$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/bTnJD_L09Yienb5nIoWnEZW8KuE.roa File: bTnJD_L09Yienb5nIoWnEZW8KuE.roa (raw, json) Hash identifier: 8PoGbCLaBMjH7P22BLgNdb1v7m97r1ixFEX+R5YAIuo= Subject key identifier: 6D:39:C9:0F:F2:F4:F5:88:9E:9D:BE:67:22:85:A7:11:95:BC:2A:E1 Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Certificate serial: 2174 Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/bTnJD_L09Yienb5nIoWnEZW8KuE.roa Signing time: Fri 29 Aug 2025 09:05:22 +0000 ROA not before: Fri 29 Aug 2025 09:05:22 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 4811 IP address blocks: 106.75.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 01:34:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8564 (0x2174) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Validity Not Before: Aug 29 09:05:22 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=6D39C90FF2F4F5889E9DBE672285A71195BC2AE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e8:61:81:90:48:9d:7f:24:52:35:d5:1b:00: 1e:da:09:6b:c9:24:b4:a7:0c:15:87:7b:48:95:47: 91:c6:ab:e5:4b:10:44:6e:af:ba:f8:ad:09:e8:cb: 52:ac:cc:09:a3:4b:aa:14:d0:18:32:8a:68:0b:fb: 75:32:a8:fb:86:43:e6:08:09:f2:95:1d:5f:fe:6c: 4d:a8:c5:80:6d:00:87:3e:1f:9d:c1:92:70:41:73: 3f:95:66:28:49:fd:40:89:32:29:c7:89:2b:61:97: 61:57:79:e8:3d:3a:c5:f9:4e:49:d9:70:18:5a:c6: ce:d7:4a:ba:62:69:bc:50:47:72:7f:a3:3a:3f:76: 0e:d0:8c:63:5d:41:cf:b1:85:19:f9:08:4d:93:c1: f4:a8:39:30:12:2e:71:fa:e7:48:e5:98:b6:96:ae: e0:2b:38:c3:20:39:8d:56:e4:e2:8b:3d:76:39:91: 86:2d:89:40:7a:af:ea:1a:98:82:6f:d9:f3:87:42: c5:4f:a4:85:ed:19:a0:ee:37:a1:14:3a:4e:fc:45: 7a:95:89:27:9e:db:62:78:cd:d8:e1:1b:04:c8:50: 0e:4c:38:dc:bb:6c:90:f3:fa:84:1f:fe:82:dc:e4: 6b:11:78:71:43:db:21:b2:47:1a:d1:6e:22:46:e5: 9a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:39:C9:0F:F2:F4:F5:88:9E:9D:BE:67:22:85:A7:11:95:BC:2A:E1 X509v3 Authority Key Identifier: keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/bTnJD_L09Yienb5nIoWnEZW8KuE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.75.208.0/20 Signature Algorithm: sha256WithRSAEncryption 8f:fc:c1:dd:37:18:d4:78:a7:3d:83:ba:2b:e5:5f:7c:87:50: 1a:bd:8f:59:7d:1a:c5:08:be:33:14:40:b3:29:2f:bd:b8:ab: 8d:35:a3:1a:32:04:97:7f:a5:f0:90:18:35:82:87:09:0e:d0: 0f:12:a9:cd:0e:db:33:8f:da:8a:5f:4f:64:2e:66:f6:56:3b: 17:4f:25:b8:ce:c1:0d:88:2a:f5:d0:d8:e1:8e:c5:79:2b:fc: a1:f7:ed:95:0e:3f:00:84:89:b4:ee:01:6f:e0:73:20:d4:a2: 6b:40:18:6a:5e:b1:35:c0:7b:9e:e5:10:2b:73:9f:ee:2d:b2: 7a:eb:05:9b:d6:92:00:b6:c3:8c:0f:e5:e4:e5:0d:ee:36:2b: 86:c9:f3:0c:89:43:cc:39:49:37:5c:37:43:4e:1b:39:c2:78: f7:7d:18:b9:5c:23:df:30:6d:ad:6c:a3:63:ce:b7:e3:e8:82: 02:9e:29:5e:35:62:c7:cb:55:8b:c5:c9:27:88:20:de:d7:ec: 03:c7:2e:75:59:69:ad:16:c0:08:10:ba:48:05:19:71:db:9d: 06:be:d2:bb:c2:8d:4b:4d:2c:5b:d5:49:cc:22:cd:bd:97:82: 70:e0:3e:85:6b:03:66:b3:1c:4b:f3:29:f1:70:16:3f:8d:1a: b7:29:d5:d1 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICIXQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE3 MTFBQTdEQzYwMDQ5QjBCMEQ4ODQ4OTdFMDE1QjExNzFGMzdCOTAeFw0yNTA4Mjkw OTA1MjJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDZEMzlDOTBGRjJGNEY1 ODg5RTlEQkU2NzIyODVBNzExOTVCQzJBRTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDX6GGBkEidfyRSNdUbAB7aCWvJJLSnDBWHe0iVR5HGq+VLEERu r7r4rQnoy1KszAmjS6oU0BgyimgL+3UyqPuGQ+YICfKVHV/+bE2oxYBtAIc+H53B knBBcz+VZihJ/UCJMinHiSthl2FXeeg9OsX5TknZcBhaxs7XSrpiabxQR3J/ozo/ dg7QjGNdQc+xhRn5CE2TwfSoOTASLnH650jlmLaWruArOMMgOY1W5OKLPXY5kYYt iUB6r+oamIJv2fOHQsVPpIXtGaDuN6EUOk78RXqViSee22J4zdjhGwTIUA5MONy7 bJDz+oQf/oLc5GsReHFD2yGyRxrRbiJG5Zr1AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUbTnJD/L09Yienb5nIoWnEZW8KuEwHwYDVR0jBBgwFoAUKnEap9xgBJsLDYhI l+AVsRcfN7kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3 L0tuRWFwOXhnQkpzTERZaElsLUFWc1JjZk43ay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvS25FYXA5eGdCSnNMRFloSWwtQVZzUmNmTjdrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3L2JUbkpEX0wwOVlpZW5i NW5Jb1duRVpXOEt1RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BARqS9AwDQYJKoZIhvcNAQELBQADggEBAI/8wd03GNR4pz2DuivlX3yHUBq9j1l9 GsUIvjMUQLMpL724q401oxoyBJd/pfCQGDWChwkO0A8Sqc0O2zOP2opfT2QuZvZW OxdPJbjOwQ2IKvXQ2OGOxXkr/KH37ZUOPwCEibTuAW/gcyDUomtAGGpesTXAe57l ECtzn+4tsnrrBZvWkgC2w4wP5eTlDe42K4bJ8wyJQ8w5STdcN0NOGznCePd9GLlc I98wba1so2POt+PoggKeKV41YsfLVYvFySeIIN7X7APHLnVZaa0WwAgQukgFGXHb nQa+0rvCjUtNLFvVScwizb2XgnDgPoVrA2azHEvzKfFwFj+NGrcp1dE= -----END CERTIFICATE-----Generated at Sun Sep 7 22:24:18 2025 by rpki-client