$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/E8k6HOUpJcgGSHBnvAJUc3RzsFQ.roa File: E8k6HOUpJcgGSHBnvAJUc3RzsFQ.roa (raw, json) Hash identifier: 9cwtJW5exCVRvI29LdcswfWX+79bTzBtMVJ0k2OU9AM= Subject key identifier: 13:C9:3A:1C:E5:29:25:C8:06:48:70:67:BC:02:54:73:74:73:B0:54 Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 7F83 Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/E8k6HOUpJcgGSHBnvAJUc3RzsFQ.roa Signing time: Wed 06 Aug 2025 07:33:11 +0000 ROA not before: Wed 06 Aug 2025 07:33:11 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 24426 IP address blocks: 103.236.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 14:33:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32643 (0x7f83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: Aug 6 07:33:11 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=13C93A1CE52925C806487067BC0254737473B054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:54:66:4d:59:b9:63:d1:a8:fe:b6:d2:4d:46: 4b:b5:6b:32:09:ef:44:6c:f9:d1:04:8a:df:56:33: 56:6a:56:a2:91:04:e7:f3:02:23:ed:a3:89:c6:72: c5:1f:e0:be:47:5d:54:e6:a3:49:ce:71:8c:c1:b8: 15:ad:a0:d1:23:09:b4:2f:d7:fe:be:f8:04:c9:dd: aa:03:ad:0e:e1:af:52:16:5e:eb:e6:17:43:ba:d7: 66:5e:4d:cf:7a:77:30:8c:77:b6:f9:8e:50:86:75: b7:18:bf:d9:a6:ee:b3:a6:0b:1f:3d:8b:21:7e:ea: 6c:2f:d5:45:88:c8:b3:37:bd:7a:cf:8a:8a:62:cd: eb:67:c9:39:6b:b7:e9:f9:34:88:e2:a8:20:2a:ce: 3b:27:cd:79:73:5d:ba:bf:d7:26:21:02:bf:63:a7: ea:a8:7c:bc:86:38:1d:47:58:fa:a2:5c:43:f8:90: 7a:ef:89:99:5e:e7:90:07:cc:8e:41:fe:c8:0f:15: 93:aa:06:e3:78:1b:51:25:43:b7:ef:af:f7:70:b1: 15:6b:48:af:f8:d0:c0:bb:f9:d1:ef:74:4a:dc:c3: a2:dc:17:e4:87:f2:a3:a5:3d:d8:b2:65:e7:ed:61: 3b:b1:3d:81:cf:24:80:52:e5:76:06:43:70:e7:22: 80:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C9:3A:1C:E5:29:25:C8:06:48:70:67:BC:02:54:73:74:73:B0:54 X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/E8k6HOUpJcgGSHBnvAJUc3RzsFQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.236.16.0/22 Signature Algorithm: sha256WithRSAEncryption 26:21:28:e3:e7:56:1e:7e:f7:81:71:be:79:99:81:8c:6d:d2: 37:b8:83:04:66:26:a7:14:8b:20:ea:4e:fa:49:53:aa:39:bf: 3b:94:f2:2a:b6:1c:6f:86:20:ac:e3:50:4d:8e:7a:93:bc:d2: 85:11:8d:50:ed:23:ac:1f:ad:d6:dc:7f:70:c5:a3:1c:01:8b: f0:7d:e7:58:0e:5a:1f:bb:5c:83:d5:f6:dc:b0:59:53:b7:e0: 27:a4:25:b3:8b:37:c3:94:0d:92:43:ce:7c:17:f1:fd:4c:c5: ce:63:34:1f:7f:ab:f5:77:79:c6:54:10:63:13:46:18:23:08: 97:e9:a8:b6:51:88:14:e1:ca:5b:fb:b5:52:b7:02:1b:c3:9b: e7:33:75:4c:ab:30:ff:70:9b:fe:17:c8:85:ac:60:77:25:6d: 1e:05:bf:c8:18:f5:7b:68:25:2b:ef:74:40:c9:51:61:d7:20: ac:8b:e7:aa:5c:b5:b7:40:e1:4a:88:72:e2:4e:b5:3a:59:97: df:74:d0:d9:9c:1d:b5:59:01:28:4a:93:d8:27:6f:c7:bc:b8: b6:e2:fd:a9:fd:85:f1:fb:90:ce:0d:7b:06:29:ed:cd:f5:3a: fe:14:ef:3a:3f:12:c9:a3:ba:93:4e:72:00:c2:ad:a6:56:58: 60:cf:00:7e -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICf4MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA4MDYw NzMzMTFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDEzQzkzQTFDRTUyOTI1 QzgwNjQ4NzA2N0JDMDI1NDczNzQ3M0IwNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2VGZNWblj0aj+ttJNRku1azIJ70Rs+dEEit9WM1ZqVqKRBOfz AiPto4nGcsUf4L5HXVTmo0nOcYzBuBWtoNEjCbQv1/6++ATJ3aoDrQ7hr1IWXuvm F0O612ZeTc96dzCMd7b5jlCGdbcYv9mm7rOmCx89iyF+6mwv1UWIyLM3vXrPiopi zetnyTlrt+n5NIjiqCAqzjsnzXlzXbq/1yYhAr9jp+qofLyGOB1HWPqiXEP4kHrv iZle55AHzI5B/sgPFZOqBuN4G1ElQ7fvr/dwsRVrSK/40MC7+dHvdErcw6LcF+SH 8qOlPdiyZeftYTuxPYHPJIBS5XYGQ3DnIoBDAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUE8k6HOUpJcgGSHBnvAJUc3RzsFQwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0U4azZIT1VwSmNnR1NI Qm52QUpVYzNSenNGUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn7BAwDQYJKoZIhvcNAQELBQADggEBACYhKOPnVh5+94FxvnmZgYxt0je4gwRm JqcUiyDqTvpJU6o5vzuU8iq2HG+GIKzjUE2OepO80oURjVDtI6wfrdbcf3DFoxwB i/B951gOWh+7XIPV9tywWVO34CekJbOLN8OUDZJDznwX8f1Mxc5jNB9/q/V3ecZU EGMTRhgjCJfpqLZRiBThylv7tVK3AhvDm+czdUyrMP9wm/4XyIWsYHclbR4Fv8gY 9XtoJSvvdEDJUWHXIKyL56pctbdA4UqIcuJOtTpZl9900NmcHbVZAShKk9gnb8e8 uLbi/an9hfH7kM4NewYp7c31Ov4U7zo/EsmjupNOcgDCraZWWGDPAH4= -----END CERTIFICATE-----Generated at Thu Aug 14 11:07:56 2025 by rpki-client