$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/8bIf5okmvQcgZEFb1zMEtioo9Bo.roa File: 8bIf5okmvQcgZEFb1zMEtioo9Bo.roa (raw, json) Hash identifier: WeqdQC4BErrU6tuOjQZRZJ8aznqsoiTS20wXvnYplR4= Subject key identifier: F1:B2:1F:E6:89:26:BD:07:20:64:41:5B:D7:33:04:B6:2A:28:F4:1A Certificate issuer: /CN=DC6892E3620DD0F1FD62982E118E29757DC8CB3D Certificate serial: 1656 Authority key identifier: DC:68:92:E3:62:0D:D0:F1:FD:62:98:2E:11:8E:29:75:7D:C8:CB:3D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3GiS42IN0PH9YpguEY4pdX3Iyz0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/8bIf5okmvQcgZEFb1zMEtioo9Bo.roa Signing time: Mon 23 Jun 2025 02:16:47 +0000 ROA not before: Mon 23 Jun 2025 02:16:47 +0000 ROA not after: Thu 09 Apr 2026 06:41:24 +0000 asID: 174 IP address blocks: 103.83.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3GiS42IN0PH9YpguEY4pdX3Iyz0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 14:14:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5718 (0x1656) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC6892E3620DD0F1FD62982E118E29757DC8CB3D Validity Not Before: Jun 23 02:16:47 2025 GMT Not After : Apr 9 06:41:24 2026 GMT Subject: CN=F1B21FE68926BD072064415BD73304B62A28F41A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a4:b3:f1:03:a5:3f:88:df:e9:42:83:47:c8: 53:5f:29:94:1d:db:2c:fb:f9:24:eb:e6:fa:c2:30: 79:96:eb:1f:18:a0:54:b8:c6:8f:9b:ae:f0:82:47: b4:25:59:bd:05:40:09:b5:de:08:94:3b:67:2f:ac: cc:d2:d0:93:07:fe:47:7d:f0:ee:ca:f6:a0:c3:dd: 30:ab:e0:46:eb:23:71:d5:47:bf:d1:8d:78:b3:59: d4:df:d4:60:c0:63:f4:a4:94:fb:b0:6c:d1:fc:62: 9f:f8:cb:88:f8:50:99:ac:d1:a9:e4:6a:70:30:8f: 21:d5:ca:46:7a:cd:0f:c0:29:20:28:c4:7d:34:f2: da:e1:c0:94:9a:ff:a7:45:1d:1b:f4:4c:9d:d6:61: 22:64:ac:30:6a:62:73:91:49:c4:8d:0f:c0:bb:dd: 92:fe:50:15:74:e9:d0:c2:70:15:a5:78:64:7e:ab: dd:1d:45:1b:d4:b7:df:fd:30:0a:93:9c:51:7a:25: 31:e0:ce:ab:36:82:f7:09:03:9e:6f:7f:91:cf:3d: f1:0a:ef:b9:f7:ba:a6:5d:ab:21:25:07:cc:88:bb: 9d:4a:d5:52:47:81:ca:b6:08:25:94:8f:e5:ac:91: 37:c0:4f:0a:98:14:a2:d3:b7:fd:32:80:ed:93:70: f4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:B2:1F:E6:89:26:BD:07:20:64:41:5B:D7:33:04:B6:2A:28:F4:1A X509v3 Authority Key Identifier: keyid:DC:68:92:E3:62:0D:D0:F1:FD:62:98:2E:11:8E:29:75:7D:C8:CB:3D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3GiS42IN0PH9YpguEY4pdX3Iyz0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/8bIf5okmvQcgZEFb1zMEtioo9Bo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.83.180.0/22 