$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/848/Z17echBpfjLiLw2d-wVxivhgrgk.roa File: Z17echBpfjLiLw2d-wVxivhgrgk.roa (raw, json) Hash identifier: EPyG+AnHvrJfV601L1QoVI/NJrxexNZqadoUFKtOdC8= Subject key identifier: 67:5E:DE:72:10:69:7E:32:E2:2F:0D:9D:FB:05:71:8A:F8:60:AE:09 Certificate issuer: /CN=F07EA8449694AA3572EE15A0D86B5E0EB4A08504 Certificate serial: 2299 Authority key identifier: F0:7E:A8:44:96:94:AA:35:72:EE:15:A0:D8:6B:5E:0E:B4:A0:85:04 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8H6oRJaUqjVy7hWg2GteDrSghQQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/Z17echBpfjLiLw2d-wVxivhgrgk.roa Signing time: Sat 13 Sep 2025 03:04:20 +0000 ROA not before: Sat 13 Sep 2025 03:04:20 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 31216 IP address blocks: 2401:5180::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/8H6oRJaUqjVy7hWg2GteDrSghQQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/8H6oRJaUqjVy7hWg2GteDrSghQQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8H6oRJaUqjVy7hWg2GteDrSghQQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Sep 2025 17:33:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8857 (0x2299) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F07EA8449694AA3572EE15A0D86B5E0EB4A08504 Validity Not Before: Sep 13 03:04:20 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=675EDE7210697E32E22F0D9DFB05718AF860AE09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:dc:28:ad:ec:05:af:ad:93:85:55:55:27:87: 04:f5:bd:0b:01:16:7c:6a:6a:d8:62:be:cf:fb:14: 7c:13:e7:13:8a:22:b2:01:ba:14:a8:c7:d9:14:d5: 66:6e:f1:c1:b1:9f:90:ed:1e:57:f0:03:9a:e7:a7: 4d:4f:55:ca:e0:c9:d5:61:c3:97:a3:47:3d:61:38: c7:2d:34:d3:6b:e7:84:22:bf:27:69:8f:f4:34:60: ca:eb:7c:d7:b3:40:95:98:72:31:e2:b7:12:5c:32: 12:f3:0b:24:e0:3b:71:3c:32:71:e1:91:0b:fe:4f: e9:7b:8e:b0:b3:ed:21:b1:b9:bd:e3:eb:80:a1:cc: 7c:79:d6:b0:a3:9e:2d:0f:60:ed:b1:93:41:06:e2: e2:46:ba:a1:65:34:2b:3a:c6:e0:ff:11:a7:38:d5: 02:90:b5:1d:81:58:18:18:28:e8:1f:f2:0a:22:29: 43:28:53:fe:bc:64:e6:d4:56:62:7c:c3:ac:0b:8f: dd:31:fd:88:67:3c:03:1e:6d:46:b6:72:5d:e5:dd: c7:5e:10:a8:69:45:42:44:88:e4:61:49:a2:a3:7e: de:1d:45:9e:24:8c:6a:58:2c:bc:cd:aa:26:75:e8: b0:5f:38:66:b0:fd:12:a3:da:d6:7b:3b:d5:1b:93: cf:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:5E:DE:72:10:69:7E:32:E2:2F:0D:9D:FB:05:71:8A:F8:60:AE:09 X509v3 Authority Key Identifier: keyid:F0:7E:A8:44:96:94:AA:35:72:EE:15:A0:D8:6B:5E:0E:B4:A0:85:04 