$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/631/BZUi2Cy-x-5xY8XLQ7H-sa3JIuI.roa File: BZUi2Cy-x-5xY8XLQ7H-sa3JIuI.roa (raw, json) Hash identifier: r4NPIAsWOPVI4/TlBnHCHN0/vB3fsl6rRgv0C6aogiE= Subject key identifier: 05:95:22:D8:2C:BE:C7:EE:71:63:C5:CB:43:B1:FE:B1:AD:C9:22:E2 Certificate issuer: /CN=697447C397D18C9E110B24E505C1146CF13EA871 Certificate serial: 20 Authority key identifier: 69:74:47:C3:97:D1:8C:9E:11:0B:24:E5:05:C1:14:6C:F1:3E:A8:71 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/aXRHw5fRjJ4RCyTlBcEUbPE-qHE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/631/BZUi2Cy-x-5xY8XLQ7H-sa3JIuI.roa Signing time: Wed 15 Oct 2025 00:52:00 +0000 ROA not before: Wed 15 Oct 2025 00:52:00 +0000 ROA not after: Fri 09 Oct 2026 06:50:27 +0000 asID: 58850 IP address blocks: 103.251.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/631/aXRHw5fRjJ4RCyTlBcEUbPE-qHE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/631/aXRHw5fRjJ4RCyTlBcEUbPE-qHE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/aXRHw5fRjJ4RCyTlBcEUbPE-qHE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 13:04:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=697447C397D18C9E110B24E505C1146CF13EA871 Validity Not Before: Oct 15 00:52:00 2025 GMT Not After : Oct 9 06:50:27 2026 GMT Subject: CN=059522D82CBEC7EE7163C5CB43B1FEB1ADC922E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ed:e1:6f:45:dc:9d:86:45:82:b6:b2:16:92: 3d:86:fb:16:a1:6d:cb:54:42:e5:be:40:1f:b3:29: 36:0c:47:2a:8c:ea:8a:e5:f9:80:f3:9c:dc:e6:af: 37:33:32:91:ec:d8:4e:91:a8:d2:a5:ee:ad:a2:c9: b6:e6:1c:2f:4d:23:be:1f:d2:3a:99:09:af:f0:b4: 42:ca:5e:e1:e5:cf:f9:03:af:5c:fd:2e:c0:9c:45: 6d:a0:3d:60:96:78:7f:5c:b1:30:97:c7:89:33:20: ea:ba:76:fb:ea:58:1e:e1:ef:1f:8f:6c:2f:82:f7: 07:ce:b8:22:46:87:00:44:a2:65:c9:8d:ed:e7:87: 13:67:98:6d:97:37:fb:6f:90:87:2e:2a:7b:f6:67: 48:4f:b0:c8:12:5b:5a:e4:47:c9:e8:50:31:3c:7d: f7:c0:04:5b:d9:73:39:47:72:14:97:61:e7:0e:ee: ac:2b:03:e1:ef:61:47:8a:30:3e:f6:49:fa:f3:ca: 0a:e3:d9:5b:4b:fd:7a:97:72:98:c8:88:7b:d3:1e: 6d:49:60:2d:e0:71:55:5f:0d:8d:ad:1e:28:e1:3d: 75:08:b9:e3:c8:64:4a:39:5d:15:98:f4:08:c3:2d: 06:17:d2:bc:20:3c:5a:b5:9d:8b:e8:ae:9c:d7:e1: 41:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:95:22:D8:2C:BE:C7:EE:71:63:C5:CB:43:B1:FE:B1:AD:C9:22:E2 X509v3 Authority Key Identifier: keyid:69:74:47:C3:97:D1:8C:9E:11:0B:24:E5:05:C1:14:6C:F1:3E:A8:71 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/631/aXRHw5fRjJ4RCyTlBcEUbPE-qHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/aXRHw5fRjJ4RCyTlBcEUbPE-qHE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/631/BZUi2Cy-x-5xY8XLQ7H-sa3JIuI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.251.204.0/22 