$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/399/zFIWySm5N6ElnRfGZaoHHUzjEMw.roa File: zFIWySm5N6ElnRfGZaoHHUzjEMw.roa (raw, json) Hash identifier: hh9SyLQOaJgdlKBVLpshJotMHHVhkvRmHVzX7K0/wbA= Subject key identifier: CC:52:16:C9:29:B9:37:A1:25:9D:17:C6:65:AA:07:1D:4C:E3:10:CC Certificate issuer: /CN=51C4C1D52D2E3FE6BF3D9BF1B3D6924B49C5D4E5 Certificate serial: 4F75 Authority key identifier: 51:C4:C1:D5:2D:2E:3F:E6:BF:3D:9B:F1:B3:D6:92:4B:49:C5:D4:E5 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UcTB1S0uP-a_PZvxs9aSS0nF1OU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/399/zFIWySm5N6ElnRfGZaoHHUzjEMw.roa Signing time: Mon 26 Jan 2026 06:54:53 +0000 ROA not before: Mon 26 Jan 2026 06:54:53 +0000 ROA not after: Sat 09 Jan 2027 08:23:18 +0000 asID: 132203 IP address blocks: 203.205.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/399/UcTB1S0uP-a_PZvxs9aSS0nF1OU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/399/UcTB1S0uP-a_PZvxs9aSS0nF1OU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UcTB1S0uP-a_PZvxs9aSS0nF1OU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 08:30:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20341 (0x4f75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51C4C1D52D2E3FE6BF3D9BF1B3D6924B49C5D4E5 Validity Not Before: Jan 26 06:54:53 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=CC5216C929B937A1259D17C665AA071D4CE310CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4d:a2:ed:b0:54:67:99:16:7e:4a:43:18:7d: 30:56:0d:cd:4e:33:5c:7f:4a:29:e1:cb:19:d3:9b: 90:c4:0f:90:8e:a6:ae:8f:5e:5c:0e:18:0c:20:7a: 0b:de:93:8e:20:7c:d0:a4:ff:c0:ce:8c:23:f4:be: 96:d0:2c:07:78:b3:46:62:e6:5e:8d:3b:a4:9c:44: 2a:43:d8:41:3a:68:68:e5:09:e4:fa:67:9e:1f:05: 22:35:79:a1:13:c1:da:55:9d:67:13:3b:be:58:58: 62:af:4f:4e:28:56:ee:6f:0d:23:f6:68:77:b6:f9: bb:a0:5c:37:8e:9b:2d:8b:40:1b:8a:54:7e:52:1a: c2:1e:e7:10:56:13:28:05:08:4f:47:f2:35:f7:ff: 7d:8a:69:cf:4a:56:c7:df:b5:2f:82:bd:df:54:dc: 9c:a8:e2:ba:b6:08:52:aa:44:45:e7:fb:4b:c3:04: 28:b0:a0:e0:86:09:89:23:09:ef:e7:8b:24:b5:b1: 61:cf:44:53:0a:3e:03:39:35:66:99:c6:82:21:3a: 2f:91:6e:76:bc:f2:3a:d9:ed:5f:ce:87:76:d6:ce: 63:a8:d1:2b:96:8f:dd:82:31:42:f4:4f:d8:43:7c: eb:ea:5f:19:74:cf:15:8b:29:d8:ce:26:c4:36:5b: 9e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:52:16:C9:29:B9:37:A1:25:9D:17:C6:65:AA:07:1D:4C:E3:10:CC X509v3 Authority Key Identifier: keyid:51:C4:C1:D5:2D:2E:3F:E6:BF:3D:9B:F1:B3:D6:92:4B:49:C5:D4:E5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/399/UcTB1S0uP-a_PZvxs9aSS0nF1OU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UcTB1S0uP-a_PZvxs9aSS0nF1OU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/399/zFIWySm5N6ElnRfGZaoHHUzjEMw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.205.159.