$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/Qy504pZVedzINjVt8wTSqMsIGv4.roa File: Qy504pZVedzINjVt8wTSqMsIGv4.roa (raw, json) Hash identifier: dsWY2JAdJ+dTwNNFXM6zZUpv6BQ7j8xvdRJGz3OOvpI= Subject key identifier: 43:2E:74:E2:96:55:79:DC:C8:36:35:6D:F3:04:D2:A8:CB:08:1A:FE Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Certificate serial: 219D Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/Qy504pZVedzINjVt8wTSqMsIGv4.roa Signing time: Fri 29 Aug 2025 09:05:31 +0000 ROA not before: Fri 29 Aug 2025 09:05:31 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 135377 IP address blocks: 106.75.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Sep 2025 10:03:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8605 (0x219d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Validity Not Before: Aug 29 09:05:31 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=432E74E2965579DCC836356DF304D2A8CB081AFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a5:84:ed:b9:a8:a8:19:fa:c9:0e:08:e2:96: 3b:8d:42:4c:74:07:2a:e1:24:dd:a4:43:9b:67:15: 17:34:9b:f0:f1:a0:8c:3c:a3:85:bf:2d:23:15:96: f0:45:1e:25:4a:df:80:8a:5b:30:e9:87:40:28:af: 08:71:e3:cd:a1:49:76:22:fc:b8:2b:91:90:95:e8: db:04:ce:9a:39:c1:5d:81:ab:f4:44:10:8f:e6:45: ba:4c:64:96:c8:74:3e:b7:21:ac:75:3d:05:9b:c7: 98:91:12:46:28:6c:2b:59:70:df:64:33:b9:d7:36: 82:55:5a:da:90:f4:1e:da:5a:39:85:90:13:6f:94: 77:89:cd:2d:8b:ba:2b:06:aa:9f:d3:1e:de:e6:dd: 60:e4:36:03:af:f2:2a:50:48:f4:70:01:98:7c:75: 42:65:ce:df:0d:71:78:db:79:13:48:60:d0:70:f1: ea:92:bb:81:d7:7a:72:c0:25:65:3a:c4:78:10:2f: 3d:97:9b:ba:bb:7c:b8:17:6f:86:d3:68:f3:dd:b2: b2:8a:3b:df:8e:06:31:9c:6d:c5:29:4b:ad:83:4a: 60:2a:cd:5d:d4:f6:38:dc:8e:40:a6:78:ce:67:23: e0:15:d5:72:f3:78:86:53:26:27:3d:f9:d2:29:4c: 71:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:2E:74:E2:96:55:79:DC:C8:36:35:6D:F3:04:D2:A8:CB:08:1A:FE X509v3 Authority Key Identifier: keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/Qy504pZVedzINjVt8wTSqMsIGv4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.75.192.0/24 Signature Algorithm: sha256WithRSAEncryption a3:62:f3:97:35:84:f1:25:b6:03:46:cb:0c:70:31:ce:0a:d7: 6a:2d:2d:77:4a:b1:10:c6:f3:7f:15:60:00:e6:6f:3c:bc:8e: a8:ec:2c:4f:11:d8:cb:8b:61:b8:39:d2:aa:ce:f7:b8:21:1c: 04:70:79:1d:80:45:36:ce:46:f6:52:3d:ab:40:6d:d8:49:54: 4a:9e:28:22:84:fb:32:ba:86:fd:f1:0b:ae:6e:49:d8:b4:3b: c8:27:85:82:64:4d:72:c4:00:b4:7b:d0:04:7f:8a:ca:37:9d: 9d:37:0d:52:06:ad:6f:85:8f:dd:da:9d:bb:f1:31:26:71:b5: c7:78:dc:52:5f:36:a1:95:29:75:83:fe:2d:41:9e:12:4c:1f: 7a:2a:c5:ad:c3:84:1d:2c:1c:50:c0:50:b7:d7:f1:ef:37:b9: 1c:69:49:08:32:2a:0f:42:2f:b1:30:60:5c:8c:af:30:79:a8: bc:29:0a:58:c7:e6:25:c0:ec:21:17:c3:f2:ed:f0:e6:cc:6e: 8f:8c:e6:2d:d9:f6:5c:ed:81:fa:d1:e8:81:f2:a2:e6:85:56: dd:74:95:75:48:76:99:6a:c8:8b:03:6d:b9:cf:06:f3:76:f8: db:d9:30:0b:20:08:b0:85:8f:6f:f8:a9:c4:15:77:96:14:b9: 91:e3:78:b6 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICIZ0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE3 MTFBQTdEQzYwMDQ5QjBCMEQ4ODQ4OTdFMDE1QjExNzFGMzdCOTAeFw0yNTA4Mjkw OTA1MzFaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDQzMkU3NEUyOTY1NTc5 RENDODM2MzU2REYzMDREMkE4Q0IwODFBRkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5pYTtuaioGfrJDgjiljuNQkx0ByrhJN2kQ5tnFRc0m/DxoIw8 o4W/LSMVlvBFHiVK34CKWzDph0Aorwhx482hSXYi/LgrkZCV6NsEzpo5wV2Bq/RE EI/mRbpMZJbIdD63Iax1PQWbx5iREkYobCtZcN9kM7nXNoJVWtqQ9B7aWjmFkBNv lHeJzS2LuisGqp/THt7m3WDkNgOv8ipQSPRwAZh8dUJlzt8NcXjbeRNIYNBw8eqS u4HXenLAJWU6xHgQLz2Xm7q7fLgXb4bTaPPdsrKKO9+OBjGcbcUpS62DSmAqzV3U 9jjcjkCmeM5nI+AV1XLzeIZTJic9+dIpTHGrAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUQy504pZVedzINjVt8wTSqMsIGv4wHwYDVR0jBBgwFoAUKnEap9xgBJsLDYhI l+AVsRcfN7kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3 L0tuRWFwOXhnQkpzTERZaElsLUFWc1JjZk43ay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvS25FYXA5eGdCSnNMRFloSWwtQVZzUmNmTjdrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3L1F5NTA0cFpWZWR6SU5q VnQ4d1RTcU1zSUd2NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABqS8AwDQYJKoZIhvcNAQELBQADggEBAKNi85c1hPEltgNGywxwMc4K12otLXdK sRDG838VYADmbzy8jqjsLE8R2MuLYbg50qrO97ghHARweR2ARTbORvZSPatAbdhJ VEqeKCKE+zK6hv3xC65uSdi0O8gnhYJkTXLEALR70AR/iso3nZ03DVIGrW+Fj93a nbvxMSZxtcd43FJfNqGVKXWD/i1BnhJMH3oqxa3DhB0sHFDAULfX8e83uRxpSQgy Kg9CL7EwYFyMrzB5qLwpCljH5iXA7CEXw/Lt8ObMbo+M5i3Z9lztgfrR6IHyouaF Vt10lXVIdplqyIsDbbnPBvN2+NvZMAsgCLCFj2/4qcQVd5YUuZHjeLY= -----END CERTIFICATE-----Generated at Fri Sep 5 09:15:18 2025 by rpki-client