$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2903/eMIWP4XLPoa-BcL8MMBWqPKLcdk.roa File: eMIWP4XLPoa-BcL8MMBWqPKLcdk.roa (raw, json) Hash identifier: 8w2a4HhRyqkpXHjd1277to3Ev/Gq3g0CrTtkX3BkuXs= Subject key identifier: 78:C2:16:3F:85:CB:3E:86:BE:05:C2:FC:30:C0:56:A8:F2:8B:71:D9 Certificate issuer: /CN=193519DD773C40D04F641CC44558D3461297B003 Certificate serial: 203A Authority key identifier: 19:35:19:DD:77:3C:40:D0:4F:64:1C:C4:45:58:D3:46:12:97:B0:03 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GTUZ3Xc8QNBPZBzERVjTRhKXsAM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2903/eMIWP4XLPoa-BcL8MMBWqPKLcdk.roa Signing time: Sat 13 Sep 2025 03:04:36 +0000 ROA not before: Sat 13 Sep 2025 03:04:36 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 131482 IP address blocks: 103.108.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2903/GTUZ3Xc8QNBPZBzERVjTRhKXsAM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2903/GTUZ3Xc8QNBPZBzERVjTRhKXsAM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GTUZ3Xc8QNBPZBzERVjTRhKXsAM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 18:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8250 (0x203a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=193519DD773C40D04F641CC44558D3461297B003 Validity Not Before: Sep 13 03:04:36 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=78C2163F85CB3E86BE05C2FC30C056A8F28B71D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bf:48:3c:d2:c2:66:fd:c2:92:26:9b:d1:1c: 96:5d:00:0b:e8:ee:64:16:bb:bb:d8:40:41:5c:f9: 4a:32:35:10:2d:e3:aa:cc:00:4e:91:05:7c:51:f3: 02:6a:a5:f5:45:11:31:6b:8d:a7:c0:33:97:0a:9f: 1b:6c:c4:0c:f2:a7:cd:a4:0e:03:0e:c1:37:2d:b6: c0:85:74:8b:9b:85:4c:75:69:bb:d6:5a:d4:c5:7f: 9b:09:0a:74:9f:4e:d2:63:59:1a:1c:16:1a:48:30: 3a:8e:7d:1d:3c:19:62:20:55:12:6d:c0:1a:d2:20: 21:5b:1a:cd:79:9e:0c:5e:68:4d:5c:00:7b:51:fd: d3:12:68:61:e5:96:80:71:19:2f:99:94:98:4c:88: 1d:e4:5c:0c:6f:37:2d:a1:57:c6:ae:f6:73:05:9d: 6b:d6:d3:19:9b:95:b2:24:8c:73:e4:7e:21:55:0e: 6f:12:d5:23:6e:b0:11:df:6d:14:12:f0:c8:20:d1: ea:28:20:d5:40:5f:cf:18:18:32:19:00:1c:c7:e6: bd:80:19:8c:7c:9d:63:74:2b:b8:8b:6f:72:80:6b: 56:cc:fb:6f:0d:75:f0:20:21:ed:4c:3b:2a:9a:43: 56:3c:98:4d:98:44:02:bd:96:c0:7d:4b:f4:84:ef: dd:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:C2:16:3F:85:CB:3E:86:BE:05:C2:FC:30:C0:56:A8:F2:8B:71:D9 X509v3 Authority Key Identifier: keyid:19:35:19:DD:77:3C:40:D0:4F:64:1C:C4:45:58:D3:46:12:97:B0:03 