$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3070/zZRym3sAEvXMrbGWy6aM-nia49Y.roa File: zZRym3sAEvXMrbGWy6aM-nia49Y.roa (raw, json) Hash identifier: 8wcckbKfbYd4haPADmGgIisC8XOKMSGdbXZl/xyBpIc= Subject key identifier: CD:94:72:9B:7B:00:12:F5:CC:AD:B1:96:CB:A6:8C:FA:78:9A:E3:D6 Certificate issuer: /CN=C8662F2B48ACC077E95800E5AA92CE16D26E1DEA Certificate serial: 04 Authority key identifier: C8:66:2F:2B:48:AC:C0:77:E9:58:00:E5:AA:92:CE:16:D2:6E:1D:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yGYvK0iswHfpWADlqpLOFtJuHeo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3070/zZRym3sAEvXMrbGWy6aM-nia49Y.roa Signing time: Fri 11 Jul 2025 10:03:39 +0000 ROA not before: Fri 11 Jul 2025 10:03:39 +0000 ROA not after: Sat 11 Jul 2026 09:56:02 +0000 asID: 133033 IP address blocks: 103.248.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3070/yGYvK0iswHfpWADlqpLOFtJuHeo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3070/yGYvK0iswHfpWADlqpLOFtJuHeo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yGYvK0iswHfpWADlqpLOFtJuHeo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 13:03:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8662F2B48ACC077E95800E5AA92CE16D26E1DEA Validity Not Before: Jul 11 10:03:39 2025 GMT Not After : Jul 11 09:56:02 2026 GMT Subject: CN=CD94729B7B0012F5CCADB196CBA68CFA789AE3D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:18:56:e3:33:0b:01:86:74:98:c5:27:3a:d9: 00:38:d1:5a:f8:b2:ae:8d:f1:4c:c3:d4:b9:63:ad: fb:40:21:7b:99:3c:2d:5e:12:85:6c:c1:ab:32:26: 6f:77:e5:c6:80:d9:10:48:e8:ae:9b:0f:38:c2:8a: 9f:d9:bb:71:d5:81:46:16:b7:52:ca:ce:0a:b2:6b: d4:2c:52:63:8b:99:6a:a7:cb:d0:fd:c1:9d:ba:9c: 6a:44:2d:11:46:e6:89:70:a8:40:cd:6d:23:ea:b0: a0:fb:52:01:1e:70:9a:82:9e:24:e8:50:91:10:63: d4:fe:ec:ea:db:3c:86:3d:91:1b:89:f9:e4:6e:20: 83:a4:d3:e9:76:7d:70:7e:65:f8:2b:28:7e:23:ac: 7a:c6:58:69:97:c2:6a:42:50:16:0c:3d:6f:92:7b: 65:5b:ef:cd:c1:78:1c:0d:4c:14:a5:f6:2a:33:81: 66:6d:a7:a3:a3:e4:64:3e:6f:15:54:c8:20:a5:7c: 3f:5e:7d:9d:ff:1a:68:3a:32:28:23:2a:2d:a8:ee: b9:82:84:7b:e9:2b:b6:68:d9:09:81:cd:ea:10:22: 78:59:d5:09:28:8e:65:e6:77:52:4a:07:d1:4c:8f: b4:8c:b8:02:fc:21:78:de:b8:56:5b:53:2b:f8:91: 92:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:94:72:9B:7B:00:12:F5:CC:AD:B1:96:CB:A6:8C:FA:78:9A:E3:D6 X509v3 Authority Key Identifier: keyid:C8:66:2F:2B:48:AC:C0:77:E9:58:00:E5:AA:92:CE:16:D2:6E:1D:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3070/yGYvK0iswHfpWADlqpLOFtJuHeo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yGYvK0iswHfpWADlqpLOFtJuHeo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3070/zZRym3sAEvXMrbGWy6aM-nia49Y.