$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3326/nDCLHmUt3JVRgT6s_8N51-CfKTE.roa File: nDCLHmUt3JVRgT6s_8N51-CfKTE.roa (raw, json) Hash identifier: uVh4qpdS1FD9FIzpVSXGPHPGna47y7/938mMBYgEWlg= Subject key identifier: 9C:30:8B:1E:65:2D:DC:95:51:81:3E:AC:FF:C3:79:D7:E0:9F:29:31 Certificate issuer: /CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C Certificate serial: 057E Authority key identifier: 6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/nDCLHmUt3JVRgT6s_8N51-CfKTE.roa Signing time: Fri 01 Aug 2025 06:34:46 +0000 ROA not before: Fri 01 Aug 2025 06:34:46 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 134768 IP address blocks: 103.236.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 15:03:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1406 (0x57e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C Validity Not Before: Aug 1 06:34:46 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=9C308B1E652DDC9551813EACFFC379D7E09F2931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:46:8f:71:d1:43:4c:9f:c3:d6:af:b8:9c:7c: f9:6f:f1:9d:23:e4:80:c8:fb:24:ef:12:77:c0:8f: 0c:0d:53:c8:d3:e2:59:e4:54:db:74:fa:3f:1e:6d: 59:3a:09:62:95:1a:79:83:1d:e9:27:57:ce:53:ef: c6:6c:0e:f3:29:96:04:55:ce:91:5b:16:cd:45:a6: 4c:70:60:b3:4f:af:f6:4b:d9:d2:4c:22:6a:58:07: 30:13:50:29:08:fc:6f:b9:57:6b:5e:f4:2b:82:c1: 77:ba:a8:e6:48:48:a3:a8:d4:4c:5f:cb:e1:12:00: 6b:31:09:61:d1:fc:23:13:04:90:bd:c9:1b:50:48: b6:13:58:83:11:0d:d5:c3:2c:58:50:1b:a3:80:b4: 89:02:69:ac:12:c3:a5:28:6b:8d:d5:dd:93:76:56: ef:b1:e6:5d:3f:cd:63:3a:12:65:c4:20:5a:76:5b: a9:c7:39:2a:a2:54:e0:2c:c7:c8:ec:12:47:00:10: 36:5e:94:4a:b9:17:be:e9:20:57:33:d3:26:ce:d8: 46:73:22:a0:b7:20:0e:03:15:8f:e7:fe:86:66:8d: 61:66:04:fb:32:a9:e1:94:e6:e1:a6:1b:38:d2:2a: 3c:cb:f5:7b:4e:4e:11:0f:d9:d2:f1:bb:42:d9:fd: e8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:30:8B:1E:65:2D:DC:95:51:81:3E:AC:FF:C3:79:D7:E0:9F:29:31 X509v3 Authority Key Identifier: keyid:6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/nDCLHmUt3JVRgT6s_8N51-CfKTE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.236.80.0/24 Signature Algorithm: sha256WithRSAEncryption 26:a5:a8:46:89:cd:ab:f8:1e:d7:21:f4:2c:52:d8:5f:ca:48: f9:f8:41:c5:59:d1:b6:88:22:ac:1c:dc:8b:6c:6d:a0:4c:4a: 27:e4:d7:8b:76:24:c7:9a:19:9e:69:24:05:92:4c:b9:fa:b5: af:f4:ea:a3:09:d9:26:5a:22:47:0f:b2:60:25:b5:5a:2b:b3: 91:3a:83:46:71:1e:c3:dc:61:81:0f:86:bc:3b:32:31:b6:2b: 12:a4:06:32:7b:02:be:40:1a:52:3d:d0:93:4b:fa:ec:1f:f8: fa:3d:72:93:a4:81:80:8b:44:63:59:af:c1:68:03:dc:e9:73: 35:9b:07:58:af:dd:6f:10:2e:31:6f:e1:bb:88:00:dd:d7:b9: df:b8:5e:f6:5d:af:9f:67:eb:13:08:b5:43:5b:69:f7:0c:cb: 60:e8:ac:00:27:38:a8:8a:5a:8e:87:17:66:56:3e:d3:71:08: 2e:18:21:cd:a7:03:66:d3:d3:55:34:7f:7f:05:57:d3:10:8c: f0:37:45:07:3c:67:f1:0e:7d:ee:bc:0b:14:83:3b:cf:f0:bf: 0b:7d:7c:92:90:1f:5a:4d:8b:c5:34:4e:58:fa:62:29:8c:df: 1c:64:85:4c:d8:9d:3d:5f:3f:33:6c:c8:0a:cd:f9:5f:b3:b2: 92:fd:d1:cb -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICBX4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkEx MUVFNDc0MjVEMTRFQkFGMkZDRDI0RDIwNjJCMEE1MkJBMDQyQzAeFw0yNTA4MDEw NjM0NDZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDlDMzA4QjFFNjUyRERD OTU1MTgxM0VBQ0ZGQzM3OUQ3RTA5RjI5MzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHRo9x0UNMn8PWr7icfPlv8Z0j5IDI+yTvEnfAjwwNU8jT4lnk VNt0+j8ebVk6CWKVGnmDHeknV85T78ZsDvMplgRVzpFbFs1FpkxwYLNPr/ZL2dJM ImpYBzATUCkI/G+5V2te9CuCwXe6qOZISKOo1Exfy+ESAGsxCWHR/CMTBJC9yRtQ SLYTWIMRDdXDLFhQG6OAtIkCaawSw6Uoa43V3ZN2Vu+x5l0/zWM6EmXEIFp2W6nH OSqiVOAsx8jsEkcAEDZelEq5F77pIFcz0ybO2EZzIqC3IA4DFY/n/oZmjWFmBPsy qeGU5uGmGzjSKjzL9XtOThEP2dLxu0LZ/eiZAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUnDCLHmUt3JVRgT6s/8N51+CfKTEwHwYDVR0jBBgwFoAUahHuR0JdFOuvL80k 0gYrClK6BCwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy Ni9haEh1UjBKZEZPdXZMODBrMGdZckNsSzZCQ3cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2FoSHVSMEpkRk91dkw4MGswZ1lyQ2xLNkJDdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjYvbkRDTEhtVXQzSlZS Z1Q2c184TjUxLUNmS1RFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGfsUDANBgkqhkiG9w0BAQsFAAOCAQEAJqWoRonNq/ge1yH0LFLYX8pI+fhB xVnRtogirBzci2xtoExKJ+TXi3Ykx5oZnmkkBZJMufq1r/TqownZJloiRw+yYCW1 WiuzkTqDRnEew9xhgQ+GvDsyMbYrEqQGMnsCvkAaUj3Qk0v67B/4+j1yk6SBgItE Y1mvwWgD3OlzNZsHWK/dbxAuMW/hu4gA3de537he9l2vn2frEwi1Q1tp9wzLYOis ACc4qIpajocXZlY+03EILhghzacDZtPTVTR/fwVX0xCM8DdFBzxn8Q597rwLFIM7 z/C/C318kpAfWk2LxTROWPpiKYzfHGSFTNidPV8/M2zICs35X7Oykv3Ryw== -----END CERTIFICATE-----Generated at Mon Aug 11 10:43:52 2025 by rpki-client