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2903/GTUZ3Xc8QNBPZBzERVjTRhKXsAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GTUZ3Xc8QNBPZBzERVjTRhKXsAM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2903/eMIWP4XLPoa-BcL8MMBWqPKLcdk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.108.160.0/22 Signature Algorithm: sha256WithRSAEncryption 0e:c2:a1:b6:a0:6e:78:f7:23:b2:fe:42:f0:90:c9:61:1c:6e: 3f:84:66:39:dd:56:82:83:94:00:17:a6:f2:bb:c6:8d:b6:59: f1:46:81:49:5c:1c:56:1f:6c:77:3f:e6:e1:5b:64:ee:4a:75: 69:ae:b1:23:d5:50:90:11:98:23:d0:b5:21:2e:82:47:76:fa: f2:6e:a7:0f:7b:23:64:55:8f:2b:b2:18:35:b3:62:41:87:29: a8:7f:5f:0b:20:7d:14:d2:36:87:43:9c:e7:ce:49:7c:82:e1: 8b:8d:cc:76:7e:6d:88:3d:47:51:8c:00:a0:bb:2b:f9:fa:4d: 60:db:47:a4:7f:4c:da:5b:1e:a9:cf:1e:4e:54:04:9f:88:88: df:2e:05:e0:ca:96:56:61:b9:52:0d:b2:53:47:64:e6:6f:40: e1:a1:d2:54:1f:a0:ac:5a:4e:7e:5e:5c:5e:03:ca:46:bf:fc: 16:5b:c2:73:d9:77:83:51:6a:12:a2:ee:c1:71:52:fb:45:f0: a7:83:a8:05:00:d8:62:07:fc:c0:52:85:d4:72:6c:37:04:f2: be:68:ba:bb:5b:73:0e:02:58:94:2e:bf:b3:fa:10:32:d6:fe: 7a:e9:97:54:22:8d:84:e4:92:fd:4c:6f:97:89:92:a8:5c:46: 2d:2a:f3:42 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIDowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTkz NTE5REQ3NzNDNDBEMDRGNjQxQ0M0NDU1OEQzNDYxMjk3QjAwMzAeFw0yNTA5MTMw MzA0MzZaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDc4QzIxNjNGODVDQjNF ODZCRTA1QzJGQzMwQzA1NkE4RjI4QjcxRDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0v0g80sJm/cKSJpvRHJZdAAvo7mQWu7vYQEFc+UoyNRAt46rM AE6RBXxR8wJqpfVFETFrjafAM5cKnxtsxAzyp82kDgMOwTcttsCFdIubhUx1abvW WtTFf5sJCnSfTtJjWRocFhpIMDqOfR08GWIgVRJtwBrSICFbGs15ngxeaE1cAHtR /dMSaGHlloBxGS+ZlJhMiB3kXAxvNy2hV8au9nMFnWvW0xmblbIkjHPkfiFVDm8S 1SNusBHfbRQS8Mgg0eooINVAX88YGDIZABzH5r2AGYx8nWN0K7iLb3KAa1bM+28N dfAgIe1MOyqaQ1Y8mE2YRAK9lsB9S/SE793hAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUeMIWP4XLPoa+BcL8MMBWqPKLcdkwHwYDVR0jBBgwFoAUGTUZ3Xc8QNBPZBzE RVjTRhKXsAMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjkw My9HVFVaM1hjOFFOQlBaQnpFUlZqVFJoS1hzQU0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0dUVVozWGM4UU5CUFpCekVSVmpUUmhLWHNBTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI5MDMvZU1JV1A0WExQb2Et QmNMOE1NQldxUEtMY2RrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmdsoDANBgkqhkiG9w0BAQsFAAOCAQEADsKhtqBuePcjsv5C8JDJYRxuP4Rm Od1WgoOUABem8rvGjbZZ8UaBSVwcVh9sdz/m4Vtk7kp1aa6xI9VQkBGYI9C1IS6C R3b68m6nD3sjZFWPK7IYNbNiQYcpqH9fCyB9FNI2h0Oc585JfILhi43Mdn5tiD1H UYwAoLsr+fpNYNtHpH9M2lseqc8eTlQEn4iI3y4F4MqWVmG5Ug2yU0dk5m9A4aHS VB+grFpOfl5cXgPKRr/8FlvCc9l3g1FqEqLuwXFS+0Xwp4OoBQDYYgf8wFKF1HJs NwTyvmi6u1tzDgJYlC6/s/oQMtb+eumXVCKNhOSS/Uxvl4mSqFxGLSrzQg== -----END CERTIFICATE-----Generated at Wed Nov 5 18:30:58 2025 by rpki-client