$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3326/nKHeBSVGdyRfQOOOfcEj5uvwi0g.roa File: nKHeBSVGdyRfQOOOfcEj5uvwi0g.roa (raw, json) Hash identifier: Z0L9gxHeBRd/5rGnqDsV53/qHwWy7jlaiwrdJZRzXIM= Subject key identifier: 9C:A1:DE:05:25:46:77:24:5F:40:E3:8E:7D:C1:23:E6:EB:F0:8B:48 Certificate issuer: /CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C Certificate serial: 0577 Authority key identifier: 6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/nKHeBSVGdyRfQOOOfcEj5uvwi0g.roa Signing time: Fri 01 Aug 2025 06:34:44 +0000 ROA not before: Fri 01 Aug 2025 06:34:44 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 134768 IP address blocks: 103.236.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 15:03:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1399 (0x577) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C Validity Not Before: Aug 1 06:34:44 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=9CA1DE05254677245F40E38E7DC123E6EBF08B48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e9:65:81:23:5b:0e:74:e2:b1:77:68:dd:52: b2:53:82:9c:99:91:a9:4d:d9:2b:c4:c0:c7:72:63: 3d:35:d6:d7:40:0b:e7:6f:c4:54:e4:3b:a2:49:6e: 50:c1:5e:f5:a9:98:ea:d8:21:6b:5a:a9:fc:e1:8f: d1:ae:ce:15:8c:21:eb:e0:93:45:a5:82:12:e2:fc: af:29:d8:dd:1f:d4:fa:9d:e3:d8:42:5c:81:0e:18: f9:e2:c4:21:43:b5:30:9f:34:bc:ec:be:e5:88:4c: b7:5c:cb:84:8d:00:2e:08:04:3a:78:a3:a3:ba:ac: 22:96:fd:ad:14:7d:da:22:0e:57:ef:56:ee:af:70: 2e:eb:05:7c:ed:45:49:52:e7:a1:d9:35:1d:f3:39: 21:b3:2f:19:74:a9:42:f5:55:05:27:6b:4e:8a:0a: 64:9e:a5:f5:03:c4:d2:42:21:4b:99:81:37:ca:37: e2:62:3a:75:20:17:f7:f9:b1:cf:1d:6d:c1:da:1e: a2:8e:84:d1:eb:0d:f8:a2:b6:1d:45:ee:4d:60:0e: 92:d4:ec:f6:ec:96:f9:e8:23:aa:b5:a7:f1:81:1a: 8a:bb:19:e8:63:da:62:4c:25:ea:25:b6:33:e4:29: ef:9b:8a:d8:aa:5e:06:c3:f6:56:cc:8d:7b:d3:f4: cf:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A1:DE:05:25:46:77:24:5F:40:E3:8E:7D:C1:23:E6:EB:F0:8B:48 X509v3 Authority Key Identifier: keyid:6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/nKHeBSVGdyRfQOOOfcEj5uvwi0g.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.236.84.0/24 Signature Algorithm: sha256WithRSAEncryption 24:d0:d5:f6:02:77:03:c5:a9:4d:97:49:3e:37:39:00:be:48: 9c:b7:7c:dc:fe:9a:cd:75:e9:73:fb:78:e6:42:1a:01:63:2f: 32:d4:4b:e3:87:66:95:49:f6:0d:65:6c:54:af:cc:dc:b6:63: c6:63:25:63:e8:61:a4:5a:ee:1a:3b:e5:0a:71:0d:e2:c2:d9: 1f:bf:fa:13:8b:79:28:35:d7:85:e8:ee:fb:f9:3c:0e:ab:01: c7:f4:22:0f:8d:85:04:f7:ea:71:97:e9:5d:02:0c:61:51:4e: dc:75:23:03:d7:7b:51:40:1e:50:71:3b:b6:0d:64:7e:84:c2: 67:01:36:69:5a:0c:eb:08:e1:53:31:98:68:01:60:b1:d6:e9: bb:8b:d4:c4:0a:5b:e3:1d:ab:1e:e9:e3:b3:7a:38:e7:e9:ef: 57:73:b2:37:ac:d9:0d:03:b8:9d:e4:86:19:33:2b:8f:2a:5c: 39:88:eb:33:73:d0:e3:9e:1e:69:d6:e3:62:19:86:96:bc:89: 46:1a:c8:ef:0c:56:32:3d:ed:79:4f:70:44:e1:50:91:6c:92: ca:83:61:5d:ad:e9:43:17:22:c0:c8:06:32:14:09:b2:0a:15: 10:69:e9:0e:40:cd:04:f5:05:5c:f7:32:10:ce:6c:11:7a:e3: 71:a1:2d:a4 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICBXcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkEx MUVFNDc0MjVEMTRFQkFGMkZDRDI0RDIwNjJCMEE1MkJBMDQyQzAeFw0yNTA4MDEw NjM0NDRaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDlDQTFERTA1MjU0Njc3 MjQ1RjQwRTM4RTdEQzEyM0U2RUJGMDhCNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCb6WWBI1sOdOKxd2jdUrJTgpyZkalN2SvEwMdyYz011tdAC+dv xFTkO6JJblDBXvWpmOrYIWtaqfzhj9GuzhWMIevgk0WlghLi/K8p2N0f1Pqd49hC XIEOGPnixCFDtTCfNLzsvuWITLdcy4SNAC4IBDp4o6O6rCKW/a0UfdoiDlfvVu6v cC7rBXztRUlS56HZNR3zOSGzLxl0qUL1VQUna06KCmSepfUDxNJCIUuZgTfKN+Ji OnUgF/f5sc8dbcHaHqKOhNHrDfiith1F7k1gDpLU7PbslvnoI6q1p/GBGoq7Gehj 2mJMJeoltjPkKe+bitiqXgbD9lbMjXvT9M+bAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUnKHeBSVGdyRfQOOOfcEj5uvwi0gwHwYDVR0jBBgwFoAUahHuR0JdFOuvL80k 0gYrClK6BCwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy Ni9haEh1UjBKZEZPdXZMODBrMGdZckNsSzZCQ3cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2FoSHVSMEpkRk91dkw4MGswZ1lyQ2xLNkJDdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjYvbktIZUJTVkdkeVJm UU9PT2ZjRWo1dXZ3aTBnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGfsVDANBgkqhkiG9w0BAQsFAAOCAQEAJNDV9gJ3A8WpTZdJPjc5AL5InLd8 3P6azXXpc/t45kIaAWMvMtRL44dmlUn2DWVsVK/M3LZjxmMlY+hhpFruGjvlCnEN 4sLZH7/6E4t5KDXXheju+/k8DqsBx/QiD42FBPfqcZfpXQIMYVFO3HUjA9d7UUAe UHE7tg1kfoTCZwE2aVoM6wjhUzGYaAFgsdbpu4vUxApb4x2rHunjs3o45+nvV3Oy N6zZDQO4neSGGTMrjypcOYjrM3PQ454eadbjYhmGlryJRhrI7wxWMj3teU9wROFQ kWySyoNhXa3pQxciwMgGMhQJsgoVEGnpDkDNBPUFXPcyEM5sEXrjcaEtpA== -----END CERTIFICATE-----Generated at Mon Aug 11 10:45:31 2025 by rpki-client