$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2927/Uv5VVrhP0-QEM2UqSPmijqEJpX0.roa File: Uv5VVrhP0-QEM2UqSPmijqEJpX0.roa (raw, json) Hash identifier: PhA9NvD31bMCHHDx8SW/9LwuSzNaMF88snVrToOmHbM= Subject key identifier: 52:FE:55:56:B8:4F:D3:E4:04:33:65:2A:48:F9:A2:8E:A1:09:A5:7D Certificate issuer: /CN=73D211D5B210E3B196054DB71892D8E38A4E09EF Certificate serial: C7 Authority key identifier: 73:D2:11:D5:B2:10:E3:B1:96:05:4D:B7:18:92:D8:E3:8A:4E:09:EF Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c9IR1bIQ47GWBU23GJLY44pOCe8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/Uv5VVrhP0-QEM2UqSPmijqEJpX0.roa Signing time: Thu 31 Jul 2025 08:27:42 +0000 ROA not before: Thu 31 Jul 2025 08:27:42 +0000 ROA not after: Thu 25 Jun 2026 02:35:12 +0000 asID: 151302 IP address blocks: 43.249.168.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/c9IR1bIQ47GWBU23GJLY44pOCe8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/c9IR1bIQ47GWBU23GJLY44pOCe8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c9IR1bIQ47GWBU23GJLY44pOCe8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 13:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 199 (0xc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73D211D5B210E3B196054DB71892D8E38A4E09EF Validity Not Before: Jul 31 08:27:42 2025 GMT Not After : Jun 25 02:35:12 2026 GMT Subject: CN=52FE5556B84FD3E40433652A48F9A28EA109A57D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:34:e1:ba:b3:e5:87:bb:e6:0e:49:0a:5d:eb: 1e:0f:f6:3e:50:74:26:a5:e2:a0:de:79:fa:88:57: 8a:49:72:a5:1d:fb:ac:30:d1:53:ce:63:c0:a3:67: 74:70:1c:a5:96:a2:6d:a6:74:4a:9a:81:d6:f2:2f: 5e:c4:16:d8:61:1d:ef:ef:f5:58:28:a0:cf:3e:43: eb:71:13:fd:30:31:0e:3e:4a:6c:7b:38:61:b5:85: b3:2d:d3:f8:11:ed:3a:3d:4b:e4:64:40:4f:f6:6f: 7f:30:00:b4:17:1b:bf:63:70:54:ee:1a:23:e5:8a: 8e:c2:58:6e:38:39:6a:ef:50:5c:0f:43:43:1d:35: 46:b2:0e:17:64:f4:a5:8b:bc:a8:cf:9a:ed:50:13: c0:cc:f9:10:c5:16:d3:b3:a5:72:9f:0e:82:0b:11: c8:12:b2:06:3e:4e:77:6b:d7:da:f7:9d:da:f6:9b: d4:a6:b0:02:51:e2:f4:62:77:c2:de:14:cb:02:aa: 56:a4:7c:88:c2:c1:e1:2c:06:60:d7:02:cf:17:ac: 83:a6:9a:95:0d:0a:52:d3:be:7f:b2:a4:38:59:29: b8:33:9b:34:b6:05:d2:cf:95:10:59:53:68:32:09: fb:4f:3f:a1:0c:55:68:b2:8b:14:a8:32:79:16:8f: 82:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:FE:55:56:B8:4F:D3:E4:04:33:65:2A:48:F9:A2:8E:A1:09:A5:7D X509v3 Authority Key Identifier: