$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/evHFKal_BLbftwTo5irhQaueD2U.roa File: evHFKal_BLbftwTo5irhQaueD2U.roa (raw, json) Hash identifier: 4JP/QyQZbAYdHqHseXBGNqOkAZdAPfM1lQ9PPjQdoAg= Subject key identifier: 7A:F1:C5:29:A9:7F:04:B6:DF:B7:04:E8:E6:2A:E1:41:AB:9E:0F:65 Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Certificate serial: 5CF9 Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/evHFKal_BLbftwTo5irhQaueD2U.roa Signing time: Sat 13 Sep 2025 03:06:29 +0000 ROA not before: Sat 13 Sep 2025 03:06:29 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 4816 IP address blocks: 103.40.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 23:43:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23801 (0x5cf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Validity Not Before: Sep 13 03:06:29 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=7AF1C529A97F04B6DFB704E8E62AE141AB9E0F65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e2:74:5f:37:f8:87:5b:5d:d8:b0:4b:1a:06: 48:07:db:7e:e7:05:40:42:0a:6c:83:9d:53:b0:ff: d0:57:a9:be:9d:34:62:4f:59:47:29:d0:e3:08:fd: cc:df:fc:ac:be:8c:f8:97:20:94:3a:95:b9:74:e2: f3:5b:9b:1c:c6:f3:37:86:8f:47:f3:c0:31:b9:a0: 84:f2:14:72:a9:46:72:8c:81:6c:da:9e:4a:ea:43: 55:e4:3e:39:7d:da:b7:a6:8f:e5:06:89:14:5a:37: 8b:24:f7:bf:e8:64:85:29:c6:a3:d4:84:4d:82:2b: 01:f2:8f:88:45:4e:2e:b7:fd:6f:9b:06:c6:dd:80: 40:9c:a5:6e:f5:ab:d3:14:1b:4f:08:cf:07:e9:00: 3d:6a:71:c1:df:26:15:fa:ce:81:1a:3a:65:2f:e2: 63:51:ee:f9:6d:30:e8:b0:cc:8b:2d:64:d9:56:42: a0:ee:d0:7b:0a:07:7e:02:0d:fc:7d:4e:00:d3:e6: 6e:d1:29:bf:d2:9e:04:ce:cc:42:63:61:2f:e6:99: 23:89:13:73:89:9e:0e:9f:ff:05:98:86:8c:8b:d6: 99:1e:42:33:e7:12:c5:13:11:71:8a:a3:7a:37:3e: c5:f7:f7:36:a7:b2:fc:64:d9:73:c0:fc:4d:f8:10: 74:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F1:C5:29:A9:7F:04:B6:DF:B7:04:E8:E6:2A:E1:41:AB:9E:0F:65 X509v3 Authority Key Identifier: keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/evHFKal_BLbftwTo5irhQaueD2U.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.40.240.0/20 Signature Algorithm: sha256WithRSAEncryption 42:d6:22:48:6b:b3:9a:0e:98:1e:04:e6:2f:8b:d1:be:15:97: d7:e2:bf:8d:fc:c1:bc:f3:77:1f:84:f5:a3:81:e7:4c:ca:39: 89:ff:9f:f9:ba:59:71:1d:b5:bf:bd:2d:61:9a:b1:f9:17:dc: 03:2b:a7:45:01:0a:dd:c9:84:e2:8e:a1:61:23:0d:73:58:15: e3:49:0e:e5:90:0c:c5:1f:3e:e4:41:38:b8:9e:50:f7:d8:25: ac:d9:f7:d8:e6:3a:55:f8:9a:4b:66:cd:18:1c:f3:cb:c2:ac: 8b:f2:be:28:4c:21:73:e1:0e:3b:8f:4d:ff:cc:cb:35:40:d7: bf:47:b0:d9:cc:27:36:64:3f:61:00:a5:db:0d:e5:ea:6a:69: 4b:9a:bd:82:dd:59:bf:ac:a6:1e:74:6d:26:d2:28:e0:67:ea: d3:2b:af:3c:d5:9d:61:44:5b:43:44:e7:07:8d:d1:e3:9c:9d: 76:43:03:08:5b:45:cf:38:1f:7c:d7:cd:0d:3e:d2:ed:b2:c3: da:8c:c2:1a:7e:2b:10:ef:d8:9b:17:ca:29:a7:64:7f:37:7a: cf:4a:5e:e2:14:94:d1:c5:2f:fa:ac:e2:3c:7e:10:53:a4:a4: fb:8d:2d:83:93:fe:63:22:fd:54:46:59:8b:55:aa:ff:10:74: 1d:28:cb:17 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICXPkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEFF NENGNzhCNDlERjBCMkMxRDI5RDMyRTQ4QTk0M0FFNEY0MUFDQzAeFw0yNTA5MTMw MzA2MjlaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDdBRjFDNTI5QTk3RjA0 QjZERkI3MDRFOEU2MkFFMTQxQUI5RTBGNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDi4nRfN/iHW13YsEsaBkgH237nBUBCCmyDnVOw/9BXqb6dNGJP WUcp0OMI/czf/Ky+jPiXIJQ6lbl04vNbmxzG8zeGj0fzwDG5oITyFHKpRnKMgWza nkrqQ1XkPjl92remj+UGiRRaN4sk97/oZIUpxqPUhE2CKwHyj4hFTi63/W+bBsbd gECcpW71q9MUG08IzwfpAD1qccHfJhX6zoEaOmUv4mNR7vltMOiwzIstZNlWQqDu 0HsKB34CDfx9TgDT5m7RKb/SngTOzEJjYS/mmSOJE3OJng6f/wWYhoyL1pkeQjPn EsUTEXGKo3o3PsX39zansvxk2XPA/E34EHTlAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUevHFKal/BLbftwTo5irhQaueD2UwHwYDVR0jBBgwFoAUiuTPeLSd8LLB0p0y 5IqUOuT0GswwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTY2 My9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2l1VFBlTFNkOExMQjBwMHk1SXFVT3VUMEdzdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2NjMvZXZIRkthbF9CTGJm dHdUbzVpcmhRYXVlRDJVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBGco8DANBgkqhkiG9w0BAQsFAAOCAQEAQtYiSGuzmg6YHgTmL4vRvhWX1+K/ jfzBvPN3H4T1o4HnTMo5if+f+bpZcR21v70tYZqx+RfcAyunRQEK3cmE4o6hYSMN c1gV40kO5ZAMxR8+5EE4uJ5Q99glrNn32OY6VfiaS2bNGBzzy8Ksi/K+KEwhc+EO O49N/8zLNUDXv0ew2cwnNmQ/YQCl2w3l6mppS5q9gt1Zv6ymHnRtJtIo4Gfq0yuv PNWdYURbQ0TnB43R45yddkMDCFtFzzgffNfNDT7S7bLD2ozCGn4rEO/YmxfKKadk fzd6z0pe4hSU0cUv+qziPH4QU6Sk+40tg5P+YyL9VEZZi1Wq/xB0HSjLFw== -----END CERTIFICATE-----Generated at Wed Nov 5 19:40:38 2025 by rpki-client