$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3326/3bI70lwePqNvxlS5-2sld6x6Xqk.roa File: 3bI70lwePqNvxlS5-2sld6x6Xqk.roa (raw, json) Hash identifier: u/ZWukSKkfsrsRUqAPuZX9GEV6Qd62PstDasL0r8cB0= Subject key identifier: DD:B2:3B:D2:5C:1E:3E:A3:6F:C6:54:B9:FB:6B:25:77:AC:7A:5E:A9 Certificate issuer: /CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C Certificate serial: 0586 Authority key identifier: 6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/3bI70lwePqNvxlS5-2sld6x6Xqk.roa Signing time: Fri 01 Aug 2025 06:36:01 +0000 ROA not before: Fri 01 Aug 2025 06:36:01 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 134768 IP address blocks: 103.236.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 15:03:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1414 (0x586) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C Validity Not Before: Aug 1 06:36:01 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=DDB23BD25C1E3EA36FC654B9FB6B2577AC7A5EA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:49:13:a5:35:c8:f2:cc:d2:c9:ad:d4:28:55: 9e:5c:aa:46:4c:f1:24:0e:c6:31:49:db:fb:2a:15: 19:ff:56:d3:bc:38:d3:38:a6:56:65:42:5d:60:7f: 86:b6:0b:91:77:d1:56:43:08:98:d3:cb:28:8b:36: 9e:c9:09:0a:f0:8e:b9:00:83:05:dd:cd:6f:71:a4: bf:3b:d2:83:76:d4:95:f2:9b:66:ad:ad:fa:d7:5d: 62:b3:ff:0a:59:80:b0:fd:b4:d2:d1:9c:6d:83:3e: b2:9c:e9:3e:c5:33:7c:57:61:de:fc:b8:8f:63:97: c9:b8:f7:26:b7:2b:b8:19:00:fc:21:85:09:db:98: e8:0c:28:8b:7e:22:97:8e:2b:b3:eb:e6:2a:6c:ec: ad:23:14:92:5b:a3:3b:c5:54:29:b3:ba:3a:9d:13: 95:66:6f:f2:cb:44:3b:7a:4a:ce:59:f1:2a:f8:0e: c8:1f:2c:06:99:00:3a:d9:e4:3d:fb:35:eb:0f:26: c9:5e:f0:d5:d7:06:a2:b5:da:f7:3d:b6:da:fc:47: 91:89:36:45:0d:bf:c4:6f:61:9a:93:6f:19:d7:f1: 6a:21:83:a0:c4:3d:90:cf:73:c4:a4:0c:7c:97:8a: 4d:11:c5:36:fb:fa:eb:b8:d6:8e:e3:60:75:eb:cd: c3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B2:3B:D2:5C:1E:3E:A3:6F:C6:54:B9:FB:6B:25:77:AC:7A:5E:A9 X509v3 Authority Key Identifier: keyid:6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/3bI70lwePqNvxlS5-2sld6x6Xqk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.236.88.0/24 Signature Algorithm: sha256WithRSAEncryption 11:eb:12:f4:c5:98:4d:4c:99:8d:a2:01:98:5c:fd:10:c6:0f: 53:e3:03:d3:7a:3b:ac:1a:e5:da:6a:7c:5f:0a:f4:33:46:e0: 75:c2:ea:d2:bd:51:94:c3:ee:30:d3:19:ca:31:0f:13:5a:25: 5a:15:96:8c:81:8e:4d:e2:e9:5e:c0:2f:2d:b6:e7:95:78:dd: c4:1b:b2:04:44:f8:37:76:90:7b:0a:1a:e5:be:80:f7:46:89: 6b:fa:ee:9a:43:e3:7a:7e:e8:a5:8c:14:c6:b6:76:0c:0f:e4: 86:02:a9:e5:1e:e0:77:82:97:f9:6a:a4:53:d6:78:76:70:73: bc:34:b7:ff:1e:ab:8d:0d:fc:f7:1f:4d:fe:17:1d:5d:37:23: 4e:d6:d1:cb:c9:7b:0f:f9:8a:ec:55:2c:b8:2e:c8:fc:d5:4b: bb:b5:cd:74:48:d1:9e:35:e4:f0:40:ff:69:52:ff:e4:53:25: f9:2c:40:cf:e2:3a:bd:47:0a:4c:59:fe:b5:f7:19:2b:db:a7: a5:d6:36:1d:69:3c:fd:4b:7a:4e:ca:31:ed:8b:18:42:8f:7a: 55:dd:47:e8:1e:cd:4e:92:2c:cf:86:4c:45:58:a6:f0:b5:07: 4e:4e:9e:04:ed:d5:da:a6:a7:a7:e5:ed:e8:6e:7f:9d:71:74: 35:a2:e3:4a -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICBYYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkEx MUVFNDc0MjVEMTRFQkFGMkZDRDI0RDIwNjJCMEE1MkJBMDQyQzAeFw0yNTA4MDEw NjM2MDFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEREQjIzQkQyNUMxRTNF QTM2RkM2NTRCOUZCNkIyNTc3QUM3QTVFQTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCiSROlNcjyzNLJrdQoVZ5cqkZM8SQOxjFJ2/sqFRn/VtO8ONM4 plZlQl1gf4a2C5F30VZDCJjTyyiLNp7JCQrwjrkAgwXdzW9xpL870oN21JXym2at rfrXXWKz/wpZgLD9tNLRnG2DPrKc6T7FM3xXYd78uI9jl8m49ya3K7gZAPwhhQnb mOgMKIt+IpeOK7Pr5ips7K0jFJJbozvFVCmzujqdE5Vmb/LLRDt6Ss5Z8Sr4Dsgf LAaZADrZ5D37NesPJsle8NXXBqK12vc9ttr8R5GJNkUNv8RvYZqTbxnX8Wohg6DE PZDPc8SkDHyXik0RxTb7+uu41o7jYHXrzcOLAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU3bI70lwePqNvxlS5+2sld6x6XqkwHwYDVR0jBBgwFoAUahHuR0JdFOuvL80k 0gYrClK6BCwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy Ni9haEh1UjBKZEZPdXZMODBrMGdZckNsSzZCQ3cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2FoSHVSMEpkRk91dkw4MGswZ1lyQ2xLNkJDdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjYvM2JJNzBsd2VQcU52 eGxTNS0yc2xkNng2WHFrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGfsWDANBgkqhkiG9w0BAQsFAAOCAQEAEesS9MWYTUyZjaIBmFz9EMYPU+MD 03o7rBrl2mp8Xwr0M0bgdcLq0r1RlMPuMNMZyjEPE1olWhWWjIGOTeLpXsAvLbbn lXjdxBuyBET4N3aQewoa5b6A90aJa/rumkPjen7opYwUxrZ2DA/khgKp5R7gd4KX +WqkU9Z4dnBzvDS3/x6rjQ389x9N/hcdXTcjTtbRy8l7D/mK7FUsuC7I/NVLu7XN dEjRnjXk8ED/aVL/5FMl+SxAz+I6vUcKTFn+tfcZK9unpdY2HWk8/Ut6Tsox7YsY Qo96Vd1H6B7NTpIsz4ZMRVim8LUHTk6eBO3V2qanp+Xt6G5/nXF0NaLjSg== -----END CERTIFICATE-----Generated at Mon Aug 11 12:59:59 2025 by rpki-client