$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1232/FFkYLY3JOcASV08PQtRXXZcIyJM.roa File: FFkYLY3JOcASV08PQtRXXZcIyJM.roa (raw, json) Hash identifier: Fr4Vrm5uWBGNm7ezsDK2vpLy0C/0X0glvP2xuPXtxD8= Subject key identifier: 14:59:18:2D:8D:C9:39:C0:12:57:4F:0F:42:D4:57:5D:97:08:C8:93 Certificate issuer: /CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4 Certificate serial: 0E Authority key identifier: F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/FFkYLY3JOcASV08PQtRXXZcIyJM.roa Signing time: Fri 22 Aug 2025 06:23:58 +0000 ROA not before: Fri 22 Aug 2025 06:23:58 +0000 ROA not after: Thu 20 Aug 2026 07:49:18 +0000 asID: 12076 IP address blocks: 103.61.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 10:05:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4 Validity Not Before: Aug 22 06:23:58 2025 GMT Not After : Aug 20 07:49:18 2026 GMT Subject: CN=1459182D8DC939C012574F0F42D4575D9708C893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:43:4e:6e:df:64:10:00:68:f0:51:8c:27:d4: 7a:27:d0:76:23:a0:2d:ec:d1:1e:b0:b6:b2:9d:ab: c6:b5:21:20:0b:e8:49:59:78:99:90:5f:09:57:58: e0:e6:b9:35:4e:4c:2b:fb:29:de:0c:35:ca:cc:0a: c1:73:c7:20:79:93:31:70:e6:e6:e7:e9:3d:17:28: 96:8d:6a:40:22:64:b8:5a:44:9b:93:3f:a8:ef:90: a3:c4:54:68:59:f8:d1:91:fc:bd:08:69:06:35:09: 8d:d8:9a:cb:41:a4:db:89:6b:cd:e5:3f:c7:6c:95: 34:03:9f:51:91:7d:83:1e:73:a4:81:81:e4:3e:95: 2c:3e:ec:95:41:1b:ef:1e:20:59:fd:c9:3c:4c:65: 45:7d:1d:0d:43:92:34:e9:a5:3a:d7:41:52:3d:6b: 03:97:89:05:ac:4c:5c:74:02:ed:fd:cd:3a:82:76: 8f:8a:d1:fc:e1:0c:69:a9:b9:3b:96:2b:64:2b:8a: 6c:46:24:80:c8:91:c8:f3:4c:4d:72:60:ed:98:51: d7:c9:b5:16:57:9a:9b:56:e6:e5:ab:ed:88:31:da: 45:ba:1d:f4:f2:86:d3:ef:e5:dc:81:ac:b9:62:33: ae:84:87:5e:aa:62:72:86:2e:a6:f0:48:c5:fb:64: e0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:59:18:2D:8D:C9:39:C0:12:57:4F:0F:42:D4:57:5D:97:08:C8:93 X509v3 Authority Key Identifier: keyid:F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/FFkYLY3JOcASV08PQtRXXZcIyJM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.61.60.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:bd:eb:55:28:be:35:36:40:32:e6:36:aa:85:d5:b9:2a:8c: 66:55:33:78:61:be:55:13:78:fd:de:df:b5:34:3a:3e:99:6f: 10:c2:e8:6f:c5:7d:a5:27:6d:f0:82:ad:01:b5:69:b3:d8:95: 4f:c7:7e:f3:b4:78:1f:60:e7:e3:d9:3e:f4:26:10:5f:4e:5d: 29:57:13:92:46:94:7e:63:21:5e:4d:09:22:56:3f:45:0a:05: 4b:ca:f5:f7:45:5b:5c:84:2d:6e:aa:a8:e4:4c:92:04:f4:02: 04:58:e6:2c:19:d7:5a:40:5e:7d:a5:1a:b6:10:56:a9:5a:df: a0:60:8f:50:e7:a8:b5:c7:42:0e:86:2d:1d:33:41:a1:2a:9c: 64:8e:76:70:7d:70:c3:db:f0:1b:24:16:a1:de:91:f1:fc:cd: ac:d0:07:8d:b5:b5:7a:c4:2c:95:45:17:56:dd:ce:db:99:82: 92:89:16:2f:e6:e3:19:54:a1:1e:bd:6f:37:39:d4:12:b1:46: 0f:fe:7f:fc:40:39:24:a2:fd:35:85:83:86:4c:02:7d:f9:0c: d0:00:b1:3d:5c:36:0a:a3:dc:03:1b:d0:97:d8:66:5d:66:6b: 32:ab:1d:d1:39:7f:97:9c:01:73:77:1d:3b:10:6b:a0:53:9a: 36:03:04:3b -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBDjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGMTk4 OUI0MDY5MDFBREY4ODEwQjlEQ0RDNEUwRkM5RTdFODVFRUI0MB4XDTI1MDgyMjA2 MjM1OFoXDTI2MDgyMDA3NDkxOFowMzExMC8GA1UEAxMoMTQ1OTE4MkQ4REM5MzlD MDEyNTc0RjBGNDJENDU3NUQ5NzA4Qzg5MzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKpDTm7fZBAAaPBRjCfUeifQdiOgLezRHrC2sp2rxrUhIAvoSVl4 mZBfCVdY4Oa5NU5MK/sp3gw1yswKwXPHIHmTMXDm5ufpPRcolo1qQCJkuFpEm5M/ qO+Qo8RUaFn40ZH8vQhpBjUJjdiay0Gk24lrzeU/x2yVNAOfUZF9gx5zpIGB5D6V LD7slUEb7x4gWf3JPExlRX0dDUOSNOmlOtdBUj1rA5eJBaxMXHQC7f3NOoJ2j4rR /OEMaam5O5YrZCuKbEYkgMiRyPNMTXJg7ZhR18m1Fleam1bm5avtiDHaRbod9PKG 0+/l3IGsuWIzroSHXqpicoYupvBIxftk4NcCAwEAAaOCAfMwggHvMB0GA1UdDgQW BBQUWRgtjck5wBJXTw9C1FddlwjIkzAfBgNVHSMEGDAWgBTxmJtAaQGt+IELnc3E 4PyefoXutDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xMjMy LzhaaWJRR2tCcmZpQkM1M054T0Q4bm42RjdyUS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOFppYlFHa0JyZmlCQzUzTnhPRDhubjZGN3JRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIzMi9GRmtZTFkzSk9jQVNW MDhQUXRSWFhaY0l5Sk0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZz08MA0GCSqGSIb3DQEBCwUAA4IBAQBuvetVKL41NkAy5jaqhdW5KoxmVTN4 Yb5VE3j93t+1NDo+mW8QwuhvxX2lJ23wgq0BtWmz2JVPx37ztHgfYOfj2T70JhBf Tl0pVxOSRpR+YyFeTQkiVj9FCgVLyvX3RVtchC1uqqjkTJIE9AIEWOYsGddaQF59 pRq2EFapWt+gYI9Q56i1x0IOhi0dM0GhKpxkjnZwfXDD2/AbJBah3pHx/M2s0AeN tbV6xCyVRRdW3c7bmYKSiRYv5uMZVKEevW83OdQSsUYP/n/8QDkkov01hYOGTAJ9 +QzQALE9XDYKo9wDG9CX2GZdZmsyqx3ROX+XnAFzdx07EGugU5o2AwQ7 -----END CERTIFICATE-----Generated at Mon Sep 8 09:07:46 2025 by rpki-client