$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1228/p8dPCz1-DM8oZAbLKQI9W1S52aI.roa File: p8dPCz1-DM8oZAbLKQI9W1S52aI.roa (raw, json) Hash identifier: YlDx1ECxWXJtCx373KSdly7XOBerHvXGr5nQka2FgVk= Subject key identifier: A7:C7:4F:0B:3D:7E:0C:CF:28:64:06:CB:29:02:3D:5B:54:B9:D9:A2 Certificate issuer: /CN=ADD2726DD6FF9F5A459AE5B0A9EE8E7DDFC7F07C Certificate serial: 0177 Authority key identifier: AD:D2:72:6D:D6:FF:9F:5A:45:9A:E5:B0:A9:EE:8E:7D:DF:C7:F0:7C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/p8dPCz1-DM8oZAbLKQI9W1S52aI.roa Signing time: Tue 22 Jul 2025 09:06:20 +0000 ROA not before: Tue 22 Jul 2025 09:06:20 +0000 ROA not after: Sat 16 May 2026 10:06:17 +0000 asID: 62468 IP address blocks: 103.60.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 10:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 375 (0x177) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADD2726DD6FF9F5A459AE5B0A9EE8E7DDFC7F07C Validity Not Before: Jul 22 09:06:20 2025 GMT Not After : May 16 10:06:17 2026 GMT Subject: CN=A7C74F0B3D7E0CCF286406CB29023D5B54B9D9A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:70:95:ed:6b:9c:a5:52:50:81:2c:10:73:74: 6e:de:d2:b5:c9:f5:88:96:cf:f9:31:19:6c:ae:bc: e1:1a:9a:73:4c:ee:1b:94:6f:81:ca:64:0e:45:ba: 72:95:05:18:6e:e2:8e:1e:81:64:c7:f0:fa:58:f4: 78:80:7a:79:95:73:43:ae:0f:02:60:44:be:4e:77: 3b:3a:6e:7e:fb:78:2f:fe:88:14:72:1a:9e:dd:de: 2c:cb:b1:fd:44:b0:20:f7:47:a7:cc:af:d0:64:e4: cd:b7:fc:41:2b:21:62:29:66:8a:2c:b0:63:9d:e5: ce:4c:75:3e:7d:8e:93:b6:d6:cd:3d:c2:a5:bb:29: cc:9d:4b:93:58:12:71:bc:92:6d:da:a0:f0:40:c6: df:87:94:63:3a:0f:f1:d5:ae:ff:35:36:90:d2:53: 2c:71:c9:e0:25:a0:de:94:77:3c:6d:4b:45:2f:c9: 78:bd:a9:61:f1:eb:ca:68:04:da:b7:78:77:f2:c6: c7:6e:60:ae:ae:8a:b6:8f:20:fc:6b:40:99:de:f2: 0e:85:c7:41:06:99:2d:fc:0f:e1:38:50:c2:b4:e4: ea:b2:32:c8:fb:2e:8c:fb:06:31:54:47:2c:8a:e7: e8:c6:22:03:5e:5b:ab:18:12:42:ea:44:13:c6:27: 4b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C7:4F:0B:3D:7E:0C:CF:28:64:06:CB:29:02:3D:5B:54:B9:D9:A2 X509v3 Authority Key Identifier: keyid:AD:D2:72:6D:D6:FF:9F:5A:45:9A:E5:B0:A9:EE:8E:7D:DF:C7:F0:7C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/p8dPCz1-DM8oZAbLKQI9W1S52aI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.60.164.