$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3326/IUGv5VszsiFbkyVaRYRjYtYbQyQ.roa File: IUGv5VszsiFbkyVaRYRjYtYbQyQ.roa (raw, json) Hash identifier: rUpLUtXCIX+FxV03p3Y4KmAHDJ2cumgOe//Mdp0JNOk= Subject key identifier: 21:41:AF:E5:5B:33:B2:21:5B:93:25:5A:45:84:63:62:D6:1B:43:24 Certificate issuer: /CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C Certificate serial: 0572 Authority key identifier: 6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/IUGv5VszsiFbkyVaRYRjYtYbQyQ.roa Signing time: Fri 01 Aug 2025 06:34:43 +0000 ROA not before: Fri 01 Aug 2025 06:34:43 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 134768 IP address blocks: 103.236.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 15:03:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1394 (0x572) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C Validity Not Before: Aug 1 06:34:43 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=2141AFE55B33B2215B93255A45846362D61B4324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b2:e5:cb:70:5f:5f:6f:cf:c4:6f:60:8a:e8: 46:a4:54:a7:91:48:6a:53:10:ba:a4:7d:79:bf:d8: 56:b0:2e:01:6d:f0:39:77:89:b7:a1:06:3f:ed:f5: cc:21:c9:37:ff:6e:1b:c0:c3:63:56:70:a8:0d:1f: 64:e0:dc:8e:c9:d7:99:a1:03:6e:fc:3b:ad:68:f5: ba:27:2a:74:11:cf:15:88:39:de:02:70:f7:ab:91: 85:92:34:12:3b:06:75:d6:9c:67:74:d5:a4:de:9d: 24:93:5f:01:f5:d1:b4:fb:59:52:21:6f:a4:df:64: 66:5f:53:ec:51:bf:95:6a:9f:f8:ba:69:2f:5b:21: 63:16:18:fe:9b:46:d6:b5:97:e9:80:4a:f9:0a:f2: c6:40:f3:3f:0e:c9:f3:64:4e:e2:62:4b:a8:54:3e: ec:42:b7:92:7a:36:1a:d8:5d:17:6d:fa:14:62:61: d0:0f:87:d9:5f:69:3e:0f:5d:22:b3:07:b8:96:c4: d6:de:1c:99:e1:0d:78:98:41:a6:74:55:dc:c5:c1: 2c:4b:b0:6c:eb:83:d9:18:d2:5e:8b:be:78:a8:88: bd:45:e1:1e:ac:81:f0:1f:01:ce:f6:fd:9a:c2:2b: 60:62:4d:05:eb:80:5b:00:1a:85:16:e5:3e:51:b3: 89:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:41:AF:E5:5B:33:B2:21:5B:93:25:5A:45:84:63:62:D6:1B:43:24 X509v3 Authority Key Identifier: keyid:6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/IUGv5VszsiFbkyVaRYRjYtYbQyQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.236.71.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:a6:02:8e:ee:78:db:90:82:8d:ef:be:f4:55:5d:37:35:2f: 95:fc:37:9c:b1:3c:04:50:96:be:5a:54:3a:b1:ae:34:65:ce: 31:d7:2d:10:7d:6f:ff:f0:61:14:49:5e:12:0e:09:33:02:9a: ee:b1:b4:29:e7:27:c8:7b:47:0b:d4:37:44:9b:54:46:47:38: 60:38:82:c8:45:e5:eb:33:01:a3:eb:5b:cf:84:b7:37:22:79: 38:09:88:e9:0a:54:f1:c3:4a:77:af:ce:be:25:82:35:58:e9: 1b:9f:ba:d4:e0:3d:38:d7:df:80:b4:cd:84:d7:7f:5a:ba:b7: 39:54:80:73:f6:06:07:68:c7:04:d1:7b:38:c0:c9:35:b0:c2: 8d:31:0e:c4:24:7b:75:66:c8:ba:e5:9f:ff:fa:02:07:d1:22: 1b:38:a6:9a:c6:fe:8a:4a:54:45:8f:98:4b:61:c6:48:25:ab: 4e:79:da:53:bd:2d:81:84:cf:95:3e:dd:ee:0b:42:2c:29:ad: dc:c4:e3:5d:b8:42:56:5c:52:84:e0:f3:43:b2:46:23:7b:c1: d4:c7:bc:60:38:59:d6:3b:64:cc:c6:1d:32:34:11:d6:0a:59: 72:fa:11:a7:fe:af:e8:d4:4e:f3:16:ee:2f:ff:ab:be:7c:80: af:aa:3f:4a -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICBXIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkEx MUVFNDc0MjVEMTRFQkFGMkZDRDI0RDIwNjJCMEE1MkJBMDQyQzAeFw0yNTA4MDEw NjM0NDNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDIxNDFBRkU1NUIzM0Iy MjE1QjkzMjU1QTQ1ODQ2MzYyRDYxQjQzMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTsuXLcF9fb8/Eb2CK6EakVKeRSGpTELqkfXm/2FawLgFt8Dl3 ibehBj/t9cwhyTf/bhvAw2NWcKgNH2Tg3I7J15mhA278O61o9bonKnQRzxWIOd4C cPerkYWSNBI7BnXWnGd01aTenSSTXwH10bT7WVIhb6TfZGZfU+xRv5Vqn/i6aS9b IWMWGP6bRta1l+mASvkK8sZA8z8OyfNkTuJiS6hUPuxCt5J6NhrYXRdt+hRiYdAP h9lfaT4PXSKzB7iWxNbeHJnhDXiYQaZ0VdzFwSxLsGzrg9kY0l6LvnioiL1F4R6s gfAfAc72/ZrCK2BiTQXrgFsAGoUW5T5Rs4k3AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUIUGv5VszsiFbkyVaRYRjYtYbQyQwHwYDVR0jBBgwFoAUahHuR0JdFOuvL80k 0gYrClK6BCwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy Ni9haEh1UjBKZEZPdXZMODBrMGdZckNsSzZCQ3cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2FoSHVSMEpkRk91dkw4MGswZ1lyQ2xLNkJDdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjYvSVVHdjVWc3pzaUZi a3lWYVJZUmpZdFliUXlRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGfsRzANBgkqhkiG9w0BAQsFAAOCAQEAfaYCju5425CCje++9FVdNzUvlfw3 nLE8BFCWvlpUOrGuNGXOMdctEH1v//BhFEleEg4JMwKa7rG0KecnyHtHC9Q3RJtU Rkc4YDiCyEXl6zMBo+tbz4S3NyJ5OAmI6QpU8cNKd6/OviWCNVjpG5+61OA9ONff gLTNhNd/Wrq3OVSAc/YGB2jHBNF7OMDJNbDCjTEOxCR7dWbIuuWf//oCB9EiGzim msb+ikpURY+YS2HGSCWrTnnaU70tgYTPlT7d7gtCLCmt3MTjXbhCVlxShODzQ7JG I3vB1Me8YDhZ1jtkzMYdMjQR1gpZcvoRp/6v6NRO8xbuL/+rvnyAr6o/Sg== -----END CERTIFICATE-----Generated at Mon Aug 11 10:39:55 2025 by rpki-client