$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/341/2PZBYJydNYIzvnWN2B9DBKERHuA.roa File: 2PZBYJydNYIzvnWN2B9DBKERHuA.roa (raw, json) Hash identifier: N35xWba2scgGod5I4d3QUFt5nP3HuwNfl8y2anREGP0= Subject key identifier: D8:F6:41:60:9C:9D:35:82:33:BE:75:8D:D8:1F:43:04:A1:11:1E:E0 Certificate issuer: /CN=856DA85F9A8A286B652870D4E47635FF3D0E92AE Certificate serial: 1912 Authority key identifier: 85:6D:A8:5F:9A:8A:28:6B:65:28:70:D4:E4:76:35:FF:3D:0E:92:AE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hW2oX5qKKGtlKHDU5HY1_z0Okq4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/2PZBYJydNYIzvnWN2B9DBKERHuA.roa Signing time: Sat 06 Sep 2025 08:02:20 +0000 ROA not before: Sat 06 Sep 2025 08:02:20 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 37963 IP address blocks: 110.75.0.0/18 maxlen: 24 110.75.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/hW2oX5qKKGtlKHDU5HY1_z0Okq4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/hW2oX5qKKGtlKHDU5HY1_z0Okq4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hW2oX5qKKGtlKHDU5HY1_z0Okq4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:04:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6418 (0x1912) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=856DA85F9A8A286B652870D4E47635FF3D0E92AE Validity Not Before: Sep 6 08:02:20 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=D8F641609C9D358233BE758DD81F4304A1111EE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d0:42:52:98:c6:c4:e6:d3:37:7c:51:e7:4a: e1:eb:53:d2:85:3f:06:87:4c:75:03:ca:5a:14:45: 76:2a:ef:fa:04:df:ed:69:f4:36:3b:42:94:fb:d6: eb:f1:86:24:51:0a:13:a3:64:5c:4b:32:e2:cb:ac: 56:12:28:3b:ee:d5:1e:80:b8:f5:2c:2b:30:12:f9: 7f:81:65:cc:14:f5:dd:d0:61:36:0e:eb:5c:ba:16: 93:00:a7:d7:84:c6:58:9e:5d:4f:b7:34:e2:43:b4: 17:30:c6:cb:67:6b:83:6f:e6:c4:b2:b3:68:c0:8f: c1:b0:72:c9:18:e4:10:e7:19:d2:c6:09:29:29:05: 74:5d:c4:5d:29:15:79:80:76:6c:0f:3f:f3:c0:9e: 9b:39:b1:56:cc:5a:cb:7c:4f:b8:02:34:db:22:f8: fe:ca:d0:04:75:2e:df:de:1f:f6:f8:56:7e:86:28: 00:58:41:88:88:b6:f8:be:82:7b:3b:19:21:cb:50: ad:b7:bd:6d:af:a7:53:bb:e1:2f:57:e5:8f:8d:89: 2d:47:69:1b:57:3d:f6:36:12:c6:b3:39:75:dc:48: 22:eb:ca:71:85:69:28:c1:ed:7d:d7:7d:c1:4c:82: 32:e0:74:db:a2:6c:a1:15:4f:dc:1a:80:9c:9d:0e: 46:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F6:41:60:9C:9D:35:82:33:BE:75:8D:D8:1F:43:04:A1:11:1E:E0 X509v3 Authority Key Identifier: keyid:85:6D:A8:5F:9A:8A:28:6B:65:28:70:D4:E4:76:35:FF:3D:0E:92:AE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/hW2oX5qKKGtlKHDU5HY1_z0Okq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hW2oX5qKKGtlKHDU5HY1_z0Okq4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/2PZBYJydNYIzvnWN2B9DBKERHuA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 