$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/gFQ0V21vJzULIhAjNC22HYqbNls.roa File: gFQ0V21vJzULIhAjNC22HYqbNls.roa (raw, json) Hash identifier: wsQ65k8e4WOz3445/AQgq5MBeH/Q0sqHWQ6ayG0tSGI= Subject key identifier: 80:54:34:57:6D:6F:27:35:0B:22:10:23:34:2D:B6:1D:8A:9B:36:5B Certificate issuer: /CN=DC6892E3620DD0F1FD62982E118E29757DC8CB3D Certificate serial: 1658 Authority key identifier: DC:68:92:E3:62:0D:D0:F1:FD:62:98:2E:11:8E:29:75:7D:C8:CB:3D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3GiS42IN0PH9YpguEY4pdX3Iyz0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/gFQ0V21vJzULIhAjNC22HYqbNls.roa Signing time: Mon 23 Jun 2025 02:17:11 +0000 ROA not before: Mon 23 Jun 2025 02:17:11 +0000 ROA not after: Thu 09 Apr 2026 06:41:24 +0000 asID: 174 IP address blocks: 103.235.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3GiS42IN0PH9YpguEY4pdX3Iyz0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 14:14:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5720 (0x1658) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC6892E3620DD0F1FD62982E118E29757DC8CB3D Validity Not Before: Jun 23 02:17:11 2025 GMT Not After : Apr 9 06:41:24 2026 GMT Subject: CN=805434576D6F27350B221023342DB61D8A9B365B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:e1:be:30:c4:e4:a2:6b:4b:af:57:9e:02:21: 15:2f:b8:bd:5e:d1:d4:bb:72:e4:cf:df:f6:7b:78: 87:3d:7d:e4:84:62:00:02:bb:61:e5:d3:ca:14:0b: 54:81:70:5a:68:0b:55:31:2e:7e:3a:dc:14:33:cb: cd:03:96:74:0f:20:8c:52:41:d9:4a:45:b1:12:46: d4:58:a7:e3:fe:7a:f0:6d:fd:bc:68:75:5e:4e:93: de:11:cb:d5:39:0f:40:0b:8e:a8:17:4e:99:b3:38: ee:6b:27:e5:d9:fc:7a:00:3f:5b:2e:7a:43:e2:05: b4:13:6c:87:5e:28:70:f2:47:68:7d:ab:a5:37:7f: ab:7d:d1:d1:31:a7:b8:15:d2:b4:c2:90:2c:2d:cd: 8d:cd:77:97:44:29:31:83:dd:64:31:bb:18:6f:50: 38:26:41:d0:cc:40:dd:f8:70:0c:d4:68:2e:e1:60: 40:0b:fb:5a:b0:4c:51:e0:23:e6:72:1f:1f:ad:d8: 2c:d2:99:62:62:6a:49:4f:93:ba:8f:5d:b5:7a:12: ed:bb:a4:c8:c9:dc:f0:86:a1:1f:fb:f8:8e:3a:68: 4c:ba:1d:30:cf:1b:72:c2:58:ea:18:b6:dd:8a:db: af:25:7d:d7:fe:fe:b1:5e:5a:22:32:d0:74:4f:8c: 23:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:54:34:57:6D:6F:27:35:0B:22:10:23:34:2D:B6:1D:8A:9B:36:5B X509v3 Authority Key Identifier: keyid:DC:68:92:E3:62:0D:D0:F1:FD:62:98:2E:11:8E:29:75:7D:C8:CB:3D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3GiS42IN0PH9YpguEY4pdX3Iyz0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/gFQ0V21vJzULIhAjNC22HYqbNls.