$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/CZs_Ni5V2gSCjdV78asso1QzGco.roa File: CZs_Ni5V2gSCjdV78asso1QzGco.roa (raw, json) Hash identifier: z+5V/AgcfNiocZ4OSlh0JDUtnLm9sPDAWh31QNuUcM0= Subject key identifier: 09:9B:3F:36:2E:55:DA:04:82:8D:D5:7B:F1:AB:2C:A3:54:33:19:CA Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708 Certificate serial: 21A4 Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/CZs_Ni5V2gSCjdV78asso1QzGco.roa Signing time: Sat 06 Sep 2025 08:04:30 +0000 ROA not before: Sat 06 Sep 2025 08:04:30 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 136958 IP address blocks: 118.145.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 06:04:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8612 (0x21a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708 Validity Not Before: Sep 6 08:04:30 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=099B3F362E55DA04828DD57BF1AB2CA3543319CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:07:25:68:08:50:a3:a4:70:b5:ae:2a:39:f2: 7b:01:cb:bc:fe:f2:c0:82:5d:d9:29:47:86:08:8c: 0d:da:28:4d:d5:26:eb:ac:89:82:86:4f:bc:8c:82: a1:99:c4:b5:58:b3:0a:21:e2:f6:77:2d:89:4a:fd: b6:ed:43:43:18:7f:72:9d:59:9a:ca:c7:f7:e6:ae: 3f:e6:01:91:25:06:fa:64:ea:9a:93:09:9a:76:8b: fb:8f:de:58:61:5c:a5:a7:da:08:c6:b6:a0:c3:0a: b0:2d:bf:79:86:c8:1b:95:72:7b:77:96:e4:d9:ee: f3:11:76:dc:09:3d:72:b5:74:38:7c:c9:d7:66:db: ae:90:d1:5b:d4:32:37:3d:58:9a:63:88:73:c7:a6: b7:11:3d:a7:93:58:c9:b3:c0:6a:e3:ca:db:50:78: 07:31:c2:61:ec:3a:97:04:a3:ec:e8:e0:61:9e:7e: e2:b6:35:3c:b5:9e:d0:28:cc:bd:ae:b0:f1:f5:1c: aa:8e:ce:da:cb:d0:c7:80:47:77:ae:02:5f:f8:b2: 12:d9:8b:9d:b6:62:82:45:a4:7c:94:d5:51:64:17: b4:1a:6d:0a:d5:8f:8e:c9:30:5b:bd:27:6a:45:ff: d4:82:c1:69:c4:2b:e1:b4:c4:7b:0f:e3:24:aa:d5: 77:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:9B:3F:36:2E:55:DA:04:82:8D:D5:7B:F1:AB:2C:A3:54:33:19:CA X509v3 Authority Key Identifier: keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/CZs_Ni5V2gSCjdV78asso1QzGco.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.145.32.0/19 Signature Algorithm: sha256WithRSAEncryption 12:bd:a0:1b:46:15:20:e7:c3:69:5f:99:7d:50:18:bb:2b:ec: b9:e4:ee:d4:35:1c:b4:c7:af:4d:d3:0b:a8:c4:10:b7:85:a7: e8:1f:13:38:c5:51:ea:62:ae:66:ef:65:62:4b:33:5f:4c:f3: c1:14:b7:73:77:41:8e:af:8c:b7:07:cf:ac:6f:36:9a:78:1c: dc:94:65:3f:c6:07:a2:9a:42:91:36:e8:95:cb:5c:d2:34:07: a9:76:10:90:b9:19:f5:10:a0:92:06:87:44:96:57:4a:1b:d3: d2:96:68:34:05:29:64:51:d6:2e:72:b7:20:80:76:21:5d:a1: 5a:0b:22:eb:38:47:3d:5e:ee:ce:5f:a1:f4:64:84:fb:e3:03: 0f:fc:ec:f9:66:42:d0:2d:22:85:69:7a:19:da:18:c2:47:cd: 1f:ed:67:6e:82:0e:8c:ea:f0:66:bd:e5:02:0b:e4:2b:ae:71: 0b:db:83:e3:f3:e5:9f:fa:3b:ae:cf:8f:4c:3d:8f:e2:1d:9e: 81:10:92:52:ae:73:bb:c4:79:c8:d4:61:47:b2:c1:b5:e9:49: e0:ca:3e:96:bd:a3:4f:e0:bb:1e:42:66:5f:21:64:23:5b:01: 8f:2b:f6:1a:7d:f7:00:ac:ca:7e:66:db:59:8b:18:88:e5:4c: ae:92:4b:51 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIaQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4 QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTA5MDYw ODA0MzBaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDA5OUIzRjM2MkU1NURB MDQ4MjhERDU3QkYxQUIyQ0EzNTQzMzE5Q0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3ByVoCFCjpHC1rio58nsBy7z+8sCCXdkpR4YIjA3aKE3VJuus iYKGT7yMgqGZxLVYswoh4vZ3LYlK/bbtQ0MYf3KdWZrKx/fmrj/mAZElBvpk6pqT CZp2i/uP3lhhXKWn2gjGtqDDCrAtv3mGyBuVcnt3luTZ7vMRdtwJPXK1dDh8yddm 266Q0VvUMjc9WJpjiHPHprcRPaeTWMmzwGrjyttQeAcxwmHsOpcEo+zo4GGefuK2 NTy1ntAozL2usPH1HKqOztrL0MeAR3euAl/4shLZi522YoJFpHyU1VFkF7QabQrV j47JMFu9J2pF/9SCwWnEK+G0xHsP4ySq1XfRAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUCZs/Ni5V2gSCjdV78asso1QzGcowHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvQ1pzX05pNVYyZ1ND amRWNzhhc3NvMVF6R2NvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBXaRIDANBgkqhkiG9w0BAQsFAAOCAQEAEr2gG0YVIOfDaV+ZfVAYuyvsueTu 1DUctMevTdMLqMQQt4Wn6B8TOMVR6mKuZu9lYkszX0zzwRS3c3dBjq+MtwfPrG82 mngc3JRlP8YHoppCkTbolctc0jQHqXYQkLkZ9RCgkgaHRJZXShvT0pZoNAUpZFHW LnK3IIB2IV2hWgsi6zhHPV7uzl+h9GSE++MDD/zs+WZC0C0ihWl6GdoYwkfNH+1n boIOjOrwZr3lAgvkK65xC9uD4/Pln/o7rs+PTD2P4h2egRCSUq5zu8R5yNRhR7LB telJ4Mo+lr2jT+C7HkJmXyFkI1sBjyv2Gn33AKzKfmbbWYsYiOVMrpJLUQ== -----END CERTIFICATE-----Generated at Mon Sep 8 02:33:43 2025 by rpki-client