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/8H6oRJaUqjVy7hWg2GteDrSghQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8H6oRJaUqjVy7hWg2GteDrSghQQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/Z17echBpfjLiLw2d-wVxivhgrgk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:5180::/32 Signature Algorithm: sha256WithRSAEncryption 86:46:ff:c1:f7:f1:a8:e8:84:2c:bb:28:0b:a5:bd:44:b3:09: 33:7e:c3:2e:3b:cd:1c:47:0f:b9:0e:93:8b:60:6f:c3:0a:b7: c0:30:fc:c9:ce:e8:12:ed:f6:7f:4e:ef:ff:99:05:7a:4f:04: e2:26:41:5e:e0:7e:09:cb:58:a0:5c:ea:df:16:15:ec:10:a6: 77:f0:d5:da:7a:21:e1:03:e6:e9:ca:d9:55:21:0e:d0:0b:04: 61:e2:53:1d:fd:7e:29:b3:8d:73:dc:03:90:44:c0:e3:19:07: 95:3d:df:5b:b7:08:94:82:4a:f0:0a:7f:7a:2c:15:2c:36:e9: a2:78:74:1b:66:4f:62:df:cd:77:e8:63:53:63:6f:52:90:e4: 96:dd:73:c8:0b:92:ed:f1:3f:4b:58:7c:0f:ab:57:17:60:c8: 92:21:e9:2f:9d:ea:4f:40:89:ae:5c:82:f3:b7:86:02:92:78: 4f:a2:1b:a9:b3:1b:18:ec:d9:fd:94:cd:25:af:8e:7b:57:de: 01:2b:7c:8d:2b:12:ea:5a:1c:93:7f:78:83:a4:eb:75:7e:eb: 4f:69:60:94:dc:13:89:fe:c8:30:47:ab:9a:39:89:e3:41:70: fe:a9:6b:24:08:8f:46:dc:bf:a1:ea:7c:e9:04:57:4f:60:ee: d5:9c:72:8d -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICIpkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjA3 RUE4NDQ5Njk0QUEzNTcyRUUxNUEwRDg2QjVFMEVCNEEwODUwNDAeFw0yNTA5MTMw MzA0MjBaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDY3NUVERTcyMTA2OTdF MzJFMjJGMEQ5REZCMDU3MThBRjg2MEFFMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDH3Cit7AWvrZOFVVUnhwT1vQsBFnxqathivs/7FHwT5xOKIrIB uhSox9kU1WZu8cGxn5DtHlfwA5rnp01PVcrgydVhw5ejRz1hOMctNNNr54Qivydp j/Q0YMrrfNezQJWYcjHitxJcMhLzCyTgO3E8MnHhkQv+T+l7jrCz7SGxub3j64Ch zHx51rCjni0PYO2xk0EG4uJGuqFlNCs6xuD/Eac41QKQtR2BWBgYKOgf8goiKUMo U/68ZObUVmJ8w6wLj90x/YhnPAMebUa2cl3l3cdeEKhpRUJEiORhSaKjft4dRZ4k jGpYLLzNqiZ16LBfOGaw/RKj2tZ7O9Ubk8/ZAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUZ17echBpfjLiLw2d+wVxivhgrgkwHwYDVR0jBBgwFoAU8H6oRJaUqjVy7hWg 2GteDrSghQQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODQ4 LzhINm9SSmFVcWpWeTdoV2cyR3RlRHJTZ2hRUS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOEg2b1JKYVVxalZ5N2hXZzJHdGVEclNnaFFRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODQ4L1oxN2VjaEJwZmpMaUx3 MmQtd1Z4aXZoZ3Jnay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcD BQAkAVGAMA0GCSqGSIb3DQEBCwUAA4IBAQCGRv/B9/Go6IQsuygLpb1EswkzfsMu O80cRw+5DpOLYG/DCrfAMPzJzugS7fZ/Tu//mQV6TwTiJkFe4H4Jy1igXOrfFhXs EKZ38NXaeiHhA+bpytlVIQ7QCwRh4lMd/X4ps41z3AOQRMDjGQeVPd9btwiUgkrw Cn96LBUsNumieHQbZk9i38136GNTY29SkOSW3XPIC5Lt8T9LWHwPq1cXYMiSIekv nepPQImuXILzt4YCknhPohupsxsY7Nn9lM0lr457V94BK3yNKxLqWhyTf3iDpOt1 futPaWCU3BOJ/sgwR6uaOYnjQXD+qWskCI9G3L+h6nzpBFdPYO7VnHKN -----END CERTIFICATE-----Generated at Wed Sep 17 13:14:33 2025 by rpki-client