$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/zpuaFHKL3UcXE0R08JLlXZyxl1M.roa File: zpuaFHKL3UcXE0R08JLlXZyxl1M.roa (raw, json) Hash identifier: zrteVbxUv9b4I/nDY1o/omsx6LH+udfXZkUYre6/YDc= Subject key identifier: CE:9B:9A:14:72:8B:DD:47:17:13:44:74:F0:92:E5:5D:9C:B1:97:53 Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 7F81 Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/zpuaFHKL3UcXE0R08JLlXZyxl1M.roa Signing time: Wed 06 Aug 2025 07:33:11 +0000 ROA not before: Wed 06 Aug 2025 07:33:11 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 24426 IP address blocks: 103.236.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 14:33:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32641 (0x7f81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: Aug 6 07:33:11 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=CE9B9A14728BDD4717134474F092E55D9CB19753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4d:3b:fc:f0:40:4b:2b:27:9f:56:8e:f9:58: 22:c1:5a:85:99:f2:26:5a:e7:bd:5c:ce:48:95:66: 22:28:bc:57:73:58:a2:c4:84:ae:a4:10:e0:72:49: e0:f7:a9:32:8a:54:df:60:26:7b:76:87:d4:49:12: 19:1a:68:c3:22:5c:3b:ac:86:cf:f1:e3:11:53:f9: 21:72:0f:51:47:1c:87:98:75:7a:ad:16:38:4c:8e: 6e:a6:66:8c:65:ad:63:06:28:8e:36:7d:e2:ae:a8: 01:1a:9b:e4:d0:8e:7c:92:14:1e:0b:bf:59:b6:b5: 54:2d:e8:6b:4c:5f:b2:60:9c:a7:12:c3:e9:09:c8: 16:12:0a:60:b5:23:7f:85:57:4c:b9:9b:33:38:35: 3e:92:9a:7c:84:31:a7:44:c4:82:1e:a3:a0:ee:1d: 4d:50:ac:98:8b:ef:11:c4:9f:e1:8a:57:cf:7a:3a: 52:75:9c:a3:50:84:ae:99:61:a6:a5:64:93:d0:b0: e6:f2:8f:90:fb:e6:73:82:3a:79:60:1f:af:ee:b9: 14:5d:5d:48:8a:ec:da:fa:6a:81:4c:8d:cc:a5:05: 84:8e:a3:50:d8:cb:0a:64:a6:4b:a9:ea:a4:1c:d0: 81:ec:7d:5a:24:fc:77:97:78:56:3f:d9:e5:72:d8: 39:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:9B:9A:14:72:8B:DD:47:17:13:44:74:F0:92:E5:5D:9C:B1:97:53 X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/zpuaFHKL3UcXE0R08JLlXZyxl1M.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.236.4.0/22 Signature Algorithm: sha256WithRSAEncryption 85:88:ac:17:f6:0c:59:11:3c:fe:a0:85:30:c6:1a:9c:f9:f9: da:57:d2:d8:62:e3:24:61:11:20:41:c6:bf:54:9a:63:41:44: 6a:6a:71:8d:e2:0b:be:68:7c:a7:04:57:6c:67:f9:5b:44:0c: b7:e1:eb:bc:20:d4:74:65:4a:3b:f7:8d:8d:59:8b:05:46:aa: 21:a5:ff:9d:75:0d:ee:fe:50:1f:22:27:ad:e6:37:08:ce:dd: 96:29:e7:f1:cf:02:a6:fd:06:5a:04:29:1a:3d:f0:05:e9:dd: fd:c4:6a:28:c1:94:5e:bc:0d:a2:b4:09:b5:db:92:b7:c8:1b: 1f:64:03:49:f0:7e:41:85:01:bd:c0:f0:1c:e4:69:00:94:9f: ed:bf:4f:fb:40:90:ab:3b:ba:d9:87:4f:b3:dd:64:b2:e2:9f: 1c:11:58:9b:c6:94:86:f9:54:d2:b1:8d:4e:15:c6:0e:75:b3: d5:a7:b5:2e:23:f2:04:a5:1a:9c:c0:51:89:47:4f:31:58:c7: 75:1b:09:01:55:bf:ea:74:77:6f:cc:d1:af:62:47:c6:ec:83: f9:07:36:d0:42:0c:77:1b:bd:04:46:9a:ad:03:af:8c:3a:9d: 71:2f:19:53:c7:c4:d1:56:11:43:03:ca:8a:c8:2f:a1:d9:cb: 8d:4c:c0:5d -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICf4EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA4MDYw NzMzMTFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKENFOUI5QTE0NzI4QkRE NDcxNzEzNDQ3NEYwOTJFNTVEOUNCMTk3NTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxTTv88EBLKyefVo75WCLBWoWZ8iZa571czkiVZiIovFdzWKLE hK6kEOBySeD3qTKKVN9gJnt2h9RJEhkaaMMiXDushs/x4xFT+SFyD1FHHIeYdXqt FjhMjm6mZoxlrWMGKI42feKuqAEam+TQjnySFB4Lv1m2tVQt6GtMX7JgnKcSw+kJ yBYSCmC1I3+FV0y5mzM4NT6SmnyEMadExIIeo6DuHU1QrJiL7xHEn+GKV896OlJ1 nKNQhK6ZYaalZJPQsObyj5D75nOCOnlgH6/uuRRdXUiK7Nr6aoFMjcylBYSOo1DY ywpkpkup6qQc0IHsfVok/HeXeFY/2eVy2DklAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUzpuaFHKL3UcXE0R08JLlXZyxl1MwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3pwdWFGSEtMM1VjWEUw UjA4SkxsWFp5eGwxTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn7AQwDQYJKoZIhvcNAQELBQADggEBAIWIrBf2DFkRPP6ghTDGGpz5+dpX0thi 4yRhESBBxr9UmmNBRGpqcY3iC75ofKcEV2xn+VtEDLfh67wg1HRlSjv3jY1ZiwVG qiGl/511De7+UB8iJ63mNwjO3ZYp5/HPAqb9BloEKRo98AXp3f3EaijBlF68DaK0 CbXbkrfIGx9kA0nwfkGFAb3A8BzkaQCUn+2/T/tAkKs7utmHT7PdZLLinxwRWJvG lIb5VNKxjU4Vxg51s9WntS4j8gSlGpzAUYlHTzFYx3UbCQFVv+p0d2/M0a9iR8bs g/kHNtBCDHcbvQRGmq0Dr4w6nXEvGVPHxNFWEUMDyorIL6HZy41MwF0= -----END CERTIFICATE-----Generated at Thu Aug 14 11:12:06 2025 by rpki-client