$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/r7wFN8sF5o_6Gdl8rCl6nF6ThCk.roa File: r7wFN8sF5o_6Gdl8rCl6nF6ThCk.roa (raw, json) Hash identifier: RBlQHHBlhDddV+OEigy+/essw4gMOoIsynFsNjy4oFQ= Subject key identifier: AF:BC:05:37:CB:05:E6:8F:FA:19:D9:7C:AC:29:7A:9C:5E:93:84:29 Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Certificate serial: 218E Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/r7wFN8sF5o_6Gdl8rCl6nF6ThCk.roa Signing time: Fri 29 Aug 2025 09:05:28 +0000 ROA not before: Fri 29 Aug 2025 09:05:28 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 23724 IP address blocks: 106.75.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 16:34:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8590 (0x218e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Validity Not Before: Aug 29 09:05:28 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=AFBC0537CB05E68FFA19D97CAC297A9C5E938429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6a:ed:c7:8e:61:1a:cc:64:80:70:43:b8:7e: be:f1:5c:70:01:a5:d4:de:fe:1f:9a:a5:28:58:9b: 77:e8:3b:71:b2:4f:58:4d:81:48:26:13:67:ef:20: 90:9f:75:2e:79:86:e4:09:fd:54:75:70:16:d1:ee: 9a:a8:e1:a1:9f:fc:43:a3:55:4f:0a:df:18:53:b5: b4:a6:bc:c1:91:a9:f4:d3:df:3a:2c:62:c7:4d:4b: 1f:6d:cd:b1:ce:37:1e:9a:b0:22:6a:7f:fe:8f:91: c0:07:80:97:f9:b0:b6:3b:a9:88:51:50:f4:3d:9b: 96:6f:af:87:ec:da:d5:43:88:70:f5:ae:ce:cd:2d: f4:b4:47:36:c0:17:50:b4:3f:de:12:3e:53:46:5a: 5c:c3:fe:d5:b2:ae:95:fa:ba:f1:5d:9e:6e:19:b2: fd:4d:2d:53:ca:26:20:c8:db:a2:e3:c8:dd:4c:a1: 03:d0:26:22:91:c2:b8:c6:ca:6d:d2:09:20:23:0e: 20:7a:d9:b6:00:ad:8e:e1:7c:40:4b:d5:d1:9d:f3: 5e:e6:43:d9:3c:cf:63:2d:99:ee:70:82:f4:1a:78: 9a:72:f6:76:0b:96:0d:84:4f:4e:43:e4:8f:09:28: 4f:54:56:e3:10:99:30:b8:eb:f2:19:f4:63:ec:b9: be:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:BC:05:37:CB:05:E6:8F:FA:19:D9:7C:AC:29:7A:9C:5E:93:84:29 X509v3 Authority Key Identifier: keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/r7wFN8sF5o_6Gdl8rCl6nF6ThCk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.75.96.0/19 Signature Algorithm: sha256WithRSAEncryption 75:b4:9b:14:17:2e:2d:7f:02:d0:42:4c:d6:d8:ff:28:4c:e3: af:16:72:03:8d:0c:89:d3:1e:28:2b:8f:84:16:0f:2d:c5:99: 9f:a2:39:84:d1:48:0d:56:78:7b:4a:53:c6:19:8a:02:a4:49: ea:79:99:1b:40:cb:fb:4f:20:75:91:e4:5c:5f:06:62:1a:d1: d3:d6:03:a8:67:63:a7:2e:50:69:d7:4a:26:d2:3a:2a:9d:3f: d5:35:9b:05:07:f2:b0:4f:1f:97:00:66:52:e6:e1:81:01:8e: a8:dd:83:74:b8:28:de:e6:d9:04:41:6e:26:93:a7:4e:81:41: 94:b1:aa:8a:b2:de:0a:8f:65:d6:61:e8:ba:bf:bd:97:36:cd: 0d:0a:55:c3:1b:85:6c:fc:5b:a0:4b:8b:5a:33:fe:fb:0b:ef: e4:80:b3:29:05:c7:bc:09:60:c8:0b:69:d8:05:86:b2:77:be: 44:f8:57:f2:38:52:76:7f:b6:a3:7e:99:df:0d:57:63:a7:af: a2:32:fd:09:30:96:a7:30:c5:2f:d6:6f:cb:40:62:eb:b7:2b: 96:d6:f9:b6:05:03:b5:1c:d6:74:ea:16:66:0d:84:31:01:17: a7:ce:03:39:07:96:a1:1b:0a:1f:74:44:68:d3:06:c8:d7:d1: 6a:c4:65:a7 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICIY4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE3 MTFBQTdEQzYwMDQ5QjBCMEQ4ODQ4OTdFMDE1QjExNzFGMzdCOTAeFw0yNTA4Mjkw OTA1MjhaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEFGQkMwNTM3Q0IwNUU2 OEZGQTE5RDk3Q0FDMjk3QTlDNUU5Mzg0MjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCau3HjmEazGSAcEO4fr7xXHABpdTe/h+apShYm3foO3GyT1hN gUgmE2fvIJCfdS55huQJ/VR1cBbR7pqo4aGf/EOjVU8K3xhTtbSmvMGRqfTT3zos YsdNSx9tzbHONx6asCJqf/6PkcAHgJf5sLY7qYhRUPQ9m5Zvr4fs2tVDiHD1rs7N LfS0RzbAF1C0P94SPlNGWlzD/tWyrpX6uvFdnm4Zsv1NLVPKJiDI26LjyN1MoQPQ JiKRwrjGym3SCSAjDiB62bYArY7hfEBL1dGd817mQ9k8z2Mtme5wgvQaeJpy9nYL lg2ET05D5I8JKE9UVuMQmTC46/IZ9GPsub4jAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUr7wFN8sF5o/6Gdl8rCl6nF6ThCkwHwYDVR0jBBgwFoAUKnEap9xgBJsLDYhI l+AVsRcfN7kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3 L0tuRWFwOXhnQkpzTERZaElsLUFWc1JjZk43ay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvS25FYXA5eGdCSnNMRFloSWwtQVZzUmNmTjdrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3L3I3d0ZOOHNGNW9fNkdk bDhyQ2w2bkY2VGhDay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAVqS2AwDQYJKoZIhvcNAQELBQADggEBAHW0mxQXLi1/AtBCTNbY/yhM468WcgON DInTHigrj4QWDy3FmZ+iOYTRSA1WeHtKU8YZigKkSep5mRtAy/tPIHWR5FxfBmIa 0dPWA6hnY6cuUGnXSibSOiqdP9U1mwUH8rBPH5cAZlLm4YEBjqjdg3S4KN7m2QRB biaTp06BQZSxqoqy3gqPZdZh6Lq/vZc2zQ0KVcMbhWz8W6BLi1oz/vsL7+SAsykF x7wJYMgLadgFhrJ3vkT4V/I4UnZ/tqN+md8NV2Onr6Iy/QkwlqcwxS/Wb8tAYuu3 K5bW+bYFA7Uc1nTqFmYNhDEBF6fOAzkHlqEbCh90RGjTBsjX0WrEZac= -----END CERTIFICATE-----Generated at Mon Sep 8 13:35:15 2025 by rpki-client