$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3326/BiWU9KjSWHYlhOqpHg7ytieiUO4.roa File: BiWU9KjSWHYlhOqpHg7ytieiUO4.roa (raw, json) Hash identifier: 8cBM117beh7JbZeV/40GTKOrTbF1k4/KlZSnDexQrPY= Subject key identifier: 06:25:94:F4:A8:D2:58:76:25:84:EA:A9:1E:0E:F2:B6:27:A2:50:EE Certificate issuer: /CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C Certificate serial: 057F Authority key identifier: 6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/BiWU9KjSWHYlhOqpHg7ytieiUO4.roa Signing time: Fri 01 Aug 2025 06:34:46 +0000 ROA not before: Fri 01 Aug 2025 06:34:46 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 134768 IP address blocks: 103.236.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 15:03:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1407 (0x57f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C Validity Not Before: Aug 1 06:34:46 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=062594F4A8D258762584EAA91E0EF2B627A250EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b4:46:a6:0a:30:f4:13:f3:2a:26:e8:5e:b4: d2:45:14:f1:ab:b2:94:b1:55:24:5f:2b:17:d8:8e: 4c:bf:fa:c1:3c:c6:fc:5f:b9:11:dd:e5:f6:b8:18: dc:80:e9:e8:86:4b:08:f7:a0:20:1e:59:1e:0c:4b: 91:47:a9:2e:8e:80:ad:00:06:60:51:6b:59:64:3e: a9:51:13:9f:8d:80:d1:a7:da:0b:9c:19:5c:27:67: 58:ec:69:46:bd:f3:81:24:c1:a4:97:1e:99:06:a5: ab:62:91:5b:2a:6f:22:96:78:59:7f:c7:c5:13:7a: b8:ef:cd:e9:fa:ec:a7:a8:ae:7b:f7:17:64:58:e3: e2:08:d1:5b:9f:19:71:59:69:82:88:16:77:8c:ba: ee:2d:53:64:9c:3e:ad:a0:99:19:2c:49:3e:47:6f: 88:02:44:bf:4d:3c:11:fa:cd:50:d4:0c:2d:a6:4e: 79:80:6e:74:35:a2:2e:93:86:77:3b:9d:0c:86:69: 96:1f:28:54:ec:f5:f3:b0:c6:39:6d:43:c0:1b:ff: d9:46:84:1f:78:64:00:3b:38:2c:be:43:35:7a:60: 95:56:f1:7e:75:aa:f7:66:d3:81:c9:25:db:c4:f6: 21:1d:75:68:8a:84:08:4d:90:c4:11:0f:77:db:4e: 2e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:25:94:F4:A8:D2:58:76:25:84:EA:A9:1E:0E:F2:B6:27:A2:50:EE X509v3 Authority Key Identifier: keyid:6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/BiWU9KjSWHYlhOqpHg7ytieiUO4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.236.85.0/24 Signature Algorithm: sha256WithRSAEncryption 56:0d:22:83:52:0e:9e:a4:ed:56:d1:82:fc:78:c6:32:a8:71: 3e:b9:64:97:da:78:58:f1:f1:4a:68:7e:ff:7b:34:9f:0c:5b: 44:cc:c9:03:1e:54:22:44:43:7b:2f:f9:c8:26:4d:e1:26:f6: b0:ce:b4:f0:fd:4c:23:6a:93:2a:bb:d7:47:29:f3:f3:29:f6: 66:fb:00:23:04:6d:af:ce:bf:3e:4f:61:55:b9:c2:b6:47:f4: 8f:b8:af:f5:50:51:7d:66:f0:6a:1c:38:10:ac:32:25:27:ec: 35:47:42:ed:7c:78:1c:51:36:64:89:61:42:bc:47:30:b6:e5: 86:c3:43:dc:2e:6d:fd:fd:83:0f:bb:30:dd:53:4f:21:ee:d0: c9:0f:f5:4c:1f:5d:4d:a4:89:2a:cf:04:5e:d8:fc:f3:f1:c7: 07:62:58:88:95:94:b7:e6:1e:ec:a4:14:24:2f:8a:fc:88:e2: ed:7d:32:27:a9:06:54:96:73:21:24:d8:88:63:ec:b8:d2:17: c8:d8:8b:1f:89:e3:93:4b:26:88:73:10:61:0d:8f:29:f8:7f: 2b:7a:cd:c9:d8:5c:c3:db:8e:28:23:4c:c9:32:f4:e3:4c:66: 60:7a:f4:dc:ea:87:68:c1:93:46:fd:13:55:eb:66:2d:e5:86: 0b:71:66:8e -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICBX8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkEx MUVFNDc0MjVEMTRFQkFGMkZDRDI0RDIwNjJCMEE1MkJBMDQyQzAeFw0yNTA4MDEw NjM0NDZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDA2MjU5NEY0QThEMjU4 NzYyNTg0RUFBOTFFMEVGMkI2MjdBMjUwRUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCftEamCjD0E/MqJuhetNJFFPGrspSxVSRfKxfYjky/+sE8xvxf uRHd5fa4GNyA6eiGSwj3oCAeWR4MS5FHqS6OgK0ABmBRa1lkPqlRE5+NgNGn2guc GVwnZ1jsaUa984EkwaSXHpkGpatikVsqbyKWeFl/x8UTerjvzen67Keornv3F2RY 4+II0VufGXFZaYKIFneMuu4tU2ScPq2gmRksST5Hb4gCRL9NPBH6zVDUDC2mTnmA bnQ1oi6Thnc7nQyGaZYfKFTs9fOwxjltQ8Ab/9lGhB94ZAA7OCy+QzV6YJVW8X51 qvdm04HJJdvE9iEddWiKhAhNkMQRD3fbTi4vAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUBiWU9KjSWHYlhOqpHg7ytieiUO4wHwYDVR0jBBgwFoAUahHuR0JdFOuvL80k 0gYrClK6BCwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy Ni9haEh1UjBKZEZPdXZMODBrMGdZckNsSzZCQ3cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2FoSHVSMEpkRk91dkw4MGswZ1lyQ2xLNkJDdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjYvQmlXVTlLalNXSFls aE9xcEhnN3l0aWVpVU80LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGfsVTANBgkqhkiG9w0BAQsFAAOCAQEAVg0ig1IOnqTtVtGC/HjGMqhxPrlk l9p4WPHxSmh+/3s0nwxbRMzJAx5UIkRDey/5yCZN4Sb2sM608P1MI2qTKrvXRynz 8yn2ZvsAIwRtr86/Pk9hVbnCtkf0j7iv9VBRfWbwahw4EKwyJSfsNUdC7Xx4HFE2 ZIlhQrxHMLblhsND3C5t/f2DD7sw3VNPIe7QyQ/1TB9dTaSJKs8EXtj88/HHB2JY iJWUt+Ye7KQUJC+K/Iji7X0yJ6kGVJZzISTYiGPsuNIXyNiLH4njk0smiHMQYQ2P Kfh/K3rNydhcw9uOKCNMyTL040xmYHr03OqHaMGTRv0TVetmLeWGC3Fmjg== -----END CERTIFICATE-----Generated at Mon Aug 11 10:52:43 2025 by rpki-client