$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/frp6Ym7FxvRqEtyXjUtzPAYZ2NU.roa File: frp6Ym7FxvRqEtyXjUtzPAYZ2NU.roa (raw, json) Hash identifier: QaaLY/xsJTYXx5yIvrGiyO28iEd1LXpGcFH+Sn8p/Us= Subject key identifier: 7E:BA:7A:62:6E:C5:C6:F4:6A:12:DC:97:8D:4B:73:3C:06:19:D8:D5 Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 7F7C Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/frp6Ym7FxvRqEtyXjUtzPAYZ2NU.roa Signing time: Wed 06 Aug 2025 07:33:09 +0000 ROA not before: Wed 06 Aug 2025 07:33:09 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 24426 IP address blocks: 103.236.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 14:33:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32636 (0x7f7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: Aug 6 07:33:09 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=7EBA7A626EC5C6F46A12DC978D4B733C0619D8D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:32:ee:dd:10:29:3a:4a:8f:b3:48:ed:ed:d1: 58:4a:5e:2b:2d:7e:91:c1:67:5c:bd:9c:2f:6f:51: 68:b4:39:bd:e6:e5:29:b2:5e:6a:56:5b:e2:a5:b6: e0:c3:49:80:e5:7d:ef:4e:dd:9f:e8:af:f9:df:a8: 91:f1:d6:58:14:1b:3a:9e:62:de:61:8f:82:33:2d: e3:a2:12:4d:4c:56:cf:d9:2c:86:54:b8:ce:3c:69: 2e:dc:f8:d4:d4:d4:95:1e:8d:15:de:0a:43:ae:7e: 67:49:3c:03:9d:6c:36:51:59:b8:28:4f:9e:19:b2: 6e:87:8c:6b:12:ea:7a:b1:a4:fd:2a:ac:bd:1a:54: 9a:bf:fc:eb:9a:59:bd:cf:65:25:5e:ad:63:78:f2: 99:9b:c2:3f:d3:9e:0e:b9:71:90:1f:05:4a:bd:c1: 28:f6:3d:45:cf:23:cb:40:b1:70:7a:e6:3a:96:1f: 7d:a9:3e:a3:2c:27:a9:0b:29:de:0d:9b:39:5f:78: 30:53:a1:13:4c:b9:ed:6a:a6:31:78:a4:4e:67:20: d5:98:5c:bc:2b:71:cd:4f:c7:20:28:b4:6b:7d:6d: c2:ff:50:02:a9:22:4a:4c:67:6a:ee:cb:fe:31:c7: 6b:e2:7a:21:4b:8a:7a:d7:d1:4a:18:75:7a:9d:5b: 88:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:BA:7A:62:6E:C5:C6:F4:6A:12:DC:97:8D:4B:73:3C:06:19:D8:D5 X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/frp6Ym7FxvRqEtyXjUtzPAYZ2NU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.236.8.0/22 Signature Algorithm: sha256WithRSAEncryption 0c:e4:27:e6:3f:fe:91:38:f4:3f:45:24:77:ec:33:28:eb:cc: 03:c9:cd:0f:4a:22:1d:ea:83:4f:d3:68:fb:ea:2d:d8:5f:cf: 96:0e:9a:7b:8a:ac:5d:79:66:c3:fe:3b:88:be:ee:ad:3b:ef: df:59:ce:09:89:52:22:16:69:fa:f0:20:67:94:43:33:89:71: b0:da:e5:e6:a8:ba:79:30:e6:19:eb:dc:36:4b:f3:b1:f5:e4: 31:bf:57:ef:91:e6:5d:e1:c7:5b:f4:8c:ab:a6:1e:d7:c9:0e: 54:dd:4f:ac:e2:47:7b:19:78:cd:41:d0:5a:db:ce:54:4a:85: fb:c7:f2:79:73:51:e8:fe:f3:f2:f1:a2:a9:32:f2:f8:10:a8: 88:76:49:bb:83:fd:d2:3c:ed:a6:b4:29:47:b6:82:d7:73:0d: da:70:b8:00:a5:2b:b9:50:83:e4:c2:27:d0:09:4f:74:75:25: ec:dd:7a:a0:52:65:74:e5:32:8f:2e:71:a1:40:93:24:07:d5: b5:b8:98:72:e1:f9:17:03:dd:ed:f7:a6:02:46:25:35:4b:01: 93:9d:a4:79:81:03:d3:98:28:e9:22:2e:f0:1d:8d:66:6f:35: 8b:18:8c:00:8f:d2:86:26:1b:1e:49:53:58:68:87:82:31:5f: a6:11:9b:74 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICf3wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA4MDYw NzMzMDlaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDdFQkE3QTYyNkVDNUM2 RjQ2QTEyREM5NzhENEI3MzNDMDYxOUQ4RDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhMu7dECk6So+zSO3t0VhKXistfpHBZ1y9nC9vUWi0Ob3m5Smy XmpWW+KltuDDSYDlfe9O3Z/or/nfqJHx1lgUGzqeYt5hj4IzLeOiEk1MVs/ZLIZU uM48aS7c+NTU1JUejRXeCkOufmdJPAOdbDZRWbgoT54Zsm6HjGsS6nqxpP0qrL0a VJq//OuaWb3PZSVerWN48pmbwj/Tng65cZAfBUq9wSj2PUXPI8tAsXB65jqWH32p PqMsJ6kLKd4NmzlfeDBToRNMue1qpjF4pE5nINWYXLwrcc1PxyAotGt9bcL/UAKp IkpMZ2ruy/4xx2vieiFLinrX0UoYdXqdW4grAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUfrp6Ym7FxvRqEtyXjUtzPAYZ2NUwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2ZycDZZbTdGeHZScUV0 eVhqVXR6UEFZWjJOVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn7AgwDQYJKoZIhvcNAQELBQADggEBAAzkJ+Y//pE49D9FJHfsMyjrzAPJzQ9K Ih3qg0/TaPvqLdhfz5YOmnuKrF15ZsP+O4i+7q07799ZzgmJUiIWafrwIGeUQzOJ cbDa5eaounkw5hnr3DZL87H15DG/V++R5l3hx1v0jKumHtfJDlTdT6ziR3sZeM1B 0FrbzlRKhfvH8nlzUej+8/Lxoqky8vgQqIh2SbuD/dI87aa0KUe2gtdzDdpwuACl K7lQg+TCJ9AJT3R1JezdeqBSZXTlMo8ucaFAkyQH1bW4mHLh+RcD3e33pgJGJTVL AZOdpHmBA9OYKOkiLvAdjWZvNYsYjACP0oYmGx5JU1hoh4IxX6YRm3Q= -----END CERTIFICATE-----Generated at Thu Aug 14 11:06:03 2025 by rpki-client