$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3326/Cx-QxbxfNdl0yzojaVedhZN2hxQ.roa File: Cx-QxbxfNdl0yzojaVedhZN2hxQ.roa (raw, json) Hash identifier: G25uSTkFkVSIleis6xddxYxuP7PBYQ2MMDOy3Dchr+g= Subject key identifier: 0B:1F:90:C5:BC:5F:35:D9:74:CB:3A:23:69:57:9D:85:93:76:87:14 Certificate issuer: /CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C Certificate serial: 056E Authority key identifier: 6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/Cx-QxbxfNdl0yzojaVedhZN2hxQ.roa Signing time: Fri 01 Aug 2025 06:34:42 +0000 ROA not before: Fri 01 Aug 2025 06:34:42 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 134768 IP address blocks: 103.236.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 15:03:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1390 (0x56e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C Validity Not Before: Aug 1 06:34:42 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=0B1F90C5BC5F35D974CB3A2369579D8593768714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6e:77:2f:9e:5b:45:05:2a:b4:6e:85:cd:8a: 4e:8b:d5:93:64:d1:ba:d4:88:fc:2f:aa:cf:7c:84: e4:e4:bc:64:b5:19:5b:04:46:a1:f2:4f:c9:96:68: 7f:59:47:77:54:3c:28:fe:41:de:e6:52:29:0a:10: 5e:50:98:7e:5e:c0:8e:33:27:7b:e3:fa:8c:19:7a: ab:32:56:c2:ef:86:8c:c1:a8:8f:e2:00:72:eb:fc: e2:ad:e8:a0:01:76:e6:20:38:49:67:dc:70:66:60: a1:8c:2e:38:6d:f2:65:96:38:7d:1a:9f:23:7d:77: 85:3a:fa:f9:66:86:09:cb:ad:6e:bd:aa:d9:b0:0c: 30:b7:8d:54:67:b7:41:51:f1:8b:de:00:7e:13:08: b2:a3:f1:79:90:95:0b:be:10:8c:cf:c2:13:50:fc: f1:72:39:65:60:6d:52:91:34:79:a5:00:9d:26:88: 8a:8f:1a:ef:01:6a:9d:e7:c7:59:ac:80:18:cd:e6: 57:b3:a3:48:ad:9c:de:03:a7:5b:11:35:60:2f:31: 23:08:b2:6c:d9:51:24:42:a4:10:80:72:de:c0:a3: 0c:28:05:93:0f:7a:25:59:59:59:e8:4b:42:a2:10: ae:17:71:10:cf:d4:1a:a5:a1:5d:3e:62:e6:5c:d6: ba:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:1F:90:C5:BC:5F:35:D9:74:CB:3A:23:69:57:9D:85:93:76:87:14 X509v3 Authority Key Identifier: keyid:6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/Cx-QxbxfNdl0yzojaVedhZN2hxQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.236.78.0/24 Signature Algorithm: sha256WithRSAEncryption a7:5a:1f:60:ed:ff:5a:3d:60:ba:7f:48:3c:3e:82:66:b8:a9: 5f:c6:9b:05:fa:c1:30:8a:39:66:55:a7:08:f5:a6:e9:51:e8: 59:1f:ac:9c:78:84:ff:5d:ba:f5:5a:ab:6c:3c:a8:a8:ea:cc: 41:5c:38:5a:a0:f7:d4:31:cf:61:7a:ca:ba:0e:46:66:e0:30: 50:b2:a6:5c:3d:02:d7:ae:17:57:e1:ff:bd:71:8d:00:8e:15: 2c:f6:7b:9d:28:98:78:d9:38:67:40:91:cd:07:83:29:21:47: 74:3f:47:af:f7:8f:2d:3b:59:d2:64:8b:f8:18:ad:c1:0a:31: 94:ae:15:94:e0:da:b0:e6:cc:b3:ef:38:f2:66:f8:40:e0:e4: 9f:ca:88:d3:4e:92:93:88:09:24:ee:7c:4d:80:0e:9d:af:2a: 4e:4a:27:a1:95:05:7c:be:73:06:fb:a5:06:1f:45:1b:5a:db: cd:fa:2b:38:5c:a5:07:69:59:80:c4:c9:90:f8:eb:64:70:b1: b1:0b:c9:ae:76:88:4d:c1:f1:83:45:03:ce:51:2e:fc:94:09: f3:b3:c5:2c:5d:3a:2b:50:de:77:5c:4a:e8:46:74:d9:ef:4b: f4:13:e4:62:a1:da:51:c7:82:5b:61:73:6b:ab:cd:ff:1a:69: c9:34:b5:ce -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICBW4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkEx MUVFNDc0MjVEMTRFQkFGMkZDRDI0RDIwNjJCMEE1MkJBMDQyQzAeFw0yNTA4MDEw NjM0NDJaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDBCMUY5MEM1QkM1RjM1 RDk3NENCM0EyMzY5NTc5RDg1OTM3Njg3MTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIbncvnltFBSq0boXNik6L1ZNk0brUiPwvqs98hOTkvGS1GVsE RqHyT8mWaH9ZR3dUPCj+Qd7mUikKEF5QmH5ewI4zJ3vj+owZeqsyVsLvhozBqI/i AHLr/OKt6KABduYgOEln3HBmYKGMLjht8mWWOH0anyN9d4U6+vlmhgnLrW69qtmw DDC3jVRnt0FR8YveAH4TCLKj8XmQlQu+EIzPwhNQ/PFyOWVgbVKRNHmlAJ0miIqP Gu8Bap3nx1msgBjN5lezo0itnN4Dp1sRNWAvMSMIsmzZUSRCpBCAct7AowwoBZMP eiVZWVnoS0KiEK4XcRDP1BqloV0+YuZc1rpdAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUCx+QxbxfNdl0yzojaVedhZN2hxQwHwYDVR0jBBgwFoAUahHuR0JdFOuvL80k 0gYrClK6BCwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy Ni9haEh1UjBKZEZPdXZMODBrMGdZckNsSzZCQ3cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2FoSHVSMEpkRk91dkw4MGswZ1lyQ2xLNkJDdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjYvQ3gtUXhieGZOZGww eXpvamFWZWRoWk4yaHhRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGfsTjANBgkqhkiG9w0BAQsFAAOCAQEAp1ofYO3/Wj1gun9IPD6CZripX8ab BfrBMIo5ZlWnCPWm6VHoWR+snHiE/1269VqrbDyoqOrMQVw4WqD31DHPYXrKug5G ZuAwULKmXD0C164XV+H/vXGNAI4VLPZ7nSiYeNk4Z0CRzQeDKSFHdD9Hr/ePLTtZ 0mSL+BitwQoxlK4VlODasObMs+848mb4QODkn8qI006Sk4gJJO58TYAOna8qTkon oZUFfL5zBvulBh9FG1rbzforOFylB2lZgMTJkPjrZHCxsQvJrnaITcHxg0UDzlEu /JQJ87PFLF06K1Ded1xK6EZ02e9L9BPkYqHaUceCW2Fza6vN/xppyTS1zg== -----END CERTIFICATE-----Generated at Mon Aug 11 10:58:27 2025 by rpki-client