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.248.152.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:54:20:61:c8:69:2e:9c:38:34:2d:34:d1:ac:0a:cb:4a:12: 4b:b1:0e:0d:19:67:d1:9a:fb:5c:4b:fc:c0:e3:e8:04:7f:f6: f5:99:43:09:a0:4a:90:66:61:a7:7a:ed:57:9f:57:9c:90:4a: 91:5d:21:2e:97:7f:b0:67:4a:10:cb:c1:f7:44:7d:ca:22:02: 29:35:84:bf:41:d5:e3:04:6d:80:3f:33:53:f0:fa:c6:0f:98: 03:00:8b:0d:e0:f1:19:d6:02:a0:40:a6:86:f2:a5:17:f8:5d: 7a:c5:50:e8:59:5a:ba:7d:41:61:ee:d4:5f:dd:c1:2f:a3:82: 00:84:99:1a:96:af:ac:1a:9d:55:7d:3f:7a:0d:78:70:fa:45: 53:66:ec:65:04:ee:94:a0:92:69:c9:d9:16:66:1a:85:80:24: ea:06:ab:41:ee:6f:5f:0e:3b:8f:0b:5f:f6:b4:23:57:ae:b6: ee:4d:00:63:61:6d:3b:18:a5:9e:14:9a:f1:34:7f:6d:de:e0: 32:ea:b5:f0:a5:70:e5:ad:8a:da:f2:e8:0a:2a:ec:74:d6:75: b7:7d:c0:d9:c0:88:40:96:d3:cc:73:76:b0:6a:a3:34:42:7b: 44:bd:f5:59:c4:44:78:7b:1d:ab:0e:18:fe:39:58:78:b5:5d: 06:44:c1:88 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDODY2 MkYyQjQ4QUNDMDc3RTk1ODAwRTVBQTkyQ0UxNkQyNkUxREVBMB4XDTI1MDcxMTEw MDMzOVoXDTI2MDcxMTA5NTYwMlowMzExMC8GA1UEAxMoQ0Q5NDcyOUI3QjAwMTJG NUNDQURCMTk2Q0JBNjhDRkE3ODlBRTNENjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMcYVuMzCwGGdJjFJzrZADjRWviyro3xTMPUuWOt+0Ahe5k8LV4S hWzBqzImb3flxoDZEEjorpsPOMKKn9m7cdWBRha3UsrOCrJr1CxSY4uZaqfL0P3B nbqcakQtEUbmiXCoQM1tI+qwoPtSAR5wmoKeJOhQkRBj1P7s6ts8hj2RG4n55G4g g6TT6XZ9cH5l+CsofiOsesZYaZfCakJQFgw9b5J7ZVvvzcF4HA1MFKX2KjOBZm2n o6PkZD5vFVTIIKV8P159nf8aaDoyKCMqLajuuYKEe+krtmjZCYHN6hAieFnVCSiO ZeZ3UkoH0UyPtIy4AvwheN64VltTK/iRknMCAwEAAaOCAfMwggHvMB0GA1UdDgQW BBTNlHKbewAS9cytsZbLpoz6eJrj1jAfBgNVHSMEGDAWgBTIZi8rSKzAd+lYAOWq ks4W0m4d6jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMDcw L3lHWXZLMGlzd0hmcFdBRGxxcExPRnRKdUhlby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAveUdZdkswaXN3SGZwV0FEbHFwTE9GdEp1SGVvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA3MC96WlJ5bTNzQUV2WE1y YkdXeTZhTS1uaWE0OVkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ/iYMA0GCSqGSIb3DQEBCwUAA4IBAQBtVCBhyGkunDg0LTTRrArLShJLsQ4N GWfRmvtcS/zA4+gEf/b1mUMJoEqQZmGneu1Xn1eckEqRXSEul3+wZ0oQy8H3RH3K IgIpNYS/QdXjBG2APzNT8PrGD5gDAIsN4PEZ1gKgQKaG8qUX+F16xVDoWVq6fUFh 7tRf3cEvo4IAhJkalq+sGp1VfT96DXhw+kVTZuxlBO6UoJJpydkWZhqFgCTqBqtB 7m9fDjuPC1/2tCNXrrbuTQBjYW07GKWeFJrxNH9t3uAy6rXwpXDlrYra8ugKKux0 1nW3fcDZwIhAltPMc3awaqM0QntEvfVZxER4ex2rDhj+OVh4tV0GRMGI -----END CERTIFICATE-----Generated at Thu Aug 14 11:12:01 2025 by rpki-client