$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/861/8m5LDoIYVboQQ8Zo-R24y8EYK8g.roa File: 8m5LDoIYVboQQ8Zo-R24y8EYK8g.roa (raw, json) Hash identifier: VgfZuTc3GuRnUwpo+hKlUhJm/VEVDvf6NNlQk1gpH+c= Subject key identifier: F2:6E:4B:0E:82:18:55:BA:10:43:C6:68:F9:1D:B8:CB:C1:18:2B:C8 Certificate issuer: /CN=615BCE8F7F8A83DB939AE0F42FA05413B285181E Certificate serial: 182B Authority key identifier: 61:5B:CE:8F:7F:8A:83:DB:93:9A:E0:F4:2F:A0:54:13:B2:85:18:1E Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/861/8m5LDoIYVboQQ8Zo-R24y8EYK8g.roa Signing time: Sat 13 Sep 2025 03:04:18 +0000 ROA not before: Sat 13 Sep 2025 03:04:18 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 59043 IP address blocks: 103.56.184.0/24 maxlen: 24 103.56.185.0/24 maxlen: 24 103.56.186.0/24 maxlen: 24 103.56.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/861/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/861/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:41:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6187 (0x182b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615BCE8F7F8A83DB939AE0F42FA05413B285181E Validity Not Before: Sep 13 03:04:18 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=F26E4B0E821855BA1043C668F91DB8CBC1182BC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f9:ce:d0:53:5c:c8:52:68:37:a5:a1:b4:9f: ef:7f:d4:2b:a4:ae:49:b1:ac:92:a1:25:15:0e:39: c8:80:1f:26:bc:b1:72:14:9d:4a:a3:f3:a9:fb:2d: 9f:b5:aa:6b:6d:7b:68:67:75:52:f2:84:91:8b:25: 15:ed:6e:b6:40:89:07:a9:94:40:f8:3a:d5:90:52: 5b:26:64:ff:ee:79:70:51:1b:46:74:70:cf:41:1d: 86:38:a3:5c:48:80:c1:7f:19:dd:32:3f:79:c4:09: 92:ff:85:0f:9c:91:7e:ff:02:23:ce:f0:10:32:31: f1:13:0b:83:3e:e4:c7:61:26:f1:16:90:37:6a:8b: ac:9d:ae:d0:3a:7a:16:52:61:b5:e6:f7:7d:8e:15: 81:52:2d:4e:c9:26:8d:97:26:c3:3c:0d:21:c1:11: c0:89:f2:2c:31:76:e1:e0:69:30:8a:20:37:b5:31: 70:bd:c7:d8:4a:86:07:8f:e8:63:25:ac:97:bb:a9: 4b:87:11:40:44:f9:18:2f:8f:6c:c5:c8:f2:0c:9a: 86:59:02:77:ee:49:0c:23:58:3f:3a:a6:8d:6e:a6: 80:5e:87:55:bf:85:74:94:3e:8a:00:1d:8e:53:8a: 5d:9e:5e:d2:60:c3:d6:bc:14:73:13:a0:00:73:eb: c0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:6E:4B:0E:82:18:55:BA:10:43:C6:68:F9:1D:B8:CB:C1:18:2B:C8 X509v3 Authority Key Identifier: keyid:61:5B:CE:8F:7F:8A:83:DB:93:9A:E0:F4:2F:A0:54:13:B2:85:18:1E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/861/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/861/8m5LDoIYVboQQ8Zo-R24y8EYK8g.