:e8:cc:97:9a:b8:84: 54:00:75:74:f3:58:e2:c6:dc:21:ad:15:51:98:0a:39:79:d8: 5f:30:b5:9b:af:20:3f:6a:ed:42:16:2a:49:c3:0d:45:fd:04: ef:56:ec:76:bd:23:71:e2:43:71:26:6f:2d:38:8d:f7:0e:e8: 52:5a:3e:07:35:0d:12:5a:0a:58:01:47:48:d9:93:cd:8e:07: 3b:d1:7b:19:40:76:63:93:f2:90:37:e6:d4:e0:e8:f7:b5:2c: ea:4a:06:73:93:b5:ec:0d:e4:8a:4a:3f:18:9c:45:92:01:1d: 5a:b0:bd:15:5f:8e:17:20:93:b2:69:57:74:8c:0f:0a:21:4a: 73:a3:aa:81:f6:61:04:68:c5:76:d3:cf:34:dd:2f:53:39:4d: 6f:18:1f:42 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBLDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxRjU1 MkY2RThBQzJGOTdFMTQ0N0JGQUM4MTAwNTk2OTVFMkIzMkE5MB4XDTI1MDgxODAx NTc1NloXDTI2MDgxNjAxNTIwMVowMzExMC8GA1UEAxMoMUJFRkM0NTFBODdEMzk3 NUU3NDU4Mzg5QzM3RDBDN0FCNTQzQTY5NTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKUlL7MHY++0s1s05ggC3c9l/qK2qbY8YTHxgXspHveToXCkdp9Y SPfBGJ36qM07EuzvnMStWDo+a12VPXvriDnN7CNK05Vt+0C6EytrZbXdNSyYu8Om WbPcOAFozCIPkfmZ12ufmMMd0NY0mFm+ZHClG+vtOKHUSLMOfjQqGMIycvolfBfh 2sjWSHLuY6f7jEPn7cVr1QHDKSVRYcCStHH8ty7j+Z0MHcFJpUqwo0w91WbxTQjr GlT9ZBxaAhjSTOcAu20U2CFsMe3Zd1dTbQIDq7nV1chMkYcjwcDjYCopXyWzX50D /G+XxcaCblfEFSCErglfSfZVzj/AHEP9L0kCAwEAAaOCAfMwggHvMB0GA1UdDgQW BBQb78RRqH05dedFg4nDfQx6tUOmlTAfBgNVHSMEGDAWgBQfVS9uisL5fhRHv6yB AFlpXisyqTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNDEx L0gxVXZib3JDLVg0VVI3LXNnUUJaYVY0ck1xay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvSDFVdmJvckMtWDRVUjctc2dRQlphVjRyTXFrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjQxMS9HLV9FVWFoOU9YWG5S WU9KdzMwTWVyVkRwcFUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCyr0oMA0GCSqGSIb3DQEBCwUAA4IBAQBs3Eos01KFI8GHnYadi+0Hlm+jtLMB CLTkUXKE9wBWnelwJyOlbHtPzwojrYOmlZdHZWfYe/QMzH5tbT5jvCNUhke5H746 cd6pbk4ykth0zt5S56yP5eBprEeve4IutwXp6169yWXozJeauIRUAHV081jixtwh rRVRmAo5edhfMLWbryA/au1CFipJww1F/QTvVux2vSNx4kNxJm8tOI33DuhSWj4H NQ0SWgpYAUdI2ZPNjgc70XsZQHZjk/KQN+bU4Oj3tSzqSgZzk7XsDeSKSj8YnEWS AR1asL0VX44XIJOyaVd0jA8KIUpzo6qB9mEEaMV208803S9TOU1vGB9C -----END CERTIFICATE-----Generated at Mon Sep 8 09:11:45 2025 by rpki-client