$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2802/_uMnnXlKhntZqZ70la0Red4ZARQ.roa File: _uMnnXlKhntZqZ70la0Red4ZARQ.roa (raw, json) Hash identifier: I76EhG7K4vmAolxi5Zv4wqTD2KeeFVihvvUG28zFCgk= Subject key identifier: FE:E3:27:9D:79:4A:86:7B:59:A9:9E:F4:95:AD:11:79:DE:19:01:14 Certificate issuer: /CN=4FCA8BCB6EB3EC61032F88D26FC02B05224D4718 Certificate serial: 505D Authority key identifier: 4F:CA:8B:CB:6E:B3:EC:61:03:2F:88:D2:6F:C0:2B:05:22:4D:47:18 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/T8qLy26z7GEDL4jSb8ArBSJNRxg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2802/_uMnnXlKhntZqZ70la0Red4ZARQ.roa Signing time: Sat 13 Sep 2025 02:34:52 +0000 ROA not before: Sat 13 Sep 2025 02:34:52 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 9392 IP address blocks: 103.122.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2802/T8qLy26z7GEDL4jSb8ArBSJNRxg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2802/T8qLy26z7GEDL4jSb8ArBSJNRxg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/T8qLy26z7GEDL4jSb8ArBSJNRxg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 23:43:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20573 (0x505d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FCA8BCB6EB3EC61032F88D26FC02B05224D4718 Validity Not Before: Sep 13 02:34:52 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=FEE3279D794A867B59A99EF495AD1179DE190114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9b:81:d1:ae:ae:be:d5:01:ed:69:6e:69:18: c4:af:f3:14:19:19:3e:c3:98:da:92:ba:1d:c8:37: 1c:c4:02:73:8e:68:e5:81:ad:c3:ed:0c:33:54:80: 1b:61:f0:ca:0f:48:aa:65:42:e4:21:c5:c7:89:87: c8:dc:15:fc:1b:8f:b3:81:b0:0b:52:36:80:73:e5: 5f:5d:35:39:19:ad:b6:ed:e3:0b:ec:fc:39:30:ef: fd:7c:59:28:dd:01:46:00:1c:00:54:c4:44:37:3b: 9c:55:11:62:15:6c:4c:cf:8a:82:43:a2:bd:1d:b2: 7c:9a:b7:a4:c0:18:76:22:a1:ff:14:88:55:64:d0: 14:ea:42:04:d7:fd:69:62:8b:db:78:55:de:d6:ae: ca:ee:11:a2:0f:62:66:f6:a3:78:d5:05:61:5e:fc: 75:87:32:c2:b4:06:a5:3c:b5:84:5b:20:1b:03:06: f7:6d:a9:c7:e4:33:ef:0c:71:d5:64:ad:c3:0b:31: 00:b1:a4:12:91:63:c0:58:fe:60:1c:12:b7:9b:b6: ae:b0:86:11:df:dc:15:7e:cc:d8:1a:18:0d:e0:bd: 44:81:7f:f7:70:a0:24:9a:db:f1:1e:2d:b4:df:fe: 9c:44:82:f0:e1:a2:e0:93:a1:c5:0d:13:72:9c:55: 65:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:E3:27:9D:79:4A:86:7B:59:A9:9E:F4:95:AD:11:79:DE:19:01:14 X509v3 Authority Key Identifier: keyid:4F:CA:8B:CB:6E:B3:EC:61:03:2F:88:D2:6F:C0:2B:05:22:4D:47:18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2802/T8qLy26z7GEDL4jSb8ArBSJNRxg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/T8qLy26z7GEDL4jSb8ArBSJNRxg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2802/_uMnnXlKhntZqZ70la0Red4ZARQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.122.240.0/24 