$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3272/lEgQ59xyscOjBK92hV-PzIREb3Q.roa File: lEgQ59xyscOjBK92hV-PzIREb3Q.roa (raw, json) Hash identifier: dobMUUj8I1ijNGOPgGAOsFSIwqoDZFCEitDSKML7Kqo= Subject key identifier: 94:48:10:E7:DC:72:B1:C3:A3:04:AF:76:85:5F:8F:CC:84:44:6F:74 Certificate issuer: /CN=FD341E841C183777F8F91DF4FCDA0BB9EFA061BF Certificate serial: 0A63 Authority key identifier: FD:34:1E:84:1C:18:37:77:F8:F9:1D:F4:FC:DA:0B:B9:EF:A0:61:BF Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_TQehBwYN3f4-R30_NoLue-gYb8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3272/lEgQ59xyscOjBK92hV-PzIREb3Q.roa Signing time: Sat 13 Sep 2025 03:07:55 +0000 ROA not before: Sat 13 Sep 2025 03:07:55 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 209242 IP address blocks: 157.66.42.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3272/_TQehBwYN3f4-R30_NoLue-gYb8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3272/_TQehBwYN3f4-R30_NoLue-gYb8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_TQehBwYN3f4-R30_NoLue-gYb8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Sep 2025 03:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2659 (0xa63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD341E841C183777F8F91DF4FCDA0BB9EFA061BF Validity Not Before: Sep 13 03:07:55 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=944810E7DC72B1C3A304AF76855F8FCC84446F74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5e:44:4d:99:4f:d5:b1:e1:74:0a:d7:24:ea: 4c:70:cd:97:86:6a:18:ac:6c:d0:ac:3b:58:0b:0a: 20:de:e2:c2:c6:26:67:ee:44:13:49:da:f9:20:1b: 40:36:a7:74:81:28:7f:6f:8d:7a:38:ab:07:56:00: 45:43:6e:df:25:9a:8d:48:71:a5:7d:0f:5d:ed:22: d8:b3:c6:59:c1:49:5d:5e:57:c5:1d:e0:7e:b4:dc: c5:83:f6:0a:44:c8:5d:28:d0:a8:18:8c:6d:ec:65: d8:dc:63:54:78:65:80:50:2d:1f:26:2c:ca:79:06: 8d:a5:03:85:47:1c:10:d8:c6:93:fb:31:e3:84:91: 56:32:d3:88:5d:95:0f:cf:34:32:08:f8:fa:2b:d6: bb:9e:18:2c:19:ea:88:20:7a:bc:84:c0:75:86:0c: 91:93:b9:ce:c4:7b:f0:a4:d5:1e:f2:47:8e:bb:2d: bf:67:c2:01:85:da:3e:c7:63:d0:f8:83:89:fa:61: c5:a3:8b:73:ca:27:8c:e7:8e:ed:92:df:40:b7:69: 13:0e:6d:37:8b:7d:e9:d0:48:38:db:77:b9:92:9d: b2:70:4c:a0:75:f7:c7:8c:3b:c9:9e:d7:e8:d8:e3: ff:f8:5a:ee:47:42:dd:bb:1d:e8:f2:81:ba:55:ea: 74:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:48:10:E7:DC:72:B1:C3:A3:04:AF:76:85:5F:8F:CC:84:44:6F:74 X509v3 Authority Key Identifier: keyid:FD:34:1E:84:1C:18:37:77:F8:F9:1D:F4:FC:DA:0B:B9:EF:A0:61:BF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3272/_TQehBwYN3f4-R30_NoLue-gYb8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_TQehBwYN3f4-R30_NoLue-gYb8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3272/lEgQ59xyscOjBK92hV-PzIREb3Q.