$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/H8W_GgSEBhAgl7FoBl3dFEF-v7c.roa File: H8W_GgSEBhAgl7FoBl3dFEF-v7c.roa (raw, json) Hash identifier: yJEhw50pX8X3Ibw/kpuThAqr8YczvWokogOXu/NnTIk= Subject key identifier: 1F:C5:BF:1A:04:84:06:10:20:97:B1:68:06:5D:DD:14:41:7E:BF:B7 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1E20 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/H8W_GgSEBhAgl7FoBl3dFEF-v7c.roa Signing time: Sat 13 Sep 2025 03:04:52 +0000 ROA not before: Sat 13 Sep 2025 03:04:52 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 59083 IP address blocks: 202.136.250.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 12:36:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7712 (0x1e20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:04:52 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=1FC5BF1A048406102097B168065DDD14417EBFB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5f:78:da:9b:c4:f1:ef:f8:ad:59:a4:46:ae: 8d:93:f3:bc:55:36:c7:ca:4b:b6:06:b7:aa:e9:99: 4e:dc:1a:ea:5d:bd:ef:be:c1:12:88:4b:2e:1c:6c: 98:ac:42:92:3c:84:04:e0:05:4c:9d:b4:bd:ce:c7: 9a:5d:85:b9:ae:f7:64:dc:f1:df:af:d4:4d:a0:b3: 64:2c:3e:e2:1a:eb:29:de:45:9c:8a:e7:c0:3a:c1: 7f:46:c6:f8:f4:e9:01:27:6e:cd:a1:3f:31:6e:51: f1:fd:06:4b:91:8a:2a:b5:a1:8f:3d:2d:d4:37:98: d8:39:dd:08:40:74:78:51:fb:b4:e1:3e:54:93:97: 13:b5:dd:e5:be:69:18:94:ee:11:81:2b:52:a4:2b: 25:a5:ba:37:c1:84:ea:56:2a:b7:73:7d:55:22:ab: a2:7c:d1:79:b4:f0:45:aa:19:64:78:f0:d4:fe:d6: 05:11:01:0a:ea:66:5c:6a:3e:8b:b4:5a:74:20:60: d8:b7:a8:49:df:1e:e7:87:fc:34:37:47:de:cb:b1: 0e:60:ad:5a:b2:c4:cd:a8:20:3d:3c:a3:1f:90:4c: 2c:b0:21:f9:09:54:ce:1f:ab:ee:b8:41:15:f6:1e: 84:86:39:27:dc:ef:22:a4:c7:65:1c:c9:4b:a5:20: a8:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C5:BF:1A:04:84:06:10:20:97:B1:68:06:5D:DD:14:41:7E:BF:B7 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/H8W_GgSEBhAgl7FoBl3dFEF-v7c.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.136.250.0/23 Signature Algorithm: sha256WithRSAEncryption cc:f1:16:c0:32:33:48:fc:2c:b5:ea:42:92:0e:65:c6:1f:80: 84:f7:6b:29:da:6b:7e:fe:73:92:70:fe:f2:31:5a:e1:ac:e4: c1:b4:5b:6e:d1:97:e8:02:0a:b3:51:3c:09:67:77:5a:96:26: 7a:58:94:30:dd:9c:15:ee:a9:55:6f:a1:79:57:30:3f:c1:e6: e6:ab:f3:19:2a:03:f5:3b:1b:ba:b5:62:30:85:85:ab:97:91: 02:b2:1b:ea:2a:2a:ab:8d:ff:b1:b8:19:58:d4:fa:ce:6d:2f: 37:43:15:bf:1c:af:b9:15:cf:33:7f:03:3f:51:7e:20:06:0c: 6b:c3:90:29:de:ed:8f:0b:b0:2d:5b:52:26:a8:af:25:8d:3e: 4c:87:90:d6:ae:c8:be:30:54:8b:05:12:56:87:c8:3a:b3:8e: f3:94:09:9c:95:d4:98:d4:1b:cd:16:57:76:43:be:f9:da:08: 03:1b:bb:62:13:35:3d:f6:12:04:5f:93:6f:0e:b3:62:36:8a: 17:29:2b:c8:3e:45:d9:20:17:0c:99:dd:e2:07:3b:8a:77:57: 39:2d:e8:43:5d:58:cc:96:b9:73:41:27:bf:f0:c9:44:cd:11: 76:20:88:7b:ab:03:b9:a7:f8:15:73:9f:0a:14:47:5c:2a:21: a9:62:c5:42 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHiAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA0NTJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDFGQzVCRjFBMDQ4NDA2 MTAyMDk3QjE2ODA2NURERDE0NDE3RUJGQjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBX3jam8Tx7/itWaRGro2T87xVNsfKS7YGt6rpmU7cGupdve++ wRKISy4cbJisQpI8hATgBUydtL3Ox5pdhbmu92Tc8d+v1E2gs2QsPuIa6yneRZyK 58A6wX9Gxvj06QEnbs2hPzFuUfH9BkuRiiq1oY89LdQ3mNg53QhAdHhR+7ThPlST lxO13eW+aRiU7hGBK1KkKyWlujfBhOpWKrdzfVUiq6J80Xm08EWqGWR48NT+1gUR AQrqZlxqPou0WnQgYNi3qEnfHueH/DQ3R97LsQ5grVqyxM2oID08ox+QTCywIfkJ VM4fq+64QRX2HoSGOSfc7yKkx2UcyUulIKijAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUH8W/GgSEBhAgl7FoBl3dFEF+v7cwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L0g4V19HZ1NFQmhBZ2w3 Rm9CbDNkRkVGLXY3Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAHKiPowDQYJKoZIhvcNAQELBQADggEBAMzxFsAyM0j8LLXqQpIOZcYfgIT3ayna a37+c5Jw/vIxWuGs5MG0W27Rl+gCCrNRPAlnd1qWJnpYlDDdnBXuqVVvoXlXMD/B 5uar8xkqA/U7G7q1YjCFhauXkQKyG+oqKquN/7G4GVjU+s5tLzdDFb8cr7kVzzN/ Az9RfiAGDGvDkCne7Y8LsC1bUiaoryWNPkyHkNauyL4wVIsFElaHyDqzjvOUCZyV 1JjUG80WV3ZDvvnaCAMbu2ITNT32EgRfk28Os2I2ihcpK8g+RdkgFwyZ3eIHO4p3 Vzkt6ENdWMyWuXNBJ7/wyUTNEXYgiHurA7mn+BVznwoUR1wqIalixUI= -----END CERTIFICATE-----Generated at Sun Oct 26 11:47:57 2025 by rpki-client