$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/EVvneQesZjtsbV7MJITBn9Y1axc.roa File: EVvneQesZjtsbV7MJITBn9Y1axc.roa (raw, json) Hash identifier: dmsonGDtLCjNu3RAuAMmyUKmzP/CDVQrXex/lUS7/Mw= Subject key identifier: 11:5B:E7:79:07:AC:66:3B:6C:6D:5E:CC:24:84:C1:9F:D6:35:6B:17 Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Certificate serial: 2191 Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/EVvneQesZjtsbV7MJITBn9Y1axc.roa Signing time: Fri 29 Aug 2025 09:05:28 +0000 ROA not before: Fri 29 Aug 2025 09:05:28 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 23724 IP address blocks: 117.50.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 16:34:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8593 (0x2191) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Validity Not Before: Aug 29 09:05:28 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=115BE77907AC663B6C6D5ECC2484C19FD6356B17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e2:a6:68:28:ac:f3:73:1f:e0:e5:b4:dd:65: c2:1d:d0:dd:f1:67:fd:8a:23:bb:43:d8:25:c6:d7: e8:72:40:56:91:cf:6c:04:00:e3:81:7b:09:e0:92: 2f:cf:3e:56:02:5a:cb:27:da:3e:60:99:74:c4:9a: 56:7e:0c:02:b0:ab:33:bb:67:71:c4:c5:d8:23:bb: e0:f7:f5:9f:d3:d6:16:e1:06:0b:d9:4b:4c:b0:87: 6c:9f:e3:9f:fc:c8:c3:ab:e6:39:1b:89:3e:75:18: 14:ac:72:b7:4e:86:c3:69:b5:aa:6b:95:eb:0f:c6: 48:b5:62:2d:da:8d:ee:54:58:97:d1:a4:22:70:fd: 0f:87:4e:f3:c6:57:49:8b:f3:f1:30:22:b9:fa:c4: b4:eb:12:0e:a1:38:01:9f:ea:1e:ae:40:72:5a:57: 6e:a9:3f:7b:08:c1:e4:c2:fc:f1:e7:c9:68:72:71: fc:02:da:3a:f8:52:20:ca:1f:99:2f:1a:a2:08:4c: cc:1d:d5:6b:87:0a:be:a2:27:c8:4f:26:a7:b9:42: bc:44:c3:78:04:4b:6e:1c:2e:17:1b:14:1d:93:6e: ee:47:79:85:01:b6:3a:21:c5:f9:ff:f8:40:10:28: 1a:a7:30:5f:80:e6:3c:ab:ab:17:b5:4b:51:e8:e4: a0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:5B:E7:79:07:AC:66:3B:6C:6D:5E:CC:24:84:C1:9F:D6:35:6B:17 X509v3 Authority Key Identifier: keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/EVvneQesZjtsbV7MJITBn9Y1axc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 117.50.32.0/19 Signature Algorithm: sha256WithRSAEncryption 69:fb:42:7c:14:97:c5:25:df:37:76:3f:2f:49:8c:88:8a:65: 4a:ab:7a:e5:ba:40:1a:33:00:d5:0e:e0:28:71:fe:ac:e2:2d: 1f:af:f1:c0:49:15:99:01:55:0e:fd:c9:9c:d1:db:b3:70:db: af:e4:7c:a6:36:62:d6:c9:e5:22:1c:87:ab:66:45:08:d9:fb: f0:71:cc:2a:64:61:6c:66:e5:94:1f:38:e5:fd:78:11:71:d0: b4:cb:f0:5d:fc:45:0a:e4:bc:35:b3:0b:c1:0b:ac:b8:b5:fc: b1:ec:4e:eb:fd:a4:8c:df:e3:e5:a0:55:13:ad:1f:8a:e7:cb: 66:bc:29:d9:0a:92:9d:59:86:f7:4d:76:e4:ff:af:9a:93:70: c1:95:56:9b:ca:65:81:d2:bb:61:ba:ea:64:4a:dc:0a:5e:09: 46:24:77:24:33:0a:79:3f:48:f2:29:47:a7:b0:38:06:24:30: 6d:9d:f9:73:57:d5:db:08:5a:e7:88:de:d5:0c:e7:e5:fd:97: 7e:83:ef:e2:f0:4f:a7:83:0a:1f:68:df:a5:6c:29:4f:97:19: 32:79:69:1b:52:e2:80:cc:d0:b5:03:bf:21:d5:30:9f:5c:cf: ce:2a:aa:78:5c:8c:d0:8c:78:e1:0b:e6:ed:d9:b2:5c:70:56: 17:e2:cf:b1 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICIZEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE3 MTFBQTdEQzYwMDQ5QjBCMEQ4ODQ4OTdFMDE1QjExNzFGMzdCOTAeFw0yNTA4Mjkw OTA1MjhaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDExNUJFNzc5MDdBQzY2 M0I2QzZENUVDQzI0ODRDMTlGRDYzNTZCMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDI4qZoKKzzcx/g5bTdZcId0N3xZ/2KI7tD2CXG1+hyQFaRz2wE AOOBewngki/PPlYCWssn2j5gmXTEmlZ+DAKwqzO7Z3HExdgju+D39Z/T1hbhBgvZ S0ywh2yf45/8yMOr5jkbiT51GBSscrdOhsNptaprlesPxki1Yi3aje5UWJfRpCJw /Q+HTvPGV0mL8/EwIrn6xLTrEg6hOAGf6h6uQHJaV26pP3sIweTC/PHnyWhycfwC 2jr4UiDKH5kvGqIITMwd1WuHCr6iJ8hPJqe5QrxEw3gES24cLhcbFB2Tbu5HeYUB tjohxfn/+EAQKBqnMF+A5jyrqxe1S1Ho5KAtAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUEVvneQesZjtsbV7MJITBn9Y1axcwHwYDVR0jBBgwFoAUKnEap9xgBJsLDYhI l+AVsRcfN7kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3 L0tuRWFwOXhnQkpzTERZaElsLUFWc1JjZk43ay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvS25FYXA5eGdCSnNMRFloSWwtQVZzUmNmTjdrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3L0VWdm5lUWVzWmp0c2JW N01KSVRCbjlZMWF4Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAV1MiAwDQYJKoZIhvcNAQELBQADggEBAGn7QnwUl8Ul3zd2Py9JjIiKZUqreuW6 QBozANUO4Chx/qziLR+v8cBJFZkBVQ79yZzR27Nw26/kfKY2YtbJ5SIch6tmRQjZ +/BxzCpkYWxm5ZQfOOX9eBFx0LTL8F38RQrkvDWzC8ELrLi1/LHsTuv9pIzf4+Wg VROtH4rny2a8KdkKkp1ZhvdNduT/r5qTcMGVVpvKZYHSu2G66mRK3ApeCUYkdyQz Cnk/SPIpR6ewOAYkMG2d+XNX1dsIWueI3tUM5+X9l36D7+LwT6eDCh9o36VsKU+X GTJ5aRtS4oDM0LUDvyHVMJ9cz84qqnhcjNCMeOEL5u3ZslxwVhfiz7E= -----END CERTIFICATE-----Generated at Mon Sep 8 13:35:12 2025 by rpki-client