$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1630/MnvOtq71Oi22pGAIXVtl5vjfkes.roa File: MnvOtq71Oi22pGAIXVtl5vjfkes.roa (raw, json) Hash identifier: 9a+1b3uSIug5Ieufpkte8k8A9GM0MbX8R87sWvfIauI= Subject key identifier: 32:7B:CE:B6:AE:F5:3A:2D:B6:A4:60:08:5D:5B:65:E6:F8:DF:91:EB Certificate issuer: /CN=4C1FB553FF23312CD9C25DE1DA72048F06483C5A Certificate serial: 206E Authority key identifier: 4C:1F:B5:53:FF:23:31:2C:D9:C2:5D:E1:DA:72:04:8F:06:48:3C:5A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/MnvOtq71Oi22pGAIXVtl5vjfkes.roa Signing time: Sat 13 Sep 2025 03:07:32 +0000 ROA not before: Sat 13 Sep 2025 03:07:32 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 63679 IP address blocks: 27.0.204.0/22 maxlen: 24 27.0.207.0/24 maxlen: 24 103.208.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 23:43:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8302 (0x206e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C1FB553FF23312CD9C25DE1DA72048F06483C5A Validity Not Before: Sep 13 03:07:32 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=327BCEB6AEF53A2DB6A460085D5B65E6F8DF91EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d4:fe:10:b3:8f:5e:51:0a:ba:6c:6e:c4:eb: 5c:d4:bb:60:ee:42:97:c0:f7:14:df:6d:99:62:8d: 81:0c:22:3b:f8:52:ec:e3:b9:6e:a7:b5:0b:07:8a: 00:a9:fb:b1:bb:a7:a7:89:58:e7:1b:db:7f:d5:84: 0b:be:a9:1a:3c:87:1e:95:ed:19:fe:5f:8b:4c:a4: 30:74:88:57:68:77:43:62:19:0a:cb:57:9e:e8:eb: 85:be:2b:f4:71:ef:d4:3c:45:c2:4d:b0:5f:f4:78: b8:87:0d:78:67:06:62:39:f7:dc:eb:44:54:c4:5e: b3:a7:d3:eb:74:55:8a:66:6b:d2:44:e5:5d:64:1e: 3f:7e:47:73:20:50:7b:d8:77:cc:ee:22:bd:79:7d: 45:7d:a9:e7:97:45:6c:47:6b:d6:01:bb:cb:a2:66: 58:4f:9c:82:8a:6c:bc:46:68:bb:51:b0:51:19:71: 8a:cb:44:1e:68:e1:ad:f9:6a:9c:74:91:58:e1:62: 93:10:4a:be:72:17:30:a4:dd:e2:f0:66:03:2e:48: e5:13:01:fe:d2:f8:fe:85:78:0c:03:cc:d0:50:95: 52:a6:f3:65:fb:f6:c4:c2:44:7c:64:81:ab:4e:2c: eb:cd:f3:93:ac:29:a9:c8:66:31:b0:fe:9d:6e:46: ad:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:7B:CE:B6:AE:F5:3A:2D:B6:A4:60:08:5D:5B:65:E6:F8:DF:91:EB X509v3 Authority Key Identifier: keyid:4C:1F:B5:53:FF:23:31:2C:D9:C2:5D:E1:DA:72:04:8F:06:48:3C:5A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/MnvOtq71Oi22pGAIXVtl5vjfkes.