$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3326/7KZSSQO5r4D3Ieb-_PsGGZgYY9Q.roa File: 7KZSSQO5r4D3Ieb-_PsGGZgYY9Q.roa (raw, json) Hash identifier: ek833pGdFH247ppWxkBjs3mew0uemmG9ECDMlm7ewQ8= Subject key identifier: EC:A6:52:49:03:B9:AF:80:F7:21:E6:FE:FC:FB:06:19:98:18:63:D4 Certificate issuer: /CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C Certificate serial: 057D Authority key identifier: 6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/7KZSSQO5r4D3Ieb-_PsGGZgYY9Q.roa Signing time: Fri 01 Aug 2025 06:34:45 +0000 ROA not before: Fri 01 Aug 2025 06:34:45 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 134768 IP address blocks: 103.236.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 15:03:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1405 (0x57d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C Validity Not Before: Aug 1 06:34:45 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=ECA6524903B9AF80F721E6FEFCFB0619981863D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ce:51:58:9a:22:4d:d8:6e:a7:ac:c3:6f:85: 90:3b:7d:0f:59:87:6d:1e:ba:ce:6d:fe:48:38:70: af:34:b3:d2:d1:61:3a:9d:21:de:aa:7f:81:2b:18: 89:b6:24:f2:a5:63:b3:cf:f2:67:bc:21:23:c7:18: 30:99:f3:ee:11:50:ee:9c:25:0b:15:10:65:38:1e: 40:f9:4f:60:60:d8:74:c4:fa:61:aa:35:47:8d:37: 00:1b:2c:86:70:04:d9:47:9e:22:f3:c5:77:5d:11: 46:fd:e6:4c:79:a8:a5:5b:57:be:6d:85:c0:c4:54: 6a:8b:69:4b:99:6a:d0:9b:7c:47:e8:52:f4:da:c5: ea:57:fe:2d:06:9c:a4:65:54:2d:2a:d8:bc:3d:66: 87:39:97:cf:d3:9a:d5:95:5c:51:bb:2b:6f:0f:02: dd:89:6c:bf:91:73:4e:39:3e:28:37:e3:45:63:79: 12:d0:b0:42:e5:06:f5:7a:55:f5:ac:76:5e:7d:42: b0:df:dd:a7:4e:af:ef:e1:d1:25:85:d4:45:85:29: 6c:25:1e:d4:10:3a:99:72:11:71:0c:70:8e:f2:b9: 8d:08:3e:8d:ca:8f:a5:99:1d:5a:07:ff:cf:a7:fb: 54:c4:02:4f:e4:7f:46:f7:f7:bd:f9:5b:88:9c:8d: 08:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:A6:52:49:03:B9:AF:80:F7:21:E6:FE:FC:FB:06:19:98:18:63:D4 X509v3 Authority Key Identifier: keyid:6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/7KZSSQO5r4D3Ieb-_PsGGZgYY9Q.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.236.87.0/24 Signature Algorithm: sha256WithRSAEncryption 33:bb:fa:49:23:5b:0b:8d:b7:66:f7:e2:aa:bc:a0:28:29:6c: 99:fe:a8:c7:c3:88:e7:a1:eb:52:ad:ac:11:b5:0f:69:81:f4: a7:75:2e:f9:8c:4d:45:84:cf:52:83:e3:e7:84:4e:37:c3:a4: 86:40:d7:66:1a:fa:df:37:a5:06:d4:01:f9:6b:c4:31:ff:fa: f2:f0:f7:e0:d7:ff:33:2f:0a:09:ed:30:20:29:e2:c2:4a:27: e2:a2:9a:45:bb:1e:05:5a:ff:0a:04:6a:8c:50:a2:7f:55:9f: 40:ec:7c:32:bc:09:e7:9e:e0:cf:61:bd:cd:b6:26:ba:5c:89: f2:50:a2:a3:ef:4e:55:8b:ad:a8:86:37:fc:36:5a:24:3a:6c: ef:89:84:6c:96:78:b3:b1:0b:94:06:ba:68:29:52:f1:09:9b: 8a:eb:c8:44:7e:0b:ab:23:ef:c8:f3:ba:d2:c2:3d:e0:24:56: af:f1:c2:59:db:f9:8d:10:ff:e0:4d:32:3b:75:1d:b4:d0:17: 9f:a7:42:a3:1f:6a:ab:f5:50:f5:f1:d4:8d:9c:bb:2c:7b:22: 32:6a:07:0f:d1:7e:8c:0e:4c:47:02:49:ab:c9:d8:de:25:64: 42:57:b7:e1:91:26:54:de:a1:cf:1e:ff:88:03:3b:ae:b7:7f: 38:41:f0:2c -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICBX0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkEx MUVFNDc0MjVEMTRFQkFGMkZDRDI0RDIwNjJCMEE1MkJBMDQyQzAeFw0yNTA4MDEw NjM0NDVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEVDQTY1MjQ5MDNCOUFG ODBGNzIxRTZGRUZDRkIwNjE5OTgxODYzRDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDgzlFYmiJN2G6nrMNvhZA7fQ9Zh20eus5t/kg4cK80s9LRYTqd Id6qf4ErGIm2JPKlY7PP8me8ISPHGDCZ8+4RUO6cJQsVEGU4HkD5T2Bg2HTE+mGq NUeNNwAbLIZwBNlHniLzxXddEUb95kx5qKVbV75thcDEVGqLaUuZatCbfEfoUvTa xepX/i0GnKRlVC0q2Lw9Zoc5l8/TmtWVXFG7K28PAt2JbL+Rc045Pig340VjeRLQ sELlBvV6VfWsdl59QrDf3adOr+/h0SWF1EWFKWwlHtQQOplyEXEMcI7yuY0IPo3K j6WZHVoH/8+n+1TEAk/kf0b39735W4icjQjxAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU7KZSSQO5r4D3Ieb+/PsGGZgYY9QwHwYDVR0jBBgwFoAUahHuR0JdFOuvL80k 0gYrClK6BCwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy Ni9haEh1UjBKZEZPdXZMODBrMGdZckNsSzZCQ3cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2FoSHVSMEpkRk91dkw4MGswZ1lyQ2xLNkJDdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjYvN0taU1NRTzVyNEQz SWViLV9Qc0dHWmdZWTlRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGfsVzANBgkqhkiG9w0BAQsFAAOCAQEAM7v6SSNbC423ZvfiqrygKClsmf6o x8OI56HrUq2sEbUPaYH0p3Uu+YxNRYTPUoPj54RON8OkhkDXZhr63zelBtQB+WvE Mf/68vD34Nf/My8KCe0wICniwkon4qKaRbseBVr/CgRqjFCif1WfQOx8MrwJ557g z2G9zbYmulyJ8lCio+9OVYutqIY3/DZaJDps74mEbJZ4s7ELlAa6aClS8QmbiuvI RH4LqyPvyPO60sI94CRWr/HCWdv5jRD/4E0yO3UdtNAXn6dCox9qq/VQ9fHUjZy7 LHsiMmoHD9F+jA5MRwJJq8nY3iVkQle34ZEmVN6hzx7/iAM7rrd/OEHwLA== -----END CERTIFICATE-----Generated at Mon Aug 11 10:44:32 2025 by rpki-client