110.75.0.0/17 Signature Algorithm: sha256WithRSAEncryption 44:43:7e:4d:97:2e:25:4b:c3:2d:02:e5:7a:b9:02:48:75:7a: 02:b6:f5:aa:23:de:fe:64:18:a0:b3:c6:9f:24:a5:bf:fd:c7: 8a:96:49:6d:a0:a5:01:91:0f:ae:69:5f:21:70:d2:b6:14:8a: 3a:5f:78:05:ea:13:a1:d8:24:c2:c7:cf:38:79:67:83:b1:cb: 8e:5a:d3:ad:3b:f9:7a:45:89:51:00:50:89:2e:24:96:10:db: ff:3e:9f:cf:6b:83:00:84:0a:45:42:d7:db:49:2d:70:cb:ef: a1:0e:00:14:09:26:2c:97:d0:f1:45:87:bf:fe:d2:41:bb:7e: 06:55:43:70:84:a0:e8:bc:a0:18:fe:d7:36:63:d2:36:0f:92: 07:64:ef:1c:8c:20:51:6e:fb:95:89:9a:01:7e:47:c2:15:b3: 87:37:6d:62:b4:21:1b:38:ab:a5:08:1f:11:9d:36:d8:e6:bb: 06:e5:fe:36:79:43:03:86:7f:db:bf:39:93:c1:74:e0:f1:7a: 20:a4:65:43:78:7a:d3:63:26:e4:0a:3b:4f:5c:2e:a7:20:4f: c7:fc:e1:c4:fc:a8:4c:e0:a2:d9:36:5a:af:69:b9:d5:67:01: 3f:3d:da:c8:c7:be:cf:65:86:f7:1a:5a:d9:d5:59:a2:43:23: 6e:e7:64:2b -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGRIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODU2 REE4NUY5QThBMjg2QjY1Mjg3MEQ0RTQ3NjM1RkYzRDBFOTJBRTAeFw0yNTA5MDYw ODAyMjBaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEQ4RjY0MTYwOUM5RDM1 ODIzM0JFNzU4REQ4MUY0MzA0QTExMTFFRTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDb0EJSmMbE5tM3fFHnSuHrU9KFPwaHTHUDyloURXYq7/oE3+1p 9DY7QpT71uvxhiRRChOjZFxLMuLLrFYSKDvu1R6AuPUsKzAS+X+BZcwU9d3QYTYO 61y6FpMAp9eExlieXU+3NOJDtBcwxstna4Nv5sSys2jAj8GwcskY5BDnGdLGCSkp BXRdxF0pFXmAdmwPP/PAnps5sVbMWst8T7gCNNsi+P7K0AR1Lt/eH/b4Vn6GKABY QYiItvi+gns7GSHLUK23vW2vp1O74S9X5Y+NiS1HaRtXPfY2EsazOXXcSCLrynGF aSjB7X3XfcFMgjLgdNuibKEVT9wagJydDkYBAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU2PZBYJydNYIzvnWN2B9DBKERHuAwHwYDVR0jBBgwFoAUhW2oX5qKKGtlKHDU 5HY1/z0Okq4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQx L2hXMm9YNXFLS0d0bEtIRFU1SFkxX3owT2txNC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvaFcyb1g1cUtLR3RsS0hEVTVIWTFfejBPa3E0LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQxLzJQWkJZSnlkTllJenZu V04yQjlEQktFUkh1QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAduSwAwDQYJKoZIhvcNAQELBQADggEBAERDfk2XLiVLwy0C5Xq5Akh1egK29aoj 3v5kGKCzxp8kpb/9x4qWSW2gpQGRD65pXyFw0rYUijpfeAXqE6HYJMLHzzh5Z4Ox y45a0607+XpFiVEAUIkuJJYQ2/8+n89rgwCECkVC19tJLXDL76EOABQJJiyX0PFF h7/+0kG7fgZVQ3CEoOi8oBj+1zZj0jYPkgdk7xyMIFFu+5WJmgF+R8IVs4c3bWK0 IRs4q6UIHxGdNtjmuwbl/jZ5QwOGf9u/OZPBdODxeiCkZUN4etNjJuQKO09cLqcg T8f84cT8qEzgotk2Wq9pudVnAT892sjHvs9lhvcaWtnVWaJDI27nZCs= -----END CERTIFICATE-----Generated at Sun Oct 26 05:00:11 2025 by rpki-client