$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3326/JXIjNxDoLCtazRHalFUI2M34jsk.roa File: JXIjNxDoLCtazRHalFUI2M34jsk.roa (raw, json) Hash identifier: LPSlyE3/EmZS72zVIdcaOWuoLHXefq508BqBFzd8FxI= Subject key identifier: 25:72:23:37:10:E8:2C:2B:5A:CD:11:DA:94:55:08:D8:CD:F8:8E:C9 Certificate issuer: /CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C Certificate serial: 0581 Authority key identifier: 6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/JXIjNxDoLCtazRHalFUI2M34jsk.roa Signing time: Fri 01 Aug 2025 06:34:47 +0000 ROA not before: Fri 01 Aug 2025 06:34:47 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 134768 IP address blocks: 103.236.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 15:03:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1409 (0x581) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C Validity Not Before: Aug 1 06:34:47 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=2572233710E82C2B5ACD11DA945508D8CDF88EC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d7:91:ba:0a:e8:6d:88:f1:ad:60:28:0b:7d: 8c:51:d8:83:16:00:18:63:e6:67:46:58:44:e6:2a: 3e:dd:1f:31:fc:10:ea:f9:a7:e5:ba:6f:cb:a2:d4: c0:8a:f0:e9:d3:54:97:d6:24:ff:fc:35:e9:7d:22: 89:37:45:30:f1:01:93:0d:f6:be:6c:a6:91:8a:11: ca:dd:1f:9e:41:b9:29:71:73:58:d6:a3:eb:5d:74: 8d:f7:35:56:f9:53:a5:bf:d3:88:67:05:80:5d:e0: 75:70:a8:fa:b5:53:ee:60:f9:09:6e:25:3c:78:10: 0b:87:d5:e6:cd:b2:46:c7:6b:c1:9a:71:1f:34:fd: e0:e6:7e:4d:df:7e:bd:4f:4e:95:5b:50:77:03:40: 77:6a:b6:2d:36:ee:46:b3:fa:d1:f3:33:c2:5b:11: a7:5b:ad:14:b2:ac:5b:4f:73:71:e8:de:58:3d:85: 56:17:e0:aa:5f:f5:89:ce:89:8b:0d:7c:2c:c5:02: ad:89:79:e4:8f:3e:a3:13:9e:a5:69:2e:cf:8f:35: 74:ae:bc:8f:07:c7:84:5a:e3:8f:c5:41:85:e2:bc: 75:35:db:43:4b:a8:79:ba:84:e0:7b:c1:68:7e:75: 54:ad:23:6d:02:64:f4:dd:79:2f:b0:3e:60:e9:88: 65:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:72:23:37:10:E8:2C:2B:5A:CD:11:DA:94:55:08:D8:CD:F8:8E:C9 X509v3 Authority Key Identifier: keyid:6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/JXIjNxDoLCtazRHalFUI2M34jsk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.236.74.0/24 Signature Algorithm: sha256WithRSAEncryption 98:3b:51:a0:25:b8:85:ff:f5:70:e9:95:5d:76:65:34:0f:9d: f0:37:80:1f:39:2b:0e:79:00:31:8a:42:d9:8e:50:33:44:3c: f7:fa:fa:c0:26:e2:f8:06:7f:45:49:f3:1c:c8:51:73:fb:50: 2c:8c:f5:9d:b1:43:41:a3:22:43:8d:c6:aa:1f:ed:a0:19:0d: 83:6c:19:79:87:77:d1:50:4f:ea:45:ab:2b:6c:f9:ec:a6:fa: 7e:b2:97:47:8d:b0:0a:a4:f8:cb:b6:9e:71:0a:31:26:a8:5f: 55:d5:25:09:b2:79:13:7a:ba:5b:8c:73:6f:95:81:4e:e3:09: 68:6a:00:25:16:17:06:db:51:76:c6:7f:a9:38:07:91:6a:69: 5a:8d:ea:87:ff:a2:54:ac:d9:7e:4e:6d:d4:36:d5:3a:c0:16: 29:28:3d:f7:1d:00:3f:3a:e9:a2:c1:33:74:de:c1:44:14:79: 48:64:c1:fa:53:38:f3:6b:8d:06:92:1a:64:77:11:d6:46:cc: fa:ca:1c:76:49:b4:8d:60:3e:f6:5d:3b:54:b2:19:79:97:77: b1:3e:bb:73:88:6e:a5:21:c3:a5:6f:7d:75:5d:e9:35:7d:8b: 65:20:45:c5:57:f3:33:4a:05:d1:61:0f:e4:c1:80:34:17:54: 74:f7:0f:be -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICBYEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkEx MUVFNDc0MjVEMTRFQkFGMkZDRDI0RDIwNjJCMEE1MkJBMDQyQzAeFw0yNTA4MDEw NjM0NDdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDI1NzIyMzM3MTBFODJD MkI1QUNEMTFEQTk0NTUwOEQ4Q0RGODhFQzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDW15G6CuhtiPGtYCgLfYxR2IMWABhj5mdGWETmKj7dHzH8EOr5 p+W6b8ui1MCK8OnTVJfWJP/8Nel9Iok3RTDxAZMN9r5sppGKEcrdH55BuSlxc1jW o+tddI33NVb5U6W/04hnBYBd4HVwqPq1U+5g+QluJTx4EAuH1ebNskbHa8GacR80 /eDmfk3ffr1PTpVbUHcDQHdqti027kaz+tHzM8JbEadbrRSyrFtPc3Ho3lg9hVYX 4Kpf9YnOiYsNfCzFAq2JeeSPPqMTnqVpLs+PNXSuvI8Hx4Ra44/FQYXivHU120NL qHm6hOB7wWh+dVStI20CZPTdeS+wPmDpiGW/AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUJXIjNxDoLCtazRHalFUI2M34jskwHwYDVR0jBBgwFoAUahHuR0JdFOuvL80k 0gYrClK6BCwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy Ni9haEh1UjBKZEZPdXZMODBrMGdZckNsSzZCQ3cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2FoSHVSMEpkRk91dkw4MGswZ1lyQ2xLNkJDdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjYvSlhJak54RG9MQ3Rh elJIYWxGVUkyTTM0anNrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGfsSjANBgkqhkiG9w0BAQsFAAOCAQEAmDtRoCW4hf/1cOmVXXZlNA+d8DeA HzkrDnkAMYpC2Y5QM0Q89/r6wCbi+AZ/RUnzHMhRc/tQLIz1nbFDQaMiQ43Gqh/t oBkNg2wZeYd30VBP6kWrK2z57Kb6frKXR42wCqT4y7aecQoxJqhfVdUlCbJ5E3q6 W4xzb5WBTuMJaGoAJRYXBttRdsZ/qTgHkWppWo3qh/+iVKzZfk5t1DbVOsAWKSg9 9x0APzrposEzdN7BRBR5SGTB+lM482uNBpIaZHcR1kbM+socdkm0jWA+9l07VLIZ eZd3sT67c4hupSHDpW99dV3pNX2LZSBFxVfzM0oF0WEP5MGANBdUdPcPvg== -----END CERTIFICATE-----Generated at Mon Aug 11 10:43:06 2025 by rpki-client