$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1200/Ih184YlqxRlbF42aX0NhMPwO9_A.roa File: Ih184YlqxRlbF42aX0NhMPwO9_A.roa (raw, json) Hash identifier: AzOekV/wRnowvZWQPp7PwVlff+ZJwvOeEQaBtUPun6g= Subject key identifier: 22:1D:7C:E1:89:6A:C5:19:5B:17:8D:9A:5F:43:61:30:FC:0E:F7:F0 Certificate issuer: /CN=6191AACDCE560A74D83C05DA8EA9327AF944DBBD Certificate serial: 1754 Authority key identifier: 61:91:AA:CD:CE:56:0A:74:D8:3C:05:DA:8E:A9:32:7A:F9:44:DB:BD Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YZGqzc5WCnTYPAXajqkyevlE270.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/Ih184YlqxRlbF42aX0NhMPwO9_A.roa Signing time: Sat 13 Sep 2025 03:04:23 +0000 ROA not before: Sat 13 Sep 2025 03:04:23 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 59022 IP address blocks: 45.115.244.0/22 maxlen: 22 103.56.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YZGqzc5WCnTYPAXajqkyevlE270.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 23:43:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5972 (0x1754) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6191AACDCE560A74D83C05DA8EA9327AF944DBBD Validity Not Before: Sep 13 03:04:23 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=221D7CE1896AC5195B178D9A5F436130FC0EF7F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9f:ab:21:46:89:c5:e9:a0:e9:80:ad:6f:07: 50:18:7b:b7:47:ce:ba:4b:0c:1a:55:7c:1c:5f:fe: ca:1a:0f:3d:df:73:16:6b:e6:ac:fa:06:c7:36:93: 4b:47:59:1b:76:67:6e:a1:8f:af:e6:b8:cd:79:d1: fd:60:e9:5b:0d:8d:a0:09:50:c2:ca:c6:07:10:32: e4:f0:eb:c6:4f:e9:e8:59:17:28:f3:00:81:64:6f: 11:dc:b5:fd:32:2a:d5:85:e6:fe:b1:87:66:b3:72: 37:40:04:0e:d1:08:05:1a:fd:20:a9:a9:25:f7:55: a9:1f:68:6f:fa:02:e2:e9:48:ff:08:f4:5b:f2:41: 22:5b:2c:65:73:f8:50:38:2b:bc:b7:55:31:8e:c1: f9:94:a5:5b:40:8b:cc:31:02:f1:4d:4e:74:b7:c9: ff:8e:25:03:d4:cb:ad:38:74:44:0c:ca:c2:97:c3: 36:72:0f:ad:01:2b:d9:c6:47:75:34:58:8f:14:58: 12:f4:6a:e0:9c:57:1e:b7:89:51:77:e5:05:90:14: 4b:cc:41:ea:a4:d0:ae:0e:27:0c:16:25:a6:70:e4: 0e:57:b9:67:8b:7e:db:cc:19:dd:db:e2:a8:2a:bf: 31:5b:f0:32:34:ea:d7:6e:b7:03:2c:cd:0f:82:33: 61:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:1D:7C:E1:89:6A:C5:19:5B:17:8D:9A:5F:43:61:30:FC:0E:F7:F0 X509v3 Authority Key Identifier: keyid:61:91:AA:CD:CE:56:0A:74:D8:3C:05:DA:8E:A9:32:7A:F9:44:DB:BD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YZGqzc5WCnTYPAXajqkyevlE270.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/Ih184YlqxRlbF42aX0NhMPwO9_A.