$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2988/PgDSg7mQ46gIqctq9zQXrcxELlc.roa File: PgDSg7mQ46gIqctq9zQXrcxELlc.roa (raw, json) Hash identifier: W/toZWcf74z12WeSOci6llIBq7P2QTL5WkC9d3tFvB8= Subject key identifier: 3E:00:D2:83:B9:90:E3:A8:08:A9:CB:6A:F7:34:17:AD:CC:44:2E:57 Certificate issuer: /CN=012D4317BCA1660F88066F890F8C04AF557000CB Certificate serial: 267F Authority key identifier: 01:2D:43:17:BC:A1:66:0F:88:06:6F:89:0F:8C:04:AF:55:70:00:CB Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/PgDSg7mQ46gIqctq9zQXrcxELlc.roa Signing time: Sat 13 Sep 2025 03:08:54 +0000 ROA not before: Sat 13 Sep 2025 03:08:54 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 139139 IP address blocks: 103.152.186.0/24 maxlen: 24 103.152.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 21:14:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9855 (0x267f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=012D4317BCA1660F88066F890F8C04AF557000CB Validity Not Before: Sep 13 03:08:54 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=3E00D283B990E3A808A9CB6AF73417ADCC442E57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cc:01:10:ef:99:05:48:48:1f:07:b2:30:30: d8:6c:f8:35:dc:bb:1b:78:7c:56:62:22:23:9d:ef: 15:79:e3:3e:1b:9d:06:26:88:91:96:6b:3c:37:36: 47:c3:57:89:64:d0:b2:b0:b4:65:61:6b:a7:7c:40: 3e:e4:ea:83:47:e9:8d:3c:d9:d3:4f:6f:ef:c6:a2: b4:32:d5:8b:a8:bb:d0:fa:f3:ac:25:b1:6a:d7:ab: 06:b4:a7:be:03:b8:c0:3b:22:af:e5:39:69:34:d1: 3e:06:ea:c1:b2:d0:e7:51:21:92:a1:1c:b0:ec:8a: cb:0f:4a:ee:d0:03:9c:0e:6d:5e:72:0e:c0:68:d1: 59:b1:8b:89:bf:f7:7e:a1:e3:15:71:7d:2b:a4:89: 74:ee:59:08:97:1a:f2:e3:72:ea:3a:8a:af:8a:78: 19:20:9f:d6:21:df:e2:a6:bc:23:34:87:a0:f7:a8: 53:69:c3:ad:7c:41:ee:fc:c8:89:dc:8b:0b:43:e9: fd:3c:3f:49:79:c8:36:e0:56:b1:c3:2b:1f:79:14: 33:e5:00:6e:67:be:ee:90:1a:14:c6:e8:bf:c0:9b: b6:1e:a3:74:a1:1d:af:1f:8b:c4:04:91:89:f1:b3: 0e:54:d2:1f:c8:b6:e0:f4:f2:d2:d7:06:3c:1c:86: ba:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:00:D2:83:B9:90:E3:A8:08:A9:CB:6A:F7:34:17:AD:CC:44:2E:57 X509v3 Authority Key Identifier: keyid:01:2D:43:17:BC:A1:66:0F:88:06:6F:89:0F:8C:04:AF:55:70:00:CB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/PgDSg7mQ46gIqctq9zQXrcxELlc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.152.186.0/23 Signature Algorithm: sha256WithRSAEncryption 3e:e9:d0:a2:1a:7f:35:44:c3:f5:69:f3:72:87:be:74:09:7a: dd:d8:1a:b4:de:4d:1a:4a:98:7f:0f:15:e4:49:a6:28:3e:c3: 38:b9:79:64:a9:8e:0d:c7:5e:24:85:b2:44:6e:72:4a:db:0d: fb:13:f1:a3:21:cc:ab:eb:4e:19:bc:54:9f:c0:13:16:b0:6b: b3:0f:3b:b6:a8:ed:81:67:f0:a5:4f:73:82:75:f5:cb:28:82: b5:3a:a2:61:bf:4e:73:89:d9:80:ad:bd:bb:f8:9a:fd:68:8b: d9:0f:d0:94:ac:2c:ff:ab:45:d0:b3:4f:5a:ba:bc:9b:51:37: e1:93:03:99:6f:81:f8:55:c3:fa:fe:20:6a:11:28:35:52:34: 4b:b9:fa:4c:f3:ff:d6:52:e9:d4:8b:02:d5:42:00:52:d3:12: 8d:59:48:43:73:13:26:f5:2a:9f:a1:1f:de:db:78:18:b9:6b: 11:79:e0:fe:9f:cd:d7:5b:7f:2e:5b:59:00:d7:43:8e:61:ce: af:38:80:99:d3:e6:1b:2e:b0:2a:ef:ed:fa:93:44:f2:1d:67: a4:60:a1:20:3f:26:3e:29:3a:15:03:3a:7f:8e:16:97:65:e0: c4:18:7c:d0:f6:47:b8:09:e0:18:41:f2:da:02:d8:a9:81:57: ee:6e:22:ee -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICJn8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDEy RDQzMTdCQ0ExNjYwRjg4MDY2Rjg5MEY4QzA0QUY1NTcwMDBDQjAeFw0yNTA5MTMw MzA4NTRaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDNFMDBEMjgzQjk5MEUz QTgwOEE5Q0I2QUY3MzQxN0FEQ0M0NDJFNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCzAEQ75kFSEgfB7IwMNhs+DXcuxt4fFZiIiOd7xV54z4bnQYm iJGWazw3NkfDV4lk0LKwtGVha6d8QD7k6oNH6Y082dNPb+/GorQy1Yuou9D686wl sWrXqwa0p74DuMA7Iq/lOWk00T4G6sGy0OdRIZKhHLDsissPSu7QA5wObV5yDsBo 0Vmxi4m/936h4xVxfSukiXTuWQiXGvLjcuo6iq+KeBkgn9Yh3+KmvCM0h6D3qFNp w618Qe78yInciwtD6f08P0l5yDbgVrHDKx95FDPlAG5nvu6QGhTG6L/Am7Yeo3Sh Ha8fi8QEkYnxsw5U0h/ItuD08tLXBjwchrorAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUPgDSg7mQ46gIqctq9zQXrcxELlcwHwYDVR0jBBgwFoAUAS1DF7yhZg+IBm+J D4wEr1VwAMswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjk4 OC9BUzFERjd5aFpnLUlCbS1KRDR3RXIxVndBTXMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0FTMURGN3loWmctSUJtLUpENHdFcjFWd0FNcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI5ODgvUGdEU2c3bVE0NmdJ cWN0cTl6UVhyY3hFTGxjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAWeYujANBgkqhkiG9w0BAQsFAAOCAQEAPunQohp/NUTD9Wnzcoe+dAl63dga tN5NGkqYfw8V5EmmKD7DOLl5ZKmODcdeJIWyRG5yStsN+xPxoyHMq+tOGbxUn8AT FrBrsw87tqjtgWfwpU9zgnX1yyiCtTqiYb9Oc4nZgK29u/ia/WiL2Q/QlKws/6tF 0LNPWrq8m1E34ZMDmW+B+FXD+v4gahEoNVI0S7n6TPP/1lLp1IsC1UIAUtMSjVlI Q3MTJvUqn6Ef3tt4GLlrEXng/p/N11t/LltZANdDjmHOrziAmdPmGy6wKu/t+pNE 8h1npGChID8mPik6FQM6f44Wl2XgxBh80PZHuAngGEHy2gLYqYFX7m4i7g== -----END CERTIFICATE-----Generated at Wed Nov 5 20:32:04 2025 by rpki-client