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.66.42.0/23 Signature Algorithm: sha256WithRSAEncryption 36:b6:d7:d0:79:9c:78:a5:a7:03:20:00:4c:41:54:0c:78:36: 90:7d:b8:d9:c9:86:45:19:ba:cc:b3:86:b1:82:bf:cd:1a:50: 49:7d:44:19:7b:9a:d8:48:d9:12:0b:4f:4a:4f:7a:c5:b2:2f: 3d:6f:53:cc:5f:9c:e0:09:3e:2e:77:64:2d:2f:e6:d7:49:08: 43:e8:ad:04:6f:39:09:07:be:b7:4e:3f:6f:0c:20:eb:28:4b: 62:02:42:81:c7:da:df:75:c8:61:99:ae:60:d1:2d:81:fa:94: 18:fc:4f:ae:b1:42:3d:75:65:88:aa:fa:a3:1c:9d:a4:9a:60: 53:87:c1:16:4f:9f:f0:69:d3:82:21:3c:0d:80:ce:8f:3e:3c: 99:38:48:d8:64:a8:cc:1a:3a:7c:b0:e5:3d:b5:a4:0d:c4:ee: 6c:3f:be:a8:48:25:c3:5c:8c:df:fc:4b:a9:a5:9b:c8:f2:49: 88:4b:18:ca:cd:6f:c9:27:a6:ed:f4:11:d5:89:27:22:c5:97: f6:8b:19:d1:03:c1:22:85:8f:d2:be:37:cf:10:17:31:27:62: e9:96:e7:ff:d7:29:7e:ca:88:3a:3d:a3:be:11:42:44:68:b8: 27:10:37:85:fa:34:e8:19:e2:06:df:22:a9:6e:1d:7e:4f:c9: b9:a4:cd:27 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICCmMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkQz NDFFODQxQzE4Mzc3N0Y4RjkxREY0RkNEQTBCQjlFRkEwNjFCRjAeFw0yNTA5MTMw MzA3NTVaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDk0NDgxMEU3REM3MkIx QzNBMzA0QUY3Njg1NUY4RkNDODQ0NDZGNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVXkRNmU/VseF0Ctck6kxwzZeGahisbNCsO1gLCiDe4sLGJmfu RBNJ2vkgG0A2p3SBKH9vjXo4qwdWAEVDbt8lmo1IcaV9D13tItizxlnBSV1eV8Ud 4H603MWD9gpEyF0o0KgYjG3sZdjcY1R4ZYBQLR8mLMp5Bo2lA4VHHBDYxpP7MeOE kVYy04hdlQ/PNDII+Por1rueGCwZ6oggeryEwHWGDJGTuc7Ee/Ck1R7yR467Lb9n wgGF2j7HY9D4g4n6YcWji3PKJ4znju2S30C3aRMObTeLfenQSDjbd7mSnbJwTKB1 98eMO8me1+jY4//4Wu5HQt27HejygbpV6nSnAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUlEgQ59xyscOjBK92hV+PzIREb3QwHwYDVR0jBBgwFoAU/TQehBwYN3f4+R30 /NoLue+gYb8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 Mi9fVFFlaEJ3WU4zZjQtUjMwX05vTHVlLWdZYjguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL19UUWVoQndZTjNmNC1SMzBfTm9MdWUtZ1liOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzIvbEVnUTU5eHlzY09q Qks5MmhWLVB6SVJFYjNRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAZ1CKjANBgkqhkiG9w0BAQsFAAOCAQEANrbX0HmceKWnAyAATEFUDHg2kH24 2cmGRRm6zLOGsYK/zRpQSX1EGXua2EjZEgtPSk96xbIvPW9TzF+c4Ak+LndkLS/m 10kIQ+itBG85CQe+t04/bwwg6yhLYgJCgcfa33XIYZmuYNEtgfqUGPxPrrFCPXVl iKr6oxydpJpgU4fBFk+f8GnTgiE8DYDOjz48mThI2GSozBo6fLDlPbWkDcTubD++ qEglw1yM3/xLqaWbyPJJiEsYys1vySem7fQR1YknIsWX9osZ0QPBIoWP0r43zxAX MSdi6Zbn/9cpfsqIOj2jvhFCRGi4JxA3hfo06BniBt8iqW4dfk/JuaTNJw== -----END CERTIFICATE-----Generated at Wed Sep 17 23:29:19 2025 by rpki-client