$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3072/XL0Go04wEieNEsJdQsJNH2kwsfY.roa File: XL0Go04wEieNEsJdQsJNH2kwsfY.roa (raw, json) Hash identifier: NzkuMDTufZYXwpVSYPsRx9kByRvbceS/flUJIYPB70I= Subject key identifier: 5C:BD:06:A3:4E:30:12:27:8D:12:C2:5D:42:C2:4D:1F:69:30:B1:F6 Certificate issuer: /CN=C2BFB235F570652A8BCB0416F6FCC4443F658CA1 Certificate serial: 2101 Authority key identifier: C2:BF:B2:35:F5:70:65:2A:8B:CB:04:16:F6:FC:C4:44:3F:65:8C:A1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wr-yNfVwZSqLywQW9vzERD9ljKE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3072/XL0Go04wEieNEsJdQsJNH2kwsfY.roa Signing time: Sat 13 Sep 2025 03:04:17 +0000 ROA not before: Sat 13 Sep 2025 03:04:17 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 58563 IP address blocks: 103.163.180.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3072/wr-yNfVwZSqLywQW9vzERD9ljKE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3072/wr-yNfVwZSqLywQW9vzERD9ljKE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wr-yNfVwZSqLywQW9vzERD9ljKE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 16:13:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8449 (0x2101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2BFB235F570652A8BCB0416F6FCC4443F658CA1 Validity Not Before: Sep 13 03:04:17 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=5CBD06A34E3012278D12C25D42C24D1F6930B1F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a4:b0:e5:3d:98:47:23:b6:4b:7a:4a:32:ec: b3:02:14:8b:f4:19:73:6f:c1:9b:72:60:27:88:02: 32:ab:fa:90:5f:9f:4f:d1:0d:0b:40:58:fd:52:3c: 03:b0:a3:d9:ef:86:6c:ea:e2:14:40:fe:5d:3f:b6: 2a:98:77:61:01:b7:4a:c0:1f:eb:e2:ca:65:87:fb: 50:cc:81:46:5b:c5:49:fc:67:04:00:70:ac:55:43: 26:a3:c1:0e:60:d2:b6:12:95:5d:0a:75:c9:65:9f: 23:0d:be:56:17:67:2d:99:34:26:1a:c4:45:e6:94: 31:78:23:27:48:12:d0:ed:6f:2f:58:3b:ea:88:2b: 2b:5f:90:0e:b1:65:0f:a1:eb:e1:6b:13:80:ef:ba: 2d:48:1c:d2:27:09:6a:61:a7:9e:2d:0a:5e:2f:f4: f4:0c:1a:cb:ca:3d:ba:10:c4:85:a3:f1:ed:8a:71: 44:23:da:6c:fb:af:73:fe:39:48:8f:ed:66:5a:1e: e9:89:74:70:0e:3a:e7:06:d4:9b:3f:9f:81:0e:22: ce:c6:58:71:ac:fb:b8:7e:0a:22:cd:f9:d0:ff:60: 18:3d:60:20:27:c3:b4:ce:38:bc:1d:83:fa:72:74: 1e:8b:40:0a:26:af:d8:b7:34:b5:33:eb:3a:d7:90: 67:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:BD:06:A3:4E:30:12:27:8D:12:C2:5D:42:C2:4D:1F:69:30:B1:F6 X509v3 Authority Key Identifier: keyid:C2:BF:B2:35:F5:70:65:2A:8B:CB:04:16:F6:FC:C4:44:3F:65:8C:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3072/wr-yNfVwZSqLywQW9vzERD9ljKE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wr-yNfVwZSqLywQW9vzERD9ljKE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3072/XL0Go04wEieNEsJdQsJNH2kwsfY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.163.180.0/24 