$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/xRFbRUV_fxWndOesnlCwYtfgozI.roa File: xRFbRUV_fxWndOesnlCwYtfgozI.roa (raw, json) Hash identifier: lEY2YRpohTPu8bwqbJr3wwrVw5F4YXwoIvB0Z43f7bk= Subject key identifier: C5:11:5B:45:45:7F:7F:15:A7:74:E7:AC:9E:50:B0:62:D7:E0:A3:32 Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Certificate serial: 2198 Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/xRFbRUV_fxWndOesnlCwYtfgozI.roa Signing time: Fri 29 Aug 2025 09:05:30 +0000 ROA not before: Fri 29 Aug 2025 09:05:30 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 4811 IP address blocks: 113.31.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 01:34:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8600 (0x2198) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Validity Not Before: Aug 29 09:05:30 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=C5115B45457F7F15A774E7AC9E50B062D7E0A332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a7:fc:13:75:b6:13:b3:4d:a6:c4:c1:69:b5: 62:91:2a:9f:1b:f9:ec:c9:f7:da:94:34:48:83:6b: 86:0d:f7:0a:73:6f:f9:02:1f:7f:f2:2f:85:61:4c: 27:e9:17:d5:77:da:17:d6:15:6f:45:75:0c:d7:a1: 07:10:e3:3f:76:9c:19:67:72:68:bc:2d:60:48:dc: 0e:8a:7a:16:a1:e2:ac:eb:52:89:83:b9:2f:e1:ca: 01:45:ab:c5:9c:2b:51:2a:d6:8c:5d:ea:26:df:00: 77:f1:5c:29:b5:83:5b:d6:33:10:89:ab:a2:ac:e6: 9c:94:93:7b:6a:2a:f3:e2:70:e1:d2:86:9b:96:30: d5:7f:ec:83:b3:55:18:78:ec:08:19:b1:26:87:35: fc:9b:83:89:c2:c4:69:d0:c2:da:92:00:65:e1:10: c2:3a:e3:e4:13:31:34:4c:a2:ba:a3:e0:2f:da:27: 57:ca:7e:12:e1:fb:50:15:cd:ed:35:71:31:84:53: 8e:f6:56:66:02:5f:00:59:ea:46:2d:e4:a3:8c:c0: 89:b8:99:15:a8:60:09:68:5b:f0:de:94:f3:35:88: df:8e:5c:20:cb:5d:fa:e8:38:71:5b:e2:f2:26:6e: 53:84:33:56:1e:fc:10:32:95:9d:b6:3f:a0:d8:45: b3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:11:5B:45:45:7F:7F:15:A7:74:E7:AC:9E:50:B0:62:D7:E0:A3:32 X509v3 Authority Key Identifier: keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/xRFbRUV_fxWndOesnlCwYtfgozI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.31.96.0/20 Signature Algorithm: sha256WithRSAEncryption 31:b6:dc:7c:fc:43:ad:94:7e:88:35:39:d4:ad:31:49:59:01: 05:4f:3a:b4:b0:77:1b:cf:c5:47:d1:3f:42:2c:5b:45:3a:79: 0e:d4:e7:5c:b3:75:e3:cb:b2:e0:f8:57:82:50:36:f3:c7:20: cb:49:90:50:3a:77:40:07:f3:db:a4:e2:c3:80:3b:f4:3f:b9: 3e:11:ae:d1:a6:00:da:57:f9:3c:27:51:e0:b7:7c:42:c5:12: ea:12:21:0d:74:03:c7:1c:5b:78:f5:4a:45:c4:03:f2:0d:99: 5d:e5:b8:f8:16:d1:b6:4a:6a:8c:21:89:ac:32:50:f3:c5:92: 19:fb:47:4a:cd:5d:58:c3:bc:52:e0:a2:02:91:f1:88:d6:47: 65:e2:89:c1:1f:4c:e1:19:e6:e6:e6:f9:f7:b0:6b:60:b1:df: 66:85:25:26:61:16:7f:ec:2c:52:02:52:a6:94:97:8f:43:bc: 52:13:12:ed:7d:e1:c8:e7:94:60:06:ca:cd:8a:11:aa:87:77: 33:79:54:5f:b5:62:a0:59:1e:d8:0a:20:a5:c1:23:d9:4d:f4: 5a:35:b1:65:93:d7:ab:c6:7a:7c:16:78:ae:1b:40:ed:84:ad: d7:7c:53:c8:b9:ea:3f:83:8b:63:b1:e9:61:08:22:2b:c4:62: 3b:d1:28:ad -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICIZgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE3 MTFBQTdEQzYwMDQ5QjBCMEQ4ODQ4OTdFMDE1QjExNzFGMzdCOTAeFw0yNTA4Mjkw OTA1MzBaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEM1MTE1QjQ1NDU3RjdG MTVBNzc0RTdBQzlFNTBCMDYyRDdFMEEzMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBp/wTdbYTs02mxMFptWKRKp8b+ezJ99qUNEiDa4YN9wpzb/kC H3/yL4VhTCfpF9V32hfWFW9FdQzXoQcQ4z92nBlncmi8LWBI3A6Kehah4qzrUomD uS/hygFFq8WcK1Eq1oxd6ibfAHfxXCm1g1vWMxCJq6Ks5pyUk3tqKvPicOHShpuW MNV/7IOzVRh47AgZsSaHNfybg4nCxGnQwtqSAGXhEMI64+QTMTRMorqj4C/aJ1fK fhLh+1AVze01cTGEU472VmYCXwBZ6kYt5KOMwIm4mRWoYAloW/DelPM1iN+OXCDL XfroOHFb4vImblOEM1Ye/BAylZ22P6DYRbNlAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUxRFbRUV/fxWndOesnlCwYtfgozIwHwYDVR0jBBgwFoAUKnEap9xgBJsLDYhI l+AVsRcfN7kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3 L0tuRWFwOXhnQkpzTERZaElsLUFWc1JjZk43ay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvS25FYXA5eGdCSnNMRFloSWwtQVZzUmNmTjdrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3L3hSRmJSVVZfZnhXbmRP ZXNubEN3WXRmZ296SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BARxH2AwDQYJKoZIhvcNAQELBQADggEBADG23Hz8Q62Ufog1OdStMUlZAQVPOrSw dxvPxUfRP0IsW0U6eQ7U51yzdePLsuD4V4JQNvPHIMtJkFA6d0AH89uk4sOAO/Q/ uT4RrtGmANpX+TwnUeC3fELFEuoSIQ10A8ccW3j1SkXEA/INmV3luPgW0bZKaowh iawyUPPFkhn7R0rNXVjDvFLgogKR8YjWR2XiicEfTOEZ5ubm+fewa2Cx32aFJSZh Fn/sLFICUqaUl49DvFITEu194cjnlGAGys2KEaqHdzN5VF+1YqBZHtgKIKXBI9lN 9Fo1sWWT16vGenwWeK4bQO2Erdd8U8i56j+Di2Ox6WEIIivEYjvRKK0= -----END CERTIFICATE-----Generated at Sun Sep 7 22:23:31 2025 by rpki-client