$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/861/ke-FN3rYTvgxO6_ePBmWuPrd8pM.roa File: ke-FN3rYTvgxO6_ePBmWuPrd8pM.roa (raw, json) Hash identifier: SR1aaHQlQsTyy8wGvj/fzSjiYMsOF9jnGeWQew2ZpQ4= Subject key identifier: 91:EF:85:37:7A:D8:4E:F8:31:3B:AF:DE:3C:19:96:B8:FA:DD:F2:93 Certificate issuer: /CN=615BCE8F7F8A83DB939AE0F42FA05413B285181E Certificate serial: 1AC9 Authority key identifier: 61:5B:CE:8F:7F:8A:83:DB:93:9A:E0:F4:2F:A0:54:13:B2:85:18:1E Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/861/ke-FN3rYTvgxO6_ePBmWuPrd8pM.roa Signing time: Mon 26 Jan 2026 06:53:32 +0000 ROA not before: Mon 26 Jan 2026 06:53:32 +0000 ROA not after: Sat 09 Jan 2027 08:23:18 +0000 asID: 59043 IP address blocks: 103.56.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/861/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/861/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 05:59:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6857 (0x1ac9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615BCE8F7F8A83DB939AE0F42FA05413B285181E Validity Not Before: Jan 26 06:53:32 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=91EF85377AD84EF8313BAFDE3C1996B8FADDF293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:33:c8:35:a0:62:da:a5:de:e6:18:51:0d:f8: 15:a5:fb:a3:a7:c4:14:71:7e:b8:18:2c:c7:70:33: 12:84:d0:97:85:9f:d0:23:5c:5c:74:c7:32:d4:ae: 3e:28:a5:70:c5:f7:07:8c:8b:36:17:3c:f7:8a:4f: 27:c6:d8:56:c0:38:07:ec:b9:85:cd:33:f3:18:f9: 1f:b0:e0:84:95:7c:b6:de:af:4e:8e:35:90:f2:45: af:3d:ff:59:15:d3:f2:72:63:c1:8d:3b:0c:88:8f: 99:f1:bf:f0:46:87:05:90:48:13:28:1b:6b:dc:a9: 62:dc:31:98:0d:83:a3:f2:88:ae:c4:db:06:9b:1c: 34:27:8a:3e:2c:e1:8a:ba:b5:97:02:5c:28:e5:2f: ff:0c:88:ea:d1:78:ff:41:75:58:03:23:38:b2:7a: 88:a8:ad:8c:a3:3e:fd:03:45:25:1a:4c:1d:e2:27: 36:87:69:67:9b:1c:8f:02:38:ea:40:83:cb:c7:8b: d0:9f:13:38:0f:c8:e8:fa:5c:ef:72:3d:25:46:2d: 90:ad:0a:c9:26:d8:77:fe:fb:45:cd:11:b6:be:5e: 66:95:a2:4b:08:4e:56:21:8d:41:2a:a0:37:64:2b: 22:42:04:c8:33:c5:d2:5d:95:58:c9:c6:8a:8c:f8: 21:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:EF:85:37:7A:D8:4E:F8:31:3B:AF:DE:3C:19:96:B8:FA:DD:F2:93 X509v3 Authority Key Identifier: keyid:61:5B:CE:8F:7F:8A:83:DB:93:9A:E0:F4:2F:A0:54:13:B2:85:18:1E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/861/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/861/ke-FN3rYTvgxO6_ePBmWuPrd8pM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.56.184.0/24 