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.0.204.0/22 103.208.48.0/22 Signature Algorithm: sha256WithRSAEncryption 14:a4:25:3e:1c:98:1c:60:a8:f3:56:6e:89:7c:7c:34:fe:57: 1e:b2:7e:26:a1:35:ad:67:46:f1:42:d2:83:3b:61:78:eb:45: ae:39:2d:44:30:f6:43:06:24:98:b9:0d:55:ce:60:08:aa:d5: 59:19:99:0e:5a:21:f2:33:57:90:71:21:ad:c8:41:75:cb:ba: 7c:f7:65:18:17:de:29:91:36:b3:f6:18:68:05:d6:36:b1:de: 64:bb:10:41:f0:6c:83:3a:55:40:0f:9f:0d:25:6e:f5:35:00: 9c:82:53:89:5f:e1:05:0c:65:fc:75:92:dd:ea:78:2f:4d:1a: 8e:76:f6:c3:a6:ec:43:e5:25:82:d6:88:c0:aa:17:b0:26:04: 93:de:b9:a5:7a:e5:0d:5f:30:62:5b:f0:f5:88:26:ab:c9:89: 50:9f:10:6f:e9:43:e5:ea:e4:e9:44:94:56:f6:a7:1c:d6:a1: 4d:5a:fd:5c:f7:9c:4c:8c:fc:27:de:da:57:e8:12:98:14:58: 76:23:70:68:9d:d3:cc:92:ad:ff:da:31:41:51:1a:32:bc:47: c1:fc:b2:0c:51:44:07:04:eb:86:3d:f7:f9:fc:e0:94:7f:b6: 70:cb:9e:5f:6f:9d:97:4f:6a:13:a3:54:52:e9:49:18:24:db: 2a:6b:8d:e7 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgICIG4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEMx RkI1NTNGRjIzMzEyQ0Q5QzI1REUxREE3MjA0OEYwNjQ4M0M1QTAeFw0yNTA5MTMw MzA3MzJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDMyN0JDRUI2QUVGNTNB MkRCNkE0NjAwODVENUI2NUU2RjhERjkxRUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCY1P4Qs49eUQq6bG7E61zUu2DuQpfA9xTfbZlijYEMIjv4Uuzj uW6ntQsHigCp+7G7p6eJWOcb23/VhAu+qRo8hx6V7Rn+X4tMpDB0iFdod0NiGQrL V57o64W+K/Rx79Q8RcJNsF/0eLiHDXhnBmI599zrRFTEXrOn0+t0VYpma9JE5V1k Hj9+R3MgUHvYd8zuIr15fUV9qeeXRWxHa9YBu8uiZlhPnIKKbLxGaLtRsFEZcYrL RB5o4a35apx0kVjhYpMQSr5yFzCk3eLwZgMuSOUTAf7S+P6FeAwDzNBQlVKm82X7 9sTCRHxkgatOLOvN85OsKanIZjGw/p1uRq0HAgMBAAGjggH5MIIB9TAdBgNVHQ4E FgQUMnvOtq71Oi22pGAIXVtl5vjfkeswHwYDVR0jBBgwFoAUTB+1U/8jMSzZwl3h 2nIEjwZIPFowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTYz MC9UQi0xVV84ak1Telp3bDNoMm5JRWp3WklQRm8uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1RCLTFVXzhqTVN6WndsM2gybklFandaSVBGby5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2MzAvTW52T3RxNzFPaTIy cEdBSVhWdGw1dmpma2VzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEw DAMEAhsAzAMEAmfQMDANBgkqhkiG9w0BAQsFAAOCAQEAFKQlPhyYHGCo81ZuiXx8 NP5XHrJ+JqE1rWdG8ULSgztheOtFrjktRDD2QwYkmLkNVc5gCKrVWRmZDloh8jNX kHEhrchBdcu6fPdlGBfeKZE2s/YYaAXWNrHeZLsQQfBsgzpVQA+fDSVu9TUAnIJT iV/hBQxl/HWS3ep4L00ajnb2w6bsQ+UlgtaIwKoXsCYEk965pXrlDV8wYlvw9Ygm q8mJUJ8Qb+lD5erk6USUVvanHNahTVr9XPecTIz8J97aV+gSmBRYdiNwaJ3TzJKt /9oxQVEaMrxHwfyyDFFEBwTrhj33+fzglH+2cMueX2+dl09qE6NUUulJGCTbKmuN 5w== -----END CERTIFICATE-----Generated at Wed Nov 5 21:45:10 2025 by rpki-client