Signature Algorithm: sha256WithRSAEncryption 61:42:3b:d3:cc:f6:b8:93:38:82:81:c0:2f:0e:bd:87:3c:86: 88:ea:25:b9:4d:6e:56:b2:e5:eb:91:34:f0:f0:f1:18:d1:f7: a6:09:cb:f9:9e:8a:de:09:1c:07:f2:30:8c:85:e3:7f:0b:1f: 36:d7:e9:e6:89:d5:c0:f8:58:07:e6:ec:7e:17:55:d0:72:1f: 4d:88:87:85:4e:3e:6d:28:ed:3a:f3:9e:94:16:15:45:d2:d5: ec:cb:19:5b:92:d3:45:20:95:71:d7:57:9c:1c:f8:60:86:c1: 7a:fe:ea:ec:83:68:36:29:f0:50:39:e7:95:fd:32:62:ea:b8: e0:e4:cb:16:bf:6c:28:8f:03:cd:e4:49:db:1a:c7:fa:85:5f: fe:c2:92:2c:ca:e9:04:69:6e:20:5e:de:3d:5f:9e:f0:4d:a1: 73:bc:cd:ae:f4:8a:6c:f6:79:d4:af:26:f9:ea:78:55:85:9d: 99:9e:6e:21:e3:3a:ba:58:80:9e:83:64:32:3d:21:92:4f:b3: e3:53:82:56:f3:90:21:5a:8d:7e:65:03:7a:87:53:3b:11:a9: 5a:32:c5:b9:83:77:a9:91:0f:4f:e4:e0:68:d3:0b:b5:df:6f: ec:9a:e5:47:88:3e:c2:f4:86:84:cc:a3:66:0a:cb:19:6d:9d: d0:f3:84:6f -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFlYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREM2 ODkyRTM2MjBERDBGMUZENjI5ODJFMTE4RTI5NzU3REM4Q0IzRDAeFw0yNTA2MjMw MjE2NDdaFw0yNjA0MDkwNjQxMjRaMDMxMTAvBgNVBAMTKEYxQjIxRkU2ODkyNkJE MDcyMDY0NDE1QkQ3MzMwNEI2MkEyOEY0MUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKpLPxA6U/iN/pQoNHyFNfKZQd2yz7+STr5vrCMHmW6x8YoFS4 xo+brvCCR7QlWb0FQAm13giUO2cvrMzS0JMH/kd98O7K9qDD3TCr4EbrI3HVR7/R jXizWdTf1GDAY/SklPuwbNH8Yp/4y4j4UJms0ankanAwjyHVykZ6zQ/AKSAoxH00 8trhwJSa/6dFHRv0TJ3WYSJkrDBqYnORScSND8C73ZL+UBV06dDCcBWleGR+q90d RRvUt9/9MAqTnFF6JTHgzqs2gvcJA55vf5HPPfEK77n3uqZdqyElB8yIu51K1VJH gcq2CCWUj+WskTfATwqYFKLTt/0ygO2TcPTLAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU8bIf5okmvQcgZEFb1zMEtioo9BowHwYDVR0jBBgwFoAU3GiS42IN0PH9Ypgu EY4pdX3Iyz0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjMw OS8zR2lTNDJJTjBQSDlZcGd1RVk0cGRYM0l5ejAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzNHaVM0MklOMFBIOVlwZ3VFWTRwZFgzSXl6MC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzMDkvOGJJZjVva212UWNn WkVGYjF6TUV0aW9vOUJvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmdTtDANBgkqhkiG9w0BAQsFAAOCAQEAYUI708z2uJM4goHALw69hzyGiOol uU1uVrLl65E08PDxGNH3pgnL+Z6K3gkcB/IwjIXjfwsfNtfp5onVwPhYB+bsfhdV 0HIfTYiHhU4+bSjtOvOelBYVRdLV7MsZW5LTRSCVcddXnBz4YIbBev7q7INoNinw UDnnlf0yYuq44OTLFr9sKI8DzeRJ2xrH+oVf/sKSLMrpBGluIF7ePV+e8E2hc7zN rvSKbPZ51K8m+ep4VYWdmZ5uIeM6uliAnoNkMj0hkk+z41OCVvOQIVqNfmUDeodT OxGpWjLFuYN3qZEPT+TgaNMLtd9v7JrlR4g+wvSGhMyjZgrLGW2d0POEbw== -----END CERTIFICATE-----Generated at Tue Jul 1 13:51:38 2025 by rpki-client