$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/bpOhGrYh7KF0RON6n5wZ2xdgne8.roa File: bpOhGrYh7KF0RON6n5wZ2xdgne8.roa (raw, json) Hash identifier: bmDJHXZ4keEnPC3dfpsnnrSKjK6pIC7bvNobn4U99SA= Subject key identifier: 6E:93:A1:1A:B6:21:EC:A1:74:44:E3:7A:9F:9C:19:DB:17:60:9D:EF Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Certificate serial: 2178 Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/bpOhGrYh7KF0RON6n5wZ2xdgne8.roa Signing time: Fri 29 Aug 2025 09:05:23 +0000 ROA not before: Fri 29 Aug 2025 09:05:23 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 23724 IP address blocks: 117.50.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 16:34:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8568 (0x2178) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Validity Not Before: Aug 29 09:05:23 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=6E93A11AB621ECA17444E37A9F9C19DB17609DEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a0:a6:76:79:23:56:43:54:ef:ec:cb:ae:0f: 50:ac:e1:f9:e7:75:0b:88:0c:94:54:fa:8c:ba:4d: 90:44:2c:de:bf:c2:b1:af:d0:c2:75:04:80:31:41: 60:8a:8c:f8:01:fc:e6:c5:28:3a:93:50:e9:43:5e: 92:1d:40:ff:69:9b:2c:65:51:12:61:07:15:ae:36: 9a:73:84:d9:7c:9d:1a:35:db:5f:a9:a6:7b:08:fb: b8:c5:32:a8:29:0c:e2:f4:6f:34:de:af:16:29:23: 57:5c:92:d2:4e:80:89:1d:ce:9f:e9:d5:d0:53:66: e0:74:5d:ee:35:80:a7:72:4b:4c:09:44:c2:bc:45: 91:cf:92:3a:56:90:85:89:00:de:06:8b:00:44:be: 6c:d3:cd:64:9f:11:3d:5b:96:cb:ad:84:96:0d:25: a9:44:09:97:d5:3a:65:63:e4:14:43:fa:a2:3c:a9: 2c:53:f7:9b:cc:56:02:32:f5:2f:a2:d2:60:1c:df: 18:bb:d0:40:de:8e:ce:74:ed:9c:f7:5e:09:be:b9: 5b:52:ae:9b:68:e0:19:e1:da:3e:95:ae:ac:de:eb: 1b:ef:56:8a:29:0e:ba:97:0e:7b:f3:d0:a8:3d:61: a9:79:4f:21:2b:3d:79:ae:42:21:47:73:a2:e6:f9: 9f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:93:A1:1A:B6:21:EC:A1:74:44:E3:7A:9F:9C:19:DB:17:60:9D:EF X509v3 Authority Key Identifier: keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/bpOhGrYh7KF0RON6n5wZ2xdgne8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 117.50.64.0/19 Signature Algorithm: sha256WithRSAEncryption 92:b0:14:b0:4a:3c:bd:ed:69:82:87:65:e0:c3:b9:ab:55:62: 4e:cb:1d:78:50:fc:b8:3a:4a:2f:da:69:b3:a8:f7:11:8b:aa: 2c:18:91:ac:d8:6e:2f:be:11:97:39:79:f1:6d:5c:d4:c8:52: c0:fa:c4:f9:90:23:b6:61:a9:54:6d:53:44:84:1a:29:33:61: 9d:d6:91:ad:cf:5b:f8:fb:9f:a1:da:c4:19:cf:7c:a9:8e:31: ca:ef:76:89:d1:ac:c2:b6:41:bc:61:50:0a:47:45:e1:4e:62: 33:fd:0d:9f:90:c1:2e:7d:36:05:c7:6d:8e:d3:7b:05:65:ea: ea:c3:e3:46:d9:bf:c4:f4:f4:c3:1c:c1:f6:c7:55:cc:6c:20: 12:1e:52:4a:fd:19:39:a8:5c:a3:d7:7b:d2:ea:1b:a0:24:13: 25:64:28:61:2f:09:db:ec:a2:ef:ec:93:62:59:44:62:4c:86: ce:bc:03:37:a5:17:b0:1f:2d:22:0e:64:4f:76:e6:6d:87:33: 28:f7:83:a3:1f:a4:34:d7:86:96:b9:56:3d:9a:1d:4b:7e:89: 3e:fe:5c:dd:02:f5:8f:58:ba:1a:d0:8a:be:1a:b2:23:6e:88: f8:f7:37:e9:ad:ad:62:49:1d:92:9d:ed:3a:35:f3:5d:81:25: ce:72:55:2e -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICIXgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE3 MTFBQTdEQzYwMDQ5QjBCMEQ4ODQ4OTdFMDE1QjExNzFGMzdCOTAeFw0yNTA4Mjkw OTA1MjNaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDZFOTNBMTFBQjYyMUVD QTE3NDQ0RTM3QTlGOUMxOURCMTc2MDlERUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCroKZ2eSNWQ1Tv7MuuD1Cs4fnndQuIDJRU+oy6TZBELN6/wrGv 0MJ1BIAxQWCKjPgB/ObFKDqTUOlDXpIdQP9pmyxlURJhBxWuNppzhNl8nRo121+p pnsI+7jFMqgpDOL0bzTerxYpI1dcktJOgIkdzp/p1dBTZuB0Xe41gKdyS0wJRMK8 RZHPkjpWkIWJAN4GiwBEvmzTzWSfET1blsuthJYNJalECZfVOmVj5BRD+qI8qSxT 95vMVgIy9S+i0mAc3xi70EDejs507Zz3Xgm+uVtSrpto4Bnh2j6Vrqze6xvvVoop DrqXDnvz0Kg9Yal5TyErPXmuQiFHc6Lm+Z9PAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUbpOhGrYh7KF0RON6n5wZ2xdgne8wHwYDVR0jBBgwFoAUKnEap9xgBJsLDYhI l+AVsRcfN7kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3 L0tuRWFwOXhnQkpzTERZaElsLUFWc1JjZk43ay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvS25FYXA5eGdCSnNMRFloSWwtQVZzUmNmTjdrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3L2JwT2hHclloN0tGMFJP TjZuNXdaMnhkZ25lOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAV1MkAwDQYJKoZIhvcNAQELBQADggEBAJKwFLBKPL3taYKHZeDDuatVYk7LHXhQ /Lg6Si/aabOo9xGLqiwYkazYbi++EZc5efFtXNTIUsD6xPmQI7ZhqVRtU0SEGikz YZ3Wka3PW/j7n6HaxBnPfKmOMcrvdonRrMK2QbxhUApHReFOYjP9DZ+QwS59NgXH bY7TewVl6urD40bZv8T09MMcwfbHVcxsIBIeUkr9GTmoXKPXe9LqG6AkEyVkKGEv Cdvsou/sk2JZRGJMhs68AzelF7AfLSIOZE925m2HMyj3g6MfpDTXhpa5Vj2aHUt+ iT7+XN0C9Y9YuhrQir4asiNuiPj3N+mtrWJJHZKd7To1812BJc5yVS4= -----END CERTIFICATE-----Generated at Mon Sep 8 13:35:13 2025 by rpki-client