$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/6qdARHxgqLb_sc1enXb0ZCiDZZ0.roa File: 6qdARHxgqLb_sc1enXb0ZCiDZZ0.roa (raw, json) Hash identifier: 6bueCw5EAsSKsvnDFv0t/AIuvd95Q3wQuAvbWELMnQ4= Subject key identifier: EA:A7:40:44:7C:60:A8:B6:FF:B1:CD:5E:9D:76:F4:64:28:83:65:9D Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 7F84 Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6qdARHxgqLb_sc1enXb0ZCiDZZ0.roa Signing time: Wed 06 Aug 2025 07:33:11 +0000 ROA not before: Wed 06 Aug 2025 07:33:11 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 24426 IP address blocks: 103.236.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 14:33:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32644 (0x7f84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: Aug 6 07:33:11 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=EAA740447C60A8B6FFB1CD5E9D76F4642883659D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:2e:20:df:27:65:09:f3:6f:35:42:2e:0a:22: 75:cc:fc:bc:20:5d:62:87:86:b9:90:3b:c2:30:54: e8:58:4d:4a:b4:e5:bc:ca:55:df:07:0f:79:9f:63: 0c:6e:54:74:d4:45:d0:05:42:23:67:e7:35:23:e6: b0:5d:98:d6:4d:d8:b9:9a:42:3d:83:34:fd:8a:9b: cb:1e:64:55:d0:0d:9f:f5:77:80:ea:2a:42:bf:1c: f4:fe:01:8c:11:d5:89:d6:3d:45:9e:e1:a3:ab:64: 28:af:06:3e:0c:07:3f:b0:42:e1:ec:d7:7f:38:fc: 4a:df:1d:8d:47:77:f5:c0:09:d3:3c:3b:4c:28:4d: 62:a4:3a:1e:37:07:5d:97:3f:ae:8d:e2:74:c8:24: 17:16:9c:33:23:10:fa:26:4f:ab:ea:6b:e1:20:e1: 37:fa:3c:29:25:03:21:f1:dc:ee:56:b5:20:61:7a: e8:b6:0e:c0:12:f4:59:2a:eb:bf:b5:95:a5:56:ca: 01:4f:a8:82:12:54:dc:28:69:e5:80:3e:96:af:b1: 18:61:78:09:e2:ce:65:81:aa:9f:70:64:df:a7:fa: 53:a6:8b:b5:f6:0e:a7:7f:3c:2c:c1:e8:f4:72:fb: 38:6b:9d:a8:c2:b3:61:e9:18:4e:22:85:a6:d4:76: db:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:A7:40:44:7C:60:A8:B6:FF:B1:CD:5E:9D:76:F4:64:28:83:65:9D X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6qdARHxgqLb_sc1enXb0ZCiDZZ0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.236.44.0/22 Signature Algorithm: sha256WithRSAEncryption 80:9d:2c:cb:1f:80:44:7d:67:f9:fd:69:93:7d:7b:39:6e:dd: c6:c5:ad:45:c3:95:6f:00:01:13:b3:92:18:d9:50:29:a3:36: ca:92:00:c7:ef:3e:4a:73:f9:cb:b4:a2:82:aa:e9:31:66:ba: 1e:cb:19:c9:2a:b6:07:f0:23:99:83:8a:98:5b:72:89:a7:87: f0:6e:03:7e:e2:6f:15:ea:9b:27:1b:7f:63:fe:1e:72:8e:c4: 96:6d:24:79:e6:b9:b2:22:2c:ef:c4:2e:da:38:18:c3:cd:3a: b3:b0:d1:3e:ba:0b:36:ba:2c:42:ca:19:61:47:da:1c:de:49: fe:5d:82:7f:28:b3:c4:a9:29:82:ee:0a:df:1f:31:33:63:b1: e7:36:57:10:05:03:37:ff:0f:61:34:db:b7:6f:c9:18:54:0b: de:63:a3:d8:34:23:3a:bf:9e:22:67:bb:6b:3d:b4:24:df:e4: 73:24:e8:ba:5f:ee:c9:2a:72:1f:d7:58:76:21:9d:5d:f7:c6: ca:c3:61:ee:91:c7:cd:2a:d1:ab:96:8d:45:e6:52:90:df:74: 15:b2:5f:fd:49:58:98:2f:78:95:90:01:d7:5c:7b:0e:6a:ba: de:be:82:66:0e:9d:f0:c1:b8:57:45:4b:d2:43:d9:cc:d8:13: e8:59:d5:ae -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICf4QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA4MDYw NzMzMTFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEVBQTc0MDQ0N0M2MEE4 QjZGRkIxQ0Q1RTlENzZGNDY0Mjg4MzY1OUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZLiDfJ2UJ8281Qi4KInXM/LwgXWKHhrmQO8IwVOhYTUq05bzK Vd8HD3mfYwxuVHTURdAFQiNn5zUj5rBdmNZN2LmaQj2DNP2Km8seZFXQDZ/1d4Dq KkK/HPT+AYwR1YnWPUWe4aOrZCivBj4MBz+wQuHs1384/ErfHY1Hd/XACdM8O0wo TWKkOh43B12XP66N4nTIJBcWnDMjEPomT6vqa+Eg4Tf6PCklAyHx3O5WtSBheui2 DsAS9Fkq67+1laVWygFPqIISVNwoaeWAPpavsRhheAnizmWBqp9wZN+n+lOmi7X2 Dqd/PCzB6PRy+zhrnajCs2HpGE4ihabUdtuRAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU6qdARHxgqLb/sc1enXb0ZCiDZZ0wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzZxZEFSSHhncUxiX3Nj MWVuWGIwWkNpRFpaMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn7CwwDQYJKoZIhvcNAQELBQADggEBAICdLMsfgER9Z/n9aZN9ezlu3cbFrUXD lW8AAROzkhjZUCmjNsqSAMfvPkpz+cu0ooKq6TFmuh7LGckqtgfwI5mDiphbcomn h/BuA37ibxXqmycbf2P+HnKOxJZtJHnmubIiLO/ELto4GMPNOrOw0T66Cza6LELK GWFH2hzeSf5dgn8os8SpKYLuCt8fMTNjsec2VxAFAzf/D2E027dvyRhUC95jo9g0 Izq/niJnu2s9tCTf5HMk6Lpf7skqch/XWHYhnV33xsrDYe6Rx80q0auWjUXmUpDf dBWyX/1JWJgveJWQAddcew5qut6+gmYOnfDBuFdFS9JD2czYE+hZ1a4= -----END CERTIFICATE-----Generated at Thu Aug 14 11:07:33 2025 by rpki-client