$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/9TjiVGAygYB_IsTra7l53EO3Fyc.roa File: 9TjiVGAygYB_IsTra7l53EO3Fyc.roa (raw, json) Hash identifier: Wsy50zullNoYup/ZGDTq9u3Gqpmd4TW9gi+aGfYH9gU= Subject key identifier: F5:38:E2:54:60:32:81:80:7F:22:C4:EB:6B:B9:79:DC:43:B7:17:27 Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 7F94 Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/9TjiVGAygYB_IsTra7l53EO3Fyc.roa Signing time: Wed 06 Aug 2025 07:33:16 +0000 ROA not before: Wed 06 Aug 2025 07:33:16 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 24426 IP address blocks: 103.236.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 14:33:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32660 (0x7f94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: Aug 6 07:33:16 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=F538E254603281807F22C4EB6BB979DC43B71727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a7:88:75:1d:28:53:f0:08:00:10:25:e5:ae: d7:07:d4:df:56:60:51:db:76:42:d7:b2:50:32:fc: 48:6b:a4:28:25:84:18:f0:69:4e:c7:e5:02:27:8d: e1:1c:6d:21:39:ef:28:4f:ab:7f:f7:77:a9:48:39: 3e:39:53:7b:71:de:95:f3:d4:bf:dc:d7:a8:08:52: 5b:24:bb:41:6e:dc:ad:03:1d:8c:e5:d9:ed:03:a2: df:32:fd:9e:70:43:42:c1:58:8a:dd:bd:f6:d0:b7: e3:9c:09:fe:d5:9c:df:77:fa:1d:04:89:f7:62:db: 7e:3e:9f:60:c9:13:e7:7b:1c:da:92:de:80:f2:97: 5b:b4:e1:7a:36:78:ad:b8:ba:a4:ca:4e:79:ec:37: 2e:fc:fc:51:2a:01:bc:69:93:6d:92:22:3b:f2:d0: 08:06:11:2d:f8:05:91:85:cf:8d:00:3a:b9:18:98: e1:f5:0c:36:0e:65:49:f8:c1:bb:24:93:4a:18:eb: 60:7a:df:ef:10:44:2d:36:3e:c1:13:03:5c:74:67: c2:75:b8:f5:2b:a9:d4:2c:03:05:f5:45:7a:af:99: 17:98:94:0e:e7:54:5a:38:74:1f:d9:d2:d2:cc:92: d4:bc:69:45:5f:96:93:65:21:92:33:b6:87:14:03: 6d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:38:E2:54:60:32:81:80:7F:22:C4:EB:6B:B9:79:DC:43:B7:17:27 X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/9TjiVGAygYB_IsTra7l53EO3Fyc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.236.48.0/22 Signature Algorithm: sha256WithRSAEncryption 38:e2:c6:3f:17:37:7c:ce:06:6d:da:94:1e:60:0d:4d:f3:54: 24:1d:b7:10:ff:ac:96:f9:b2:49:19:73:db:27:91:bf:50:ec: f9:2e:17:68:b8:95:e6:d2:7f:ef:67:43:d4:76:a8:cf:90:13: cc:d7:18:b3:cb:33:5a:a1:ce:ae:6b:02:64:5a:42:a9:2c:0a: a9:9c:04:b7:d3:fa:e2:26:53:7f:f1:7f:98:2e:1d:78:ae:47: 7a:79:53:28:86:ca:07:ef:32:f5:37:b2:22:0d:9e:6c:fa:82: cf:b9:2a:34:b1:ba:81:a9:8e:82:44:4c:cf:fa:25:7e:63:32: 20:91:d6:28:83:a2:9b:aa:24:0f:de:69:64:1c:9f:4e:dd:e8: ed:70:b7:14:83:ee:fa:54:9d:d3:7d:1f:8b:30:d2:42:60:27: 0d:04:f7:fe:90:bd:8c:b0:c7:0b:46:4b:e1:92:7e:1a:a0:16: 61:f5:b0:f1:4c:c2:b0:8d:01:56:48:b6:e9:76:0e:4a:0e:82: 5a:2c:ca:4b:e6:77:9d:a8:19:cf:6f:92:24:77:f7:cd:2a:31: 5a:af:fb:d2:f6:e9:26:cf:73:cf:96:0a:0e:eb:5a:35:36:7c: 1a:80:19:05:87:99:74:60:6e:d9:e8:d9:99:a7:4b:90:c9:df: 8e:24:55:b5 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICf5QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA4MDYw NzMzMTZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEY1MzhFMjU0NjAzMjgx ODA3RjIyQzRFQjZCQjk3OURDNDNCNzE3MjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDp4h1HShT8AgAECXlrtcH1N9WYFHbdkLXslAy/EhrpCglhBjw aU7H5QInjeEcbSE57yhPq3/3d6lIOT45U3tx3pXz1L/c16gIUlsku0Fu3K0DHYzl 2e0Dot8y/Z5wQ0LBWIrdvfbQt+OcCf7VnN93+h0Eifdi234+n2DJE+d7HNqS3oDy l1u04Xo2eK24uqTKTnnsNy78/FEqAbxpk22SIjvy0AgGES34BZGFz40AOrkYmOH1 DDYOZUn4wbskk0oY62B63+8QRC02PsETA1x0Z8J1uPUrqdQsAwX1RXqvmReYlA7n VFo4dB/Z0tLMktS8aUVflpNlIZIztocUA22hAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU9TjiVGAygYB/IsTra7l53EO3FycwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzlUamlWR0F5Z1lCX0lz VHJhN2w1M0VPM0Z5Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn7DAwDQYJKoZIhvcNAQELBQADggEBADjixj8XN3zOBm3alB5gDU3zVCQdtxD/ rJb5skkZc9snkb9Q7PkuF2i4lebSf+9nQ9R2qM+QE8zXGLPLM1qhzq5rAmRaQqks CqmcBLfT+uImU3/xf5guHXiuR3p5UyiGygfvMvU3siINnmz6gs+5KjSxuoGpjoJE TM/6JX5jMiCR1iiDopuqJA/eaWQcn07d6O1wtxSD7vpUndN9H4sw0kJgJw0E9/6Q vYywxwtGS+GSfhqgFmH1sPFMwrCNAVZItul2DkoOglosykvmd52oGc9vkiR3980q MVqv+9L26SbPc8+WCg7rWjU2fBqAGQWHmXRgbtno2ZmnS5DJ344kVbU= -----END CERTIFICATE-----Generated at Thu Aug 14 11:09:24 2025 by rpki-client