$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3326/zm20gbQdWTBscs12_-FUO6uMCjs.roa File: zm20gbQdWTBscs12_-FUO6uMCjs.roa (raw, json) Hash identifier: 4rrJKCCnRlJ45dhdTL3pH8T5ioKEphCwutNN3pWyt7M= Subject key identifier: CE:6D:B4:81:B4:1D:59:30:6C:72:CD:76:FF:E1:54:3B:AB:8C:0A:3B Certificate issuer: /CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C Certificate serial: 0571 Authority key identifier: 6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/zm20gbQdWTBscs12_-FUO6uMCjs.roa Signing time: Fri 01 Aug 2025 06:34:42 +0000 ROA not before: Fri 01 Aug 2025 06:34:42 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 134768 IP address blocks: 103.236.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 15:03:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1393 (0x571) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C Validity Not Before: Aug 1 06:34:42 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=CE6DB481B41D59306C72CD76FFE1543BAB8C0A3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:67:63:73:02:c0:cc:5d:ed:08:2a:81:9a:99: 26:c4:2b:8f:cb:e3:4b:7c:9e:61:01:fe:ee:1a:01: 67:52:d6:83:65:3e:82:3a:7a:fd:ec:51:c0:03:fa: 90:17:87:1d:66:2f:4d:3e:d9:42:55:ee:17:d1:d3: 9b:c1:8f:90:7a:d5:8f:b1:04:3e:f0:82:84:cc:87: 89:c8:fd:a4:0f:93:e4:5f:d8:b6:36:86:6e:1e:19: 24:50:e1:f5:90:e0:7c:51:e5:5d:49:a0:d8:dc:eb: 59:c9:37:c7:8f:6c:35:59:fc:16:50:28:5c:fd:a2: be:35:1f:48:32:62:ea:2b:43:a4:ea:b9:44:d3:19: 75:a5:84:b2:49:2e:36:21:df:69:42:b1:6b:ed:46: 3d:89:32:a6:ff:31:91:76:7f:33:bd:dc:6c:32:d7: 9a:fa:b5:2b:67:4f:6a:54:c6:14:f4:b9:d3:82:98: d2:19:de:dd:bb:a1:2b:25:ec:d8:90:b2:1e:ba:3a: 12:fd:e8:c2:5f:87:35:0d:76:11:76:1e:b7:48:b8: 6d:49:5c:05:c5:62:72:ff:87:70:8d:62:9f:eb:c0: f4:b2:d8:43:c5:dc:4f:b7:72:da:98:31:35:19:dc: 20:fd:3c:ec:e0:a6:53:b3:b3:2e:90:64:57:49:ab: bd:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:6D:B4:81:B4:1D:59:30:6C:72:CD:76:FF:E1:54:3B:AB:8C:0A:3B X509v3 Authority Key Identifier: keyid:6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/zm20gbQdWTBscs12_-FUO6uMCjs.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.236.72.0/24 Signature Algorithm: sha256WithRSAEncryption 67:76:7a:26:63:ef:89:c6:5a:9d:99:21:5d:60:99:de:7f:16: a3:23:cb:a7:22:1f:bb:e4:40:89:80:2b:dd:55:17:2e:78:0e: 5f:9c:96:d7:ab:a0:14:73:ec:5e:c2:89:59:7a:44:22:5c:17: d8:b8:4d:d7:4b:6e:a4:02:0b:f9:db:5e:55:a3:6f:5a:f7:11: fa:95:a1:67:66:de:c3:21:3b:a4:65:7d:c2:f9:f5:f0:b5:f5: 36:9a:86:c6:19:bd:6b:93:8b:4d:2c:f5:1c:32:34:b6:bf:4d: 90:9b:f2:96:43:b6:29:6e:53:62:dc:92:ac:a8:b3:f3:35:37: 13:b4:95:bf:e7:de:6d:ec:61:28:6e:25:28:b4:43:92:8d:fc: a0:73:8d:00:d8:25:0f:ef:25:ff:c5:62:b3:51:a2:a8:f2:f0: a0:84:ed:a7:3a:6a:4e:46:39:65:78:05:f9:98:59:74:14:47: 52:7a:cd:ce:23:bb:88:d7:ff:c5:18:10:22:2b:1c:89:37:ec: 00:51:bf:70:27:3b:95:ed:42:25:2d:a8:17:86:0e:85:c9:3f: ac:4e:fb:f6:0e:76:56:03:2c:31:68:a2:5d:d5:1b:ca:57:82: 75:e8:b6:59:76:6a:a1:11:c7:34:2e:0c:b5:d2:e6:09:34:2b: 2e:a8:8b:0b -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICBXEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkEx MUVFNDc0MjVEMTRFQkFGMkZDRDI0RDIwNjJCMEE1MkJBMDQyQzAeFw0yNTA4MDEw NjM0NDJaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKENFNkRCNDgxQjQxRDU5 MzA2QzcyQ0Q3NkZGRTE1NDNCQUI4QzBBM0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCgZ2NzAsDMXe0IKoGamSbEK4/L40t8nmEB/u4aAWdS1oNlPoI6 ev3sUcAD+pAXhx1mL00+2UJV7hfR05vBj5B61Y+xBD7wgoTMh4nI/aQPk+Rf2LY2 hm4eGSRQ4fWQ4HxR5V1JoNjc61nJN8ePbDVZ/BZQKFz9or41H0gyYuorQ6TquUTT GXWlhLJJLjYh32lCsWvtRj2JMqb/MZF2fzO93Gwy15r6tStnT2pUxhT0udOCmNIZ 3t27oSsl7NiQsh66OhL96MJfhzUNdhF2HrdIuG1JXAXFYnL/h3CNYp/rwPSy2EPF 3E+3ctqYMTUZ3CD9POzgplOzsy6QZFdJq70jAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUzm20gbQdWTBscs12/+FUO6uMCjswHwYDVR0jBBgwFoAUahHuR0JdFOuvL80k 0gYrClK6BCwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy Ni9haEh1UjBKZEZPdXZMODBrMGdZckNsSzZCQ3cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2FoSHVSMEpkRk91dkw4MGswZ1lyQ2xLNkJDdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjYvem0yMGdiUWRXVEJz Y3MxMl8tRlVPNnVNQ2pzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGfsSDANBgkqhkiG9w0BAQsFAAOCAQEAZ3Z6JmPvicZanZkhXWCZ3n8WoyPL pyIfu+RAiYAr3VUXLngOX5yW16ugFHPsXsKJWXpEIlwX2LhN10tupAIL+dteVaNv WvcR+pWhZ2bewyE7pGV9wvn18LX1NpqGxhm9a5OLTSz1HDI0tr9NkJvylkO2KW5T YtySrKiz8zU3E7SVv+febexhKG4lKLRDko38oHONANglD+8l/8Vis1GiqPLwoITt pzpqTkY5ZXgF+ZhZdBRHUnrNziO7iNf/xRgQIisciTfsAFG/cCc7le1CJS2oF4YO hck/rE779g52VgMsMWiiXdUbyleCdei2WXZqoRHHNC4MtdLmCTQrLqiLCw== -----END CERTIFICATE-----Generated at Mon Aug 11 10:45:55 2025 by rpki-client