$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/338/Wzii9_QWmSVl-N_6G91avja0YOc.roa File: Wzii9_QWmSVl-N_6G91avja0YOc.roa (raw, json) Hash identifier: J4Y7c48I7hy7enjeQZaFVZFGM2fxvpU0zMufHNQ7zqQ= Subject key identifier: 5B:38:A2:F7:F4:16:99:25:65:F8:DF:FA:1B:DD:5A:BE:36:B4:60:E7 Certificate issuer: /CN=898FCD881F2DAD951ADC31E481C4EDC820931AD3 Certificate serial: 1A89 Authority key identifier: 89:8F:CD:88:1F:2D:AD:95:1A:DC:31:E4:81:C4:ED:C8:20:93:1A:D3 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iY_NiB8trZUa3DHkgcTtyCCTGtM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/338/Wzii9_QWmSVl-N_6G91avja0YOc.roa Signing time: Mon 07 Jul 2025 10:48:36 +0000 ROA not before: Mon 07 Jul 2025 10:48:36 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 45061 IP address blocks: 2400:8201::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/338/iY_NiB8trZUa3DHkgcTtyCCTGtM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/338/iY_NiB8trZUa3DHkgcTtyCCTGtM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iY_NiB8trZUa3DHkgcTtyCCTGtM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Jul 2025 13:39:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6793 (0x1a89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=898FCD881F2DAD951ADC31E481C4EDC820931AD3 Validity Not Before: Jul 7 10:48:36 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=5B38A2F7F416992565F8DFFA1BDD5ABE36B460E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e9:8c:9c:81:aa:c2:a6:78:5c:c0:c3:cb:02: d2:30:bd:63:29:db:17:54:9a:5a:28:7f:89:ce:a0: 7e:24:0c:00:76:02:10:df:ab:5b:a3:46:a5:6e:95: 1a:e5:81:e1:36:72:8a:dd:79:ea:d3:6e:6c:a0:59: a8:fa:21:c5:d7:09:1a:02:45:12:27:15:a0:18:ca: d9:25:6f:0e:2c:e6:03:88:0c:3a:22:43:b5:a2:5a: 91:8b:fb:d3:9e:10:d2:3e:0b:ad:1d:bd:c1:29:d2: 0d:93:9c:b2:24:fd:5c:28:17:8c:8a:4a:95:e0:71: 46:b5:1d:41:a2:14:98:5b:ea:83:b0:06:fa:8e:43: 90:03:2b:44:80:14:dd:c1:9a:20:dc:84:21:82:23: b6:e2:ad:8c:b6:b8:00:cc:5b:96:70:32:13:17:71: 35:b0:3f:89:3c:8d:c1:34:43:39:ac:39:68:6a:4f: 11:10:c6:65:98:64:99:26:59:86:83:43:cb:d4:86: aa:ad:c3:33:af:a4:ed:d5:8c:1e:d1:58:78:b8:4f: ae:eb:94:0f:f4:a4:1c:88:c1:99:a1:84:df:f9:3c: 2d:56:a1:4c:0a:95:7b:a8:97:26:f6:07:ea:e5:32: 22:1a:06:b6:bd:f5:c1:8f:94:94:93:54:88:00:3c: 0d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:38:A2:F7:F4:16:99:25:65:F8:DF:FA:1B:DD:5A:BE:36:B4:60:E7 X509v3 Authority Key Identifier: keyid:89:8F:CD:88:1F:2D:AD:95:1A:DC:31:E4:81:C4:ED:C8:20:93:1A:D3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/338/iY_NiB8trZUa3DHkgcTtyCCTGtM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iY_NiB8trZUa3DHkgcTtyCCTGtM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/338/Wzii9_QWmSVl-N_6G91avja0YOc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2400:8201::/32 