$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/YvZBxBfk3wOVXsxS1OX9snBDs3g.roa File: YvZBxBfk3wOVXsxS1OX9snBDs3g.roa (raw, json) Hash identifier: GajScPbAJIl0OLPy2by5c/uZ4AI1QjZ2q2nW+2yy0AU= Subject key identifier: 62:F6:41:C4:17:E4:DF:03:95:5E:CC:52:D4:E5:FD:B2:70:43:B3:78 Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Certificate serial: 21A9 Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/YvZBxBfk3wOVXsxS1OX9snBDs3g.roa Signing time: Fri 29 Aug 2025 09:05:34 +0000 ROA not before: Fri 29 Aug 2025 09:05:34 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 4808 IP address blocks: 106.75.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 05:34:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8617 (0x21a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Validity Not Before: Aug 29 09:05:34 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=62F641C417E4DF03955ECC52D4E5FDB27043B378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:20:e3:43:95:19:a1:23:89:43:02:bc:5e:24: 74:a4:c5:28:27:f0:44:4d:4a:38:23:8e:16:04:d1: 53:08:6d:80:b3:2a:cd:42:3e:c2:69:cb:f2:79:cf: cf:83:d9:87:fb:db:05:07:8d:4f:ca:0f:21:16:c8: 40:86:5d:ba:b8:45:8f:30:88:f8:ce:57:29:b7:6b: 77:27:fd:6f:a4:0f:dd:7a:d9:83:db:a5:ec:f3:82: 64:b9:9a:25:4a:b5:9c:b8:88:d5:03:d9:9b:9e:be: 78:47:e8:74:55:3e:dc:95:fb:1e:a9:73:72:9a:c0: e2:a9:c0:10:bf:b9:c2:e3:f9:9f:f2:84:a3:ca:82: 63:51:a9:06:44:7c:41:3d:d6:b3:4a:20:04:9f:a9: 3c:68:c7:75:3a:43:e6:04:62:fa:c4:d9:cd:b3:ee: 06:cc:41:de:f9:06:c4:bd:95:38:6a:5f:83:56:d5: ae:4f:13:26:de:41:dd:75:11:af:94:26:59:2b:56: 97:b2:f5:85:a9:bf:b3:47:ac:19:15:b9:72:69:11: dc:6a:5a:e7:4b:17:17:18:83:48:99:95:73:1b:e7: b3:9a:ba:1b:76:1c:93:01:67:47:47:ac:e9:0c:4e: 14:75:d7:24:25:5c:e9:6a:90:3c:32:38:71:2a:f9: 91:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:F6:41:C4:17:E4:DF:03:95:5E:CC:52:D4:E5:FD:B2:70:43:B3:78 X509v3 Authority Key Identifier: keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/YvZBxBfk3wOVXsxS1OX9snBDs3g.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.75.96.0/19 Signature Algorithm: sha256WithRSAEncryption 0b:cb:a9:9d:03:72:50:b4:7d:df:61:b0:ed:62:6b:f3:01:47: e7:d7:67:d9:c7:b7:83:0f:8c:fa:f2:5b:03:02:30:ed:d2:45: 73:4d:b2:88:4e:2f:a2:d2:d8:1c:11:1c:6c:bb:69:6f:29:ab: 23:c2:48:74:10:a5:34:09:cb:78:f4:fd:b9:00:de:9f:38:ff: 2f:7c:18:42:b6:04:ce:62:f7:fd:6b:97:45:98:d6:a3:87:bc: c0:8a:5d:9a:ed:63:c1:4a:89:cd:a3:e8:04:d1:3f:fd:6f:3d: f7:82:6a:ba:dd:ea:3b:a1:a4:49:4a:8b:a8:e5:b0:1c:17:29: 4a:78:19:ba:56:b1:db:3a:40:fa:f1:3c:6b:f6:23:99:7c:99: 8d:f1:37:b8:c3:be:1c:aa:17:b4:82:8d:c5:54:76:a5:c1:47: 5a:20:30:b2:2d:b6:84:2e:9b:dd:14:20:93:74:b0:f6:03:bb: cc:33:c0:c4:ce:9e:e7:aa:33:4e:28:10:c1:08:68:fb:91:21: 06:5f:90:b2:c5:e9:29:73:72:e1:9a:f3:68:19:db:14:56:51: cc:a1:de:32:00:4a:23:6a:b7:ad:c6:6d:11:05:40:49:b6:08: ca:38:51:ac:50:ff:a1:30:d2:d4:87:23:50:ab:77:e8:00:d7: 39:f9:d8:32 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICIakwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE3 MTFBQTdEQzYwMDQ5QjBCMEQ4ODQ4OTdFMDE1QjExNzFGMzdCOTAeFw0yNTA4Mjkw OTA1MzRaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDYyRjY0MUM0MTdFNERG MDM5NTVFQ0M1MkQ0RTVGREIyNzA0M0IzNzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDyIONDlRmhI4lDArxeJHSkxSgn8ERNSjgjjhYE0VMIbYCzKs1C PsJpy/J5z8+D2Yf72wUHjU/KDyEWyECGXbq4RY8wiPjOVym3a3cn/W+kD9162YPb pezzgmS5miVKtZy4iNUD2ZuevnhH6HRVPtyV+x6pc3KawOKpwBC/ucLj+Z/yhKPK gmNRqQZEfEE91rNKIASfqTxox3U6Q+YEYvrE2c2z7gbMQd75BsS9lThqX4NW1a5P EybeQd11Ea+UJlkrVpey9YWpv7NHrBkVuXJpEdxqWudLFxcYg0iZlXMb57Oauht2 HJMBZ0dHrOkMThR11yQlXOlqkDwyOHEq+ZHnAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUYvZBxBfk3wOVXsxS1OX9snBDs3gwHwYDVR0jBBgwFoAUKnEap9xgBJsLDYhI l+AVsRcfN7kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3 L0tuRWFwOXhnQkpzTERZaElsLUFWc1JjZk43ay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvS25FYXA5eGdCSnNMRFloSWwtQVZzUmNmTjdrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3L1l2WkJ4QmZrM3dPVlhz eFMxT1g5c25CRHMzZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAVqS2AwDQYJKoZIhvcNAQELBQADggEBAAvLqZ0DclC0fd9hsO1ia/MBR+fXZ9nH t4MPjPryWwMCMO3SRXNNsohOL6LS2BwRHGy7aW8pqyPCSHQQpTQJy3j0/bkA3p84 /y98GEK2BM5i9/1rl0WY1qOHvMCKXZrtY8FKic2j6ATRP/1vPfeCarrd6juhpElK i6jlsBwXKUp4GbpWsds6QPrxPGv2I5l8mY3xN7jDvhyqF7SCjcVUdqXBR1ogMLIt toQum90UIJN0sPYDu8wzwMTOnueqM04oEMEIaPuRIQZfkLLF6SlzcuGa82gZ2xRW Ucyh3jIASiNqt63GbREFQEm2CMo4UaxQ/6Ew0tSHI1Crd+gA1zn52DI= -----END CERTIFICATE-----Generated at Sun Sep 7 03:30:30 2025 by rpki-client