$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/gYqWEtC9WL7jqkuJC6IaVl20ozQ.roa File: gYqWEtC9WL7jqkuJC6IaVl20ozQ.roa (raw, json) Hash identifier: DhKJ1hSpJvut4ZwYKkOkwFYbBiTSahI5SPUynbD/Iu4= Subject key identifier: 81:8A:96:12:D0:BD:58:BE:E3:AA:4B:89:0B:A2:1A:56:5D:B4:A3:34 Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Certificate serial: 21AB Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/gYqWEtC9WL7jqkuJC6IaVl20ozQ.roa Signing time: Fri 29 Aug 2025 09:05:34 +0000 ROA not before: Fri 29 Aug 2025 09:05:34 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 58466 IP address blocks: 106.75.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 01:05:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8619 (0x21ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Validity Not Before: Aug 29 09:05:34 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=818A9612D0BD58BEE3AA4B890BA21A565DB4A334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9c:a6:00:7d:9b:eb:2d:68:9f:e8:49:6f:56: 4e:40:2c:22:c8:f7:59:1c:d2:87:98:50:14:cc:3e: 67:b7:c6:18:ce:d2:eb:55:1f:05:07:f6:46:2a:9c: 30:71:a1:61:52:25:38:a1:1e:e2:db:4c:d1:37:29: 85:9e:53:43:91:30:95:3a:b5:e2:d1:ab:87:58:aa: b4:f3:88:ee:eb:c3:6c:58:a8:ab:06:03:93:f4:f7: 14:fe:08:2f:f8:3a:bc:0f:52:47:b6:4b:9e:27:10: f1:d7:fc:20:97:ac:9d:9e:5e:5b:12:d4:cc:40:51: 43:4f:a6:56:60:c0:4c:e4:ab:30:e0:ff:42:83:47: 05:0f:d1:ce:00:2a:3a:6a:7f:a2:bd:d1:b9:c7:77: 78:79:45:df:2a:46:9c:71:ce:aa:ad:3b:d4:e0:fa: 30:3c:37:3f:be:08:b9:6c:dd:f8:b8:fd:24:3e:56: 42:31:12:ff:a0:be:8f:03:d6:6a:53:c7:b1:69:96: 28:75:27:1f:1e:a0:b7:02:5b:96:15:52:d2:0b:31: 24:15:5d:4e:6f:45:00:e7:90:4c:a4:92:d7:d7:f5: 41:c0:8f:fb:80:df:9e:a4:4e:4c:e9:65:56:22:ae: 5a:cf:bd:96:ea:ea:2d:05:cc:03:2e:7c:f6:95:d2: 47:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:8A:96:12:D0:BD:58:BE:E3:AA:4B:89:0B:A2:1A:56:5D:B4:A3:34 X509v3 Authority Key Identifier: keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/gYqWEtC9WL7jqkuJC6IaVl20ozQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.75.128.0/20 Signature Algorithm: sha256WithRSAEncryption 7a:34:c3:23:f3:ce:fd:68:45:ba:d9:ad:5b:f2:75:27:11:7d: a0:d2:3c:4f:f8:ba:e4:6f:bc:11:b1:e3:d9:9c:e3:2c:e5:f4: 49:d8:f9:5e:df:c5:9e:bd:d5:97:71:3e:3d:b9:42:43:2b:80: 23:f2:7c:21:60:ae:11:8b:f5:d7:b1:86:87:54:cb:e5:93:81: a3:2f:2b:7c:32:ea:3d:74:9e:9b:2d:1e:ff:50:98:3d:ec:b3: 25:54:d9:7e:55:95:7f:54:fc:59:97:73:7a:44:5a:98:62:44: 93:84:cd:71:e4:36:8c:f7:14:17:cc:81:67:d8:47:c1:2c:29: d3:f4:4a:d2:bf:69:63:b4:b3:d4:03:89:dd:a6:5f:09:03:de: fb:88:bc:29:42:1a:5f:88:eb:0a:2f:61:27:be:dc:a4:f1:ab: 5a:9c:58:27:a8:34:d8:85:42:dd:5c:ad:c9:e1:3c:71:ea:63: 82:93:e8:cf:a0:d3:7c:a0:b6:d7:c4:71:41:75:5b:3b:14:7e: 1a:d8:7b:dc:9b:cc:31:72:2b:6f:0e:b6:b3:23:d8:8d:5d:03: a5:a3:2a:73:a2:0e:f7:47:7c:e5:98:4b:db:cb:22:37:45:c4: 47:c3:1b:0b:75:bc:a6:fb:14:9a:c5:0e:26:c0:4b:f4:ac:89: 1e:6c:1c:d0 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICIaswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE3 MTFBQTdEQzYwMDQ5QjBCMEQ4ODQ4OTdFMDE1QjExNzFGMzdCOTAeFw0yNTA4Mjkw OTA1MzRaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDgxOEE5NjEyRDBCRDU4 QkVFM0FBNEI4OTBCQTIxQTU2NURCNEEzMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEnKYAfZvrLWif6ElvVk5ALCLI91kc0oeYUBTMPme3xhjO0utV HwUH9kYqnDBxoWFSJTihHuLbTNE3KYWeU0ORMJU6teLRq4dYqrTziO7rw2xYqKsG A5P09xT+CC/4OrwPUke2S54nEPHX/CCXrJ2eXlsS1MxAUUNPplZgwEzkqzDg/0KD RwUP0c4AKjpqf6K90bnHd3h5Rd8qRpxxzqqtO9Tg+jA8Nz++CLls3fi4/SQ+VkIx Ev+gvo8D1mpTx7Fplih1Jx8eoLcCW5YVUtILMSQVXU5vRQDnkEykktfX9UHAj/uA 356kTkzpZVYirlrPvZbq6i0FzAMufPaV0keXAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUgYqWEtC9WL7jqkuJC6IaVl20ozQwHwYDVR0jBBgwFoAUKnEap9xgBJsLDYhI l+AVsRcfN7kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3 L0tuRWFwOXhnQkpzTERZaElsLUFWc1JjZk43ay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvS25FYXA5eGdCSnNMRFloSWwtQVZzUmNmTjdrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3L2dZcVdFdEM5V0w3anFr dUpDNklhVmwyMG96US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BARqS4AwDQYJKoZIhvcNAQELBQADggEBAHo0wyPzzv1oRbrZrVvydScRfaDSPE/4 uuRvvBGx49mc4yzl9EnY+V7fxZ691ZdxPj25QkMrgCPyfCFgrhGL9dexhodUy+WT gaMvK3wy6j10npstHv9QmD3ssyVU2X5VlX9U/FmXc3pEWphiRJOEzXHkNoz3FBfM gWfYR8EsKdP0StK/aWO0s9QDid2mXwkD3vuIvClCGl+I6wovYSe+3KTxq1qcWCeo NNiFQt1crcnhPHHqY4KT6M+g03ygttfEcUF1WzsUfhrYe9ybzDFyK28OtrMj2I1d A6WjKnOiDvdHfOWYS9vLIjdFxEfDGwt1vKb7FJrFDibAS/SsiR5sHNA= -----END CERTIFICATE-----Generated at Sun Oct 26 23:17:37 2025 by rpki-client