$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/phruPguv8V6R_6FrpsI6v1eXe5I.roa File: phruPguv8V6R_6FrpsI6v1eXe5I.roa (raw, json) Hash identifier: pCRGJ0uz2FhHssQBPM/zQVE/EqZQkwX6lYfKKDzGmEo= Subject key identifier: A6:1A:EE:3E:0B:AF:F1:5E:91:FF:A1:6B:A6:C2:3A:BF:57:97:7B:92 Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Certificate serial: 219A Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/phruPguv8V6R_6FrpsI6v1eXe5I.roa Signing time: Fri 29 Aug 2025 09:05:30 +0000 ROA not before: Fri 29 Aug 2025 09:05:30 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 17621 IP address blocks: 106.75.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 06:34:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8602 (0x219a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Validity Not Before: Aug 29 09:05:30 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=A61AEE3E0BAFF15E91FFA16BA6C23ABF57977B92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:28:9f:d2:0e:d3:bc:99:17:57:6d:0d:53:12: be:16:d9:f4:48:44:f6:b4:7d:9f:fb:da:cd:ac:a4: fe:ac:2f:80:06:16:d9:f5:b3:de:8e:73:18:85:03: d7:e3:2e:98:d4:b8:0e:3e:be:b9:53:ba:b9:6e:6a: 54:ba:96:db:af:34:f8:f2:8d:75:3d:00:30:09:12: 0f:52:6e:b4:3f:d8:00:99:b5:54:57:d3:81:73:29: 70:8a:42:80:b6:ab:73:ef:4d:0e:61:11:aa:0d:3d: 9f:f1:7d:a0:88:17:88:90:7e:5a:21:02:1f:0c:5c: b5:85:98:0a:bf:2b:aa:e5:72:87:38:95:a3:3a:ec: 6b:e3:67:e3:19:3d:b9:00:00:aa:3b:7b:bb:c8:0f: 4b:be:12:76:a3:d9:73:43:0d:80:1d:1c:91:75:b2: 24:da:9c:0e:ca:4c:0f:84:40:37:07:27:05:40:e1: 4b:e5:49:48:a1:47:99:78:11:32:2b:21:32:47:ab: c8:ac:31:79:eb:dc:6f:df:47:f8:fd:27:cc:ca:7f: fd:bc:27:c0:42:df:70:3a:55:31:8b:fe:e6:c8:b5: ca:f1:25:72:01:dc:29:9d:cf:7b:a8:5a:ef:3e:a1: d8:f9:23:7a:50:63:ac:cb:20:53:41:92:8a:09:80: 3a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:1A:EE:3E:0B:AF:F1:5E:91:FF:A1:6B:A6:C2:3A:BF:57:97:7B:92 X509v3 Authority Key Identifier: keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/phruPguv8V6R_6FrpsI6v1eXe5I.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.75.240.0/20 Signature Algorithm: sha256WithRSAEncryption 3a:9d:1a:54:70:45:e0:3f:a2:3a:89:de:52:4c:24:59:50:5e: 4c:09:68:a1:71:fe:69:91:12:cc:1a:45:b4:65:91:7e:6d:bf: f3:4f:15:9f:97:3f:8f:27:a4:da:be:88:7b:0f:8d:ed:12:09: 3a:27:9f:d6:f9:91:5d:48:a0:39:d3:7c:8c:3e:d4:4d:43:98: 59:d0:a8:14:6a:33:73:d2:ea:c0:93:e7:d9:37:dd:c3:39:2f: e9:ae:a9:da:ba:40:37:49:40:f1:c9:72:33:e7:3e:04:54:45: 69:f3:54:a7:b9:b1:aa:55:ac:fd:e4:87:3a:ad:3d:aa:d8:89: 10:88:82:92:cf:f4:f9:1e:21:1a:67:3e:34:d5:33:d3:64:b4: c7:d1:7e:1c:8c:c5:b3:49:78:93:5c:c2:df:1f:ab:84:4e:87: b0:d1:41:bc:1a:a3:de:e1:f9:9f:45:76:28:a1:c4:c2:fd:c7: fa:56:14:56:81:9b:2e:03:26:1c:60:19:d3:ab:92:da:91:66: 00:a3:df:d3:80:06:18:30:e5:d0:a0:c8:d8:bb:7f:6c:1f:50: 7c:c1:5d:44:f5:d0:d4:cc:26:55:cb:85:bd:17:26:59:15:ab: 94:b8:03:2e:22:1b:4f:32:4d:ce:50:aa:4d:4a:58:1e:08:ef: 1a:27:fa:48 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICIZowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE3 MTFBQTdEQzYwMDQ5QjBCMEQ4ODQ4OTdFMDE1QjExNzFGMzdCOTAeFw0yNTA4Mjkw OTA1MzBaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEE2MUFFRTNFMEJBRkYx NUU5MUZGQTE2QkE2QzIzQUJGNTc5NzdCOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJKJ/SDtO8mRdXbQ1TEr4W2fRIRPa0fZ/72s2spP6sL4AGFtn1 s96OcxiFA9fjLpjUuA4+vrlTurlualS6ltuvNPjyjXU9ADAJEg9SbrQ/2ACZtVRX 04FzKXCKQoC2q3PvTQ5hEaoNPZ/xfaCIF4iQflohAh8MXLWFmAq/K6rlcoc4laM6 7GvjZ+MZPbkAAKo7e7vID0u+Enaj2XNDDYAdHJF1siTanA7KTA+EQDcHJwVA4Uvl SUihR5l4ETIrITJHq8isMXnr3G/fR/j9J8zKf/28J8BC33A6VTGL/ubItcrxJXIB 3Cmdz3uoWu8+odj5I3pQY6zLIFNBkooJgDorAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUphruPguv8V6R/6FrpsI6v1eXe5IwHwYDVR0jBBgwFoAUKnEap9xgBJsLDYhI l+AVsRcfN7kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3 L0tuRWFwOXhnQkpzTERZaElsLUFWc1JjZk43ay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvS25FYXA5eGdCSnNMRFloSWwtQVZzUmNmTjdrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3L3BocnVQZ3V2OFY2Ul82 RnJwc0k2djFlWGU1SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BARqS/AwDQYJKoZIhvcNAQELBQADggEBADqdGlRwReA/ojqJ3lJMJFlQXkwJaKFx /mmREswaRbRlkX5tv/NPFZ+XP48npNq+iHsPje0SCTonn9b5kV1IoDnTfIw+1E1D mFnQqBRqM3PS6sCT59k33cM5L+muqdq6QDdJQPHJcjPnPgRURWnzVKe5sapVrP3k hzqtParYiRCIgpLP9PkeIRpnPjTVM9NktMfRfhyMxbNJeJNcwt8fq4ROh7DRQbwa o97h+Z9FdiihxML9x/pWFFaBmy4DJhxgGdOrktqRZgCj39OABhgw5dCgyNi7f2wf UHzBXUT10NTMJlXLhb0XJlkVq5S4Ay4iG08yTc5Qqk1KWB4I7xon+kg= -----END CERTIFICATE-----Generated at Tue Sep 9 04:03:56 2025 by rpki-client