$ rpki-client -vvf rpki.cernet.edu.cn/repo/cernet/2/3130332e3136352e3131312e302f32342d3234203d3e2034353338.roa File: 3130332e3136352e3131312e302f32342d3234203d3e2034353338.roa (raw, json) Hash identifier: yG2tSSRlDmIt5b9BWyR/YmGA0RL8jZU64YaW4FBwJOw= Subject key identifier: A1:B7:13:E6:1C:3C:62:11:48:00:31:67:1D:66:F3:C1:C3:2B:49:98 Certificate issuer: /CN=A91E5D610000/serialNumber=1816390155BE0839694B6A7E72CA8DBFA4EBD915 Certificate serial: 77AC0C317EB807445CABBDADC305FE95E9AB257A Authority key identifier: 18:16:39:01:55:BE:08:39:69:4B:6A:7E:72:CA:8D:BF:A4:EB:D9:15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer Subject info access: rsync://rpki.cernet.edu.cn/repo/cernet/2/3130332e3136352e3131312e302f32342d3234203d3e2034353338.roa Signing time: Tue 14 Oct 2025 06:00:43 +0000 ROA not before: Tue 14 Oct 2025 05:55:43 +0000 ROA not after: Tue 13 Oct 2026 06:00:43 +0000 asID: 4538 IP address blocks: 103.165.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 21:04:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:ac:0c:31:7e:b8:07:44:5c:ab:bd:ad:c3:05:fe:95:e9:ab:25:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610000, serialNumber=1816390155BE0839694B6A7E72CA8DBFA4EBD915 Validity Not Before: Oct 14 05:55:43 2025 GMT Not After : Oct 13 06:00:43 2026 GMT Subject: CN=A1B713E61C3C6211480031671D66F3C1C32B4998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:dd:61:54:5b:7c:69:f8:dc:7d:be:8e:85:17: aa:b7:0e:4a:f6:c1:89:1e:79:73:aa:dd:85:19:59: ed:63:cf:76:e6:02:0f:88:70:23:96:9a:ef:ca:44: 51:99:ef:a2:10:78:80:2c:fa:88:9e:7e:ac:f2:8d: e8:95:f9:f4:17:4e:5c:f4:e1:0e:66:fc:10:18:4d: df:fb:f3:cd:7a:40:8e:5e:10:85:82:9c:e1:eb:77: 14:cb:15:e7:e9:00:6e:16:d1:9d:01:d0:8f:13:d8: b6:4c:e1:4c:29:23:c7:e0:4c:db:9a:84:3b:9f:35: 53:47:41:b9:6f:16:89:35:6b:16:35:40:15:66:79: 02:72:e0:2f:da:36:85:6e:0e:6c:d3:05:e4:89:f5: be:1c:1e:b6:4e:5d:10:a0:fb:f5:f4:39:6e:f5:3e: 22:a9:e1:2c:2c:d5:b4:b6:f7:d4:80:71:7d:3f:81: 9e:1a:a1:8e:19:2b:11:f8:d1:89:6f:88:0f:24:8d: 8a:49:6c:55:b7:85:56:3e:2f:b6:5f:85:7c:63:39: 55:8f:76:a4:54:cf:02:bd:58:bf:2a:56:a0:2e:58: e4:ea:19:5b:fd:d9:ea:4c:16:43:d6:d4:d9:38:21: f8:4a:d4:ae:47:7c:1a:1d:49:54:08:68:0c:26:b0: 8d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:B7:13:E6:1C:3C:62:11:48:00:31:67:1D:66:F3:C1:C3:2B:49:98 X509v3 Authority Key Identifier: keyid:18:16:39:01:55:BE:08:39:69:4B:6A:7E:72:CA:8D:BF:A4:EB:D9:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/3130332e3136352e3131312e302f32342d3234203d3e2034353338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.165.111.0/24 Signature Algorithm: