$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3326/z7EdKWXvbzDkAQ0BpxSFYeSme88.roa File: z7EdKWXvbzDkAQ0BpxSFYeSme88.roa (raw, json) Hash identifier: mxeP27boYzCK388c+ZuCcXHKiSjA7ukzDko9gL6sIEQ= Subject key identifier: CF:B1:1D:29:65:EF:6F:30:E4:01:0D:01:A7:14:85:61:E4:A6:7B:CF Certificate issuer: /CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C Certificate serial: 0585 Authority key identifier: 6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/z7EdKWXvbzDkAQ0BpxSFYeSme88.roa Signing time: Fri 01 Aug 2025 06:36:01 +0000 ROA not before: Fri 01 Aug 2025 06:36:01 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 134768 IP address blocks: 103.236.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 15:03:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1413 (0x585) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C Validity Not Before: Aug 1 06:36:01 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=CFB11D2965EF6F30E4010D01A7148561E4A67BCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:63:de:1a:9a:19:8f:85:a8:a3:62:36:e1:64: 13:a2:ad:72:53:f7:96:54:1c:c1:30:09:18:65:b3: cc:44:bb:31:ed:06:2c:1f:1b:66:6a:98:53:5f:cd: dd:36:33:7b:eb:8e:d6:21:b3:8e:e9:fe:a1:3f:a8: be:10:b5:15:a3:52:75:ab:d3:93:71:39:7c:c3:93: 3d:d3:aa:d7:20:93:6d:2d:77:cf:27:66:f5:65:8f: 15:f1:e4:22:ab:ec:d6:d4:90:70:20:68:bc:1e:21: 65:ff:67:a2:d5:14:64:b9:ce:c4:c2:c9:2e:50:1a: 2d:1e:ee:01:b2:99:f9:bf:5e:c8:0c:79:2b:da:32: fc:9c:c4:9a:79:61:d9:a2:69:ab:04:41:63:95:34: 93:05:26:ee:9a:f9:ed:8f:92:e6:b9:07:36:97:f2: 05:9c:86:bb:16:b6:f2:a9:55:d9:52:52:77:36:f0: 0d:2e:3b:47:c0:4b:2b:a9:87:bb:50:6f:c7:b1:c1: 87:09:62:a2:f3:bb:44:8d:e5:dc:07:a9:e8:19:47: 7d:30:65:7d:3b:64:a0:21:55:84:9e:04:b6:1d:80: d5:65:9d:d3:3a:da:4f:2f:24:6c:a6:a0:87:58:4d: a1:98:99:97:df:cd:6f:b7:2b:62:5c:5c:6c:00:3b: 1e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:B1:1D:29:65:EF:6F:30:E4:01:0D:01:A7:14:85:61:E4:A6:7B:CF X509v3 Authority Key Identifier: keyid:6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/z7EdKWXvbzDkAQ0BpxSFYeSme88.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.236.99.0/24 Signature Algorithm: sha256WithRSAEncryption ab:92:ff:61:34:9d:fe:07:f9:1f:8c:e7:e8:6e:e2:39:46:40: 69:67:ef:4a:78:b6:8c:0a:6e:0f:0b:3c:1f:dd:88:06:ed:51: 1c:ac:44:b7:55:77:55:de:12:3e:20:d4:3c:3b:9e:c6:bc:03: 4d:c3:a4:c0:a5:0d:69:60:7b:ef:6f:b4:d5:40:89:6e:54:62: 85:b5:da:af:60:41:4a:2c:b8:58:d6:e5:5d:8a:38:40:f8:ae: 2e:03:8a:0d:e3:52:dd:8c:16:53:10:bc:03:2e:3f:2c:95:0b: c7:97:56:dd:ba:38:ea:4e:02:eb:0a:f3:f5:f2:38:2b:97:93: e8:20:31:22:f4:0d:43:65:45:98:74:8b:9c:2a:31:01:db:0f: 68:6a:fc:89:39:47:83:fa:61:d7:89:64:e2:35:4f:fe:69:18: 20:ea:85:62:9e:d6:30:7c:ef:b3:cf:5d:8c:7a:83:56:5b:77: 6c:13:ca:b0:f1:6c:ed:8e:21:4c:77:12:13:ea:3e:9c:16:7b: fa:de:98:5b:d3:d9:c3:8f:58:2f:b5:71:7a:39:7f:3d:5d:ff: 71:20:ca:38:89:b2:fb:37:34:47:7c:43:ec:27:7f:d6:b0:c6: a1:2c:74:db:98:89:82:0b:e5:b0:e8:93:85:7e:bc:91:2e:97: 02:bd:b8:b6 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICBYUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkEx MUVFNDc0MjVEMTRFQkFGMkZDRDI0RDIwNjJCMEE1MkJBMDQyQzAeFw0yNTA4MDEw NjM2MDFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKENGQjExRDI5NjVFRjZG MzBFNDAxMEQwMUE3MTQ4NTYxRTRBNjdCQ0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDkY94amhmPhaijYjbhZBOirXJT95ZUHMEwCRhls8xEuzHtBiwf G2ZqmFNfzd02M3vrjtYhs47p/qE/qL4QtRWjUnWr05NxOXzDkz3Tqtcgk20td88n ZvVljxXx5CKr7NbUkHAgaLweIWX/Z6LVFGS5zsTCyS5QGi0e7gGymfm/XsgMeSva MvycxJp5YdmiaasEQWOVNJMFJu6a+e2Pkua5BzaX8gWchrsWtvKpVdlSUnc28A0u O0fASyuph7tQb8exwYcJYqLzu0SN5dwHqegZR30wZX07ZKAhVYSeBLYdgNVlndM6 2k8vJGymoIdYTaGYmZffzW+3K2JcXGwAOx6BAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUz7EdKWXvbzDkAQ0BpxSFYeSme88wHwYDVR0jBBgwFoAUahHuR0JdFOuvL80k 0gYrClK6BCwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy Ni9haEh1UjBKZEZPdXZMODBrMGdZckNsSzZCQ3cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2FoSHVSMEpkRk91dkw4MGswZ1lyQ2xLNkJDdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjYvejdFZEtXWHZiekRr QVEwQnB4U0ZZZVNtZTg4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGfsYzANBgkqhkiG9w0BAQsFAAOCAQEAq5L/YTSd/gf5H4zn6G7iOUZAaWfv Sni2jApuDws8H92IBu1RHKxEt1V3Vd4SPiDUPDuexrwDTcOkwKUNaWB772+01UCJ blRihbXar2BBSiy4WNblXYo4QPiuLgOKDeNS3YwWUxC8Ay4/LJULx5dW3bo46k4C 6wrz9fI4K5eT6CAxIvQNQ2VFmHSLnCoxAdsPaGr8iTlHg/ph14lk4jVP/mkYIOqF Yp7WMHzvs89djHqDVlt3bBPKsPFs7Y4hTHcSE+o+nBZ7+t6YW9PZw49YL7Vxejl/ PV3/cSDKOImy+zc0R3xD7Cd/1rDGoSx025iJggvlsOiThX68kS6XAr24tg== -----END CERTIFICATE-----Generated at Mon Aug 11 10:38:24 2025 by rpki-client