$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/652RiQCjcuITsPwWu3U3MjdWhlU.roa File: 652RiQCjcuITsPwWu3U3MjdWhlU.roa (raw, json) Hash identifier: uVtlInB6SKmPlrwlr61WrVbb/1ICrJs8mrep5Iq+aVs= Subject key identifier: EB:9D:91:89:00:A3:72:E2:13:B0:FC:16:BB:75:37:32:37:56:86:55 Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Certificate serial: 216D Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/652RiQCjcuITsPwWu3U3MjdWhlU.roa Signing time: Fri 29 Aug 2025 09:05:21 +0000 ROA not before: Fri 29 Aug 2025 09:05:21 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 23724 IP address blocks: 106.75.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 16:34:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8557 (0x216d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Validity Not Before: Aug 29 09:05:21 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=EB9D918900A372E213B0FC16BB75373237568655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0d:ed:53:1a:bc:9c:c9:f8:0a:d0:70:5c:31: 17:c9:8a:87:a7:71:c2:0f:cd:46:f0:40:f8:66:7a: 72:fa:3f:65:09:a9:c2:70:9b:c9:08:9f:30:86:82: d3:21:e4:aa:fc:51:c0:f0:2b:02:7c:e8:8e:43:7c: 80:36:c0:96:95:99:da:c1:97:85:2f:4f:19:78:ac: 9b:10:69:bd:d1:50:4b:b3:31:43:25:e7:4d:e4:09: 98:18:05:c2:8b:8b:6d:ed:2f:df:57:5d:e2:e3:da: fe:10:7e:e0:59:49:25:b6:a2:18:d7:4b:4a:d3:bf: 14:1e:ce:fe:5b:36:68:f2:ca:95:f2:ad:64:e2:ca: c6:08:c9:52:fa:e4:34:6d:12:fb:ba:18:2c:36:ae: ff:ec:e6:94:3a:61:30:8d:c8:b2:08:6f:f9:a5:f4: ed:55:d1:cd:43:e9:1c:ec:18:8b:63:7f:5d:71:1f: 91:b6:48:30:71:f8:80:8e:94:c0:92:8c:de:0a:a2: 51:4d:35:37:4f:87:9b:68:e2:c4:04:62:0e:8f:a1: f2:8c:f0:df:bc:59:09:2c:f7:a1:80:55:8f:ea:0c: e1:32:00:26:19:b5:e9:9a:a1:a3:86:1c:f2:4e:e8: 5f:de:cd:93:d7:08:8f:ca:09:e4:b4:27:8d:e0:ca: fa:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:9D:91:89:00:A3:72:E2:13:B0:FC:16:BB:75:37:32:37:56:86:55 X509v3 Authority Key Identifier: keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/652RiQCjcuITsPwWu3U3MjdWhlU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.75.64.0/19 Signature Algorithm: sha256WithRSAEncryption 65:31:d4:f4:02:19:0f:38:1f:d2:66:4e:83:3e:35:cd:f0:47: c2:0d:45:76:27:20:bf:6b:17:25:fa:e6:6f:62:1e:57:65:95: b8:f7:fe:13:d8:6b:43:f1:4a:f3:59:a0:e4:66:d0:de:bb:43: d8:77:42:4f:c5:6c:17:90:68:2b:c8:cd:a3:2c:21:71:cb:8e: 40:53:9c:1f:6f:5b:a8:3b:48:ad:f7:3d:30:76:fd:37:5f:15: bf:5f:1b:d8:f7:74:f0:f9:11:83:d2:4c:95:d3:76:3a:44:31: 56:71:35:d1:69:33:30:54:09:8b:41:eb:37:cd:f0:6d:0a:d2: 2d:87:73:84:2b:b0:5f:83:15:e6:3c:26:78:b7:6f:f2:e1:05: bf:f9:b1:04:c0:4f:5f:82:38:9b:0a:88:ff:91:1b:18:ee:82: a4:0f:ec:f8:27:72:58:43:82:42:9b:a3:d6:4d:8f:f7:3b:1f: 30:b1:fe:8d:28:b9:59:9f:54:66:16:74:bc:45:94:2f:1b:11: ba:f9:39:0e:91:68:10:a3:f8:0c:59:a8:99:7d:05:85:f3:72: 65:ee:7e:0d:cd:6c:9a:ea:fe:cc:8a:e4:fe:c5:98:7b:82:de: b7:1e:0b:79:d3:c2:87:4f:ed:d7:20:7d:7b:2f:02:e0:06:2b: 48:4b:0d:38 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICIW0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE3 MTFBQTdEQzYwMDQ5QjBCMEQ4ODQ4OTdFMDE1QjExNzFGMzdCOTAeFw0yNTA4Mjkw OTA1MjFaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEVCOUQ5MTg5MDBBMzcy RTIxM0IwRkMxNkJCNzUzNzMyMzc1Njg2NTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDeDe1TGrycyfgK0HBcMRfJioenccIPzUbwQPhmenL6P2UJqcJw m8kInzCGgtMh5Kr8UcDwKwJ86I5DfIA2wJaVmdrBl4UvTxl4rJsQab3RUEuzMUMl 503kCZgYBcKLi23tL99XXeLj2v4QfuBZSSW2ohjXS0rTvxQezv5bNmjyypXyrWTi ysYIyVL65DRtEvu6GCw2rv/s5pQ6YTCNyLIIb/ml9O1V0c1D6RzsGItjf11xH5G2 SDBx+ICOlMCSjN4KolFNNTdPh5to4sQEYg6PofKM8N+8WQks96GAVY/qDOEyACYZ temaoaOGHPJO6F/ezZPXCI/KCeS0J43gyvq9AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU652RiQCjcuITsPwWu3U3MjdWhlUwHwYDVR0jBBgwFoAUKnEap9xgBJsLDYhI l+AVsRcfN7kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3 L0tuRWFwOXhnQkpzTERZaElsLUFWc1JjZk43ay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvS25FYXA5eGdCSnNMRFloSWwtQVZzUmNmTjdrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3LzY1MlJpUUNqY3VJVHNQ d1d1M1UzTWpkV2hsVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAVqS0AwDQYJKoZIhvcNAQELBQADggEBAGUx1PQCGQ84H9JmToM+Nc3wR8INRXYn IL9rFyX65m9iHldllbj3/hPYa0PxSvNZoORm0N67Q9h3Qk/FbBeQaCvIzaMsIXHL jkBTnB9vW6g7SK33PTB2/TdfFb9fG9j3dPD5EYPSTJXTdjpEMVZxNdFpMzBUCYtB 6zfN8G0K0i2Hc4QrsF+DFeY8Jni3b/LhBb/5sQTAT1+COJsKiP+RGxjugqQP7Pgn clhDgkKbo9ZNj/c7HzCx/o0ouVmfVGYWdLxFlC8bEbr5OQ6RaBCj+AxZqJl9BYXz cmXufg3NbJrq/syK5P7FmHuC3rceC3nTwodP7dcgfXsvAuAGK0hLDTg= -----END CERTIFICATE-----Generated at Mon Sep 8 13:35:14 2025 by rpki-client