$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/XxXXhggs9aGA0bndFttepY0P3Go.roa File: XxXXhggs9aGA0bndFttepY0P3Go.roa (raw, json) Hash identifier: P1p4E28892w17aiBPhnU6+t1s0Pc9IES7M2JO7Fn+yY= Subject key identifier: 5F:15:D7:86:08:2C:F5:A1:80:D1:B9:DD:16:DB:5E:A5:8D:0F:DC:6A Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Certificate serial: 5964 Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/XxXXhggs9aGA0bndFttepY0P3Go.roa Signing time: Sat 13 Sep 2025 03:03:09 +0000 ROA not before: Sat 13 Sep 2025 03:03:09 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 4812 IP address blocks: 103.169.50.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 09:13:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22884 (0x5964) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Validity Not Before: Sep 13 03:03:09 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=5F15D786082CF5A180D1B9DD16DB5EA58D0FDC6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4b:89:ac:31:d8:56:59:39:00:a8:a3:93:69: fd:1e:f7:07:e2:f8:5f:1f:79:f7:c2:fd:48:16:87: 6c:8e:62:33:4e:8c:a4:49:af:b0:d4:58:a1:c8:0b: f3:bf:20:63:48:66:8a:19:de:61:50:d0:a2:38:ed: 3d:1e:80:20:d6:74:6f:66:3d:a8:06:ac:e6:74:5b: a2:d1:f9:1a:4c:ed:33:e1:d7:5b:ab:9f:8a:9f:12: db:8c:0a:87:d7:77:dd:15:7a:43:be:32:fc:f6:a8: 65:e8:fd:55:45:b8:78:e2:f0:b3:ad:db:e7:c6:6d: ca:a9:b5:28:f2:7e:b6:65:25:25:3e:5e:36:a0:81: 12:22:9a:51:38:9a:6c:be:be:bb:dc:8f:df:ff:a6: f3:28:c3:5b:1a:4b:8b:6d:dc:0b:bc:ef:81:35:8b: 20:d9:4b:f7:2e:1a:43:20:04:89:a5:91:99:7b:d0: 57:1b:94:15:3b:01:f1:6b:3d:bc:7c:23:13:ce:f7: 69:c1:af:92:9a:31:44:48:8e:25:73:6c:67:07:a9: 2c:34:dd:da:d1:d5:75:bb:6f:a9:25:72:b1:e7:ea: 6c:cb:32:99:6b:de:de:b8:67:52:ed:10:c8:18:83: 31:24:63:b5:e7:5c:0d:2d:28:28:52:8b:22:4e:a0: 10:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:15:D7:86:08:2C:F5:A1:80:D1:B9:DD:16:DB:5E:A5:8D:0F:DC:6A X509v3 Authority Key Identifier: keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/XxXXhggs9aGA0bndFttepY0P3Go.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.169.50.0/23 Signature Algorithm: sha256WithRSAEncryption 8c:57:1c:4c:39:99:92:e2:cc:57:3c:7f:77:78:9c:94:fa:dd: 1c:19:28:11:72:34:df:df:af:43:2f:49:be:47:7e:ba:3c:43: e3:13:e5:05:9f:85:94:15:07:92:b8:1b:3d:db:e8:d5:01:4e: a9:ca:46:51:c1:42:e0:c9:f0:ff:c1:71:66:8b:db:76:0e:69: af:01:a3:72:e4:ef:c2:30:e6:96:a0:61:e4:10:ae:e8:11:25: 6d:a6:50:46:b4:7a:88:92:67:f8:ba:30:5a:d1:62:5e:d8:01: d7:73:2a:dd:38:e2:bd:21:72:53:53:c5:78:4f:6e:36:fe:f9: 22:2c:fe:d5:80:9c:33:c7:04:85:95:f8:92:bf:2f:13:2e:e5: 66:ab:e0:49:1d:06:f2:43:ec:7e:8e:c5:93:8b:f2:39:ea:a6: 93:e6:be:21:32:c1:64:fa:57:98:4c:89:02:7d:ed:49:2b:44: a6:70:5d:1c:16:26:78:bc:62:9e:f8:ac:13:6f:92:8d:18:88: 9a:e7:d9:cc:f4:24:9a:14:fe:68:f3:57:67:28:e9:cd:81:71: ef:00:9a:64:60:b0:e3:5f:4e:98:5d:b9:1c:f5:f4:e3:73:83: 08:bb:51:6d:d0:53:19:94:8a:be:4b:61:35:6b:8f:17:3a:2e: 46:2e:6f:26 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICWWQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB QjZDOUI2RTE2NTMzNEMwMzJEMDUxRDVGQzdEMTU0N0U0RTM1MzAeFw0yNTA5MTMw MzAzMDlaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDVGMTVENzg2MDgyQ0Y1 QTE4MEQxQjlERDE2REI1RUE1OEQwRkRDNkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxS4msMdhWWTkAqKOTaf0e9wfi+F8feffC/UgWh2yOYjNOjKRJ r7DUWKHIC/O/IGNIZooZ3mFQ0KI47T0egCDWdG9mPagGrOZ0W6LR+RpM7TPh11ur n4qfEtuMCofXd90VekO+Mvz2qGXo/VVFuHji8LOt2+fGbcqptSjyfrZlJSU+Xjag gRIimlE4mmy+vrvcj9//pvMow1saS4tt3Au874E1iyDZS/cuGkMgBImlkZl70Fcb lBU7AfFrPbx8IxPO92nBr5KaMURIjiVzbGcHqSw03drR1XW7b6klcrHn6mzLMplr 3t64Z1LtEMgYgzEkY7XnXA0tKChSiyJOoBDHAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUXxXXhggs9aGA0bndFttepY0P3GowHwYDVR0jBBgwFoAU0qtsm24WUzTAMtBR 1fx9FUfk41MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5 OC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTgvWHhYWGhnZ3M5YUdB MGJuZEZ0dGVwWTBQM0dvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAWepMjANBgkqhkiG9w0BAQsFAAOCAQEAjFccTDmZkuLMVzx/d3iclPrdHBko EXI039+vQy9Jvkd+ujxD4xPlBZ+FlBUHkrgbPdvo1QFOqcpGUcFC4Mnw/8FxZovb dg5prwGjcuTvwjDmlqBh5BCu6BElbaZQRrR6iJJn+LowWtFiXtgB13Mq3TjivSFy U1PFeE9uNv75Iiz+1YCcM8cEhZX4kr8vEy7lZqvgSR0G8kPsfo7Fk4vyOeqmk+a+ ITLBZPpXmEyJAn3tSStEpnBdHBYmeLxinvisE2+SjRiImufZzPQkmhT+aPNXZyjp zYFx7wCaZGCw419OmF25HPX043ODCLtRbdBTGZSKvkthNWuPFzouRi5vJg== -----END CERTIFICATE-----Generated at Wed Nov 5 08:34:28 2025 by rpki-client