$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/EDc1WzC-RYuvqgE1wf0J8IAEcKc.roa File: EDc1WzC-RYuvqgE1wf0J8IAEcKc.roa (raw, json) Hash identifier: Cb0TWy+OJEN2x9k4JhcH8/M/N8ErAy6tjvZc/qnkgpk= Subject key identifier: 10:37:35:5B:30:BE:45:8B:AF:AA:01:35:C1:FD:09:F0:80:04:70:A7 Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 7F88 Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/EDc1WzC-RYuvqgE1wf0J8IAEcKc.roa Signing time: Wed 06 Aug 2025 07:33:12 +0000 ROA not before: Wed 06 Aug 2025 07:33:12 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 24426 IP address blocks: 103.236.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 14:33:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32648 (0x7f88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: Aug 6 07:33:12 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=1037355B30BE458BAFAA0135C1FD09F0800470A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:e5:c3:48:92:f1:42:77:37:21:27:6b:4d:9d: 59:a4:f7:50:b5:39:a0:77:ea:ae:b9:a0:40:a0:9a: 22:cf:0b:5a:50:16:c1:1e:b8:a0:74:e5:d9:c4:04: 78:19:3e:f4:9f:7a:88:72:f2:0f:b6:ec:83:02:2e: 25:ec:cb:f6:93:9b:75:3b:a4:b0:91:69:d6:f5:83: 48:44:75:22:40:34:2d:cf:0e:a1:3b:60:00:3e:52: c1:d3:0d:49:3b:db:3c:e0:62:d4:ab:17:01:e1:f7: d5:af:a3:31:a5:ce:84:2d:09:33:ed:f3:83:5a:6f: e4:70:44:9f:7b:95:4d:81:c2:df:38:7c:20:0c:15: 3c:97:f1:eb:2a:02:af:7d:c0:77:9b:9b:20:e1:34: ca:70:02:20:dd:34:7e:36:6f:52:cb:23:8e:ec:33: 2f:b1:18:16:cc:92:1f:bb:e0:42:c9:a9:bf:09:98: 5e:6e:f9:e9:d1:02:0f:1e:08:15:8f:0b:ec:9d:62: 48:50:21:1f:d2:ff:87:d7:66:e0:f8:f1:80:4e:9e: 38:bd:63:b8:01:42:88:87:e0:67:18:22:54:0f:6d: 91:b7:c4:1e:34:9c:7c:9c:fd:f2:4b:2d:1e:0d:3b: 58:46:51:21:ce:36:69:78:c5:f0:3e:8a:23:f8:83: db:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:37:35:5B:30:BE:45:8B:AF:AA:01:35:C1:FD:09:F0:80:04:70:A7 X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/EDc1WzC-RYuvqgE1wf0J8IAEcKc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.236.20.0/22 Signature Algorithm: sha256WithRSAEncryption 3f:7a:71:b3:38:0c:8e:4f:26:7d:18:5e:84:b9:d5:d6:73:ef: f9:c0:e5:dd:40:42:90:02:ca:cc:e0:76:71:b2:d4:bb:52:a6: c0:4d:ba:54:66:99:f3:a5:e4:bd:9c:09:96:2f:16:98:e1:9a: 54:32:34:eb:eb:d8:da:62:78:56:4e:cf:16:cc:f6:e5:0f:e0: 76:19:41:d5:6c:c9:40:e5:3b:59:2c:e4:3c:23:d3:68:94:58: b5:60:7b:f1:3d:be:3d:4d:c0:10:ae:a4:27:5f:96:b0:b1:ff: 74:49:cc:d0:b4:de:c0:b7:d2:cb:01:2e:da:2a:19:90:74:79: a5:0d:a0:07:1b:7d:89:b0:e5:0c:6b:30:e7:5e:ac:9f:ba:7e: b3:15:85:df:77:26:18:97:1d:71:d2:13:82:93:b8:39:3c:f5: 7b:da:7b:6c:0b:bd:60:16:44:3e:7b:e5:a7:8c:8d:58:a9:56: 9e:41:e0:35:e5:0b:9c:35:b5:8e:28:10:6e:5e:25:94:56:be: f0:cc:a0:43:5b:0a:aa:5c:e7:7a:96:d7:bd:9e:aa:88:4c:15: fa:cf:0a:c3:8e:9d:48:56:64:c2:fb:4a:1f:fd:ee:7c:1d:51: 73:2c:b4:8b:58:5a:66:41:a9:dc:b0:48:01:8b:29:8b:e3:95: 54:10:e2:5a -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICf4gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA4MDYw NzMzMTJaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDEwMzczNTVCMzBCRTQ1 OEJBRkFBMDEzNUMxRkQwOUYwODAwNDcwQTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD05cNIkvFCdzchJ2tNnVmk91C1OaB36q65oECgmiLPC1pQFsEe uKB05dnEBHgZPvSfeohy8g+27IMCLiXsy/aTm3U7pLCRadb1g0hEdSJANC3PDqE7 YAA+UsHTDUk72zzgYtSrFwHh99WvozGlzoQtCTPt84Nab+RwRJ97lU2Bwt84fCAM FTyX8esqAq99wHebmyDhNMpwAiDdNH42b1LLI47sMy+xGBbMkh+74ELJqb8JmF5u +enRAg8eCBWPC+ydYkhQIR/S/4fXZuD48YBOnji9Y7gBQoiH4GcYIlQPbZG3xB40 nHyc/fJLLR4NO1hGUSHONml4xfA+iiP4g9vPAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUEDc1WzC+RYuvqgE1wf0J8IAEcKcwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0VEYzFXekMtUll1dnFn RTF3ZjBKOElBRWNLYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn7BQwDQYJKoZIhvcNAQELBQADggEBAD96cbM4DI5PJn0YXoS51dZz7/nA5d1A QpACyszgdnGy1LtSpsBNulRmmfOl5L2cCZYvFpjhmlQyNOvr2NpieFZOzxbM9uUP 4HYZQdVsyUDlO1ks5Dwj02iUWLVge/E9vj1NwBCupCdflrCx/3RJzNC03sC30ssB LtoqGZB0eaUNoAcbfYmw5QxrMOderJ+6frMVhd93JhiXHXHSE4KTuDk89Xvae2wL vWAWRD575aeMjVipVp5B4DXlC5w1tY4oEG5eJZRWvvDMoENbCqpc53qW172eqohM FfrPCsOOnUhWZML7Sh/97nwdUXMstItYWmZBqdywSAGLKYvjlVQQ4lo= -----END CERTIFICATE-----Generated at Thu Aug 14 11:07:24 2025 by rpki-client