Signature Algorithm: sha256WithRSAEncryption 5d:2d:38:59:4d:05:0d:3c:73:2f:36:e3:0c:9f:08:6e:50:fb: e0:a0:7e:8d:9a:19:ec:ce:d7:da:89:6d:6d:5a:11:57:98:f5: 20:7e:a5:1c:95:2f:2b:84:45:47:92:5a:af:f7:d6:82:d2:07: 14:45:77:27:dd:d7:8d:07:f0:f0:4c:b6:7c:42:fc:93:98:46: 41:8d:f8:b7:ed:51:2a:d0:19:be:51:7c:71:9a:12:d0:8b:7c: db:5d:01:ac:ed:dc:9a:aa:45:4f:3a:2f:1b:c8:27:41:78:ea: 2f:f8:a3:71:0c:d5:87:55:ed:e5:cc:7d:1d:66:de:39:02:db: 8b:7e:ac:6b:7b:1d:58:bb:00:1a:f1:88:67:68:3f:dd:2c:3b: c1:0e:84:19:1f:ee:a7:af:62:23:39:a0:89:61:d4:11:d5:4f: 61:54:3c:e1:52:bc:1b:d3:75:af:d7:9a:32:01:51:48:42:be: 88:5b:62:f2:4d:26:d0:01:0b:fc:9e:c8:4d:4c:c6:39:29:3e: 3a:af:42:76:fc:dd:33:71:4d:a9:ee:60:a2:3e:04:3b:4e:28: 0b:99:d4:c1:d7:80:12:5f:36:7a:99:e1:ee:44:24:e0:fa:66: 21:aa:72:14:31:59:69:4d:24:19:82:eb:40:c9:3d:7b:93:91: 8a:b0:d3:bb -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIBIDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2OTc0 NDdDMzk3RDE4QzlFMTEwQjI0RTUwNUMxMTQ2Q0YxM0VBODcxMB4XDTI1MTAxNTAw NTIwMFoXDTI2MTAwOTA2NTAyN1owMzExMC8GA1UEAxMoMDU5NTIyRDgyQ0JFQzdF RTcxNjNDNUNCNDNCMUZFQjFBREM5MjJFMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMHt4W9F3J2GRYK2shaSPYb7FqFty1RC5b5AH7MpNgxHKozqiuX5 gPOc3OavNzMykezYTpGo0qXuraLJtuYcL00jvh/SOpkJr/C0Qspe4eXP+QOvXP0u wJxFbaA9YJZ4f1yxMJfHiTMg6rp2++pYHuHvH49sL4L3B864IkaHAESiZcmN7eeH E2eYbZc3+2+Qhy4qe/ZnSE+wyBJbWuRHyehQMTx998AEW9lzOUdyFJdh5w7urCsD 4e9hR4owPvZJ+vPKCuPZW0v9epdymMiIe9MebUlgLeBxVV8Nja0eKOE9dQi548hk SjldFZj0CMMtBhfSvCA8WrWdi+iunNfhQY0CAwEAAaOCAfEwggHtMB0GA1UdDgQW BBQFlSLYLL7H7nFjxctDsf6xrcki4jAfBgNVHSMEGDAWgBRpdEfDl9GMnhELJOUF wRRs8T6ocTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFwGA1UdHwRVMFMwUaBP oE2GS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC82MzEv YVhSSHc1ZlJqSjRSQ3lUbEJjRVViUEUtcUhFLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9hWFJIdzVmUmpKNFJDeVRsQmNFVWJQRS1xSEUuY2VyMA4GA1UdDwEB/wQE AwIHgDCBnAYIKwYBBQUHAQsEgY8wgYwwVwYIKwYBBQUHMAuGS3JzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC82MzEvQlpVaTJDeS14LTV4WThY TFE3SC1zYTNKSXVJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmlj LmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME Amf7zDANBgkqhkiG9w0BAQsFAAOCAQEAXS04WU0FDTxzLzbjDJ8IblD74KB+jZoZ 7M7X2oltbVoRV5j1IH6lHJUvK4RFR5Jar/fWgtIHFEV3J93XjQfw8Ey2fEL8k5hG QY34t+1RKtAZvlF8cZoS0It8210BrO3cmqpFTzovG8gnQXjqL/ijcQzVh1Xt5cx9 HWbeOQLbi36sa3sdWLsAGvGIZ2g/3Sw7wQ6EGR/up69iIzmgiWHUEdVPYVQ84VK8 G9N1r9eaMgFRSEK+iFti8k0m0AEL/J7ITUzGOSk+Oq9CdvzdM3FNqe5goj4EO04o C5nUwdeAEl82epnh7kQk4PpmIapyFDFZaU0kGYLrQMk9e5ORirDTuw== -----END CERTIFICATE-----Generated at Tue Oct 21 12:44:02 2025 by rpki-client