$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2688/o0yhMvDIOHV-tmQVctXjhUcSRiI.roa File: o0yhMvDIOHV-tmQVctXjhUcSRiI.roa (raw, json) Hash identifier: SLL3IhXfo60djFS/eMKmcoL3aMmfcJgrvUvuHnpcZXg= Subject key identifier: A3:4C:A1:32:F0:C8:38:75:7E:B6:64:15:72:D5:E3:85:47:12:46:22 Certificate issuer: /CN=D4940F511A38D9544D48B4C5C6C39B0581F891FE Certificate serial: 0B Authority key identifier: D4:94:0F:51:1A:38:D9:54:4D:48:B4:C5:C6:C3:9B:05:81:F8:91:FE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1JQPURo42VRNSLTFxsObBYH4kf4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2688/o0yhMvDIOHV-tmQVctXjhUcSRiI.roa Signing time: Wed 03 Sep 2025 11:07:12 +0000 ROA not before: Wed 03 Sep 2025 11:07:12 +0000 ROA not after: Wed 02 Sep 2026 00:41:26 +0000 asID: 59012 IP address blocks: 103.110.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2688/1JQPURo42VRNSLTFxsObBYH4kf4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2688/1JQPURo42VRNSLTFxsObBYH4kf4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1JQPURo42VRNSLTFxsObBYH4kf4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 04:43:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4940F511A38D9544D48B4C5C6C39B0581F891FE Validity Not Before: Sep 3 11:07:12 2025 GMT Not After : Sep 2 00:41:26 2026 GMT Subject: CN=A34CA132F0C838757EB6641572D5E38547124622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:40:44:e5:9b:b8:fc:50:f3:32:81:65:31:24: f5:3e:46:6a:ad:c9:c3:f7:88:2c:9e:5d:dc:f7:a0: 4e:59:6a:8e:63:7f:ab:6a:7d:6a:11:82:19:5b:3b: 67:23:37:e3:09:e8:b0:8f:52:84:bd:79:e0:5d:0e: b2:a6:2b:3c:49:cc:d4:25:76:3f:55:eb:74:43:f7: 2a:d6:c3:52:67:9e:0b:45:e9:37:2b:63:5f:d5:26: 5e:f9:42:9f:66:ff:2a:97:05:c1:f7:00:45:00:ff: 92:6e:b0:9d:cb:97:d1:cf:22:46:2b:70:ce:01:f2: db:7a:ad:f6:ca:91:2a:07:4e:08:9c:02:df:87:09: 6c:ed:e9:44:c7:ae:ad:e6:90:5b:b9:f9:56:63:7f: c2:3f:e4:a7:01:3a:27:7b:61:81:03:e5:87:e0:60: da:84:47:ff:4e:ed:09:d4:98:7d:6c:49:ef:63:30: 04:ac:a1:15:e9:94:af:58:f2:ce:1b:b9:f4:7d:61: 7a:63:a1:63:f9:6e:5a:be:a4:26:f5:63:94:f1:eb: a9:7a:1c:52:73:d4:a3:fc:7b:60:7a:0c:d4:33:3a: 51:fe:d9:60:67:4b:30:c0:ff:fc:d1:a2:30:e7:00: ac:22:70:29:a7:ef:96:68:b5:ed:7f:e5:70:f4:d4: dc:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:4C:A1:32:F0:C8:38:75:7E:B6:64:15:72:D5:E3:85:47:12:46:22 X509v3 Authority Key Identifier: keyid:D4:94:0F:51:1A:38:D9:54:4D:48:B4:C5:C6:C3:9B:05:81:F8:91:FE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2688/1JQPURo42VRNSLTFxsObBYH4kf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1JQPURo42VRNSLTFxsObBYH4kf4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2688/o0yhMvDIOHV-tmQVctXjhUcSRiI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.110.136.0/22 