$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/6Wl4z_O6OUXn7cN2rM932FOvXZs.roa File: 6Wl4z_O6OUXn7cN2rM932FOvXZs.roa (raw, json) Hash identifier: UYEpLMUcFdXz8SF/IOE7cjD3uQZQ2aizlKe8YZ3RDO0= Subject key identifier: E9:69:78:CF:F3:BA:39:45:E7:ED:C3:76:AC:CF:77:D8:53:AF:5D:9B Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Certificate serial: 2211 Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/6Wl4z_O6OUXn7cN2rM932FOvXZs.roa Signing time: Tue 16 Sep 2025 07:38:45 +0000 ROA not before: Tue 16 Sep 2025 07:38:45 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 135377 IP address blocks: 42.240.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Oct 2025 18:35:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8721 (0x2211) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Validity Not Before: Sep 16 07:38:45 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=E96978CFF3BA3945E7EDC376ACCF77D853AF5D9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:a0:6d:9d:47:7b:33:39:fd:aa:16:f1:7d:6d: f1:89:e4:63:44:b7:1e:c0:09:04:e4:33:37:eb:a7: 1b:84:b0:5d:54:05:7a:c3:f0:83:d1:4e:a6:3f:58: f1:68:c4:58:39:b7:a9:5e:2c:c2:2d:d2:d9:24:42: 45:0b:21:80:e6:f3:43:20:62:e3:b5:a8:ae:b5:52: 11:fb:fd:d8:59:38:ee:94:83:3f:a8:c6:0e:b2:c0: 20:b1:bd:2f:e0:1d:5a:a7:07:41:90:46:fb:87:76: 00:1f:61:5b:62:db:3c:2d:2f:f7:da:e7:78:ab:cd: b1:72:2c:f9:3b:f8:f6:08:27:86:94:8c:91:84:79: 2f:cc:98:3e:ca:37:03:79:36:d7:f3:ff:4a:92:78: 64:30:8b:bb:4f:db:73:eb:5a:51:ad:d5:ec:c2:79: e1:0a:e0:a1:ed:c9:21:b8:ba:0f:d6:14:21:e9:8c: df:7b:87:1c:cc:7c:82:3b:58:72:98:a3:58:c6:82: 68:4a:f8:f9:5d:2c:2d:e5:8f:3f:a2:7c:6d:c9:32: bc:f5:c2:51:9c:ca:65:7f:95:4f:ec:a8:b3:0c:0f: 80:52:96:fb:11:7f:68:c6:21:d2:ca:4f:d9:e7:d9: ae:60:81:05:98:33:bd:a0:eb:f5:77:2c:d0:d1:34: 2d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:69:78:CF:F3:BA:39:45:E7:ED:C3:76:AC:CF:77:D8:53:AF:5D:9B X509v3 Authority Key Identifier: keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/6Wl4z_O6OUXn7cN2rM932FOvXZs.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 42.240.255.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:bc:2b:9d:f5:fa:8f:15:c5:66:30:e7:9a:c8:11:63:01:1a: 5d:82:13:a3:02:5a:09:95:8e:aa:25:60:2e:81:67:33:af:60: 94:87:cc:1c:96:1a:2c:3b:fd:c0:99:7e:80:44:34:14:69:81: 90:f3:45:1f:ca:0f:09:05:73:2d:b1:91:ff:79:2a:a3:9c:2f: dd:e6:43:f9:8a:06:26:fc:29:9e:85:71:01:a3:7b:c6:bd:af: d7:f9:db:30:24:07:7d:d9:b7:60:47:eb:47:a1:dc:22:0a:65: f4:49:ae:df:b0:fb:57:4b:23:f7:4c:8c:5c:ef:24:e9:4e:fa: 43:2e:dc:70:1d:22:08:19:5d:ac:36:0f:49:cf:55:46:8c:44: 57:5d:f4:54:10:fc:58:e0:34:b9:a7:ed:1a:97:28:2b:b2:48: 3a:a5:00:66:99:36:18:67:21:d7:a2:3b:2a:08:27:05:d8:3e: 0a:af:7d:c6:46:ee:f7:8b:e9:dc:a2:7a:42:e9:e4:19:1f:b4: fd:c9:63:e5:96:90:3b:ef:cf:38:66:01:f0:95:c7:39:9b:60: 20:9b:b7:27:8a:65:75:8d:d8:ce:39:b3:82:ef:76:59:b4:63: d2:ba:c1:90:b5:8c:5a:ef:10:38:e1:32:20:fe:64:22:fb:e4: 10:b3:7e:d2 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICIhEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE3 MTFBQTdEQzYwMDQ5QjBCMEQ4ODQ4OTdFMDE1QjExNzFGMzdCOTAeFw0yNTA5MTYw NzM4NDVaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEU5Njk3OENGRjNCQTM5 NDVFN0VEQzM3NkFDQ0Y3N0Q4NTNBRjVEOUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD0oG2dR3szOf2qFvF9bfGJ5GNEtx7ACQTkMzfrpxuEsF1UBXrD 8IPRTqY/WPFoxFg5t6leLMIt0tkkQkULIYDm80MgYuO1qK61UhH7/dhZOO6Ugz+o xg6ywCCxvS/gHVqnB0GQRvuHdgAfYVti2zwtL/fa53irzbFyLPk7+PYIJ4aUjJGE eS/MmD7KNwN5Ntfz/0qSeGQwi7tP23PrWlGt1ezCeeEK4KHtySG4ug/WFCHpjN97 hxzMfII7WHKYo1jGgmhK+PldLC3ljz+ifG3JMrz1wlGcymV/lU/sqLMMD4BSlvsR f2jGIdLKT9nn2a5ggQWYM72g6/V3LNDRNC2xAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU6Wl4z/O6OUXn7cN2rM932FOvXZswHwYDVR0jBBgwFoAUKnEap9xgBJsLDYhI l+AVsRcfN7kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3 L0tuRWFwOXhnQkpzTERZaElsLUFWc1JjZk43ay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvS25FYXA5eGdCSnNMRFloSWwtQVZzUmNmTjdrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3LzZXbDR6X082T1VYbjdj TjJyTTkzMkZPdlhacy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAq8P8wDQYJKoZIhvcNAQELBQADggEBAIq8K531+o8VxWYw55rIEWMBGl2CE6MC WgmVjqolYC6BZzOvYJSHzByWGiw7/cCZfoBENBRpgZDzRR/KDwkFcy2xkf95KqOc L93mQ/mKBib8KZ6FcQGje8a9r9f52zAkB33Zt2BH60eh3CIKZfRJrt+w+1dLI/dM jFzvJOlO+kMu3HAdIggZXaw2D0nPVUaMRFdd9FQQ/FjgNLmn7RqXKCuySDqlAGaZ NhhnIdeiOyoIJwXYPgqvfcZG7veL6dyiekLp5BkftP3JY+WWkDvvzzhmAfCVxzmb YCCbtyeKZXWN2M45s4Lvdlm0Y9K6wZC1jFrvEDjhMiD+ZCL75BCzftI= -----END CERTIFICATE-----Generated at Sun Oct 19 16:11:44 2025 by rpki-client