Signature Algorithm: sha256WithRSAEncryption 80:c2:8b:25:74:ed:c3:2a:a2:de:bf:74:3a:c9:53:c7:80:85: 53:48:cc:07:9d:8e:ab:84:c2:a8:5c:f6:96:83:39:ad:47:44: b4:92:78:36:c7:af:df:0f:97:71:e8:1c:f5:9b:69:72:eb:01: 55:9f:3e:c5:ca:08:43:bc:6b:e1:60:13:fe:7a:26:3d:a3:32: 3f:1f:04:d9:61:ba:a0:1c:45:bf:bb:a8:e7:49:92:8e:59:e5: 2e:ca:30:35:f9:1a:a4:ae:74:4a:fb:21:5e:1e:92:e1:53:40: 64:25:8d:e7:77:bb:e8:84:2a:42:43:19:1c:77:76:54:d3:bc: f5:1a:16:a8:31:7f:df:68:cf:12:1f:3a:eb:42:81:92:aa:84: 47:d6:69:58:ee:f8:5e:0d:59:82:cb:11:e9:49:17:5b:dc:de: 79:78:df:3c:11:28:8f:5e:fb:c5:90:ec:4e:fc:39:89:31:e8: 63:df:7f:d0:ff:25:4f:73:dd:9a:a9:4d:c3:5d:75:04:11:e8: 10:2f:ce:be:a9:6d:de:c3:b5:dc:57:df:02:55:bd:89:8c:d3: 7c:f8:16:94:60:f1:f9:e3:da:c2:f7:fb:fa:f4:c6:7e:64:1b: 75:98:5f:51:f7:34:87:a1:7f:ba:51:36:14:09:58:c5:ee:71: 98:d8:12:74 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIQEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzJC RkIyMzVGNTcwNjUyQThCQ0IwNDE2RjZGQ0M0NDQzRjY1OENBMTAeFw0yNTA5MTMw MzA0MTdaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDVDQkQwNkEzNEUzMDEy Mjc4RDEyQzI1RDQyQzI0RDFGNjkzMEIxRjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCupLDlPZhHI7ZLekoy7LMCFIv0GXNvwZtyYCeIAjKr+pBfn0/R DQtAWP1SPAOwo9nvhmzq4hRA/l0/tiqYd2EBt0rAH+viymWH+1DMgUZbxUn8ZwQA cKxVQyajwQ5g0rYSlV0KdcllnyMNvlYXZy2ZNCYaxEXmlDF4IydIEtDtby9YO+qI KytfkA6xZQ+h6+FrE4Dvui1IHNInCWphp54tCl4v9PQMGsvKPboQxIWj8e2KcUQj 2mz7r3P+OUiP7WZaHumJdHAOOucG1Js/n4EOIs7GWHGs+7h+CiLN+dD/YBg9YCAn w7TOOLwdg/pydB6LQAomr9i3NLUz6zrXkGfhAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUXL0Go04wEieNEsJdQsJNH2kwsfYwHwYDVR0jBBgwFoAUwr+yNfVwZSqLywQW 9vzERD9ljKEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA3 Mi93ci15TmZWd1pTcUx5d1FXOXZ6RVJEOWxqS0UuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3dyLXlOZlZ3WlNxTHl3UVc5dnpFUkQ5bGpLRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNzIvWEwwR28wNHdFaWVO RXNKZFFzSk5IMmt3c2ZZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGejtDANBgkqhkiG9w0BAQsFAAOCAQEAgMKLJXTtwyqi3r90OslTx4CFU0jM B52Oq4TCqFz2loM5rUdEtJJ4Nsev3w+Xcegc9ZtpcusBVZ8+xcoIQ7xr4WAT/nom PaMyPx8E2WG6oBxFv7uo50mSjlnlLsowNfkapK50SvshXh6S4VNAZCWN53e76IQq QkMZHHd2VNO89RoWqDF/32jPEh8660KBkqqER9ZpWO74Xg1ZgssR6UkXW9zeeXjf PBEoj177xZDsTvw5iTHoY99/0P8lT3PdmqlNw111BBHoEC/Ovqlt3sO13FffAlW9 iYzTfPgWlGDx+ePawvf7+vTGfmQbdZhfUfc0h6F/ulE2FAlYxe5xmNgSdA== -----END CERTIFICATE-----Generated at Wed Nov 5 16:13:03 2025 by rpki-client