sha256WithRSAEncryption 66:75:2e:b5:ca:d9:72:84:2e:5a:ee:ee:9b:32:3a:98:99:48: 52:fe:9d:a9:f1:ca:2f:25:6c:c9:8d:76:a3:d6:c7:01:31:e8: f3:ca:ba:55:91:39:5e:bf:26:16:1b:bf:c4:55:83:b4:c1:e1: 30:f7:6a:4e:23:01:96:ad:c8:3c:94:d9:6f:6d:18:ee:8c:5a: 26:fc:a0:d4:8b:dd:67:90:4e:76:f3:17:94:f1:ee:aa:bb:0d: cd:a0:ad:89:2c:2c:28:e7:91:51:f5:9e:df:bf:c5:a9:10:a0: 03:79:b1:e3:a0:9b:8a:df:7d:60:e1:45:bb:28:1e:4e:27:e9: c5:9a:3d:67:c9:54:c0:b2:41:12:a8:1d:49:50:99:cd:1c:f2: 3b:0e:1a:50:90:43:e1:98:57:e1:fa:12:30:f6:22:f5:e5:4d: 06:48:f4:25:6c:9d:22:c6:49:c3:a0:59:a9:e4:d9:49:04:37: 13:4b:0e:dd:06:c8:0c:e9:cf:3f:da:b8:65:8e:2c:74:0f:8c: 89:14:db:10:b3:7c:ab:ab:3a:03:a2:78:77:99:38:de:5d:0b: 8e:11:da:1c:fc:2f:09:4d:81:8d:07:ac:a7:2d:7a:8d:bb:92: 2d:7d:5b:d8:d7:96:8c:eb:6d:5a:ba:2c:6a:8a:0b:b9:91:15: 81:13:f1:18 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUd6wMMX64B0Rcq72twwX+lemrJXowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAwMTEwLwYDVQQFEygxODE2MzkwMTU1 QkUwODM5Njk0QjZBN0U3MkNBOERCRkE0RUJEOTE1MB4XDTI1MTAxNDA1NTU0M1oX DTI2MTAxMzA2MDA0M1owMzExMC8GA1UEAxMoQTFCNzEzRTYxQzNDNjIxMTQ4MDAz MTY3MUQ2NkYzQzFDMzJCNDk5ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK3dYVRbfGn43H2+joUXqrcOSvbBiR55c6rdhRlZ7WPPduYCD4hwI5aa78pE UZnvohB4gCz6iJ5+rPKN6JX59BdOXPThDmb8EBhN3/vzzXpAjl4QhYKc4et3FMsV 5+kAbhbRnQHQjxPYtkzhTCkjx+BM25qEO581U0dBuW8WiTVrFjVAFWZ5AnLgL9o2 hW4ObNMF5In1vhwetk5dEKD79fQ5bvU+IqnhLCzVtLb31IBxfT+BnhqhjhkrEfjR iW+IDySNiklsVbeFVj4vtl+FfGM5VY92pFTPAr1YvypWoC5Y5OoZW/3Z6kwWQ9bU 2Tgh+ErUrkd8Gh1JVAhoDCawjbcCAwEAAaOCAfgwggH0MB0GA1UdDgQWBBShtxPm HDxiEUgAMWcdZvPBwytJmDAfBgNVHSMEGDAWgBQYFjkBVb4IOWlLan5yyo2/pOvZ FTAOBgNVHQ8BAf8EBAMCB4AwZgYDVR0fBF8wXTBboFmgV4ZVcnN5bmM6Ly9ycGtp LmNlcm5ldC5lZHUuY24vcmVwby9jZXJuZXQvMi8xODE2MzkwMTU1QkUwODM5Njk0 QjZBN0U3MkNBOERCRkE0RUJEOTE1LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9HQlk1QVZXLUNEbHBTMnAtY3NxTnY2 VHIyUlUuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEFBQcwC4ZjcnN5bmM6Ly9y cGtpLmNlcm5ldC5lZHUuY24vcmVwby9jZXJuZXQvMi8zMTMwMzMyZTMxMzYzNTJl MzEzMTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzNTMzMzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnpW8wDQYJKoZIhvcNAQELBQADggEBAGZ1LrXK2XKELlru7psyOpiZSFL+nanx yi8lbMmNdqPWxwEx6PPKulWROV6/JhYbv8RVg7TB4TD3ak4jAZatyDyU2W9tGO6M Wib8oNSL3WeQTnbzF5Tx7qq7Dc2grYksLCjnkVH1nt+/xakQoAN5seOgm4rffWDh RbsoHk4n6cWaPWfJVMCyQRKoHUlQmc0c8jsOGlCQQ+GYV+H6EjD2IvXlTQZI9CVs nSLGScOgWank2UkENxNLDt0GyAzpzz/auGWOLHQPjIkU2xCzfKurOgOieHeZON5d C44R2hz8LwlNgY0HrKcteo27ki19W9jXlozrbVq6LGqKC7mRFYET8Rg= -----END CERTIFICATE-----Generated at Wed Nov 5 14:19:04 2025 by rpki-client