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:89:fd:71:54:42:88:72:38:4f:89:7a:ae:5a:1a:91:18:0e: ec:e6:cc:16:12:ab:cb:5a:34:9f:05:ef:b1:ff:3a:0d:62:cd: 96:fc:49:c1:9c:8d:e7:bf:38:50:b0:6c:ad:76:1d:b6:9b:42: de:8e:f9:fc:06:9f:78:04:3e:83:40:0a:4c:84:bf:ef:d1:49: ef:bd:fa:1a:96:98:40:11:56:97:cf:79:1b:24:cb:42:0e:04: b2:49:88:62:97:e8:3e:50:fd:fe:ee:36:22:4f:46:e6:e6:d6: 5f:08:3e:bd:9d:21:b7:4c:e9:7f:33:4e:a7:30:e3:67:3f:31: 31:2d:1d:b8:16:0d:2a:26:ea:4c:13:69:71:c8:54:d5:33:06: c2:0b:64:80:83:00:34:80:3e:21:26:b7:06:21:d7:6a:c0:78: c0:4c:43:f7:f5:bc:3a:0b:49:3a:0c:8a:74:f4:a8:bb:6d:3c: f0:0c:10:ee:68:51:d4:c7:0f:a3:21:12:f6:41:40:ee:c3:fd: f8:74:68:bf:10:7d:35:8f:2c:39:50:52:2c:1e:04:06:07:d1: f4:f2:9e:0c:b5:bf:18:b2:b8:3c:1f:6a:bc:d9:e5:c7:6d:92: 8c:fa:d7:a2:37:44:4c:95:5f:5f:56:d8:9b:90:f3:02:5f:f7: 23:c8:d4:a1 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICT3UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTFD NEMxRDUyRDJFM0ZFNkJGM0Q5QkYxQjNENjkyNEI0OUM1RDRFNTAeFw0yNjAxMjYw NjU0NTNaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKENDNTIxNkM5MjlCOTM3 QTEyNTlEMTdDNjY1QUEwNzFENENFMzEwQ0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLTaLtsFRnmRZ+SkMYfTBWDc1OM1x/SinhyxnTm5DED5COpq6P XlwOGAwgegvek44gfNCk/8DOjCP0vpbQLAd4s0Zi5l6NO6ScRCpD2EE6aGjlCeT6 Z54fBSI1eaETwdpVnWcTO75YWGKvT04oVu5vDSP2aHe2+bugXDeOmy2LQBuKVH5S GsIe5xBWEygFCE9H8jX3/32Kac9KVsfftS+Cvd9U3Jyo4rq2CFKqREXn+0vDBCiw oOCGCYkjCe/niyS1sWHPRFMKPgM5NWaZxoIhOi+Rbna88jrZ7V/Oh3bWzmOo0SuW j92CMUL0T9hDfOvqXxl0zxWLKdjOJsQ2W563AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUzFIWySm5N6ElnRfGZaoHHUzjEMwwHwYDVR0jBBgwFoAUUcTB1S0uP+a/PZvx s9aSS0nF1OUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzk5 L1VjVEIxUzB1UC1hX1BadnhzOWFTUzBuRjFPVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvVWNUQjFTMHVQLWFfUFp2eHM5YVNTMG5GMU9VLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzk5L3pGSVd5U201TjZFbG5S ZkdaYW9ISFV6akVNdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADLzZ8wDQYJKoZIhvcNAQELBQADggEBAH2J/XFUQohyOE+Jeq5aGpEYDuzmzBYS q8taNJ8F77H/Og1izZb8ScGcjee/OFCwbK12HbabQt6O+fwGn3gEPoNACkyEv+/R Se+9+hqWmEARVpfPeRsky0IOBLJJiGKX6D5Q/f7uNiJPRubm1l8IPr2dIbdM6X8z Tqcw42c/MTEtHbgWDSom6kwTaXHIVNUzBsILZICDADSAPiEmtwYh12rAeMBMQ/f1 vDoLSToMinT0qLttPPAMEO5oUdTHD6MhEvZBQO7D/fh0aL8QfTWPLDlQUiweBAYH 0fTyngy1vxiyuDwfarzZ5cdtkoz616I3REyVX19W2JuQ8wJf9yPI1KE= -----END CERTIFICATE-----Generated at Mon Mar 2 07:36:06 2026 by rpki-client