$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/Dq6MorLCipOKnYQpfS17ndgx9CA.roa File: Dq6MorLCipOKnYQpfS17ndgx9CA.roa (raw, json) Hash identifier: NDPz+T8hVjZmc7sBxIPDyEBrgav9wmUSzVURig4OlUs= Subject key identifier: 0E:AE:8C:A2:B2:C2:8A:93:8A:9D:84:29:7D:2D:7B:9D:D8:31:F4:20 Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Certificate serial: 2183 Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/Dq6MorLCipOKnYQpfS17ndgx9CA.roa Signing time: Fri 29 Aug 2025 09:05:26 +0000 ROA not before: Fri 29 Aug 2025 09:05:26 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 4811 IP address blocks: 113.31.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 01:34:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8579 (0x2183) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Validity Not Before: Aug 29 09:05:26 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=0EAE8CA2B2C28A938A9D84297D2D7B9DD831F420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9d:62:a0:a5:8b:bd:c7:9f:e2:f9:48:4e:de: 3a:b6:98:8e:a2:c9:80:fd:0d:36:9c:69:b4:b7:a0: 99:02:07:05:76:bc:ce:bc:3e:e1:d5:de:ea:44:39: 68:86:b0:d4:9c:94:9a:6b:7b:dd:f6:d0:9e:df:38: 77:a9:e4:5a:56:af:0e:d6:03:63:74:04:ac:9d:a4: fe:1c:59:50:37:53:31:26:fd:81:71:b8:78:62:a1: 20:4e:40:f6:d2:9d:9e:5e:7e:a2:d3:ed:97:01:ef: 68:e3:3a:41:4c:07:c1:98:91:70:b4:5f:41:3f:fe: 91:fa:25:4e:3b:b5:b8:5b:28:f1:fd:db:dd:f7:af: 84:96:3e:3d:aa:35:b5:1f:56:a8:df:db:ea:32:52: 60:25:1c:6d:c7:ad:a8:b6:1c:98:a4:c7:90:21:48: 2d:6f:80:c1:f4:6a:74:63:59:23:c8:c7:57:74:18: a7:a5:47:04:4b:95:79:dd:a4:cb:48:96:51:d9:0a: f2:34:ef:2f:1e:b7:64:43:eb:3b:97:68:bb:ab:a5: 4b:3b:4a:56:a9:7e:63:45:71:01:06:72:23:fd:a7: 5c:5b:52:05:39:c5:a4:0e:73:e4:81:08:b3:60:f8: 05:eb:84:eb:74:5b:85:2e:2f:04:a4:3f:98:15:1f: d3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:AE:8C:A2:B2:C2:8A:93:8A:9D:84:29:7D:2D:7B:9D:D8:31:F4:20 X509v3 Authority Key Identifier: keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/Dq6MorLCipOKnYQpfS17ndgx9CA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.31.112.0/20 Signature Algorithm: sha256WithRSAEncryption 30:19:4f:54:e0:c2:af:cf:94:f8:97:8d:56:dd:20:e2:db:54: 3a:5a:3d:87:01:75:96:1c:58:3b:9b:1d:84:64:41:f0:74:e3: 1d:0e:e6:62:7b:d4:b5:13:76:cd:08:fb:98:20:a2:4c:17:e5: 44:80:1a:fb:f3:5a:0f:fd:35:a6:99:b5:11:b4:41:99:38:cb: 80:b1:dc:bc:4d:dc:9e:6c:77:09:47:18:75:c9:0e:73:a5:6d: 42:31:ef:d4:62:30:80:d9:da:70:a5:d4:ca:19:5b:dd:e5:3c: b6:28:95:cb:83:4c:c8:a2:96:4f:b4:20:2f:c7:75:e2:e3:4e: c4:dd:7f:3d:32:f7:cf:94:b5:7a:90:2d:c9:0f:75:94:05:fe: e6:7d:cf:ed:ef:e1:34:09:3a:b8:0f:ee:f9:be:e6:2d:33:f5: 6d:b9:e3:e0:22:21:4b:42:40:c8:3b:dc:67:8a:87:3d:f7:50: ed:d2:54:2f:0d:b7:bc:a9:41:db:9b:8e:02:ef:3a:b6:35:65: a1:69:ea:a4:5a:32:34:5a:17:ed:e0:44:49:34:49:60:0e:d5: 43:3d:be:1f:00:c2:61:20:83:9b:b2:65:99:2c:f9:1a:66:a3: 1a:b4:dd:78:6e:2a:61:12:69:b0:33:f6:8d:65:76:2d:f3:12: 71:ae:b9:2e -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICIYMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE3 MTFBQTdEQzYwMDQ5QjBCMEQ4ODQ4OTdFMDE1QjExNzFGMzdCOTAeFw0yNTA4Mjkw OTA1MjZaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDBFQUU4Q0EyQjJDMjhB OTM4QTlEODQyOTdEMkQ3QjlERDgzMUY0MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnnWKgpYu9x5/i+UhO3jq2mI6iyYD9DTacabS3oJkCBwV2vM68 PuHV3upEOWiGsNSclJpre9320J7fOHep5FpWrw7WA2N0BKydpP4cWVA3UzEm/YFx uHhioSBOQPbSnZ5efqLT7ZcB72jjOkFMB8GYkXC0X0E//pH6JU47tbhbKPH92933 r4SWPj2qNbUfVqjf2+oyUmAlHG3Hrai2HJikx5AhSC1vgMH0anRjWSPIx1d0GKel RwRLlXndpMtIllHZCvI07y8et2RD6zuXaLurpUs7SlapfmNFcQEGciP9p1xbUgU5 xaQOc+SBCLNg+AXrhOt0W4UuLwSkP5gVH9MjAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUDq6MorLCipOKnYQpfS17ndgx9CAwHwYDVR0jBBgwFoAUKnEap9xgBJsLDYhI l+AVsRcfN7kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3 L0tuRWFwOXhnQkpzTERZaElsLUFWc1JjZk43ay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvS25FYXA5eGdCSnNMRFloSWwtQVZzUmNmTjdrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3L0RxNk1vckxDaXBPS25Z UXBmUzE3bmRneDlDQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BARxH3AwDQYJKoZIhvcNAQELBQADggEBADAZT1Tgwq/PlPiXjVbdIOLbVDpaPYcB dZYcWDubHYRkQfB04x0O5mJ71LUTds0I+5ggokwX5USAGvvzWg/9NaaZtRG0QZk4 y4Cx3LxN3J5sdwlHGHXJDnOlbUIx79RiMIDZ2nCl1MoZW93lPLYolcuDTMiilk+0 IC/HdeLjTsTdfz0y98+UtXqQLckPdZQF/uZ9z+3v4TQJOrgP7vm+5i0z9W254+Ai IUtCQMg73GeKhz33UO3SVC8Nt7ypQdubjgLvOrY1ZaFp6qRaMjRaF+3gREk0SWAO 1UM9vh8AwmEgg5uyZZks+Rpmoxq03XhuKmESabAz9o1ldi3zEnGuuS4= -----END CERTIFICATE-----Generated at Sun Sep 7 22:23:44 2025 by rpki-client