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:3b:7a:1f:16:66:17:43:c5:03:cd:c9:d2:88:4c:7d:e2:fb: 26:32:bd:4a:66:0b:52:dd:7f:5f:30:5e:5a:0c:d5:3f:33:9c: 1a:4e:ad:2e:3e:ea:e9:43:ee:d3:70:2e:85:28:6a:74:ae:92: 2e:8b:cb:0f:6f:41:99:f6:df:68:1a:6f:c5:5b:09:41:b1:28: 55:69:d8:34:de:41:f3:29:93:6b:9a:19:41:ec:4b:2e:1c:49: b2:a8:6b:67:df:ab:06:2b:3c:e0:db:48:8d:c2:21:6e:de:27: b7:9d:19:0a:4c:dd:be:a8:75:12:9f:2c:95:7d:12:0a:0c:7c: c8:d8:7b:74:9f:c1:ab:73:65:72:eb:55:2b:17:60:7f:33:b3: 2a:db:ca:ac:39:91:37:ea:02:e1:95:70:05:36:42:7c:3d:e6: 9d:3e:21:23:86:1b:b0:ad:9c:76:16:94:63:02:95:51:11:ca: 5f:66:c3:05:aa:58:d8:1f:d8:04:0e:d8:31:b0:02:5f:d6:ca: 69:b8:a6:58:81:5d:6f:64:64:cc:f5:8c:e7:fe:08:f1:3a:f6: 40:d8:56:5b:9e:13:5c:9c:1b:9d:e1:ab:de:01:06:10:c8:7f: f8:70:1d:20:75:4e:8a:fc:18:6f:f8:90:a0:cd:51:2a:26:82: 5c:8c:b5:0f -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICAXcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQURE MjcyNkRENkZGOUY1QTQ1OUFFNUIwQTlFRThFN0RERkM3RjA3QzAeFw0yNTA3MjIw OTA2MjBaFw0yNjA1MTYxMDA2MTdaMDMxMTAvBgNVBAMTKEE3Qzc0RjBCM0Q3RTBD Q0YyODY0MDZDQjI5MDIzRDVCNTRCOUQ5QTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGcJXta5ylUlCBLBBzdG7e0rXJ9YiWz/kxGWyuvOEamnNM7huU b4HKZA5FunKVBRhu4o4egWTH8PpY9HiAenmVc0OuDwJgRL5Odzs6bn77eC/+iBRy Gp7d3izLsf1EsCD3R6fMr9Bk5M23/EErIWIpZoossGOd5c5MdT59jpO21s09wqW7 KcydS5NYEnG8km3aoPBAxt+HlGM6D/HVrv81NpDSUyxxyeAloN6UdzxtS0UvyXi9 qWHx68poBNq3eHfyxsduYK6uiraPIPxrQJne8g6Fx0EGmS38D+E4UMK05OqyMsj7 Loz7BjFURyyK5+jGIgNeW6sYEkLqRBPGJ0vHAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUp8dPCz1+DM8oZAbLKQI9W1S52aIwHwYDVR0jBBgwFoAUrdJybdb/n1pFmuWw qe6Ofd/H8HwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIy OC9yZEp5YmRiX24xcEZtdVd3cWU2T2ZkX0g4SHcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3JkSnliZGJfbjFwRm11V3dxZTZPZmRfSDhIdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEyMjgvcDhkUEN6MS1ETThv WkFiTEtRSTlXMVM1MmFJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmc8pDANBgkqhkiG9w0BAQsFAAOCAQEAmjt6HxZmF0PFA83J0ohMfeL7JjK9 SmYLUt1/XzBeWgzVPzOcGk6tLj7q6UPu03AuhShqdK6SLovLD29BmfbfaBpvxVsJ QbEoVWnYNN5B8ymTa5oZQexLLhxJsqhrZ9+rBis84NtIjcIhbt4nt50ZCkzdvqh1 Ep8slX0SCgx8yNh7dJ/Bq3NlcutVKxdgfzOzKtvKrDmRN+oC4ZVwBTZCfD3mnT4h I4YbsK2cdhaUYwKVURHKX2bDBapY2B/YBA7YMbACX9bKabimWIFdb2RkzPWM5/4I 8Tr2QNhWW54TXJwbneGr3gEGEMh/+HAdIHVOivwYb/iQoM1RKiaCXIy1Dw== -----END CERTIFICATE-----Generated at Mon Aug 11 07:45:23 2025 by rpki-client