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.235.128.0/22 Signature Algorithm: sha256WithRSAEncryption 13:a6:cf:58:1c:c3:49:22:3d:17:69:8f:13:44:d0:dd:b9:b5: 2a:db:74:44:50:3e:28:1f:43:2e:ae:e3:8e:00:a4:69:44:aa: 6f:b8:a1:14:53:82:6c:5b:10:1f:24:b1:9b:f5:ce:16:35:1e: 65:e8:75:71:21:43:83:28:ad:fc:02:bd:45:2d:46:0b:39:cc: c9:da:5c:6e:11:1b:d8:f9:06:7e:24:c0:45:96:b5:44:0f:59: 15:75:19:bf:80:3d:47:2c:aa:e0:b6:77:d2:69:60:83:a9:9b: ad:ac:a1:52:ac:1b:ad:59:d3:3f:87:96:d2:52:e6:7b:47:23: a2:64:80:2c:51:22:f4:8a:69:a6:f2:50:9f:f1:9c:14:21:b8: b4:24:9d:e9:46:9b:91:c4:a7:86:8b:84:ca:37:f7:41:cd:c3: 13:11:bc:0b:fa:62:cb:bd:77:2d:b2:22:99:0a:0b:7c:fd:b5: 4d:8f:51:d8:b0:cc:37:6a:53:07:ec:13:7f:be:11:ad:f6:23: fb:da:a6:19:e4:c2:39:d0:39:42:f3:48:92:f5:95:72:91:a8: 60:00:eb:5f:66:4d:40:b1:6d:33:19:f8:b6:44:94:fe:37:a0: a3:65:92:ff:02:64:8a:e3:8a:a9:be:20:c0:78:b2:fb:63:91: 08:f2:85:d3 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFlgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREM2 ODkyRTM2MjBERDBGMUZENjI5ODJFMTE4RTI5NzU3REM4Q0IzRDAeFw0yNTA2MjMw MjE3MTFaFw0yNjA0MDkwNjQxMjRaMDMxMTAvBgNVBAMTKDgwNTQzNDU3NkQ2RjI3 MzUwQjIyMTAyMzM0MkRCNjFEOEE5QjM2NUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDn4b4wxOSia0uvV54CIRUvuL1e0dS7cuTP3/Z7eIc9feSEYgAC u2Hl08oUC1SBcFpoC1UxLn463BQzy80DlnQPIIxSQdlKRbESRtRYp+P+evBt/bxo dV5Ok94Ry9U5D0ALjqgXTpmzOO5rJ+XZ/HoAP1suekPiBbQTbIdeKHDyR2h9q6U3 f6t90dExp7gV0rTCkCwtzY3Nd5dEKTGD3WQxuxhvUDgmQdDMQN34cAzUaC7hYEAL +1qwTFHgI+ZyHx+t2CzSmWJiaklPk7qPXbV6Eu27pMjJ3PCGoR/7+I46aEy6HTDP G3LCWOoYtt2K268lfdf+/rFeWiIy0HRPjCOjAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUgFQ0V21vJzULIhAjNC22HYqbNlswHwYDVR0jBBgwFoAU3GiS42IN0PH9Ypgu EY4pdX3Iyz0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjMw OS8zR2lTNDJJTjBQSDlZcGd1RVk0cGRYM0l5ejAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzNHaVM0MklOMFBIOVlwZ3VFWTRwZFgzSXl6MC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzMDkvZ0ZRMFYyMXZKelVM SWhBak5DMjJIWXFiTmxzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmfrgDANBgkqhkiG9w0BAQsFAAOCAQEAE6bPWBzDSSI9F2mPE0TQ3bm1Ktt0 RFA+KB9DLq7jjgCkaUSqb7ihFFOCbFsQHySxm/XOFjUeZeh1cSFDgyit/AK9RS1G CznMydpcbhEb2PkGfiTARZa1RA9ZFXUZv4A9Ryyq4LZ30mlgg6mbrayhUqwbrVnT P4eW0lLme0cjomSALFEi9IpppvJQn/GcFCG4tCSd6UabkcSnhouEyjf3Qc3DExG8 C/piy713LbIimQoLfP21TY9R2LDMN2pTB+wTf74RrfYj+9qmGeTCOdA5QvNIkvWV cpGoYADrX2ZNQLFtMxn4tkSU/jego2WS/wJkiuOKqb4gwHiy+2ORCPKF0w== -----END CERTIFICATE-----Generated at Tue Jul 1 13:51:36 2025 by rpki-client