$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3326/m-J4x3FhwTFullWg0U9W94xWX9I.roa File: m-J4x3FhwTFullWg0U9W94xWX9I.roa (raw, json) Hash identifier: HbhSeKqnZ9B9cPRJpASyX8XI3m9N2CfuC0NBikgxnSA= Subject key identifier: 9B:E2:78:C7:71:61:C1:31:6E:96:55:A0:D1:4F:56:F7:8C:56:5F:D2 Certificate issuer: /CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C Certificate serial: 0570 Authority key identifier: 6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/m-J4x3FhwTFullWg0U9W94xWX9I.roa Signing time: Fri 01 Aug 2025 06:34:42 +0000 ROA not before: Fri 01 Aug 2025 06:34:42 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 134768 IP address blocks: 103.236.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 15:03:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1392 (0x570) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C Validity Not Before: Aug 1 06:34:42 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=9BE278C77161C1316E9655A0D14F56F78C565FD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:86:1c:e0:b4:85:50:ac:40:1d:2f:1e:83:8b: f8:0f:20:e0:97:cb:64:ec:cd:36:57:60:0e:9f:7f: a4:fc:54:80:42:d2:dc:c3:54:17:dd:6b:26:3a:b2: 1a:a3:09:f9:af:17:a2:e5:63:ce:2f:36:14:46:88: 6d:c1:94:df:92:45:9f:bb:2b:ab:eb:34:59:af:32: 34:28:a2:bb:1e:3e:2a:75:36:b5:a5:46:8d:54:f1: 6a:14:5c:0b:74:7c:8e:78:1d:9a:c5:dc:ca:20:04: 8e:6a:3c:ac:53:d9:5d:88:b9:2c:7e:3a:5b:4c:99: b4:e3:cf:c3:a9:17:93:3d:35:fd:2c:37:6e:df:44: c8:6f:58:70:25:3d:33:6a:a2:0d:3c:ce:06:30:3c: b0:f0:01:8b:89:fd:5d:78:e1:9c:29:e0:34:fa:29: e7:26:9b:52:8f:36:0f:26:d2:cb:46:fc:89:95:09: 46:05:4c:b6:2c:05:8a:f0:08:b5:6a:ae:5f:88:6d: f3:93:33:c0:25:a5:62:9d:fe:aa:f9:b5:59:78:2a: 1e:b1:85:56:a4:0d:65:3a:a0:32:9e:66:57:23:a2: aa:e9:b8:54:9c:83:f9:9f:c1:5f:54:91:b8:7d:c0: 8a:ad:0f:a6:89:39:4e:9f:4e:01:6a:93:25:77:83: 52:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:E2:78:C7:71:61:C1:31:6E:96:55:A0:D1:4F:56:F7:8C:56:5F:D2 X509v3 Authority Key Identifier: keyid:6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/m-J4x3FhwTFullWg0U9W94xWX9I.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.236.77.0/24 Signature Algorithm: sha256WithRSAEncryption 46:05:4d:10:24:31:13:f6:66:a2:75:32:ad:63:e6:a7:ee:3f: 62:4b:90:fe:69:ef:fb:f4:31:f0:c4:a4:93:c3:de:8f:07:36: 79:91:0b:83:a1:d0:04:f5:75:d0:4c:47:5a:ce:f3:44:f1:f4: 47:cd:bc:fd:c7:8f:78:5e:2c:f8:5d:2a:f8:3b:b0:ec:19:02: bf:31:3c:ee:9f:d4:bf:78:b1:3d:21:bd:a4:91:75:54:46:7a: 72:02:4c:1d:02:0f:12:d2:ba:8b:bd:40:a2:dc:21:58:37:ab: dd:42:1f:c7:a6:1d:11:c2:05:ed:0c:08:eb:66:0a:66:6b:37: bc:05:c4:c1:6e:a5:25:cd:25:4d:12:ed:1d:f2:2b:9f:e8:da: e6:5b:6a:fc:1a:9d:f0:e1:e1:1b:a7:30:ce:c8:77:f0:d3:8b: 4a:69:b6:07:9d:a5:14:37:2f:e5:fe:67:b5:ee:24:ba:bf:c0: 32:2b:56:86:60:c7:6f:b0:c0:2d:f1:e2:79:d5:c9:d6:77:c2: 00:af:a2:64:59:f8:a5:83:0c:cb:c3:b9:b2:83:f1:51:6b:9e: 8d:37:9f:0e:23:f6:c4:10:bb:e6:05:99:21:79:ba:5b:f5:bf: 86:27:74:d1:2f:03:a4:ab:e7:63:02:eb:d9:3d:5f:2f:ae:63: f4:ed:ca:5e -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICBXAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkEx MUVFNDc0MjVEMTRFQkFGMkZDRDI0RDIwNjJCMEE1MkJBMDQyQzAeFw0yNTA4MDEw NjM0NDJaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDlCRTI3OEM3NzE2MUMx MzE2RTk2NTVBMEQxNEY1NkY3OEM1NjVGRDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDshhzgtIVQrEAdLx6Di/gPIOCXy2TszTZXYA6ff6T8VIBC0tzD VBfdayY6shqjCfmvF6LlY84vNhRGiG3BlN+SRZ+7K6vrNFmvMjQoorsePip1NrWl Ro1U8WoUXAt0fI54HZrF3MogBI5qPKxT2V2IuSx+OltMmbTjz8OpF5M9Nf0sN27f RMhvWHAlPTNqog08zgYwPLDwAYuJ/V144Zwp4DT6Kecmm1KPNg8m0stG/ImVCUYF TLYsBYrwCLVqrl+IbfOTM8AlpWKd/qr5tVl4Kh6xhVakDWU6oDKeZlcjoqrpuFSc g/mfwV9Ukbh9wIqtD6aJOU6fTgFqkyV3g1JvAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUm+J4x3FhwTFullWg0U9W94xWX9IwHwYDVR0jBBgwFoAUahHuR0JdFOuvL80k 0gYrClK6BCwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy Ni9haEh1UjBKZEZPdXZMODBrMGdZckNsSzZCQ3cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2FoSHVSMEpkRk91dkw4MGswZ1lyQ2xLNkJDdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjYvbS1KNHgzRmh3VEZ1 bGxXZzBVOVc5NHhXWDlJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGfsTTANBgkqhkiG9w0BAQsFAAOCAQEARgVNECQxE/ZmonUyrWPmp+4/YkuQ /mnv+/Qx8MSkk8Pejwc2eZELg6HQBPV10ExHWs7zRPH0R828/cePeF4s+F0q+Duw 7BkCvzE87p/Uv3ixPSG9pJF1VEZ6cgJMHQIPEtK6i71AotwhWDer3UIfx6YdEcIF 7QwI62YKZms3vAXEwW6lJc0lTRLtHfIrn+ja5ltq/Bqd8OHhG6cwzsh38NOLSmm2 B52lFDcv5f5nte4kur/AMitWhmDHb7DALfHiedXJ1nfCAK+iZFn4pYMMy8O5soPx UWuejTefDiP2xBC75gWZIXm6W/W/hid00S8DpKvnYwLr2T1fL65j9O3KXg== -----END CERTIFICATE-----Generated at Mon Aug 11 12:51:50 2025 by rpki-client