$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3326/SfKZAWk9P_LG0PIpllxkQTrswjA.roa File: SfKZAWk9P_LG0PIpllxkQTrswjA.roa (raw, json) Hash identifier: 17Tk94ELnYco5sS3XwQYc/SHceZwNMYTalAP553Jp78= Subject key identifier: 49:F2:99:01:69:3D:3F:F2:C6:D0:F2:29:96:5C:64:41:3A:EC:C2:30 Certificate issuer: /CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C Certificate serial: 057C Authority key identifier: 6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/SfKZAWk9P_LG0PIpllxkQTrswjA.roa Signing time: Fri 01 Aug 2025 06:34:45 +0000 ROA not before: Fri 01 Aug 2025 06:34:45 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 134768 IP address blocks: 103.236.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 15:03:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1404 (0x57c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C Validity Not Before: Aug 1 06:34:45 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=49F29901693D3FF2C6D0F229965C64413AECC230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:98:b6:10:55:6b:25:3a:c1:69:26:10:c2:c1: a9:4d:b2:a0:03:01:8b:61:b0:3e:7a:55:e9:ac:09: be:a9:ca:35:30:fa:76:5e:c7:ed:f1:e4:3f:07:0a: ac:e6:36:b8:fb:4a:c1:34:33:21:e1:e4:aa:98:81: 6b:48:ab:88:4d:b1:2f:d1:38:30:60:c0:d8:ba:ec: f1:ef:c9:10:f4:13:95:77:f5:90:97:ec:57:9b:43: 9e:7e:4d:af:0f:e6:24:81:37:fd:27:a1:de:23:ec: 3e:ea:1e:ef:34:fd:be:3a:ab:2d:f7:b2:54:c3:15: b8:dc:f5:61:71:3f:7d:40:d8:24:58:73:01:03:18: 39:36:04:41:1f:04:74:84:7e:45:2d:f6:b3:08:30: 06:c2:37:2e:00:7a:2a:74:20:d5:93:8b:56:47:d5: 36:12:c0:3a:f8:6e:7d:4f:44:02:34:fa:34:41:6d: f8:7c:14:4c:2c:d4:df:90:bb:3d:45:d9:51:87:e9: f3:03:df:ff:6b:95:df:14:81:5e:20:36:0a:f6:2c: 7e:57:ba:81:e4:f5:a1:ba:43:6f:82:3d:ec:d4:01: 5a:90:08:06:5b:27:d0:db:4d:16:d4:a5:e7:68:19: b8:e8:1d:5b:b4:35:88:78:db:b2:c1:7f:a6:5e:9f: 50:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:F2:99:01:69:3D:3F:F2:C6:D0:F2:29:96:5C:64:41:3A:EC:C2:30 X509v3 Authority Key Identifier: keyid:6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/SfKZAWk9P_LG0PIpllxkQTrswjA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.236.86.0/24 Signature Algorithm: sha256WithRSAEncryption a2:e6:ea:af:29:a7:86:ce:ff:20:45:df:ef:af:42:68:dd:f2: 69:56:05:9c:f4:0c:e6:7c:6a:97:4a:17:42:a5:ca:2e:4a:19: 53:4a:cb:c6:64:c8:33:eb:67:0f:b6:5d:c4:a4:c4:96:e2:87: 50:21:04:9d:34:f7:cd:5d:b9:cd:e0:aa:48:1c:8e:ab:b7:f8: 24:83:74:03:60:35:09:55:85:cb:2b:e8:71:77:5e:06:32:14: 9b:19:2c:29:62:8e:18:84:42:75:28:2b:f3:da:65:6a:5b:a2: b9:f9:20:ad:66:8f:1a:48:db:03:25:5d:2e:42:c8:04:96:9f: 0e:de:f9:0e:4b:74:37:e4:e7:94:90:5c:2f:6c:03:a0:6a:40: 3c:bb:0a:00:bf:b1:9c:1d:52:b3:0d:1d:aa:86:4a:25:82:72: 99:04:8e:d7:c8:36:26:07:ce:5e:ac:d2:0c:b3:57:a1:fc:3d: 3c:20:d1:32:a0:80:0b:af:7b:75:cd:08:d7:1b:df:72:6f:ff: 7c:c9:fe:38:da:5a:9c:10:d8:db:6f:2b:ee:7c:e5:3b:74:98: f8:83:ab:5e:a0:9a:32:b8:f1:58:40:47:be:90:ac:51:3e:8f: d8:1c:d2:5f:bd:93:22:6c:4c:4b:3f:f3:fe:23:f3:89:d7:12: 98:79:1a:21 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICBXwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkEx MUVFNDc0MjVEMTRFQkFGMkZDRDI0RDIwNjJCMEE1MkJBMDQyQzAeFw0yNTA4MDEw NjM0NDVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDQ5RjI5OTAxNjkzRDNG RjJDNkQwRjIyOTk2NUM2NDQxM0FFQ0MyMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnmLYQVWslOsFpJhDCwalNsqADAYthsD56VemsCb6pyjUw+nZe x+3x5D8HCqzmNrj7SsE0MyHh5KqYgWtIq4hNsS/RODBgwNi67PHvyRD0E5V39ZCX 7FebQ55+Ta8P5iSBN/0nod4j7D7qHu80/b46qy33slTDFbjc9WFxP31A2CRYcwED GDk2BEEfBHSEfkUt9rMIMAbCNy4Aeip0INWTi1ZH1TYSwDr4bn1PRAI0+jRBbfh8 FEws1N+Quz1F2VGH6fMD3/9rld8UgV4gNgr2LH5XuoHk9aG6Q2+CPezUAVqQCAZb J9DbTRbUpedoGbjoHVu0NYh427LBf6Zen1CzAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUSfKZAWk9P/LG0PIpllxkQTrswjAwHwYDVR0jBBgwFoAUahHuR0JdFOuvL80k 0gYrClK6BCwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy Ni9haEh1UjBKZEZPdXZMODBrMGdZckNsSzZCQ3cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2FoSHVSMEpkRk91dkw4MGswZ1lyQ2xLNkJDdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjYvU2ZLWkFXazlQX0xH MFBJcGxseGtRVHJzd2pBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGfsVjANBgkqhkiG9w0BAQsFAAOCAQEAoubqrymnhs7/IEXf769CaN3yaVYF nPQM5nxql0oXQqXKLkoZU0rLxmTIM+tnD7ZdxKTEluKHUCEEnTT3zV25zeCqSByO q7f4JIN0A2A1CVWFyyvocXdeBjIUmxksKWKOGIRCdSgr89plaluiufkgrWaPGkjb AyVdLkLIBJafDt75Dkt0N+TnlJBcL2wDoGpAPLsKAL+xnB1Ssw0dqoZKJYJymQSO 18g2JgfOXqzSDLNXofw9PCDRMqCAC697dc0I1xvfcm//fMn+ONpanBDY228r7nzl O3SY+IOrXqCaMrjxWEBHvpCsUT6P2BzSX72TImxMSz/z/iPzidcSmHkaIQ== -----END CERTIFICATE-----Generated at Mon Aug 11 12:54:12 2025 by rpki-client