$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/tJ4leRZlT5yphvYu2Iwk3WlMtMc.roa File: tJ4leRZlT5yphvYu2Iwk3WlMtMc.roa (raw, json) Hash identifier: HZ7MGB3L05o29WDlsKQCkCBx4lZUGb2LRlx3qL9tfoQ= Subject key identifier: B4:9E:25:79:16:65:4F:9C:A9:86:F6:2E:D8:8C:24:DD:69:4C:B4:C7 Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Certificate serial: 216F Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/tJ4leRZlT5yphvYu2Iwk3WlMtMc.roa Signing time: Fri 29 Aug 2025 09:05:21 +0000 ROA not before: Fri 29 Aug 2025 09:05:21 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 58466 IP address blocks: 42.240.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 01:05:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8559 (0x216f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Validity Not Before: Aug 29 09:05:21 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=B49E257916654F9CA986F62ED88C24DD694CB4C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ec:3c:90:93:6d:84:8a:ff:5e:de:05:04:f7: bc:b2:f0:90:43:c4:8d:8b:2c:ad:01:5e:c6:78:c8: 70:46:bb:5b:e7:2c:72:10:65:c9:2d:80:37:d8:e5: 85:80:17:f6:eb:18:da:d4:8c:c5:f6:c5:e0:75:ff: 5c:84:f3:6b:27:15:1d:3a:e7:3a:5a:54:e8:d0:e1: d6:e9:a4:e0:1e:a3:bd:e6:55:85:46:db:33:a4:61: a1:ce:e5:2c:84:8f:40:46:96:d6:4c:4d:aa:f7:f6: bf:6e:aa:85:82:0d:24:5e:7e:f7:02:a6:4e:e4:a7: 66:d1:e8:d9:a9:84:c2:bf:70:d8:17:26:06:57:50: 59:c5:1a:a7:ad:93:57:1a:20:4a:d4:17:a8:2c:22: e6:b4:99:f9:3d:06:ca:6a:2e:90:40:33:f4:e5:ec: 50:87:77:7b:ac:2f:3c:15:b1:34:61:3e:32:cd:76: 1b:bf:51:4a:bf:18:84:d9:8b:44:10:db:a2:2e:92: 4f:13:92:54:97:36:5f:d1:71:bc:d9:e2:e9:8b:e2: cf:24:9c:6f:19:2b:b1:17:a0:67:ea:d6:33:4e:7e: 80:41:7b:0a:4b:67:22:45:75:36:74:98:45:ed:5a: c7:cf:20:d1:aa:4d:74:a8:72:9f:84:8d:44:0e:01: 8b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:9E:25:79:16:65:4F:9C:A9:86:F6:2E:D8:8C:24:DD:69:4C:B4:C7 X509v3 Authority Key Identifier: keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/tJ4leRZlT5yphvYu2Iwk3WlMtMc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 42.240.144.0/20 Signature Algorithm: sha256WithRSAEncryption 93:9e:a4:53:63:9b:81:86:88:2b:df:9c:af:a5:06:7d:0e:6b: 6d:66:c3:46:cd:45:18:4f:88:44:10:d8:4f:de:e9:0e:c5:40: a5:dc:a8:67:a7:5a:40:77:85:c6:27:b3:3b:81:c3:8e:a4:30: 8c:17:0a:75:3a:0e:47:34:58:b8:7d:f8:2e:c2:07:8d:cc:2f: 41:ea:22:1e:1d:0d:e3:ae:91:eb:8b:db:11:0b:c7:16:d5:43: 0b:b1:e9:87:df:4a:e3:ab:95:69:c0:e0:6e:8a:ef:cc:f3:ca: f7:82:5e:a3:df:c9:18:8c:2b:5b:31:20:dd:ee:c9:f2:1d:d5: 16:b6:cd:fe:ae:aa:82:34:cf:26:73:9e:50:32:c9:62:9a:a6: ee:34:1c:80:e2:47:32:6d:9e:fd:cd:77:72:98:25:7e:db:17: 11:8a:b5:be:72:c2:df:e9:3a:f7:b9:e8:0b:99:6f:ea:4d:7d: 86:e2:0d:01:3d:5e:06:63:20:98:24:94:7a:8a:92:c0:ca:14: c3:fa:bb:1d:6c:9c:72:45:57:4c:d4:31:02:c5:dc:be:6b:a8: 1d:b7:da:2d:64:1c:7e:58:88:e5:ee:d2:55:45:52:fb:26:18: 60:93:c1:44:0f:bb:48:eb:c6:4e:8e:70:6d:50:3d:4d:bf:20: 24:d8:6e:a4 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICIW8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE3 MTFBQTdEQzYwMDQ5QjBCMEQ4ODQ4OTdFMDE1QjExNzFGMzdCOTAeFw0yNTA4Mjkw OTA1MjFaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEI0OUUyNTc5MTY2NTRG OUNBOTg2RjYyRUQ4OEMyNERENjk0Q0I0QzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDI7DyQk22Eiv9e3gUE97yy8JBDxI2LLK0BXsZ4yHBGu1vnLHIQ ZcktgDfY5YWAF/brGNrUjMX2xeB1/1yE82snFR065zpaVOjQ4dbppOAeo73mVYVG 2zOkYaHO5SyEj0BGltZMTar39r9uqoWCDSRefvcCpk7kp2bR6NmphMK/cNgXJgZX UFnFGqetk1caIErUF6gsIua0mfk9BspqLpBAM/Tl7FCHd3usLzwVsTRhPjLNdhu/ UUq/GITZi0QQ26Iukk8TklSXNl/RcbzZ4umL4s8knG8ZK7EXoGfq1jNOfoBBewpL ZyJFdTZ0mEXtWsfPINGqTXSocp+EjUQOAYv1AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUtJ4leRZlT5yphvYu2Iwk3WlMtMcwHwYDVR0jBBgwFoAUKnEap9xgBJsLDYhI l+AVsRcfN7kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3 L0tuRWFwOXhnQkpzTERZaElsLUFWc1JjZk43ay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvS25FYXA5eGdCSnNMRFloSWwtQVZzUmNmTjdrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3L3RKNGxlUlpsVDV5cGh2 WXUySXdrM1dsTXRNYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAQq8JAwDQYJKoZIhvcNAQELBQADggEBAJOepFNjm4GGiCvfnK+lBn0Oa21mw0bN RRhPiEQQ2E/e6Q7FQKXcqGenWkB3hcYnszuBw46kMIwXCnU6Dkc0WLh9+C7CB43M L0HqIh4dDeOukeuL2xELxxbVQwux6YffSuOrlWnA4G6K78zzyveCXqPfyRiMK1sx IN3uyfId1Ra2zf6uqoI0zyZznlAyyWKapu40HIDiRzJtnv3Nd3KYJX7bFxGKtb5y wt/pOve56AuZb+pNfYbiDQE9XgZjIJgklHqKksDKFMP6ux1snHJFV0zUMQLF3L5r qB232i1kHH5YiOXu0lVFUvsmGGCTwUQPu0jrxk6OcG1QPU2/ICTYbqQ= -----END CERTIFICATE-----Generated at Sun Oct 26 23:17:38 2025 by rpki-client