$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/JLSEv5Lp1u5CrJyRdKsTTtLC0FA.roa File: JLSEv5Lp1u5CrJyRdKsTTtLC0FA.roa (raw, json) Hash identifier: Z8mKn+uEB+cHtGm5oLczWMqNyMQSxh50HZ+t3I4uYN0= Subject key identifier: 24:B4:84:BF:92:E9:D6:EE:42:AC:9C:91:74:AB:13:4E:D2:C2:D0:50 Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Certificate serial: 218C Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/JLSEv5Lp1u5CrJyRdKsTTtLC0FA.roa Signing time: Fri 29 Aug 2025 09:05:27 +0000 ROA not before: Fri 29 Aug 2025 09:05:27 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 4808 IP address blocks: 106.75.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 05:34:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8588 (0x218c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Validity Not Before: Aug 29 09:05:27 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=24B484BF92E9D6EE42AC9C9174AB134ED2C2D050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:76:58:da:41:a0:1d:6d:98:30:5f:e5:15:d7: 66:a0:a7:a5:3a:77:89:0a:20:0b:b3:9d:68:db:8a: f8:d1:aa:06:05:2f:94:ce:44:2b:85:3d:56:14:37: 87:35:dd:48:36:f4:87:3c:ab:4c:f1:84:c9:33:b6: 9a:32:f2:74:47:94:05:8f:97:e6:ab:70:e7:6b:3c: bb:f7:3f:8b:06:5b:b5:71:fe:1a:67:8f:44:5e:09: 32:23:dd:a4:5b:c3:b3:73:ad:bf:aa:de:8d:dd:f5: 54:42:73:5b:d5:bd:a3:e1:44:c0:04:91:45:62:37: 7b:35:6e:c4:ff:6b:9e:a2:e5:bb:8b:5a:bb:c5:27: 29:a8:ad:28:21:d7:af:c9:4a:53:2c:0f:a9:39:eb: 92:a2:0d:f9:c7:54:d5:0f:3f:15:68:4d:b9:eb:23: bb:62:a7:76:3f:0c:95:39:ee:41:6c:14:89:a1:bf: 73:ac:7b:e8:d0:0b:ba:b7:5c:95:91:f4:4d:69:8d: fc:c7:1b:ee:44:d5:fd:46:a4:79:6f:0b:db:44:d6: f0:13:3c:3f:71:e2:77:9b:56:82:99:b8:7b:2b:65: a1:ff:54:35:58:a3:de:5f:2f:37:ea:ce:97:fe:0d: 6c:45:8e:a6:f9:e4:08:4e:25:51:4a:97:83:d1:8a: 76:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:B4:84:BF:92:E9:D6:EE:42:AC:9C:91:74:AB:13:4E:D2:C2:D0:50 X509v3 Authority Key Identifier: keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/JLSEv5Lp1u5CrJyRdKsTTtLC0FA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.75.64.0/19 Signature Algorithm: sha256WithRSAEncryption 10:eb:05:a5:e8:ac:da:b3:5c:ab:d0:01:91:be:03:6d:3d:74: 72:c6:8c:74:fe:db:a7:12:a7:2f:98:43:85:47:b1:f2:df:d9: ac:7a:49:4c:90:3b:2b:79:07:b4:81:69:65:69:da:86:a7:15: 98:b9:c7:9e:b3:71:50:8c:87:90:6b:67:05:8c:8d:a1:59:32: e3:cb:19:56:38:f6:e8:25:8c:07:af:9c:e7:af:fa:05:51:ed: 23:e6:e2:bd:1b:16:14:00:13:04:e8:a4:a9:9c:1f:30:12:d6: 53:ea:91:f0:37:ce:dd:a1:04:0d:8d:11:1c:1e:ef:1a:fd:8f: cc:86:d1:1e:39:81:60:59:fb:de:8e:98:23:24:d7:92:fb:40: 84:40:c3:a9:19:e4:0a:b7:8a:51:df:47:a4:6e:4a:95:34:ac: b0:68:d1:af:95:b6:f9:4e:ef:9b:68:cd:f7:ae:75:9c:1b:bf: 07:cf:c5:a7:3b:3c:e1:be:c3:18:d1:38:35:5e:58:52:33:15: d4:4b:91:a5:a1:68:1f:0d:10:bd:22:57:b2:8f:d2:cc:c2:77: 5b:d7:ed:2e:5d:87:34:1b:fe:4b:bc:96:03:d2:7b:08:11:e7: 5b:c8:a9:55:35:de:b0:31:34:06:59:47:15:28:af:bf:a9:21: d7:5c:35:39 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICIYwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE3 MTFBQTdEQzYwMDQ5QjBCMEQ4ODQ4OTdFMDE1QjExNzFGMzdCOTAeFw0yNTA4Mjkw OTA1MjdaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDI0QjQ4NEJGOTJFOUQ2 RUU0MkFDOUM5MTc0QUIxMzRFRDJDMkQwNTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5dljaQaAdbZgwX+UV12agp6U6d4kKIAuznWjbivjRqgYFL5TO RCuFPVYUN4c13Ug29Ic8q0zxhMkztpoy8nRHlAWPl+arcOdrPLv3P4sGW7Vx/hpn j0ReCTIj3aRbw7Nzrb+q3o3d9VRCc1vVvaPhRMAEkUViN3s1bsT/a56i5buLWrvF JymorSgh16/JSlMsD6k565KiDfnHVNUPPxVoTbnrI7tip3Y/DJU57kFsFImhv3Os e+jQC7q3XJWR9E1pjfzHG+5E1f1GpHlvC9tE1vATPD9x4nebVoKZuHsrZaH/VDVY o95fLzfqzpf+DWxFjqb55AhOJVFKl4PRinaTAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUJLSEv5Lp1u5CrJyRdKsTTtLC0FAwHwYDVR0jBBgwFoAUKnEap9xgBJsLDYhI l+AVsRcfN7kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3 L0tuRWFwOXhnQkpzTERZaElsLUFWc1JjZk43ay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvS25FYXA5eGdCSnNMRFloSWwtQVZzUmNmTjdrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3L0pMU0V2NUxwMXU1Q3JK eVJkS3NUVHRMQzBGQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAVqS0AwDQYJKoZIhvcNAQELBQADggEBABDrBaXorNqzXKvQAZG+A209dHLGjHT+ 26cSpy+YQ4VHsfLf2ax6SUyQOyt5B7SBaWVp2oanFZi5x56zcVCMh5BrZwWMjaFZ MuPLGVY49ugljAevnOev+gVR7SPm4r0bFhQAEwTopKmcHzAS1lPqkfA3zt2hBA2N ERwe7xr9j8yG0R45gWBZ+96OmCMk15L7QIRAw6kZ5Aq3ilHfR6RuSpU0rLBo0a+V tvlO75tozfeudZwbvwfPxac7POG+wxjRODVeWFIzFdRLkaWhaB8NEL0iV7KP0szC d1vX7S5dhzQb/ku8lgPSewgR51vIqVU13rAxNAZZRxUor7+pIddcNTk= -----END CERTIFICATE-----Generated at Sun Sep 7 03:34:42 2025 by rpki-client