$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1232/48PI8nKO3eXLthPohUMH2IkmHzc.roa File: 48PI8nKO3eXLthPohUMH2IkmHzc.roa (raw, json) Hash identifier: wGq0gkHVOoB6G8/9fs3JtbwMIPVr6AlID9NzzTnK8T8= Subject key identifier: E3:C3:C8:F2:72:8E:DD:E5:CB:B6:13:E8:85:43:07:D8:89:26:1F:37 Certificate issuer: /CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4 Certificate serial: 15 Authority key identifier: F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/48PI8nKO3eXLthPohUMH2IkmHzc.roa Signing time: Fri 22 Aug 2025 06:24:00 +0000 ROA not before: Fri 22 Aug 2025 06:24:00 +0000 ROA not after: Thu 20 Aug 2026 07:49:18 +0000 asID: 138457 IP address blocks: 103.61.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 10:05:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4 Validity Not Before: Aug 22 06:24:00 2025 GMT Not After : Aug 20 07:49:18 2026 GMT Subject: CN=E3C3C8F2728EDDE5CBB613E8854307D889261F37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:77:3b:a4:56:20:cc:94:1f:42:2c:02:c7:68: 21:b7:b1:93:3d:21:9d:2e:b1:04:f3:ef:af:a3:2e: 9e:8a:f6:30:66:05:55:49:53:64:2a:14:c0:df:89: 66:03:0c:89:94:f5:3a:d4:33:6e:9c:fc:58:8e:d9: 12:5c:18:c0:4f:83:8f:95:4f:c3:94:b7:69:7c:37: f5:69:d6:c9:ba:8c:74:48:7e:46:85:e6:9c:80:c1: 33:81:08:e1:57:37:09:c4:7b:bd:30:d9:f2:dd:b5: 97:9f:5b:08:b0:fb:27:ec:cc:12:34:a0:df:9a:3d: 98:dd:f2:f5:a1:b5:72:df:be:7b:2a:a5:f5:18:5a: 65:ff:0f:b2:b3:9f:3a:52:c1:42:38:d1:c5:ba:ff: ee:79:4b:bf:b3:bd:7f:01:45:dc:c0:49:9a:76:de: 82:72:44:b0:54:bc:0c:48:57:61:86:6b:ca:de:18: 0d:64:60:6b:2b:b6:cf:ba:17:68:8e:6c:0a:6e:6a: 2f:12:d9:0e:c6:25:27:80:1d:0d:e9:1c:51:8f:50: 8c:bb:72:9f:93:f8:4c:5a:b1:9d:42:9b:c0:8c:50: 0c:59:c6:76:cb:b2:f7:03:9e:d5:17:c4:f6:50:36: 8f:04:22:c1:0a:15:fd:f9:77:55:8a:17:8d:2a:f9: bf:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:C3:C8:F2:72:8E:DD:E5:CB:B6:13:E8:85:43:07:D8:89:26:1F:37 X509v3 Authority Key Identifier: keyid:F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/48PI8nKO3eXLthPohUMH2IkmHzc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.61.62.0/24 Signature Algorithm: sha256WithRSAEncryption 42:61:c5:93:30:dd:6e:16:7a:4f:ce:09:fe:86:4c:81:23:d6: 93:c9:88:e3:3b:1c:d0:4d:24:18:6c:7c:a4:fb:b2:e9:ce:a8: f1:b0:2a:1c:41:90:f9:f7:9e:2a:5b:72:8d:c6:5b:00:67:1d: f1:4c:2b:01:6d:7a:1d:21:6d:43:36:5f:e8:2a:07:29:52:9d: 7d:7d:33:60:a5:d1:04:23:e1:ea:68:12:d3:ab:ec:64:36:ec: 4a:c4:42:77:30:4c:78:92:65:fb:b4:84:e6:e8:36:f9:cb:d0: a0:18:f6:ee:a4:8a:b2:67:9a:59:6e:31:c8:02:4d:06:e7:0b: 12:b3:b4:c2:9b:6c:af:fd:a4:cd:a8:cf:12:6b:e8:45:dd:f3: 51:a8:b0:17:a3:8c:04:d9:e0:7e:66:32:bf:83:dd:2e:29:95: 5e:72:86:c3:a6:08:29:81:bd:ab:23:76:2e:f1:5e:f4:3e:ee: b4:44:85:13:ea:e7:44:e7:e1:fd:e3:8a:b2:58:f0:29:86:f2: 52:86:25:72:2c:6f:25:ea:92:5b:eb:74:ec:3a:48:10:f2:dd: 39:c3:ff:4f:0f:49:e4:32:fb:09:67:7c:31:ef:27:6f:18:e3: b3:a2:75:29:31:b4:ab:1f:1e:fc:b1:d8:f4:92:68:e4:6b:84: 21:2e:d7:8f -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBFTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGMTk4 OUI0MDY5MDFBREY4ODEwQjlEQ0RDNEUwRkM5RTdFODVFRUI0MB4XDTI1MDgyMjA2 MjQwMFoXDTI2MDgyMDA3NDkxOFowMzExMC8GA1UEAxMoRTNDM0M4RjI3MjhFRERF NUNCQjYxM0U4ODU0MzA3RDg4OTI2MUYzNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL13O6RWIMyUH0IsAsdoIbexkz0hnS6xBPPvr6Munor2MGYFVUlT ZCoUwN+JZgMMiZT1OtQzbpz8WI7ZElwYwE+Dj5VPw5S3aXw39WnWybqMdEh+RoXm nIDBM4EI4Vc3CcR7vTDZ8t21l59bCLD7J+zMEjSg35o9mN3y9aG1ct++eyql9Rha Zf8PsrOfOlLBQjjRxbr/7nlLv7O9fwFF3MBJmnbegnJEsFS8DEhXYYZryt4YDWRg ayu2z7oXaI5sCm5qLxLZDsYlJ4AdDekcUY9QjLtyn5P4TFqxnUKbwIxQDFnGdsuy 9wOe1RfE9lA2jwQiwQoV/fl3VYoXjSr5v8sCAwEAAaOCAfMwggHvMB0GA1UdDgQW BBTjw8jyco7d5cu2E+iFQwfYiSYfNzAfBgNVHSMEGDAWgBTxmJtAaQGt+IELnc3E 4PyefoXutDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xMjMy LzhaaWJRR2tCcmZpQkM1M054T0Q4bm42RjdyUS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOFppYlFHa0JyZmlCQzUzTnhPRDhubjZGN3JRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIzMi80OFBJOG5LTzNlWEx0 aFBvaFVNSDJJa21IemMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZz0+MA0GCSqGSIb3DQEBCwUAA4IBAQBCYcWTMN1uFnpPzgn+hkyBI9aTyYjj OxzQTSQYbHyk+7LpzqjxsCocQZD5954qW3KNxlsAZx3xTCsBbXodIW1DNl/oKgcp Up19fTNgpdEEI+HqaBLTq+xkNuxKxEJ3MEx4kmX7tITm6Db5y9CgGPbupIqyZ5pZ bjHIAk0G5wsSs7TCm2yv/aTNqM8Sa+hF3fNRqLAXo4wE2eB+ZjK/g90uKZVecobD pggpgb2rI3Yu8V70Pu60RIUT6udE5+H944qyWPAphvJShiVyLG8l6pJb63TsOkgQ 8t05w/9PD0nkMvsJZ3wx7ydvGOOzonUpMbSrHx78sdj0kmjka4QhLteP -----END CERTIFICATE-----Generated at Mon Sep 8 09:09:20 2025 by rpki-client