$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/4wXgRujYTKfihSIvwuLg9rUOP1c.roa File: 4wXgRujYTKfihSIvwuLg9rUOP1c.roa (raw, json) Hash identifier: LPoTrqNW+wAwUy8l+OsMAuRG7zGEUq/hKav9nV2a/XY= Subject key identifier: E3:05:E0:46:E8:D8:4C:A7:E2:85:22:2F:C2:E2:E0:F6:B5:0E:3F:57 Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Certificate serial: 5D04 Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/4wXgRujYTKfihSIvwuLg9rUOP1c.roa Signing time: Sat 13 Sep 2025 03:06:31 +0000 ROA not before: Sat 13 Sep 2025 03:06:31 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 4816 IP address blocks: 103.39.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 04:42:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23812 (0x5d04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Validity Not Before: Sep 13 03:06:31 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=E305E046E8D84CA7E285222FC2E2E0F6B50E3F57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:22:83:14:90:55:bb:73:bd:7a:b6:1e:31:47: c8:ca:e6:05:b7:d0:4a:d0:ce:e1:1e:c7:8b:93:00: 93:eb:91:e3:ae:c8:89:63:56:ed:66:0b:d5:bd:c0: 50:eb:79:38:c7:d1:e6:9a:ea:30:21:e7:29:2b:c2: 95:6b:ba:66:ac:a5:0b:ba:c1:43:5c:71:dc:76:af: 6e:3c:85:73:09:29:50:c9:42:b4:2b:5d:25:e2:c4: e9:c9:5c:12:ea:6e:bb:02:b0:db:ed:8d:5d:07:6f: 96:d8:75:b6:33:17:d9:e4:04:50:42:d4:f7:7b:94: c3:58:b7:e2:4a:59:be:a1:95:d6:75:7a:d8:d0:11: 02:80:d2:66:83:c7:b6:bf:07:04:3d:6f:81:bf:53: 48:09:40:f8:96:6e:57:17:59:f6:b2:7c:9f:54:b8: 09:59:9a:c8:aa:68:03:72:c7:97:ea:58:87:fa:1d: 90:6c:cc:0f:f9:02:29:82:8c:fe:fd:af:8d:18:b4: f6:ab:d7:f7:b6:b4:48:20:12:e6:d8:7f:12:1a:ff: cf:bc:c8:6f:34:dc:7b:cb:7d:66:a0:57:28:d2:03: d2:81:bc:ee:a9:b1:d1:fa:81:51:3f:4f:74:33:c8: 12:0e:c9:18:9b:1d:5f:da:1c:a5:2f:2d:ac:14:1f: 8b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:05:E0:46:E8:D8:4C:A7:E2:85:22:2F:C2:E2:E0:F6:B5:0E:3F:57 X509v3 Authority Key Identifier: keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/4wXgRujYTKfihSIvwuLg9rUOP1c.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.39.224.0/21 Signature Algorithm: sha256WithRSAEncryption 7f:72:d9:84:ce:4f:f9:79:7a:fc:cc:26:2c:d3:e1:c6:65:a5: 10:e9:0b:9e:f3:ee:e2:b3:1f:9c:77:ec:51:96:b0:21:3f:41: 69:6d:3b:bb:e3:13:ad:9c:65:59:84:44:f6:a7:35:dc:7c:97: 27:55:46:b6:39:93:fa:18:ef:8d:2b:ec:a0:07:a0:2e:2e:60: 02:d1:87:eb:cd:55:3e:cf:4c:31:70:0d:20:68:5b:fb:f6:8c: 1b:ec:34:88:ac:63:9c:32:ba:26:b6:55:f8:a2:04:c3:1d:0f: a0:10:c1:41:f1:4b:f5:72:aa:e7:e7:81:85:6f:bd:89:98:16: 90:b8:5f:58:57:6f:80:a0:68:26:58:5d:8b:89:1f:7a:1c:f6: 7b:ef:28:6b:4d:fe:2f:e9:ff:1c:ec:70:8f:9b:b0:65:2f:3a: 1f:84:7c:bf:0b:48:c8:fd:35:5c:69:83:6c:e3:e2:bd:d8:58: 6d:28:e5:ce:14:60:31:23:be:4f:49:e2:61:9c:60:68:e3:12: f4:f1:b6:ec:93:83:a0:c7:a9:f0:a5:b2:59:21:08:1c:1d:ff: fd:68:6a:05:d8:da:b1:a1:9d:33:96:0f:07:96:43:07:c4:0e: 4b:ac:fd:c3:de:6a:5b:db:34:38:a3:69:47:da:6d:65:b0:ee: 19:d1:59:d2 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICXQQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEFF NENGNzhCNDlERjBCMkMxRDI5RDMyRTQ4QTk0M0FFNEY0MUFDQzAeFw0yNTA5MTMw MzA2MzFaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEUzMDVFMDQ2RThEODRD QTdFMjg1MjIyRkMyRTJFMEY2QjUwRTNGNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDmIoMUkFW7c716th4xR8jK5gW30ErQzuEex4uTAJPrkeOuyIlj Vu1mC9W9wFDreTjH0eaa6jAh5ykrwpVrumaspQu6wUNccdx2r248hXMJKVDJQrQr XSXixOnJXBLqbrsCsNvtjV0Hb5bYdbYzF9nkBFBC1Pd7lMNYt+JKWb6hldZ1etjQ EQKA0maDx7a/BwQ9b4G/U0gJQPiWblcXWfayfJ9UuAlZmsiqaANyx5fqWIf6HZBs zA/5AimCjP79r40YtPar1/e2tEggEubYfxIa/8+8yG803HvLfWagVyjSA9KBvO6p sdH6gVE/T3QzyBIOyRibHV/aHKUvLawUH4s9AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU4wXgRujYTKfihSIvwuLg9rUOP1cwHwYDVR0jBBgwFoAUiuTPeLSd8LLB0p0y 5IqUOuT0GswwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTY2 My9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2l1VFBlTFNkOExMQjBwMHk1SXFVT3VUMEdzdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2NjMvNHdYZ1J1allUS2Zp aFNJdnd1TGc5clVPUDFjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA2cn4DANBgkqhkiG9w0BAQsFAAOCAQEAf3LZhM5P+Xl6/MwmLNPhxmWlEOkL nvPu4rMfnHfsUZawIT9BaW07u+MTrZxlWYRE9qc13HyXJ1VGtjmT+hjvjSvsoAeg Li5gAtGH681VPs9MMXANIGhb+/aMG+w0iKxjnDK6JrZV+KIEwx0PoBDBQfFL9XKq 5+eBhW+9iZgWkLhfWFdvgKBoJlhdi4kfehz2e+8oa03+L+n/HOxwj5uwZS86H4R8 vwtIyP01XGmDbOPivdhYbSjlzhRgMSO+T0niYZxgaOMS9PG27JODoMep8KWyWSEI HB3//WhqBdjasaGdM5YPB5ZDB8QOS6z9w95qW9s0OKNpR9ptZbDuGdFZ0g== -----END CERTIFICATE-----Generated at Wed Nov 5 23:58:19 2025 by rpki-client