$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/73bU7vOYfcg9_5f_nPOSD1Fffro.roa File: 73bU7vOYfcg9_5f_nPOSD1Fffro.roa (raw, json) Hash identifier: 87/UtbH6LqV0IszbSbm/eERMT/Cpbtoem/Cv4q4Ozj8= Subject key identifier: EF:76:D4:EE:F3:98:7D:C8:3D:FF:97:FF:9C:F3:92:0F:51:5F:7E:BA Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA Certificate serial: 0A66 Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/73bU7vOYfcg9_5f_nPOSD1Fffro.roa Signing time: Sat 13 Sep 2025 03:03:17 +0000 ROA not before: Sat 13 Sep 2025 03:03:17 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 7641 IP address blocks: 211.89.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 04:43:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2662 (0xa66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA Validity Not Before: Sep 13 03:03:17 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=EF76D4EEF3987DC83DFF97FF9CF3920F515F7EBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e4:5b:b0:2d:e7:69:ce:1d:f8:11:da:01:7b: 87:b2:18:30:e5:0d:aa:42:20:d1:41:29:e8:3a:b7: 01:85:7c:b7:b7:6e:6f:6b:ec:65:54:d7:8f:f0:e8: e2:31:fa:95:fa:35:5f:6d:07:02:12:c5:49:80:e1: 70:b4:d8:86:50:d7:07:2b:1e:07:73:d5:f7:f1:a2: ce:70:9c:8c:e4:7e:11:6a:16:59:15:77:31:87:a1: 01:86:ea:c9:a5:ff:87:e6:d6:ed:0d:7f:d3:9e:89: 1c:0c:82:bd:79:d1:5c:27:09:85:ec:55:74:7c:95: 23:bb:bb:57:21:a6:e1:35:86:0e:6f:cb:26:d4:da: df:37:33:2a:ad:d4:8b:8f:3b:36:d9:8f:af:22:d8: 86:f4:c7:8a:30:c2:b9:40:e0:01:30:1b:8e:69:08: d4:cd:72:c0:35:3d:13:f5:4c:5e:da:cd:cb:61:ac: a6:cf:4e:13:d9:fd:56:90:a7:6c:8d:50:88:92:01: 0a:6d:52:33:04:91:01:9b:b4:e3:55:cc:74:74:cd: 46:b1:6c:fe:c3:a9:79:08:d5:42:2b:c7:1e:ba:67: fe:ac:80:68:9c:3e:ec:2a:c9:6e:82:ea:7e:a7:36: f5:e9:9c:a5:54:78:c2:8a:31:f8:90:9d:82:9c:14: b0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:76:D4:EE:F3:98:7D:C8:3D:FF:97:FF:9C:F3:92:0F:51:5F:7E:BA X509v3 Authority Key Identifier: keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/73bU7vOYfcg9_5f_nPOSD1Fffro.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.89.0.0/16 Signature Algorithm: sha256WithRSAEncryption 3f:eb:18:1f:89:27:70:c9:19:7c:ea:4a:0f:a3:c7:29:1b:52: 03:af:27:0b:c2:36:fa:b1:3b:ae:b5:5f:39:8b:7c:cd:52:d5: 02:16:60:a0:cd:1e:9e:d5:73:39:5a:02:45:92:21:8c:8d:9b: b1:69:c4:c7:09:af:8c:20:55:fe:97:8a:6c:ad:1e:29:ba:f2: e0:53:1b:e3:00:64:fc:6b:24:41:9c:1e:9f:09:44:d6:1f:60: fc:8a:9a:64:47:3a:77:a8:fb:d0:85:23:a7:5d:c5:97:c1:88: 3a:5e:76:6e:4b:85:6c:e2:b8:7b:35:9b:59:71:06:6a:35:d7: d0:59:e4:5a:0f:61:c3:dd:64:aa:63:6d:67:69:02:4b:68:3a: 12:39:db:36:63:ac:ec:bb:bf:e1:b6:71:c9:e7:34:85:27:b0: 95:5f:63:b7:66:4c:02:cc:6f:08:61:5a:1c:4c:00:95:57:31: 44:55:41:a4:16:65:2f:a1:0c:b7:34:ca:4a:50:8c:c3:34:cb: ea:08:50:bd:28:4e:17:50:37:23:f0:b5:f5:11:f1:6f:ae:bc: f9:38:f0:a9:88:13:fe:b3:a0:28:09:a7:bb:fb:3f:30:af:65: 64:80:d0:43:d0:b3:bd:29:30:ff:7c:bf:e3:8e:6f:b1:1b:be: 66:56:bb:39 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICCmYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkMw MzE0REZERUQ0MUFCNjExRDk5RjU0MjA2Mzk4MkZFMzgwODBCQTAeFw0yNTA5MTMw MzAzMTdaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEVGNzZENEVFRjM5ODdE QzgzREZGOTdGRjlDRjM5MjBGNTE1RjdFQkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDC5FuwLedpzh34EdoBe4eyGDDlDapCINFBKeg6twGFfLe3bm9r 7GVU14/w6OIx+pX6NV9tBwISxUmA4XC02IZQ1wcrHgdz1ffxos5wnIzkfhFqFlkV dzGHoQGG6sml/4fm1u0Nf9OeiRwMgr150VwnCYXsVXR8lSO7u1chpuE1hg5vyybU 2t83Myqt1IuPOzbZj68i2Ib0x4owwrlA4AEwG45pCNTNcsA1PRP1TF7azcthrKbP ThPZ/VaQp2yNUIiSAQptUjMEkQGbtONVzHR0zUaxbP7DqXkI1UIrxx66Z/6sgGic PuwqyW6C6n6nNvXpnKVUeMKKMfiQnYKcFLDpAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU73bU7vOYfcg9/5f/nPOSD1FffrowHwYDVR0jBBgwFoAULAMU397UGrYR2Z9U IGOYL+OAgLowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMv TEFNVTM5N1VHcllSMlo5VUlHT1lMLU9BZ0xvLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MQU1VMzk3VUdyWVIyWjlVSUdPWUwtT0FnTG8uY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMy83M2JVN3ZPWWZjZzlfNWZf blBPU0QxRmZmcm8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA 01kwDQYJKoZIhvcNAQELBQADggEBAD/rGB+JJ3DJGXzqSg+jxykbUgOvJwvCNvqx O661XzmLfM1S1QIWYKDNHp7VczlaAkWSIYyNm7FpxMcJr4wgVf6XimytHim68uBT G+MAZPxrJEGcHp8JRNYfYPyKmmRHOneo+9CFI6ddxZfBiDpedm5LhWziuHs1m1lx Bmo119BZ5FoPYcPdZKpjbWdpAktoOhI52zZjrOy7v+G2ccnnNIUnsJVfY7dmTALM bwhhWhxMAJVXMURVQaQWZS+hDLc0ykpQjMM0y+oIUL0oThdQNyPwtfUR8W+uvPk4 8KmIE/6zoCgJp7v7PzCvZWSA0EPQs70pMP98v+OOb7EbvmZWuzk= -----END CERTIFICATE-----Generated at Thu Nov 6 02:50:45 2025 by rpki-client