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.115.244.0/22 103.56.20.0/22 Signature Algorithm: sha256WithRSAEncryption 56:88:55:a4:c8:55:83:b7:da:50:f0:73:ba:94:7f:2e:32:e9: 68:bd:7a:a3:46:e0:9a:3c:61:63:f7:19:17:8a:cd:21:6f:e2: 05:a8:f9:b0:98:b4:20:14:8f:5d:a2:4c:da:09:3c:a5:96:f2: 9f:d6:cc:c9:80:f0:6a:8d:7e:88:84:67:46:5b:ab:f6:08:93: 95:bb:7f:76:b2:d8:f2:41:bd:b3:d3:cb:82:66:e0:1a:42:7c: 67:6c:fe:3e:99:2e:9f:c7:95:87:be:be:20:b0:4a:d7:31:b2: ae:52:d8:43:46:4c:c9:ab:49:26:11:ea:d7:a1:13:4b:f1:6a: 61:b1:87:51:3f:2c:98:18:48:37:9a:7d:4c:22:44:6c:63:87: 47:74:a0:9e:78:39:c3:21:e6:d5:ef:6c:3c:36:28:35:a3:98: 28:ed:30:29:eb:3f:70:a2:30:af:8f:05:cd:a5:9c:c4:28:d6: 50:97:7d:a0:89:d6:7a:a1:73:13:85:fe:81:52:4f:17:6c:e3: 4e:35:6d:ae:d8:24:45:31:72:d5:59:df:e5:17:db:3c:e6:cc: 6c:7e:d9:1f:29:8a:7c:7d:c2:c8:d0:bf:7a:b6:01:12:68:c4: 3f:4c:0d:3b:2d:5b:b6:d1:ab:c9:90:37:0b:19:1c:d0:df:9a: 00:b3:9d:35 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgICF1QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjE5 MUFBQ0RDRTU2MEE3NEQ4M0MwNURBOEVBOTMyN0FGOTQ0REJCRDAeFw0yNTA5MTMw MzA0MjNaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDIyMUQ3Q0UxODk2QUM1 MTk1QjE3OEQ5QTVGNDM2MTMwRkMwRUY3RjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/n6shRonF6aDpgK1vB1AYe7dHzrpLDBpVfBxf/soaDz3fcxZr 5qz6Bsc2k0tHWRt2Z26hj6/muM150f1g6VsNjaAJUMLKxgcQMuTw68ZP6ehZFyjz AIFkbxHctf0yKtWF5v6xh2azcjdABA7RCAUa/SCpqSX3VakfaG/6AuLpSP8I9Fvy QSJbLGVz+FA4K7y3VTGOwfmUpVtAi8wxAvFNTnS3yf+OJQPUy604dEQMysKXwzZy D60BK9nGR3U0WI8UWBL0auCcVx63iVF35QWQFEvMQeqk0K4OJwwWJaZw5A5XuWeL ftvMGd3b4qgqvzFb8DI06tdutwMszQ+CM2EnAgMBAAGjggH5MIIB9TAdBgNVHQ4E FgQUIh184YlqxRlbF42aX0NhMPwO9/AwHwYDVR0jBBgwFoAUYZGqzc5WCnTYPAXa jqkyevlE270wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIw MC9ZWkdxemM1V0NuVFlQQVhhanFreWV2bEUyNzAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1laR3F6YzVXQ25UWVBBWGFqcWt5ZXZsRTI3MC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEyMDAvSWgxODRZbHF4Umxi RjQyYVgwTmhNUHdPOV9BLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEw DAMEAi1z9AMEAmc4FDANBgkqhkiG9w0BAQsFAAOCAQEAVohVpMhVg7faUPBzupR/ LjLpaL16o0bgmjxhY/cZF4rNIW/iBaj5sJi0IBSPXaJM2gk8pZbyn9bMyYDwao1+ iIRnRlur9giTlbt/drLY8kG9s9PLgmbgGkJ8Z2z+Ppkun8eVh76+ILBK1zGyrlLY Q0ZMyatJJhHq16ETS/FqYbGHUT8smBhIN5p9TCJEbGOHR3Sgnng5wyHm1e9sPDYo NaOYKO0wKes/cKIwr48FzaWcxCjWUJd9oInWeqFzE4X+gVJPF2zjTjVtrtgkRTFy 1Vnf5RfbPObMbH7ZHymKfH3CyNC/erYBEmjEP0wNOy1bttGryZA3Cxkc0N+aALOd NQ== -----END CERTIFICATE-----Generated at Wed Nov 5 23:30:18 2025 by rpki-client