$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3326/Oj6fi7piw1Ubrgbmt80npXKCiUE.roa File: Oj6fi7piw1Ubrgbmt80npXKCiUE.roa (raw, json) Hash identifier: c/+XPr0AqlFbIvRe/JdcVOc3KuLLU384JCzSmOJHuxg= Subject key identifier: 3A:3E:9F:8B:BA:62:C3:55:1B:AE:06:E6:B7:CD:27:A5:72:82:89:41 Certificate issuer: /CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C Certificate serial: 058C Authority key identifier: 6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/Oj6fi7piw1Ubrgbmt80npXKCiUE.roa Signing time: Fri 01 Aug 2025 06:36:03 +0000 ROA not before: Fri 01 Aug 2025 06:36:03 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 134768 IP address blocks: 103.236.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 15:03:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1420 (0x58c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C Validity Not Before: Aug 1 06:36:03 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=3A3E9F8BBA62C3551BAE06E6B7CD27A572828941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:25:8b:3b:36:67:58:c8:61:fd:82:8b:e2:9b: b5:2e:5a:d5:9f:82:46:90:51:68:8c:e7:89:18:70: 54:5f:83:b2:7a:ac:4f:b7:12:de:70:02:40:72:3d: c6:71:66:5a:11:82:15:fd:b2:df:31:19:88:c0:fb: 23:63:1f:46:97:c5:09:25:41:e1:d4:22:4e:a3:c2: 02:1b:3c:4b:6a:e7:45:7a:c9:3b:a6:33:c7:67:2a: 10:41:51:7e:24:bd:d3:3b:59:de:74:82:0a:ff:6b: 4b:3b:60:3b:bc:9e:f4:d3:a0:4f:7a:33:27:8b:3c: f1:8a:a9:6e:5c:ae:cf:99:f3:b8:5f:39:91:c5:a9: 25:7f:83:32:72:67:d4:7c:38:72:eb:68:43:19:b1: fd:49:27:0c:28:d1:1f:f4:34:75:67:0d:23:3a:9f: c6:64:35:02:15:cf:cb:61:7f:d9:a1:22:e5:ea:59: 1b:c3:6e:06:44:cf:e0:99:5d:ec:d6:52:9d:99:d0: 54:0a:68:b2:63:be:85:76:a7:bf:8c:0b:0e:59:0a: c0:8f:22:d7:b5:8e:76:62:7e:df:a7:b8:fd:2c:3c: 6e:8c:51:6f:25:e8:6b:7c:9d:2e:da:24:41:e5:cd: 82:42:64:8f:80:22:14:a9:f0:f5:8a:14:06:1e:58: 80:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:3E:9F:8B:BA:62:C3:55:1B:AE:06:E6:B7:CD:27:A5:72:82:89:41 X509v3 Authority Key Identifier: keyid:6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/Oj6fi7piw1Ubrgbmt80npXKCiUE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.236.90.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:77:a1:13:84:c6:69:ff:d5:03:8b:86:87:e0:59:b6:cc:bc: 06:cb:ec:58:3e:94:e4:8a:05:be:da:52:63:35:ab:4d:78:3d: 10:33:85:90:fb:5a:69:b9:41:ad:a6:68:d0:40:13:54:94:c4: 10:58:42:51:28:ed:6e:4e:3d:6b:0b:94:b9:f0:3b:10:bc:96: d3:c2:f6:35:a9:c4:58:e6:11:4c:66:10:b4:90:91:a4:c1:22: c0:67:64:59:8e:2a:e9:be:3c:e4:b7:f7:c6:1e:e1:b1:4e:c4: e8:72:bf:b5:a5:49:c0:19:c4:e6:03:cd:df:c9:cd:0f:c2:16: 29:fa:9f:d0:ce:88:96:61:ac:54:f4:eb:d0:8b:27:9e:4a:d3: c2:f4:c6:cb:95:01:0e:b0:10:35:f6:58:f2:40:e3:52:7d:78: 6a:4c:0c:97:84:f2:85:6a:6c:bd:8f:61:1e:9b:00:a5:76:3d: 61:7e:8d:a8:89:d5:97:9b:03:61:21:df:3d:0d:9b:b3:92:6e: 5b:3d:a0:10:0d:59:8b:58:60:2f:ee:e3:c4:a2:04:e0:30:d8: 7c:c6:3a:d3:63:11:c0:85:57:bd:22:90:b7:3d:5d:5c:98:aa: dc:9e:1d:a0:35:cb:e8:1d:34:7c:07:16:ed:27:35:c1:e2:b5: 93:27:f7:0f -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICBYwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkEx MUVFNDc0MjVEMTRFQkFGMkZDRDI0RDIwNjJCMEE1MkJBMDQyQzAeFw0yNTA4MDEw NjM2MDNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDNBM0U5RjhCQkE2MkMz NTUxQkFFMDZFNkI3Q0QyN0E1NzI4Mjg5NDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXJYs7NmdYyGH9govim7UuWtWfgkaQUWiM54kYcFRfg7J6rE+3 Et5wAkByPcZxZloRghX9st8xGYjA+yNjH0aXxQklQeHUIk6jwgIbPEtq50V6yTum M8dnKhBBUX4kvdM7Wd50ggr/a0s7YDu8nvTToE96MyeLPPGKqW5crs+Z87hfOZHF qSV/gzJyZ9R8OHLraEMZsf1JJwwo0R/0NHVnDSM6n8ZkNQIVz8thf9mhIuXqWRvD bgZEz+CZXezWUp2Z0FQKaLJjvoV2p7+MCw5ZCsCPIte1jnZift+nuP0sPG6MUW8l 6Gt8nS7aJEHlzYJCZI+AIhSp8PWKFAYeWIB/AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUOj6fi7piw1Ubrgbmt80npXKCiUEwHwYDVR0jBBgwFoAUahHuR0JdFOuvL80k 0gYrClK6BCwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy Ni9haEh1UjBKZEZPdXZMODBrMGdZckNsSzZCQ3cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2FoSHVSMEpkRk91dkw4MGswZ1lyQ2xLNkJDdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjYvT2o2Zmk3cGl3MVVi cmdibXQ4MG5wWEtDaVVFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGfsWjANBgkqhkiG9w0BAQsFAAOCAQEAm3ehE4TGaf/VA4uGh+BZtsy8Bsvs WD6U5IoFvtpSYzWrTXg9EDOFkPtaablBraZo0EATVJTEEFhCUSjtbk49awuUufA7 ELyW08L2NanEWOYRTGYQtJCRpMEiwGdkWY4q6b485Lf3xh7hsU7E6HK/taVJwBnE 5gPN38nND8IWKfqf0M6IlmGsVPTr0IsnnkrTwvTGy5UBDrAQNfZY8kDjUn14akwM l4TyhWpsvY9hHpsApXY9YX6NqInVl5sDYSHfPQ2bs5JuWz2gEA1Zi1hgL+7jxKIE 4DDYfMY602MRwIVXvSKQtz1dXJiq3J4doDXL6B00fAcW7Sc1weK1kyf3Dw== -----END CERTIFICATE-----Generated at Mon Aug 11 10:47:58 2025 by rpki-client