Signature Algorithm: sha256WithRSAEncryption 10:95:42:c3:b6:53:c2:28:8f:9f:c6:92:73:d1:f6:7f:a4:0f: 85:7e:7f:06:e7:13:62:eb:e9:93:06:cd:6c:da:86:c1:19:74: b1:ec:f7:fc:89:07:59:63:4f:d4:c3:ff:9c:f1:0c:1a:59:1f: f2:7b:52:81:80:51:e7:c0:cc:c0:6f:9e:3c:d2:59:f8:8f:32: 53:0f:1b:0b:7c:f8:9c:31:4e:ff:36:b9:c0:b5:e2:95:da:6d: 72:dc:57:77:a0:67:ba:b2:b3:25:af:3d:08:44:08:8a:c8:58: ac:a1:c8:15:06:d9:54:f1:a9:5c:40:60:0c:b4:fa:ec:9a:10: fc:11:f9:42:90:b5:de:18:aa:e7:83:6a:de:cd:1e:0d:97:a0: 9e:23:a4:30:d9:3d:ed:01:dc:6c:1f:ba:0b:fe:22:f4:2e:ac: f8:56:37:8d:23:b9:fd:9e:9a:cc:72:fa:8d:d2:40:50:12:c7: 6c:f7:e7:0b:cb:36:7d:74:71:c3:09:07:e8:fc:9d:fd:42:1d: 92:29:ce:6a:52:86:bb:1c:66:21:fd:f5:19:24:7f:4f:62:78: 2f:07:0e:f4:98:f8:c0:85:2a:e2:31:f6:08:05:c2:db:48:15: 76:5d:60:a7:79:7d:07:87:53:02:95:b2:b4:2b:d9:57:07:0d: bc:e6:1b:9a -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICGokwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODk4 RkNEODgxRjJEQUQ5NTFBREMzMUU0ODFDNEVEQzgyMDkzMUFEMzAeFw0yNTA3MDcx MDQ4MzZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDVCMzhBMkY3RjQxNjk5 MjU2NUY4REZGQTFCREQ1QUJFMzZCNDYwRTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDL6YycgarCpnhcwMPLAtIwvWMp2xdUmloof4nOoH4kDAB2AhDf q1ujRqVulRrlgeE2cordeerTbmygWaj6IcXXCRoCRRInFaAYytklbw4s5gOIDDoi Q7WiWpGL+9OeENI+C60dvcEp0g2TnLIk/VwoF4yKSpXgcUa1HUGiFJhb6oOwBvqO Q5ADK0SAFN3BmiDchCGCI7birYy2uADMW5ZwMhMXcTWwP4k8jcE0QzmsOWhqTxEQ xmWYZJkmWYaDQ8vUhqqtwzOvpO3VjB7RWHi4T67rlA/0pByIwZmhhN/5PC1WoUwK lXuolyb2B+rlMiIaBra99cGPlJSTVIgAPA3/AgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUWzii9/QWmSVl+N/6G91avja0YOcwHwYDVR0jBBgwFoAUiY/NiB8trZUa3DHk gcTtyCCTGtMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM4 L2lZX05pQjh0clpVYTNESGtnY1R0eUNDVEd0TS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvaVlfTmlCOHRyWlVhM0RIa2djVHR5Q0NUR3RNLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM4L1d6aWk5X1FXbVNWbC1O XzZHOTFhdmphMFlPYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcD BQAkAIIBMA0GCSqGSIb3DQEBCwUAA4IBAQAQlULDtlPCKI+fxpJz0fZ/pA+Ffn8G 5xNi6+mTBs1s2obBGXSx7Pf8iQdZY0/Uw/+c8QwaWR/ye1KBgFHnwMzAb5480ln4 jzJTDxsLfPicMU7/NrnAteKV2m1y3Fd3oGe6srMlrz0IRAiKyFisocgVBtlU8alc QGAMtPrsmhD8EflCkLXeGKrng2rezR4Nl6CeI6Qw2T3tAdxsH7oL/iL0Lqz4VjeN I7n9nprMcvqN0kBQEsds9+cLyzZ9dHHDCQfo/J39Qh2SKc5qUoa7HGYh/fUZJH9P YngvBw70mPjAhSriMfYIBcLbSBV2XWCneX0Hh1MClbK0K9lXBw285hua -----END CERTIFICATE-----Generated at Sun Jul 20 12:43:00 2025 by rpki-client