keyid:73:D2:11:D5:B2:10:E3:B1:96:05:4D:B7:18:92:D8:E3:8A:4E:09:EF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/c9IR1bIQ47GWBU23GJLY44pOCe8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c9IR1bIQ47GWBU23GJLY44pOCe8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/Uv5VVrhP0-QEM2UqSPmijqEJpX0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.249.168.0/23 Signature Algorithm: sha256WithRSAEncryption 48:60:09:40:6d:20:d4:44:bd:ed:dc:71:d2:d6:d0:96:5f:43: 38:00:68:21:75:ba:ec:f4:1a:45:01:1b:39:fb:1f:01:68:17: 54:f1:77:70:52:c5:9a:f6:07:0b:c9:e0:f3:3d:0f:ac:18:c0: f3:a5:b0:8e:6a:bd:60:62:db:79:c7:8f:82:7b:24:93:26:48: 99:ec:a6:b1:6e:cc:42:54:33:fe:05:ac:e2:bd:85:30:33:4d: 73:85:cf:0a:8b:61:86:82:84:a2:ba:18:bb:4c:5f:ac:11:8f: 31:dd:b7:3e:12:de:47:53:9d:87:4d:4f:94:44:c9:8a:5b:80: 71:48:a6:ae:7e:b2:e0:f2:f3:be:e0:1b:79:35:9e:49:51:43: ac:19:8f:8f:0c:dd:f4:35:6d:be:e9:fc:b0:38:23:89:a0:5c: e0:48:18:f5:93:01:f1:95:ec:9c:f4:c0:5b:50:74:99:d2:cf: 4d:48:a5:10:17:c6:5e:37:bb:79:6a:26:f4:2d:bc:c7:3e:58: de:78:69:0a:cd:f2:e1:76:bf:97:9d:e0:09:0f:0d:5c:86:00: bf:15:94:13:33:b1:2f:d9:cd:02:a5:94:0a:0a:e9:e4:00:8c: 7d:3e:5e:9a:47:59:56:fb:cb:6d:94:36:29:f1:c8:6b:6d:8d: d4:d0:8c:a3 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzNE MjExRDVCMjEwRTNCMTk2MDU0REI3MTg5MkQ4RTM4QTRFMDlFRjAeFw0yNTA3MzEw ODI3NDJaFw0yNjA2MjUwMjM1MTJaMDMxMTAvBgNVBAMTKDUyRkU1NTU2Qjg0RkQz RTQwNDMzNjUyQTQ4RjlBMjhFQTEwOUE1N0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcNOG6s+WHu+YOSQpd6x4P9j5QdCal4qDeefqIV4pJcqUd+6ww 0VPOY8CjZ3RwHKWWom2mdEqagdbyL17EFthhHe/v9VgooM8+Q+txE/0wMQ4+Smx7 OGG1hbMt0/gR7To9S+RkQE/2b38wALQXG79jcFTuGiPlio7CWG44OWrvUFwPQ0Md NUayDhdk9KWLvKjPmu1QE8DM+RDFFtOzpXKfDoILEcgSsgY+Tndr19r3ndr2m9Sm sAJR4vRid8LeFMsCqlakfIjCweEsBmDXAs8XrIOmmpUNClLTvn+ypDhZKbgzmzS2 BdLPlRBZU2gyCftPP6EMVWiyixSoMnkWj4I1AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUUv5VVrhP0+QEM2UqSPmijqEJpX0wHwYDVR0jBBgwFoAUc9IR1bIQ47GWBU23 GJLY44pOCe8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjky Ny9jOUlSMWJJUTQ3R1dCVTIzR0pMWTQ0cE9DZTguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2M5SVIxYklRNDdHV0JVMjNHSkxZNDRwT0NlOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI5MjcvVXY1VlZyaFAwLVFF TTJVcVNQbWlqcUVKcFgwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEASv5qDANBgkqhkiG9w0BAQsFAAOCAQEASGAJQG0g1ES97dxx0tbQll9DOABo IXW67PQaRQEbOfsfAWgXVPF3cFLFmvYHC8ng8z0PrBjA86Wwjmq9YGLbecePgnsk kyZImeymsW7MQlQz/gWs4r2FMDNNc4XPCothhoKEoroYu0xfrBGPMd23PhLeR1Od h01PlETJiluAcUimrn6y4PLzvuAbeTWeSVFDrBmPjwzd9DVtvun8sDgjiaBc4EgY 9ZMB8ZXsnPTAW1B0mdLPTUilEBfGXje7eWom9C28xz5Y3nhpCs3y4Xa/l53gCQ8N XIYAvxWUEzOxL9nNAqWUCgrp5ACMfT5emkdZVvvLbZQ2KfHIa22N1NCMow== -----END CERTIFICATE-----Generated at Thu Aug 14 11:04:58 2025 by rpki-client