$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/c1dc3kBhZEemid82hL2QZ9uCzfE.roa File: c1dc3kBhZEemid82hL2QZ9uCzfE.roa (raw, json) Hash identifier: YN6Hr/oKGS7NxPPH7DDa6SUU6JZACyzfJ5Gzk7JUulk= Subject key identifier: 73:57:5C:DE:40:61:64:47:A6:89:DF:36:84:BD:90:67:DB:82:CD:F1 Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Certificate serial: 22C4 Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/c1dc3kBhZEemid82hL2QZ9uCzfE.roa Signing time: Wed 22 Oct 2025 10:45:28 +0000 ROA not before: Wed 22 Oct 2025 10:45:28 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 139327 IP address blocks: 42.240.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 01:05:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8900 (0x22c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Validity Not Before: Oct 22 10:45:28 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=73575CDE40616447A689DF3684BD9067DB82CDF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:50:72:31:4b:b5:41:37:fe:d5:71:60:23:68: 9c:79:46:44:ed:15:20:ed:f7:ee:42:13:2e:ba:50: 2a:a7:2e:98:a5:3b:ac:b7:b6:7f:84:d4:d8:61:e6: 62:82:2e:cf:57:c4:ac:bc:4f:a7:05:e5:bb:cf:80: 07:af:ce:52:28:9c:94:14:a9:ad:2b:fe:f7:d9:2f: a3:8c:36:8d:08:01:fc:8a:8e:29:75:7b:89:da:6c: 64:7a:d7:16:b5:58:c2:ee:b7:a9:7f:06:55:77:75: ef:4d:af:b4:c7:f8:e9:6b:d1:d2:63:24:59:ea:d9: 85:84:2c:0b:20:b8:3e:11:7f:cc:24:5d:78:e9:41: b2:7c:ad:4e:be:e0:a8:58:92:f3:b6:af:36:86:f3: c3:1e:85:25:2b:46:b9:19:b4:71:25:19:28:4b:ab: 33:a2:ee:7e:da:ef:54:58:9f:11:50:0a:3c:4a:b7: 9e:12:73:48:fe:06:c8:6f:56:f0:d7:c8:33:97:cf: 01:c3:c8:13:61:94:7e:f1:7e:16:89:1a:95:22:a4: db:f0:94:4d:98:d2:72:39:28:c0:c1:cc:d4:27:59: 39:3b:61:17:64:53:38:91:69:93:c3:51:64:8f:86: be:d6:62:64:c8:5e:5e:bb:b4:3b:9b:99:c4:6c:bc: a6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:57:5C:DE:40:61:64:47:A6:89:DF:36:84:BD:90:67:DB:82:CD:F1 X509v3 Authority Key Identifier: keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/c1dc3kBhZEemid82hL2QZ9uCzfE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 42.240.252.0/24 Signature Algorithm: sha256WithRSAEncryption af:26:4e:2d:a7:54:6d:f2:8f:a7:7e:6e:b9:6d:94:cf:9f:a3: 02:70:5a:71:a7:69:85:fc:62:b0:90:f0:20:48:3a:32:d6:fe: ad:cf:db:b4:32:13:7e:9f:1e:57:44:f8:9f:f3:47:6c:07:dc: c0:4e:81:62:6a:05:f6:a3:bb:42:63:44:c7:d0:bc:c9:58:a4: db:01:29:6d:62:50:fb:37:24:8b:29:58:68:6e:b9:fe:f1:30: 70:8c:b7:2e:da:e7:a8:b9:9c:07:40:d9:37:db:48:7f:85:0f: ec:0d:89:65:80:ba:d3:3b:35:e0:d1:ef:f2:c9:de:76:64:76: 89:e9:47:d0:36:bd:4b:3f:68:22:36:e0:d5:8a:e9:a4:14:32: 7f:7c:0e:c9:02:5c:b0:fd:82:9c:be:46:6d:da:f7:d2:62:ff: f6:f0:2f:99:97:f8:9b:49:6f:f9:2f:57:57:55:7f:09:25:be: d1:e3:b9:34:a3:e5:d9:ff:7f:07:45:58:a7:5c:b7:e2:fe:38: 3c:55:12:9f:25:0e:05:83:3c:c0:8f:f3:78:81:f2:95:00:be: 9e:d1:56:f0:5c:eb:a9:a3:81:78:d2:1b:76:51:e5:2d:b9:67: ae:ea:4f:f4:b0:eb:98:ae:a1:19:6a:c9:cd:24:df:b2:9d:89: 23:56:2e:df -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICIsQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE3 MTFBQTdEQzYwMDQ5QjBCMEQ4ODQ4OTdFMDE1QjExNzFGMzdCOTAeFw0yNTEwMjIx MDQ1MjhaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDczNTc1Q0RFNDA2MTY0 NDdBNjg5REYzNjg0QkQ5MDY3REI4MkNERjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvUHIxS7VBN/7VcWAjaJx5RkTtFSDt9+5CEy66UCqnLpilO6y3 tn+E1Nhh5mKCLs9XxKy8T6cF5bvPgAevzlIonJQUqa0r/vfZL6OMNo0IAfyKjil1 e4nabGR61xa1WMLut6l/BlV3de9Nr7TH+Olr0dJjJFnq2YWELAsguD4Rf8wkXXjp QbJ8rU6+4KhYkvO2rzaG88MehSUrRrkZtHElGShLqzOi7n7a71RYnxFQCjxKt54S c0j+BshvVvDXyDOXzwHDyBNhlH7xfhaJGpUipNvwlE2Y0nI5KMDBzNQnWTk7YRdk UziRaZPDUWSPhr7WYmTIXl67tDubmcRsvKbPAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUc1dc3kBhZEemid82hL2QZ9uCzfEwHwYDVR0jBBgwFoAUKnEap9xgBJsLDYhI l+AVsRcfN7kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3 L0tuRWFwOXhnQkpzTERZaElsLUFWc1JjZk43ay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvS25FYXA5eGdCSnNMRFloSWwtQVZzUmNmTjdrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3L2MxZGMza0JoWkVlbWlk ODJoTDJRWjl1Q3pmRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAq8PwwDQYJKoZIhvcNAQELBQADggEBAK8mTi2nVG3yj6d+brltlM+fowJwWnGn aYX8YrCQ8CBIOjLW/q3P27QyE36fHldE+J/zR2wH3MBOgWJqBfaju0JjRMfQvMlY pNsBKW1iUPs3JIspWGhuuf7xMHCMty7a56i5nAdA2TfbSH+FD+wNiWWAutM7NeDR 7/LJ3nZkdonpR9A2vUs/aCI24NWK6aQUMn98DskCXLD9gpy+Rm3a99Ji//bwL5mX +JtJb/kvV1dVfwklvtHjuTSj5dn/fwdFWKdct+L+ODxVEp8lDgWDPMCP83iB8pUA vp7RVvBc66mjgXjSG3ZR5S25Z67qT/Sw65iuoRlqyc0k37KdiSNWLt8= -----END CERTIFICATE-----Generated at Sun Oct 26 23:11:22 2025 by rpki-client