$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/361/VS17zQHJixrbUv4jioh85SjDNY4.roa File: VS17zQHJixrbUv4jioh85SjDNY4.roa (raw, json) Hash identifier: mrVMrRtK8XPKGGEbzwkp5O1/ilSYDWqZNOunXjUgl4Q= Subject key identifier: 55:2D:7B:CD:01:C9:8B:1A:DB:52:FE:23:8A:88:7C:E5:28:C3:35:8E Certificate issuer: /CN=585206C87420BE42C7B9042DE3E5FD51595FF14B Certificate serial: 1E8F Authority key identifier: 58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/VS17zQHJixrbUv4jioh85SjDNY4.roa Signing time: Thu 05 Jun 2025 09:02:28 +0000 ROA not before: Thu 05 Jun 2025 09:02:28 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 131314 IP address blocks: 202.65.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 18:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7823 (0x1e8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=585206C87420BE42C7B9042DE3E5FD51595FF14B Validity Not Before: Jun 5 09:02:28 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=552D7BCD01C98B1ADB52FE238A887CE528C3358E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:71:bf:d7:0b:4f:3d:df:df:80:2d:dc:2e:cb: 3f:09:d1:41:2e:61:34:50:c2:4d:14:32:0d:e0:7f: 31:f7:f6:01:b1:6a:31:df:d6:99:6b:5f:42:38:61: 27:b7:d7:48:6d:10:39:73:18:07:8c:11:dd:a7:49: 2a:ce:0c:04:9d:0d:77:c2:01:cd:d6:a5:d5:b8:dd: e0:3e:fc:5c:1d:49:dd:de:8a:86:d2:58:e7:67:d9: 8f:ee:06:8e:d3:c4:b0:d5:f3:35:12:53:6c:11:20: 58:30:d2:6a:db:83:c5:6e:6e:58:1f:be:bc:14:12: 9b:98:88:1b:2b:c5:2e:9e:a7:c4:2b:81:31:d2:28: e7:b9:34:ef:88:18:57:f8:01:d9:48:1c:86:be:c7: 0d:30:c6:81:92:e5:5f:13:c7:eb:78:cf:67:e2:f8: bc:f5:6e:32:27:4e:18:9f:e3:31:19:4f:2d:f9:fe: 32:37:57:da:c6:97:1a:9c:d9:12:9c:9d:75:d5:fa: d2:80:57:df:1f:27:dd:95:8c:e3:04:40:f4:af:94: 99:1f:14:bf:1e:e4:3b:0d:2a:45:19:7b:71:ac:43: e6:1e:b1:d2:db:95:ae:ee:c7:11:65:4b:e5:6c:b9: 58:d9:c2:97:bb:13:d6:04:c4:27:fa:02:71:39:9e: c2:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:2D:7B:CD:01:C9:8B:1A:DB:52:FE:23:8A:88:7C:E5:28:C3:35:8E X509v3 Authority Key Identifier: keyid:58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/VS17zQHJixrbUv4jioh85SjDNY4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.65.96.0/24 Signature Algorithm: sha256WithRSAEncryption 04:f0:8c:f0:25:5e:bf:33:9a:87:0f:10:f0:88:10:53:36:22: 08:ad:38:e8:69:2e:c6:d8:7d:9a:6a:d2:ce:cf:3a:68:aa:21: 55:fb:b2:85:c7:21:9c:17:58:93:27:f5:4a:e8:84:03:53:08: 37:57:bc:9e:c3:75:c8:5d:67:45:bc:99:b4:7c:a8:6d:ff:ff: cf:d7:0e:4d:a4:88:61:9f:88:b8:9e:24:ed:62:bc:e0:f9:bd: 25:0a:8c:22:1b:14:e1:ca:09:1b:9f:9d:e2:98:30:18:ba:1b: 8d:47:99:4e:a5:64:df:af:3e:35:d0:eb:cd:9d:73:c6:d8:6d: 4a:85:07:14:18:ae:95:16:92:e4:42:df:80:44:a2:32:1d:77: 2f:e6:a5:50:52:69:b2:96:f3:2e:7e:a8:fa:87:ef:6c:71:20: 35:c8:4c:5a:69:5b:fd:7a:a5:58:fd:10:85:b2:90:4b:5a:f5: e2:40:92:c2:d1:0f:42:21:20:ed:68:75:23:2e:30:5f:5c:06: 18:f4:75:0a:22:a7:32:7d:05:39:db:df:7b:c0:9e:30:81:a1: ed:59:ff:1a:ef:d3:4f:b3:48:3e:1e:81:4b:6b:62:ea:59:d7: c8:78:d5:5f:8f:3c:30:50:39:a3:34:f3:e4:d4:64:74:5b:34: 39:cf:aa:c8 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHo8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTg1 MjA2Qzg3NDIwQkU0MkM3QjkwNDJERTNFNUZENTE1OTVGRjE0QjAeFw0yNTA2MDUw OTAyMjhaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDU1MkQ3QkNEMDFDOThC MUFEQjUyRkUyMzhBODg3Q0U1MjhDMzM1OEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCecb/XC08939+ALdwuyz8J0UEuYTRQwk0UMg3gfzH39gGxajHf 1plrX0I4YSe310htEDlzGAeMEd2nSSrODASdDXfCAc3WpdW43eA+/FwdSd3eiobS WOdn2Y/uBo7TxLDV8zUSU2wRIFgw0mrbg8VublgfvrwUEpuYiBsrxS6ep8QrgTHS KOe5NO+IGFf4AdlIHIa+xw0wxoGS5V8Tx+t4z2fi+Lz1bjInThif4zEZTy35/jI3 V9rGlxqc2RKcnXXV+tKAV98fJ92VjOMEQPSvlJkfFL8e5DsNKkUZe3GsQ+YesdLb la7uxxFlS+VsuVjZwpe7E9YExCf6AnE5nsLfAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUVS17zQHJixrbUv4jioh85SjDNY4wHwYDVR0jBBgwFoAUWFIGyHQgvkLHuQQt 4+X9UVlf8UswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzYx L1dGSUd5SFFndmtMSHVRUXQ0LVg5VVZsZjhVcy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvV0ZJR3lIUWd2a0xIdVFRdDQtWDlVVmxmOFVzLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzYxL1ZTMTd6UUhKaXhyYlV2 NGppb2g4NVNqRE5ZNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADKQWAwDQYJKoZIhvcNAQELBQADggEBAATwjPAlXr8zmocPEPCIEFM2IgitOOhp LsbYfZpq0s7POmiqIVX7soXHIZwXWJMn9UrohANTCDdXvJ7DdchdZ0W8mbR8qG3/ /8/XDk2kiGGfiLieJO1ivOD5vSUKjCIbFOHKCRufneKYMBi6G41HmU6lZN+vPjXQ 682dc8bYbUqFBxQYrpUWkuRC34BEojIddy/mpVBSabKW8y5+qPqH72xxIDXITFpp W/16pVj9EIWykEta9eJAksLRD0IhIO1odSMuMF9cBhj0dQoipzJ9BTnb33vAnjCB oe1Z/xrv00+zSD4egUtrYupZ18h41V+PPDBQOaM08+TUZHRbNDnPqsg= -----END CERTIFICATE-----Generated at Wed Nov 5 17:10:46 2025 by rpki-client