$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/zWbsOJJ1UwVI5pnA1_vMfQ9v7YA.roa File: zWbsOJJ1UwVI5pnA1_vMfQ9v7YA.roa (raw, json) Hash identifier: BBz3fH6gauC81KGSU8veCkKr25fDnWrXmEydKqB3KzU= Subject key identifier: CD:66:EC:38:92:75:53:05:48:E6:99:C0:D7:FB:CC:7D:0F:6F:ED:80 Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Certificate serial: 5CFC Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/zWbsOJJ1UwVI5pnA1_vMfQ9v7YA.roa Signing time: Sat 13 Sep 2025 03:06:29 +0000 ROA not before: Sat 13 Sep 2025 03:06:29 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 4816 IP address blocks: 103.39.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 23:43:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23804 (0x5cfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Validity Not Before: Sep 13 03:06:29 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=CD66EC389275530548E699C0D7FBCC7D0F6FED80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c7:fc:f5:f5:b5:ae:a4:50:e7:11:a3:a6:a2: 04:0d:8d:34:b5:97:44:0f:12:ba:ae:5e:ed:57:bb: d6:4f:cb:a2:ab:42:97:92:45:26:de:3f:9b:cd:e6: 5e:b6:91:78:c6:da:b5:1d:b7:d4:c4:bd:bf:08:f2: 13:95:ad:7a:41:54:dc:5a:7a:06:d9:ff:e0:66:7b: 29:d0:d2:8a:13:f5:38:11:26:ff:f0:5b:0c:75:ad: 0a:b5:73:0b:0f:60:9a:94:b7:05:dd:7f:c9:63:f8: 9e:86:3d:ce:b0:fb:c8:49:d5:bd:80:17:92:64:7e: 27:5e:38:60:87:cc:8c:bb:12:39:93:f0:47:d0:f9: d6:42:3b:af:2b:46:2d:84:38:75:ce:54:d9:3e:de: 5e:c5:1b:e1:82:ed:aa:fa:0b:55:93:56:eb:fa:61: 1a:3f:ca:e1:f6:d3:c8:4b:24:b8:30:06:5e:f6:aa: 2f:c0:aa:be:99:e0:a4:86:f5:57:01:68:88:b2:6b: c9:69:78:17:dd:ee:fc:d2:82:53:a1:cc:40:89:38: 4e:fa:c0:15:fa:5e:55:10:3b:14:03:96:4e:ec:06: 01:cd:9c:15:d1:7e:f2:4e:ee:96:e3:f1:5d:f9:99: 91:c4:b9:91:2a:4c:60:b3:52:07:98:a8:38:93:be: 94:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:66:EC:38:92:75:53:05:48:E6:99:C0:D7:FB:CC:7D:0F:6F:ED:80 X509v3 Authority Key Identifier: keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/zWbsOJJ1UwVI5pnA1_vMfQ9v7YA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.39.208.0/20 Signature Algorithm: sha256WithRSAEncryption 35:a8:6d:33:2e:05:6b:e2:d3:eb:3c:67:05:b1:69:74:2f:d9: b7:a9:36:4e:10:46:2d:2e:2c:61:7e:9a:f8:cf:64:96:00:39: cf:b3:6b:8b:1d:fc:1e:0d:f4:1b:48:ae:12:4b:1c:18:d3:73: 86:16:bc:f2:ce:31:e9:cc:1a:2b:97:6e:33:ee:52:6f:9f:0c: fa:e7:29:b3:4b:7f:e4:7a:c8:df:c2:28:de:dc:e3:7f:7b:08: 2a:6a:16:ed:c4:7e:7d:17:a7:54:b3:24:62:2b:68:17:a1:5d: 5a:74:cf:19:8a:76:09:c5:a3:4d:af:0b:1a:e1:9c:1d:77:5b: d9:04:a0:25:1a:7d:0b:de:d0:9d:a4:d7:4b:0f:78:8a:57:66: d1:8f:a7:e2:1d:10:5f:8c:39:38:3b:db:7b:f8:73:44:29:aa: 87:fd:98:af:d7:a7:e6:cc:37:86:10:9d:a9:c2:7c:8e:f6:cf: bf:5b:98:66:2e:2f:97:44:63:26:89:ed:2f:c9:b2:19:95:b1: 28:a4:b4:6e:b7:2a:6f:43:bf:a6:f4:8f:0f:ad:42:77:30:44: 20:6b:34:cd:cb:8c:25:9c:51:46:b1:31:75:b6:fa:e2:b8:87: f8:31:0c:e8:b3:c5:c0:a5:67:5e:40:c3:9f:51:02:01:ac:86: e0:1b:3b:e3 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICXPwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEFF NENGNzhCNDlERjBCMkMxRDI5RDMyRTQ4QTk0M0FFNEY0MUFDQzAeFw0yNTA5MTMw MzA2MjlaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKENENjZFQzM4OTI3NTUz MDU0OEU2OTlDMEQ3RkJDQzdEMEY2RkVEODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjx/z19bWupFDnEaOmogQNjTS1l0QPErquXu1Xu9ZPy6KrQpeS RSbeP5vN5l62kXjG2rUdt9TEvb8I8hOVrXpBVNxaegbZ/+BmeynQ0ooT9TgRJv/w Wwx1rQq1cwsPYJqUtwXdf8lj+J6GPc6w+8hJ1b2AF5JkfideOGCHzIy7EjmT8EfQ +dZCO68rRi2EOHXOVNk+3l7FG+GC7ar6C1WTVuv6YRo/yuH208hLJLgwBl72qi/A qr6Z4KSG9VcBaIiya8lpeBfd7vzSglOhzECJOE76wBX6XlUQOxQDlk7sBgHNnBXR fvJO7pbj8V35mZHEuZEqTGCzUgeYqDiTvpRhAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUzWbsOJJ1UwVI5pnA1/vMfQ9v7YAwHwYDVR0jBBgwFoAUiuTPeLSd8LLB0p0y 5IqUOuT0GswwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTY2 My9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2l1VFBlTFNkOExMQjBwMHk1SXFVT3VUMEdzdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2NjMveldic09KSjFVd1ZJ NXBuQTFfdk1mUTl2N1lBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBGcn0DANBgkqhkiG9w0BAQsFAAOCAQEANahtMy4Fa+LT6zxnBbFpdC/Zt6k2 ThBGLS4sYX6a+M9klgA5z7Nrix38Hg30G0iuEkscGNNzhha88s4x6cwaK5duM+5S b58M+ucps0t/5HrI38Io3tzjf3sIKmoW7cR+fRenVLMkYitoF6FdWnTPGYp2CcWj Ta8LGuGcHXdb2QSgJRp9C97QnaTXSw94ildm0Y+n4h0QX4w5ODvbe/hzRCmqh/2Y r9en5sw3hhCdqcJ8jvbPv1uYZi4vl0RjJontL8myGZWxKKS0brcqb0O/pvSPD61C dzBEIGs0zcuMJZxRRrExdbb64riH+DEM6LPFwKVnXkDDn1ECAayG4Bs74w== -----END CERTIFICATE-----Generated at Wed Nov 5 19:40:51 2025 by rpki-client