$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3326/eLv3MFDVraelBBgoaDBIEYb50p0.roa File: eLv3MFDVraelBBgoaDBIEYb50p0.roa (raw, json) Hash identifier: h55xcnKdGmAQHQ25EsAReGi182ULEtw5dKs0RGvOcPM= Subject key identifier: 78:BB:F7:30:50:D5:AD:A7:A5:04:18:28:68:30:48:11:86:F9:D2:9D Certificate issuer: /CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C Certificate serial: 0584 Authority key identifier: 6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/eLv3MFDVraelBBgoaDBIEYb50p0.roa Signing time: Fri 01 Aug 2025 06:36:01 +0000 ROA not before: Fri 01 Aug 2025 06:36:01 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 134768 IP address blocks: 103.236.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 15:03:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1412 (0x584) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C Validity Not Before: Aug 1 06:36:01 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=78BBF73050D5ADA7A50418286830481186F9D29D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1f:9e:6d:55:99:5b:af:95:d2:4b:8f:b5:d6: f9:78:2e:56:b1:f7:c3:08:b9:21:63:03:02:8d:21: dc:e2:be:f7:ff:8c:3e:83:96:aa:54:ea:47:de:cc: 0f:26:cc:4a:85:fe:43:08:86:ac:89:59:d5:31:bf: 53:e2:19:6f:14:f9:57:20:78:27:ad:54:ab:38:7c: 3f:a8:44:54:55:c1:50:86:d2:e8:28:eb:fb:48:21: 68:0d:86:2c:b5:03:2a:a0:26:d2:c7:b4:af:3e:2f: 8b:e9:79:f4:6a:18:66:c8:9f:91:83:32:97:d3:2b: eb:ad:0c:8f:3d:32:a8:29:fd:30:20:9c:9c:1f:ce: 03:ac:fe:e1:fb:c3:73:2c:ba:1c:3b:5b:45:79:6e: 36:63:f1:f6:29:e9:45:00:fb:1a:ee:0b:31:c8:fc: 3e:c0:5c:84:48:e4:3d:82:1d:62:73:c0:6c:65:c2: 0b:06:0f:53:b9:38:25:c4:3f:28:7b:e3:c0:eb:ab: b0:50:bb:39:9f:68:e8:a7:48:48:cd:10:cb:5b:a7: fd:68:d3:60:63:43:21:e0:aa:02:7a:eb:74:dd:f7: ce:b7:49:3b:88:a8:a8:e8:88:0a:c0:8d:af:6b:f7: d8:b3:42:3d:d1:12:eb:98:46:1f:17:ce:57:ea:b4: f3:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:BB:F7:30:50:D5:AD:A7:A5:04:18:28:68:30:48:11:86:F9:D2:9D X509v3 Authority Key Identifier: keyid:6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/eLv3MFDVraelBBgoaDBIEYb50p0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.236.93.0/24 Signature Algorithm: sha256WithRSAEncryption a5:e5:ff:5a:92:de:16:ef:bf:4b:bb:78:62:ab:a7:3b:a0:3f: ea:2e:16:0d:6b:ff:fe:90:1e:31:ea:2f:a6:70:92:db:ba:82: 3f:78:dd:ed:76:48:9e:fb:60:db:71:59:e9:e9:16:a7:21:7d: 41:18:de:19:38:ba:4d:e0:47:e7:84:ff:33:6d:0c:f6:7d:7b: 0e:70:0a:0f:f8:3a:e1:39:54:1f:ef:52:9b:bd:8c:10:1b:66: c5:e0:44:7f:7d:9c:87:00:04:c3:d6:22:f7:34:91:9b:7d:0a: 6b:c0:d4:c1:00:6c:8d:7e:7a:d0:28:8c:d5:81:01:71:84:e6: e6:6f:71:ed:ca:ca:16:ae:d5:e8:c2:e9:c0:40:db:41:58:03: 03:5b:9f:2c:11:ae:dc:61:fa:d1:c6:b6:c7:43:2c:6c:8f:cf: a5:0f:0b:bd:ee:be:31:d6:ed:e7:68:ba:07:b3:a7:e9:4b:1f: 2f:4f:e9:5a:9d:2e:42:18:fb:96:45:b3:d0:08:e5:da:d6:a9: 53:ab:c1:a4:d1:32:01:6d:ca:b2:d8:89:cd:0b:e7:2f:5e:db: 08:5c:b0:f4:ae:a7:aa:0e:74:f1:ff:71:ec:39:1c:f5:e3:df: 98:d8:7a:a5:0e:cc:07:67:d0:0a:98:f3:45:a7:57:45:3b:67: be:48:14:95 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICBYQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkEx MUVFNDc0MjVEMTRFQkFGMkZDRDI0RDIwNjJCMEE1MkJBMDQyQzAeFw0yNTA4MDEw NjM2MDFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDc4QkJGNzMwNTBENUFE QTdBNTA0MTgyODY4MzA0ODExODZGOUQyOUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2H55tVZlbr5XSS4+11vl4Llax98MIuSFjAwKNIdzivvf/jD6D lqpU6kfezA8mzEqF/kMIhqyJWdUxv1PiGW8U+VcgeCetVKs4fD+oRFRVwVCG0ugo 6/tIIWgNhiy1AyqgJtLHtK8+L4vpefRqGGbIn5GDMpfTK+utDI89Mqgp/TAgnJwf zgOs/uH7w3Msuhw7W0V5bjZj8fYp6UUA+xruCzHI/D7AXIRI5D2CHWJzwGxlwgsG D1O5OCXEPyh748Drq7BQuzmfaOinSEjNEMtbp/1o02BjQyHgqgJ663Td9863STuI qKjoiArAja9r99izQj3REuuYRh8XzlfqtPM/AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUeLv3MFDVraelBBgoaDBIEYb50p0wHwYDVR0jBBgwFoAUahHuR0JdFOuvL80k 0gYrClK6BCwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy Ni9haEh1UjBKZEZPdXZMODBrMGdZckNsSzZCQ3cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2FoSHVSMEpkRk91dkw4MGswZ1lyQ2xLNkJDdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjYvZUx2M01GRFZyYWVs QkJnb2FEQklFWWI1MHAwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGfsXTANBgkqhkiG9w0BAQsFAAOCAQEApeX/WpLeFu+/S7t4YqunO6A/6i4W DWv//pAeMeovpnCS27qCP3jd7XZInvtg23FZ6ekWpyF9QRjeGTi6TeBH54T/M20M 9n17DnAKD/g64TlUH+9Sm72MEBtmxeBEf32chwAEw9Yi9zSRm30Ka8DUwQBsjX56 0CiM1YEBcYTm5m9x7crKFq7V6MLpwEDbQVgDA1ufLBGu3GH60ca2x0MsbI/PpQ8L ve6+Mdbt52i6B7On6UsfL0/pWp0uQhj7lkWz0Ajl2tapU6vBpNEyAW3KstiJzQvn L17bCFyw9K6nqg508f9x7Dkc9ePfmNh6pQ7MB2fQCpjzRadXRTtnvkgUlQ== -----END CERTIFICATE-----Generated at Mon Aug 11 10:38:59 2025 by rpki-client