$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/6wu7C6LJRgzw0YqBCypPrWvyqtk.roa File: 6wu7C6LJRgzw0YqBCypPrWvyqtk.roa (raw, json) Hash identifier: Cj+QZPNg8QQ9fmyZfIpGADWCHBPEkN4OpbVPkdHjLNc= Subject key identifier: EB:0B:BB:0B:A2:C9:46:0C:F0:D1:8A:81:0B:2A:4F:AD:6B:F2:AA:D9 Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Certificate serial: 320D Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/6wu7C6LJRgzw0YqBCypPrWvyqtk.roa Signing time: Tue 24 Jun 2025 10:21:26 +0000 ROA not before: Tue 24 Jun 2025 10:21:26 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 4816 IP address blocks: 103.45.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 23:43:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12813 (0x320d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Validity Not Before: Jun 24 10:21:26 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=EB0BBB0BA2C9460CF0D18A810B2A4FAD6BF2AAD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:56:b5:37:d9:8f:64:5c:cb:e2:c5:c9:e2:b0: 26:db:ad:4e:46:40:1a:f9:d6:8a:5a:f5:96:ce:9b: e5:2c:00:af:a1:d4:b1:b0:1b:fa:c1:24:76:0b:a3: 8b:26:5e:c8:e2:a2:86:31:bc:cc:8e:12:cb:ae:87: 03:3d:05:6b:73:d8:c4:39:e5:8b:c6:17:bd:0e:c1: e1:fd:cc:54:98:b2:9e:8c:16:82:ed:6b:fd:9b:a0: c1:9f:2d:f8:10:e7:d1:41:94:58:47:8f:13:ad:59: db:9d:f0:92:ca:f3:11:e3:16:37:63:29:99:e4:eb: e0:f1:57:55:76:0b:02:d2:f6:55:a5:b0:a7:f7:c0: 54:79:a3:f5:e3:00:d9:77:a6:e3:5f:37:62:d2:12: 84:e0:ee:c0:69:aa:4d:6d:2a:52:4b:22:ad:0d:cc: fd:e8:94:10:9e:e3:8a:63:74:c8:9f:7f:d0:2c:46: 31:84:61:73:5a:5e:03:bf:05:ea:03:aa:3b:5c:ee: d3:7a:55:dd:e9:4c:1b:c1:b3:b0:28:c3:a5:81:b8: 35:3d:5e:b1:95:4c:13:05:08:e0:f3:92:b0:6b:ed: f3:97:5b:a9:01:35:80:a4:06:79:40:bf:fa:ca:6a: 3c:d4:3b:03:ff:6b:b7:b6:56:3e:47:7e:e5:9a:fd: 10:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:0B:BB:0B:A2:C9:46:0C:F0:D1:8A:81:0B:2A:4F:AD:6B:F2:AA:D9 X509v3 Authority Key Identifier: keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/6wu7C6LJRgzw0YqBCypPrWvyqtk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.45.0.0/18 Signature Algorithm: sha256WithRSAEncryption 78:15:70:99:13:ce:1e:fe:8e:e1:89:58:27:83:21:fc:79:0b: c2:3e:13:9c:93:b2:48:17:bd:ab:a0:70:80:55:e2:5a:ca:0c: 95:04:81:b7:d9:34:40:67:d4:d4:3d:b8:24:32:35:ad:9e:b2: 0a:28:ba:4d:b2:c0:dc:62:55:94:27:02:0d:a6:61:73:2a:37: 75:27:df:72:cc:2b:ce:24:04:50:0c:33:7c:5d:f2:89:5d:e5: a5:b1:df:03:7a:e4:90:85:bd:ed:5a:4d:72:22:50:af:a4:19: 25:00:46:93:ba:86:b3:2f:92:45:19:02:a1:f5:27:09:73:c4: c3:bb:5b:ea:e1:03:3d:aa:05:0a:a0:f5:3f:12:c1:4e:47:2b: a7:b7:2c:d8:e0:91:68:54:7a:33:2f:fb:19:96:e7:4c:a1:7f: 06:ca:e5:a2:5f:81:8e:f7:a1:ea:eb:bc:91:6f:07:25:71:20: 27:7d:0e:43:57:87:69:ed:fc:5b:40:1a:d1:47:b9:b5:83:b1: 7c:6d:50:e4:4c:2a:5a:f4:a2:78:df:31:55:02:fc:aa:24:7a: bc:37:b0:4e:e2:38:c3:7e:c9:be:cb:bc:91:4f:34:72:24:d0: 39:3c:c5:35:1c:2c:14:ff:06:f6:9f:c0:a6:82:22:dc:e0:7c: 35:bf:57:6d -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICMg0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEFF NENGNzhCNDlERjBCMkMxRDI5RDMyRTQ4QTk0M0FFNEY0MUFDQzAeFw0yNTA2MjQx MDIxMjZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEVCMEJCQjBCQTJDOTQ2 MENGMEQxOEE4MTBCMkE0RkFENkJGMkFBRDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDoVrU32Y9kXMvixcnisCbbrU5GQBr51opa9ZbOm+UsAK+h1LGw G/rBJHYLo4smXsjiooYxvMyOEsuuhwM9BWtz2MQ55YvGF70OweH9zFSYsp6MFoLt a/2boMGfLfgQ59FBlFhHjxOtWdud8JLK8xHjFjdjKZnk6+DxV1V2CwLS9lWlsKf3 wFR5o/XjANl3puNfN2LSEoTg7sBpqk1tKlJLIq0NzP3olBCe44pjdMiff9AsRjGE YXNaXgO/BeoDqjtc7tN6Vd3pTBvBs7Aow6WBuDU9XrGVTBMFCODzkrBr7fOXW6kB NYCkBnlAv/rKajzUOwP/a7e2Vj5HfuWa/RAvAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU6wu7C6LJRgzw0YqBCypPrWvyqtkwHwYDVR0jBBgwFoAUiuTPeLSd8LLB0p0y 5IqUOuT0GswwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTY2 My9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2l1VFBlTFNkOExMQjBwMHk1SXFVT3VUMEdzdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2NjMvNnd1N0M2TEpSZ3p3 MFlxQkN5cFByV3Z5cXRrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBmctADANBgkqhkiG9w0BAQsFAAOCAQEAeBVwmRPOHv6O4YlYJ4Mh/HkLwj4T nJOySBe9q6BwgFXiWsoMlQSBt9k0QGfU1D24JDI1rZ6yCii6TbLA3GJVlCcCDaZh cyo3dSffcswrziQEUAwzfF3yiV3lpbHfA3rkkIW97VpNciJQr6QZJQBGk7qGsy+S RRkCofUnCXPEw7tb6uEDPaoFCqD1PxLBTkcrp7cs2OCRaFR6My/7GZbnTKF/Bsrl ol+Bjveh6uu8kW8HJXEgJ30OQ1eHae38W0Aa0Ue5tYOxfG1Q5EwqWvSieN8xVQL8 qiR6vDewTuI4w37Jvsu8kU80ciTQOTzFNRwsFP8G9p/ApoIi3OB8Nb9XbQ== -----END CERTIFICATE-----Generated at Wed Nov 5 19:54:10 2025 by rpki-client