Signature Algorithm: sha256WithRSAEncryption 04:3d:aa:81:78:69:55:29:81:91:52:0e:43:ac:da:ba:95:9e: 8b:73:39:b7:0a:a8:94:2c:6c:0b:8a:bc:01:b6:2c:69:45:a0: 04:a6:f3:de:5b:0b:cd:88:e7:74:f8:ac:7d:68:32:ae:23:dd: 11:a6:3b:4b:ad:01:d9:1d:87:57:b6:74:b0:f5:81:f6:14:13: 7f:1d:8e:56:1b:94:96:26:f4:b6:f0:b1:d0:f1:ca:fe:fb:b7: 91:7a:a5:df:27:65:d5:cd:1e:58:0d:ea:88:f7:08:2e:58:37: e2:d9:d2:91:90:46:8f:8d:4c:57:04:f5:7a:3c:5b:e3:17:24: a7:55:11:a3:05:a7:b5:04:4a:1f:bd:f0:91:ff:c3:86:bd:bb: c4:6e:1b:de:77:66:5a:77:67:5b:6a:14:2c:1b:bc:85:79:c7: 4d:fe:5e:2e:44:89:3d:98:98:c1:b8:eb:85:1b:fb:7e:3f:a2: 8f:05:1c:5e:3c:af:79:e3:43:f0:d4:0d:13:c5:8f:b3:61:1e: 0b:98:5f:9b:12:7e:b3:fd:07:13:38:31:3a:a1:83:b3:1a:b0: 90:bd:1f:de:62:61:dd:01:0c:2c:a1:a3:37:a0:30:48:b1:2a: a0:29:a6:e6:22:67:a0:55:41:e6:35:bc:a5:54:d7:81:f5:4f: ba:b9:5d:59 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGskwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjE1 QkNFOEY3RjhBODNEQjkzOUFFMEY0MkZBMDU0MTNCMjg1MTgxRTAeFw0yNjAxMjYw NjUzMzJaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDkxRUY4NTM3N0FEODRF RjgzMTNCQUZERTNDMTk5NkI4RkFEREYyOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUM8g1oGLapd7mGFEN+BWl+6OnxBRxfrgYLMdwMxKE0JeFn9Aj XFx0xzLUrj4opXDF9weMizYXPPeKTyfG2FbAOAfsuYXNM/MY+R+w4ISVfLber06O NZDyRa89/1kV0/JyY8GNOwyIj5nxv/BGhwWQSBMoG2vcqWLcMZgNg6PyiK7E2wab HDQnij4s4Yq6tZcCXCjlL/8MiOrReP9BdVgDIziyeoiorYyjPv0DRSUaTB3iJzaH aWebHI8COOpAg8vHi9CfEzgPyOj6XO9yPSVGLZCtCskm2Hf++0XNEba+XmaVoksI TlYhjUEqoDdkKyJCBMgzxdJdlVjJxoqM+CE7AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUke+FN3rYTvgxO6/ePBmWuPrd8pMwHwYDVR0jBBgwFoAUYVvOj3+Kg9uTmuD0 L6BUE7KFGB4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODYx L1lWdk9qMy1LZzl1VG11RDBMNkJVRTdLRkdCNC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvWVZ2T2ozLUtnOXVUbXVEMEw2QlVFN0tGR0I0LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODYxL2tlLUZOM3JZVHZneE82 X2VQQm1XdVByZDhwTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnOLgwDQYJKoZIhvcNAQELBQADggEBAAQ9qoF4aVUpgZFSDkOs2rqVnotzObcK qJQsbAuKvAG2LGlFoASm895bC82I53T4rH1oMq4j3RGmO0utAdkdh1e2dLD1gfYU E38djlYblJYm9LbwsdDxyv77t5F6pd8nZdXNHlgN6oj3CC5YN+LZ0pGQRo+NTFcE 9Xo8W+MXJKdVEaMFp7UESh+98JH/w4a9u8RuG953Zlp3Z1tqFCwbvIV5x03+Xi5E iT2YmMG464Ub+34/oo8FHF48r3njQ/DUDRPFj7NhHguYX5sSfrP9BxM4MTqhg7Ma sJC9H95iYd0BDCyhozegMEixKqAppuYiZ6BVQeY1vKVU14H1T7q5XVk= -----END CERTIFICATE-----Generated at Mon Mar 2 05:54:25 2026 by rpki-client