$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/uEpBF5rj8NZhDo8jeXPf381YbFU.roa File: uEpBF5rj8NZhDo8jeXPf381YbFU.roa (raw, json) Hash identifier: MSd+b5acc6CTZFcvvV8RnqLHHYPgM8P1eVCGzezpRBU= Subject key identifier: B8:4A:41:17:9A:E3:F0:D6:61:0E:8F:23:79:73:DF:DF:CD:58:6C:55 Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Certificate serial: 21C9 Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/uEpBF5rj8NZhDo8jeXPf381YbFU.roa Signing time: Wed 03 Sep 2025 08:02:01 +0000 ROA not before: Wed 03 Sep 2025 08:02:01 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 135377 IP address blocks: 42.240.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Sep 2025 10:03:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8649 (0x21c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Validity Not Before: Sep 3 08:02:01 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=B84A41179AE3F0D6610E8F237973DFDFCD586C55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6d:b1:e7:76:4c:c3:7a:4e:28:b8:bc:b0:a9: df:e6:25:7a:8b:37:2a:93:85:d2:1a:3f:b0:0d:46: 4f:63:05:cd:24:10:aa:86:04:c4:9d:22:ba:2d:3b: 6a:2c:dc:e0:86:ca:00:71:28:41:4c:43:d1:2b:74: 71:0f:f4:5d:2f:8c:3a:7e:e1:06:81:26:4c:68:6a: 24:f0:d5:bd:dc:4a:99:6c:40:bd:8b:51:28:4c:59: 88:71:48:93:bc:03:ab:5f:ed:f9:81:7b:89:64:c8: e4:7f:0b:b1:5c:b0:b5:7f:0a:d4:8f:97:01:b6:0f: af:e7:39:05:a3:59:dd:da:4d:a3:b4:78:8b:32:a5: 56:b0:ce:57:c2:81:6d:1c:72:4d:be:f6:ea:81:50: 49:83:2d:bd:c6:ee:a5:bf:27:1d:7b:c3:2a:0e:29: 42:5b:32:95:0d:d8:b7:ee:28:52:b1:8b:de:20:85: 7a:fb:17:b5:d9:dd:8b:25:ad:a2:4d:17:fa:3d:81: 15:39:1a:3d:2d:1e:c1:3c:1f:57:e1:f3:bb:d9:b6: 2c:bc:fe:1d:b1:0a:77:10:e4:30:c2:6e:59:36:9d: 33:ab:b4:1a:3b:e6:03:32:cb:2b:b8:c0:95:7f:dc: 2f:0d:f6:c2:9a:bf:01:97:78:84:dc:0c:64:96:85: 98:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:4A:41:17:9A:E3:F0:D6:61:0E:8F:23:79:73:DF:DF:CD:58:6C:55 X509v3 Authority Key Identifier: keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/uEpBF5rj8NZhDo8jeXPf381YbFU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 42.240.254.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:1f:09:da:2f:a4:1c:20:4f:f8:e4:68:19:bc:3f:fe:f5:98: 9d:46:cf:33:df:ee:f7:bb:f9:1e:1f:f4:f7:49:dd:e3:cd:4d: fd:81:dd:83:02:de:67:e2:43:0f:f6:f9:94:4b:6f:50:e3:ae: 82:af:18:39:37:7e:cb:8d:04:d5:e0:7d:71:52:f8:28:1c:d2: 46:32:fd:a5:24:48:9f:00:0e:87:c0:55:85:a7:d5:7f:51:c4: e3:a0:75:56:f1:a2:b3:64:55:60:e2:61:4d:47:70:a3:5d:2f: a7:07:cb:bf:04:bd:50:65:4f:8c:1a:df:b0:fa:b0:23:99:c3: fa:3c:89:35:2b:fe:ef:6a:a3:7e:78:4c:5c:fb:5a:94:4d:36: 90:42:7a:92:08:4d:f7:71:26:ec:4c:27:47:17:85:d0:89:f8: d0:ae:3d:e7:a4:5b:cd:85:f2:61:03:df:75:bf:b0:05:49:8b: 8f:45:a3:bc:2e:94:b9:28:29:a1:f6:e3:f8:3b:50:98:87:67: e0:5b:04:5d:11:07:dd:e3:cb:ab:88:af:7d:89:90:85:ab:21: 1c:06:01:e4:de:2c:f3:66:5d:22:b2:e7:16:4b:af:cf:58:8a: 9b:8c:2f:44:d7:d8:23:1a:d3:f9:ad:57:60:7c:e6:e0:a7:47: dc:d4:28:95 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICIckwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE3 MTFBQTdEQzYwMDQ5QjBCMEQ4ODQ4OTdFMDE1QjExNzFGMzdCOTAeFw0yNTA5MDMw ODAyMDFaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEI4NEE0MTE3OUFFM0Yw RDY2MTBFOEYyMzc5NzNERkRGQ0Q1ODZDNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCbbbHndkzDek4ouLywqd/mJXqLNyqThdIaP7ANRk9jBc0kEKqG BMSdIrotO2os3OCGygBxKEFMQ9ErdHEP9F0vjDp+4QaBJkxoaiTw1b3cSplsQL2L UShMWYhxSJO8A6tf7fmBe4lkyOR/C7FcsLV/CtSPlwG2D6/nOQWjWd3aTaO0eIsy pVawzlfCgW0cck2+9uqBUEmDLb3G7qW/Jx17wyoOKUJbMpUN2LfuKFKxi94ghXr7 F7XZ3YslraJNF/o9gRU5Gj0tHsE8H1fh87vZtiy8/h2xCncQ5DDCblk2nTOrtBo7 5gMyyyu4wJV/3C8N9sKavwGXeITcDGSWhZgzAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUuEpBF5rj8NZhDo8jeXPf381YbFUwHwYDVR0jBBgwFoAUKnEap9xgBJsLDYhI l+AVsRcfN7kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3 L0tuRWFwOXhnQkpzTERZaElsLUFWc1JjZk43ay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvS25FYXA5eGdCSnNMRFloSWwtQVZzUmNmTjdrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3L3VFcEJGNXJqOE5aaERv OGplWFBmMzgxWWJGVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAq8P4wDQYJKoZIhvcNAQELBQADggEBAEofCdovpBwgT/jkaBm8P/71mJ1GzzPf 7ve7+R4f9PdJ3ePNTf2B3YMC3mfiQw/2+ZRLb1DjroKvGDk3fsuNBNXgfXFS+Cgc 0kYy/aUkSJ8ADofAVYWn1X9RxOOgdVbxorNkVWDiYU1HcKNdL6cHy78EvVBlT4wa 37D6sCOZw/o8iTUr/u9qo354TFz7WpRNNpBCepIITfdxJuxMJ0cXhdCJ+NCuPeek W82F8mED33W/sAVJi49Fo7wulLkoKaH24/g7UJiHZ+BbBF0RB93jy6uIr32JkIWr IRwGAeTeLPNmXSKy5xZLr89YipuML0TX2CMa0/mtV2B85uCnR9zUKJU= -----END CERTIFICATE-----Generated at Fri Sep 5 09:10:36 2025 by rpki-client