$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/WETDBygKIurJfY7D1Ev_Bp3NGl4.roa File: WETDBygKIurJfY7D1Ev_Bp3NGl4.roa (raw, json) Hash identifier: xqhE8OA3G1EYOq9dOfLar1R5ZofAs2geYgaaHlsoATE= Subject key identifier: 58:44:C3:07:28:0A:22:EA:C9:7D:8E:C3:D4:4B:FF:06:9D:CD:1A:5E Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Certificate serial: 2185 Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/WETDBygKIurJfY7D1Ev_Bp3NGl4.roa Signing time: Fri 29 Aug 2025 09:05:26 +0000 ROA not before: Fri 29 Aug 2025 09:05:26 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 17621 IP address blocks: 113.31.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 06:34:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8581 (0x2185) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Validity Not Before: Aug 29 09:05:26 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=5844C307280A22EAC97D8EC3D44BFF069DCD1A5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:59:31:fa:7b:a0:f2:1e:20:5f:3d:e7:ad:b6: 27:07:82:90:84:64:1b:8c:0c:28:d4:c3:ff:c1:c1: 4b:85:0b:45:35:03:7f:30:37:44:6f:c1:5e:4a:c5: 18:d9:4c:1e:c8:1e:75:6c:20:08:d5:dc:71:9f:bb: 8b:e3:d8:ee:32:15:04:51:4c:ff:5f:3d:ab:45:f8: a2:9a:e7:e8:d0:29:ef:9d:76:46:14:22:27:39:a0: 63:40:b4:66:52:01:4e:b9:a6:26:e9:69:cb:29:af: 9e:49:8a:31:27:ff:72:f9:fe:a8:c3:2f:93:d4:99: 71:eb:04:ad:f9:3d:ca:80:8c:23:4d:02:59:e3:76: c6:aa:a1:90:6d:6a:0d:87:a4:27:da:80:6c:a7:b6: f5:8d:8a:1f:ab:5d:bb:2c:5f:57:12:f5:82:16:ff: 12:17:e4:e9:6b:45:96:60:da:cc:0c:70:3d:9a:47: 3e:57:61:1c:05:a7:17:d3:d8:77:ca:af:ba:a1:c6: 8c:05:6b:70:f0:df:93:18:41:80:98:8d:cf:ee:01: 34:28:85:2f:b2:72:a3:90:95:28:a4:5d:16:bc:a5: db:45:cd:74:ab:0e:d7:d9:b6:c4:ea:49:f0:f1:32: 8e:aa:a4:c3:48:cc:c6:d4:d5:79:91:b5:59:c9:06: 38:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:44:C3:07:28:0A:22:EA:C9:7D:8E:C3:D4:4B:FF:06:9D:CD:1A:5E X509v3 Authority Key Identifier: keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/WETDBygKIurJfY7D1Ev_Bp3NGl4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.31.144.0/20 Signature Algorithm: sha256WithRSAEncryption 16:d9:71:32:a8:2c:28:03:d4:4b:d3:ef:2c:f0:d1:70:17:fe: 93:e6:0a:57:6b:89:dd:f3:ed:4a:c0:74:57:bc:39:60:2a:cd: 70:87:75:aa:68:36:1d:21:b0:3e:df:97:6e:ab:a7:64:92:e0: 60:c1:1c:72:cb:1a:c5:83:5b:f7:dc:e6:b3:d9:f3:26:0f:40: ae:d4:bf:70:90:d4:9d:1b:09:ce:f7:36:fa:ca:20:d8:d0:23: a3:d7:c6:84:59:13:76:c9:d4:05:70:83:ba:db:8f:f5:f6:5e: 7b:bf:ac:6c:98:98:62:d5:94:f4:ea:98:71:c7:dd:47:fe:af: 14:5e:38:18:23:9d:ae:9e:12:a1:af:7b:b7:78:96:92:14:2e: 43:5f:6f:06:de:0f:a0:4a:53:cd:48:06:b5:f8:ef:bb:bf:e4: 41:ba:51:d6:a3:7d:73:64:84:c0:e2:fd:fd:d1:9d:1f:50:a4: 98:8f:6f:29:4a:58:c7:e1:f7:6a:af:f5:6b:55:f2:b5:7c:b2: 48:e7:c9:ee:6d:28:ba:61:4b:dc:0d:97:83:59:32:1d:42:2d: 98:d4:53:5a:7d:5d:9a:c5:35:4b:b0:04:1d:be:b0:90:a7:35: e8:00:c0:4e:09:6f:75:02:f0:13:61:e2:36:ce:ea:ba:0f:aa: e9:cb:bd:bd -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICIYUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE3 MTFBQTdEQzYwMDQ5QjBCMEQ4ODQ4OTdFMDE1QjExNzFGMzdCOTAeFw0yNTA4Mjkw OTA1MjZaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDU4NDRDMzA3MjgwQTIy RUFDOTdEOEVDM0Q0NEJGRjA2OURDRDFBNUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOWTH6e6DyHiBfPeetticHgpCEZBuMDCjUw//BwUuFC0U1A38w N0RvwV5KxRjZTB7IHnVsIAjV3HGfu4vj2O4yFQRRTP9fPatF+KKa5+jQKe+ddkYU Iic5oGNAtGZSAU65pibpacspr55JijEn/3L5/qjDL5PUmXHrBK35PcqAjCNNAlnj dsaqoZBtag2HpCfagGyntvWNih+rXbssX1cS9YIW/xIX5OlrRZZg2swMcD2aRz5X YRwFpxfT2HfKr7qhxowFa3Dw35MYQYCYjc/uATQohS+ycqOQlSikXRa8pdtFzXSr DtfZtsTqSfDxMo6qpMNIzMbU1XmRtVnJBjg3AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUWETDBygKIurJfY7D1Ev/Bp3NGl4wHwYDVR0jBBgwFoAUKnEap9xgBJsLDYhI l+AVsRcfN7kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3 L0tuRWFwOXhnQkpzTERZaElsLUFWc1JjZk43ay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvS25FYXA5eGdCSnNMRFloSWwtQVZzUmNmTjdrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3L1dFVERCeWdLSXVySmZZ N0QxRXZfQnAzTkdsNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BARxH5AwDQYJKoZIhvcNAQELBQADggEBABbZcTKoLCgD1EvT7yzw0XAX/pPmCldr id3z7UrAdFe8OWAqzXCHdapoNh0hsD7fl26rp2SS4GDBHHLLGsWDW/fc5rPZ8yYP QK7Uv3CQ1J0bCc73NvrKINjQI6PXxoRZE3bJ1AVwg7rbj/X2Xnu/rGyYmGLVlPTq mHHH3Uf+rxReOBgjna6eEqGve7d4lpIULkNfbwbeD6BKU81IBrX477u/5EG6Udaj fXNkhMDi/f3RnR9QpJiPbylKWMfh92qv9WtV8rV8skjnye5tKLphS9wNl4NZMh1C LZjUU1p9XZrFNUuwBB2+sJCnNegAwE4Jb3UC8BNh4jbO6roPqunLvb0= -----END CERTIFICATE-----Generated at Tue Sep 9 04:04:56 2025 by rpki-client