$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/ds1nqXRhVs8eWSasKIL1OVWE7MU.roa File: ds1nqXRhVs8eWSasKIL1OVWE7MU.roa (raw, json) Hash identifier: uFUub2XrejoHM+0zVXEWTSnCvrQ/oUtbRuxK0boCpCc= Subject key identifier: 76:CD:67:A9:74:61:56:CF:1E:59:26:AC:28:82:F5:39:55:84:EC:C5 Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Certificate serial: 2190 Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/ds1nqXRhVs8eWSasKIL1OVWE7MU.roa Signing time: Fri 29 Aug 2025 09:05:28 +0000 ROA not before: Fri 29 Aug 2025 09:05:28 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 4808 IP address blocks: 117.50.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 05:34:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8592 (0x2190) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Validity Not Before: Aug 29 09:05:28 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=76CD67A9746156CF1E5926AC2882F5395584ECC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2e:02:6e:65:58:85:11:d9:08:6d:ea:3f:e4: 8e:2c:02:8f:cb:a3:ca:0d:e1:d3:34:ef:05:1d:72: 66:27:8d:23:2f:2e:b8:f3:0b:51:cb:7b:13:06:5a: 0a:c5:e2:22:0d:94:79:ad:ec:5f:e2:69:c6:bc:78: b9:7a:3e:22:d8:1d:d4:68:2c:a7:04:7a:a1:b4:14: e3:c2:1d:0e:10:13:8f:70:bf:ae:94:e3:65:fe:d7: b9:e1:4a:da:7a:40:ba:cb:e7:1b:41:7e:6a:ed:6b: 33:63:b3:ec:8a:e6:75:9b:b4:0d:36:a9:fe:ae:8e: 19:20:da:45:82:b0:ee:94:de:2c:91:0c:06:57:0c: 51:bd:28:c4:62:b9:ba:20:1f:2c:a3:fa:21:7d:89: c6:60:8e:7b:b9:65:0c:42:48:50:5b:97:c4:3b:e2: ef:79:e9:27:90:aa:e4:2a:7e:0c:a6:1d:dc:94:05: cd:9f:89:db:85:ef:6f:47:f3:03:ed:99:68:84:f1: 2d:49:8e:e4:bf:b3:43:cf:6b:5e:36:06:39:a4:73: f2:c1:a6:61:6d:b6:14:28:d5:2d:91:f8:5c:8d:29: 7e:aa:ce:80:b9:34:2e:1f:9e:82:16:a9:d8:76:1f: ae:26:65:5c:8a:ef:a1:a2:da:0e:f1:c3:60:6d:3d: c0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:CD:67:A9:74:61:56:CF:1E:59:26:AC:28:82:F5:39:55:84:EC:C5 X509v3 Authority Key Identifier: keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/ds1nqXRhVs8eWSasKIL1OVWE7MU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 117.50.192.0/19 Signature Algorithm: sha256WithRSAEncryption 33:ac:92:3d:a5:e5:f7:fd:f8:ae:49:5f:0e:3c:71:e8:72:ef: d4:7a:0f:a2:72:ef:38:7a:e8:3b:b0:aa:64:6f:44:c7:a9:3c: cc:9c:89:60:dc:ab:09:84:a9:ce:a1:ad:4b:b7:46:21:53:22: aa:f8:d7:79:4f:1a:88:64:7c:7e:1a:66:c7:bd:4a:c2:12:23: 46:fb:2d:0c:e8:2d:74:51:b1:af:0a:24:67:12:75:cd:a3:af: 5b:7b:95:af:b1:3a:9d:7b:f7:fd:15:81:71:68:78:14:ab:c9: 0a:c0:34:94:ed:0b:bf:b6:a8:a6:ca:89:6d:96:54:87:8b:a2: d0:79:39:6c:a7:4a:b7:d1:1f:18:e2:9b:50:d4:a4:61:6d:94: e8:4b:35:0e:58:e7:c3:96:a6:53:23:7f:e0:03:0a:dc:21:15: 3f:2f:38:fc:c9:32:bd:a9:b7:51:34:9f:d8:28:53:7a:f7:8a: 57:5b:ac:e8:b9:fb:6b:6e:e8:e2:72:01:7b:4b:37:70:a5:b2: 92:b2:c7:b4:ae:15:c7:e1:a1:9d:24:23:3a:b2:1e:d1:ce:62: 42:01:66:80:a7:ee:9b:83:0f:7b:30:25:51:4a:38:b1:ed:14: d3:a0:a1:6f:5b:c0:25:4d:16:27:2a:62:97:38:de:e9:d4:83: 4e:db:85:26 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICIZAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE3 MTFBQTdEQzYwMDQ5QjBCMEQ4ODQ4OTdFMDE1QjExNzFGMzdCOTAeFw0yNTA4Mjkw OTA1MjhaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDc2Q0Q2N0E5NzQ2MTU2 Q0YxRTU5MjZBQzI4ODJGNTM5NTU4NEVDQzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyLgJuZViFEdkIbeo/5I4sAo/Lo8oN4dM07wUdcmYnjSMvLrjz C1HLexMGWgrF4iINlHmt7F/iaca8eLl6PiLYHdRoLKcEeqG0FOPCHQ4QE49wv66U 42X+17nhStp6QLrL5xtBfmrtazNjs+yK5nWbtA02qf6ujhkg2kWCsO6U3iyRDAZX DFG9KMRiubogHyyj+iF9icZgjnu5ZQxCSFBbl8Q74u956SeQquQqfgymHdyUBc2f iduF729H8wPtmWiE8S1JjuS/s0PPa142Bjmkc/LBpmFtthQo1S2R+FyNKX6qzoC5 NC4fnoIWqdh2H64mZVyK76Gi2g7xw2BtPcApAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUds1nqXRhVs8eWSasKIL1OVWE7MUwHwYDVR0jBBgwFoAUKnEap9xgBJsLDYhI l+AVsRcfN7kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3 L0tuRWFwOXhnQkpzTERZaElsLUFWc1JjZk43ay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvS25FYXA5eGdCSnNMRFloSWwtQVZzUmNmTjdrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3L2RzMW5xWFJoVnM4ZVdT YXNLSUwxT1ZXRTdNVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAV1MsAwDQYJKoZIhvcNAQELBQADggEBADOskj2l5ff9+K5JXw48cehy79R6D6Jy 7zh66DuwqmRvRMepPMyciWDcqwmEqc6hrUu3RiFTIqr413lPGohkfH4aZse9SsIS I0b7LQzoLXRRsa8KJGcSdc2jr1t7la+xOp179/0VgXFoeBSryQrANJTtC7+2qKbK iW2WVIeLotB5OWynSrfRHxjim1DUpGFtlOhLNQ5Y58OWplMjf+ADCtwhFT8vOPzJ Mr2pt1E0n9goU3r3ildbrOi5+2tu6OJyAXtLN3ClspKyx7SuFcfhoZ0kIzqyHtHO YkIBZoCn7puDD3swJVFKOLHtFNOgoW9bwCVNFicqYpc43unUg07bhSY= -----END CERTIFICATE-----Generated at Sun Sep 7 03:36:59 2025 by rpki-client