Signature Algorithm: sha256WithRSAEncryption 56:7d:26:39:a7:52:06:ca:a8:0b:74:ca:cc:45:98:a9:f1:79: 53:d3:4b:a1:3c:28:d9:90:f7:78:d0:d9:d2:92:19:ba:1c:05: 42:b4:a8:b6:31:4f:ad:b5:65:31:39:6b:a6:27:5a:d2:63:e4: 5b:d3:30:e1:1c:62:98:db:e8:14:dd:c8:e5:00:85:ea:50:d3: 98:1b:f4:50:51:6e:ac:93:c1:5c:32:76:7b:cb:52:40:18:77: e5:51:a5:ab:db:f0:2d:8c:a1:2f:c6:9d:2a:33:89:c7:dc:f7: 7c:9b:e9:85:46:db:c0:dc:82:d1:bc:58:05:3c:26:0f:55:dd: e3:59:f8:1a:ac:4a:8b:f4:01:6e:5f:fc:13:e7:22:11:7c:c3: 29:fb:bf:2a:d0:ff:65:8c:ec:ee:06:76:40:ff:28:e0:e9:a8: 06:53:dd:f8:3b:ee:ba:60:85:0b:3f:5b:49:48:22:75:fc:09: 4c:93:58:6a:c0:a2:17:74:11:ce:c4:16:41:6a:4f:63:d9:f8: fd:64:d3:47:61:a4:62:4f:0e:d4:04:20:3e:c4:5f:fb:37:08: 32:c5:e9:5e:7a:8f:cb:0c:aa:46:0f:50:fb:d2:54:d6:ab:f1: 73:bb:19:e0:ae:05:11:4d:ba:2b:72:38:3c:e0:14:6e:38:c5: 2f:df:f0:26 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBCzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENDk0 MEY1MTFBMzhEOTU0NEQ0OEI0QzVDNkMzOUIwNTgxRjg5MUZFMB4XDTI1MDkwMzEx MDcxMloXDTI2MDkwMjAwNDEyNlowMzExMC8GA1UEAxMoQTM0Q0ExMzJGMEM4Mzg3 NTdFQjY2NDE1NzJENUUzODU0NzEyNDYyMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKdAROWbuPxQ8zKBZTEk9T5Gaq3Jw/eILJ5d3PegTllqjmN/q2p9 ahGCGVs7ZyM34wnosI9ShL154F0OsqYrPEnM1CV2P1XrdEP3KtbDUmeeC0XpNytj X9UmXvlCn2b/KpcFwfcARQD/km6wncuX0c8iRitwzgHy23qt9sqRKgdOCJwC34cJ bO3pRMeureaQW7n5VmN/wj/kpwE6J3thgQPlh+Bg2oRH/07tCdSYfWxJ72MwBKyh FemUr1jyzhu59H1hemOhY/luWr6kJvVjlPHrqXocUnPUo/x7YHoM1DM6Uf7ZYGdL MMD//NGiMOcArCJwKafvlmi17X/lcPTU3E8CAwEAAaOCAfMwggHvMB0GA1UdDgQW BBSjTKEy8Mg4dX62ZBVy1eOFRxJGIjAfBgNVHSMEGDAWgBTUlA9RGjjZVE1ItMXG w5sFgfiR/jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNjg4 LzFKUVBVUm80MlZSTlNMVEZ4c09iQllINGtmNC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvMUpRUFVSbzQyVlJOU0xURnhzT2JCWUg0a2Y0LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY4OC9vMHloTXZESU9IVi10 bVFWY3RYamhVY1NSaUkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ26IMA0GCSqGSIb3DQEBCwUAA4IBAQBWfSY5p1IGyqgLdMrMRZip8XlT00uh PCjZkPd40NnSkhm6HAVCtKi2MU+ttWUxOWumJ1rSY+Rb0zDhHGKY2+gU3cjlAIXq UNOYG/RQUW6sk8FcMnZ7y1JAGHflUaWr2/AtjKEvxp0qM4nH3Pd8m+mFRtvA3ILR vFgFPCYPVd3jWfgarEqL9AFuX/wT5yIRfMMp+78q0P9ljOzuBnZA/yjg6agGU934 O+66YIULP1tJSCJ1/AlMk1hqwKIXdBHOxBZBak9j2fj9ZNNHYaRiTw7UBCA+xF/7 Nwgyxeleeo/LDKpGD1D70lTWq/FzuxngrgURTborcjg84BRuOMUv3/Am -----END CERTIFICATE-----Generated at Thu Nov 6 03:00:45 2025 by rpki-client