Signature Algorithm: sha256WithRSAEncryption 31:3c:bb:67:0b:93:55:cf:8b:f0:d6:2c:02:5e:c8:9e:36:a3: 59:d8:ae:38:c5:d4:26:4b:19:45:34:2e:5a:44:c6:93:3e:35: a7:3c:c5:7b:81:05:5f:a9:af:e6:86:ec:d4:aa:00:7a:4d:89: ea:f4:d3:55:5a:06:f8:8f:fb:bf:92:68:c7:86:b8:6b:42:10: 6b:a3:db:4b:b2:f7:2a:b9:78:ca:b0:27:7b:ac:ad:fd:86:6d: 87:c7:7f:bb:e1:75:da:1e:61:26:be:5e:bb:db:96:16:7a:f6: 68:20:e0:0a:29:d3:bf:31:87:22:89:f7:91:22:5d:03:8e:95: 0d:4e:bf:33:2d:67:ef:ab:63:50:6d:db:90:8f:0d:a1:c1:57: 13:35:24:10:7c:d9:ae:ef:02:0d:7d:8d:c9:98:60:5b:23:e8: 7d:33:cc:88:1d:db:0b:1a:40:34:16:55:72:45:20:fc:cf:d5: 38:50:d2:20:a3:3e:95:5e:4a:a8:00:33:15:b7:36:f9:66:0d: 6e:d5:99:19:15:c5:eb:db:24:27:88:50:61:49:70:95:bf:4d: 4a:d8:4b:0f:d7:42:55:7e:9c:b6:1a:2b:61:f1:8c:ae:71:75: 8d:71:a1:76:36:67:a8:a6:02:b1:95:11:1e:3e:74:c5:b4:33: cc:1e:f1:5a -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICUF0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEZD QThCQ0I2RUIzRUM2MTAzMkY4OEQyNkZDMDJCMDUyMjRENDcxODAeFw0yNTA5MTMw MjM0NTJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEZFRTMyNzlENzk0QTg2 N0I1OUE5OUVGNDk1QUQxMTc5REUxOTAxMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrm4HRrq6+1QHtaW5pGMSv8xQZGT7DmNqSuh3INxzEAnOOaOWB rcPtDDNUgBth8MoPSKplQuQhxceJh8jcFfwbj7OBsAtSNoBz5V9dNTkZrbbt4wvs /Dkw7/18WSjdAUYAHABUxEQ3O5xVEWIVbEzPioJDor0dsnyat6TAGHYiof8UiFVk 0BTqQgTX/Wlii9t4Vd7WrsruEaIPYmb2o3jVBWFe/HWHMsK0BqU8tYRbIBsDBvdt qcfkM+8McdVkrcMLMQCxpBKRY8BY/mAcErebtq6whhHf3BV+zNgaGA3gvUSBf/dw oCSa2/EeLbTf/pxEgvDhouCTocUNE3KcVWW5AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU/uMnnXlKhntZqZ70la0Red4ZARQwHwYDVR0jBBgwFoAUT8qLy26z7GEDL4jS b8ArBSJNRxgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjgw Mi9UOHFMeTI2ejdHRURMNGpTYjhBckJTSk5SeGcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1Q4cUx5MjZ6N0dFREw0alNiOEFyQlNKTlJ4Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4MDIvX3VNbm5YbEtobnRa cVo3MGxhMFJlZDRaQVJRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGd68DANBgkqhkiG9w0BAQsFAAOCAQEAMTy7ZwuTVc+L8NYsAl7InjajWdiu OMXUJksZRTQuWkTGkz41pzzFe4EFX6mv5obs1KoAek2J6vTTVVoG+I/7v5Jox4a4 a0IQa6PbS7L3Krl4yrAne6yt/YZth8d/u+F12h5hJr5eu9uWFnr2aCDgCinTvzGH Ion3kSJdA46VDU6/My1n76tjUG3bkI8NocFXEzUkEHzZru8CDX2NyZhgWyPofTPM iB3bCxpANBZVckUg/M/VOFDSIKM+lV5KqAAzFbc2+WYNbtWZGRXF69skJ4hQYUlw lb9NSthLD9dCVX6cthorYfGMrnF1jXGhdjZnqKYCsZURHj50xbQzzB7xWg== -----END CERTIFICATE-----Generated at Wed Nov 5 21:24:38 2025 by rpki-client