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.56.184.0/22 Signature Algorithm: sha256WithRSAEncryption 42:4e:2e:88:fc:c1:e9:31:ac:1f:60:6f:1d:83:9a:28:60:ff: 17:b0:14:fd:1c:fb:bf:9e:d1:c0:bf:2b:7c:d7:73:55:42:e8: ec:e0:3f:62:87:d7:da:95:67:90:e3:67:68:72:be:a3:ef:33: dd:a5:d3:73:8b:a8:bf:73:1d:33:19:ae:4b:e1:d9:4c:f8:90: 95:9b:1c:c9:9f:04:49:a5:31:84:82:48:ce:a2:8e:97:fc:a7: 57:13:02:fd:21:61:cc:49:ec:a9:27:92:ce:0a:c3:cf:14:43: 22:0b:f8:93:71:32:db:a2:43:27:64:1c:b3:6f:13:70:ef:b3: 3b:6a:05:2d:82:c2:59:96:2f:ae:91:1f:cd:a1:02:92:b1:54: 23:82:9a:c6:1e:27:47:1b:46:a1:d6:08:d9:5e:c0:78:a1:3a: bb:42:24:4a:7a:01:3c:05:5f:b0:e4:f2:51:c0:6a:d6:22:16: bc:16:35:53:0b:e2:9c:b1:13:57:9a:31:ee:87:04:6d:95:18: b1:4f:3d:17:1d:ad:1c:1f:2d:ee:6c:95:3b:b1:b4:9f:5a:ef: db:ab:c0:8f:0e:47:09:c6:1d:e3:db:1b:9f:aa:97:5b:3d:20: 3a:e0:98:c3:0a:e9:30:52:b7:8a:fa:d7:0d:bc:1e:58:25:fd: c6:e8:fd:c1 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGCswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjE1 QkNFOEY3RjhBODNEQjkzOUFFMEY0MkZBMDU0MTNCMjg1MTgxRTAeFw0yNTA5MTMw MzA0MThaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEYyNkU0QjBFODIxODU1 QkExMDQzQzY2OEY5MURCOENCQzExODJCQzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDK+c7QU1zIUmg3paG0n+9/1CukrkmxrJKhJRUOOciAHya8sXIU nUqj86n7LZ+1qmtte2hndVLyhJGLJRXtbrZAiQeplED4OtWQUlsmZP/ueXBRG0Z0 cM9BHYY4o1xIgMF/Gd0yP3nECZL/hQ+ckX7/AiPO8BAyMfETC4M+5MdhJvEWkDdq i6ydrtA6ehZSYbXm932OFYFSLU7JJo2XJsM8DSHBEcCJ8iwxduHgaTCKIDe1MXC9 x9hKhgeP6GMlrJe7qUuHEUBE+Rgvj2zFyPIMmoZZAnfuSQwjWD86po1upoBeh1W/ hXSUPooAHY5Til2eXtJgw9a8FHMToABz68APAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU8m5LDoIYVboQQ8Zo+R24y8EYK8gwHwYDVR0jBBgwFoAUYVvOj3+Kg9uTmuD0 L6BUE7KFGB4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODYx L1lWdk9qMy1LZzl1VG11RDBMNkJVRTdLRkdCNC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvWVZ2T2ozLUtnOXVUbXVEMEw2QlVFN0tGR0I0LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODYxLzhtNUxEb0lZVmJvUVE4 Wm8tUjI0eThFWUs4Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJnOLgwDQYJKoZIhvcNAQELBQADggEBAEJOLoj8wekxrB9gbx2Dmihg/xewFP0c +7+e0cC/K3zXc1VC6OzgP2KH19qVZ5DjZ2hyvqPvM92l03OLqL9zHTMZrkvh2Uz4 kJWbHMmfBEmlMYSCSM6ijpf8p1cTAv0hYcxJ7Kknks4Kw88UQyIL+JNxMtuiQydk HLNvE3DvsztqBS2CwlmWL66RH82hApKxVCOCmsYeJ0cbRqHWCNlewHihOrtCJEp6 ATwFX7Dk8lHAatYiFrwWNVML4pyxE1eaMe6HBG2VGLFPPRcdrRwfLe5slTuxtJ9a 79urwI8ORwnGHePbG5+ql1s9IDrgmMMK6TBSt4r61w28Hlgl/cbo/cE= -----END CERTIFICATE-----Generated at Thu Nov 6 00:22:27 2025 by rpki-client