$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1232/QMCfLhYzOUYS1HQTXwl9Np_g1T8.roa File: QMCfLhYzOUYS1HQTXwl9Np_g1T8.roa (raw, json) Hash identifier: NhYojcApnv0WL6juLFawof9E8Xsyg4+DmgjPN1HgsK8= Subject key identifier: 40:C0:9F:2E:16:33:39:46:12:D4:74:13:5F:09:7D:36:9F:E0:D5:3F Certificate issuer: /CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4 Certificate serial: 1E Authority key identifier: F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/QMCfLhYzOUYS1HQTXwl9Np_g1T8.roa Signing time: Fri 22 Aug 2025 06:24:02 +0000 ROA not before: Fri 22 Aug 2025 06:24:02 +0000 ROA not after: Thu 20 Aug 2026 07:49:18 +0000 asID: 12076 IP address blocks: 103.61.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 10:05:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4 Validity Not Before: Aug 22 06:24:02 2025 GMT Not After : Aug 20 07:49:18 2026 GMT Subject: CN=40C09F2E1633394612D474135F097D369FE0D53F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bb:12:74:f4:54:1d:81:cd:f9:5f:c0:4e:95: ce:c3:4c:86:20:ea:f9:d3:56:f4:8a:b7:7a:59:a4: 8a:6e:82:85:4a:42:ec:36:e3:40:80:15:e7:33:58: 84:e0:9b:40:f0:0d:6b:cc:c6:a6:f7:5e:77:9c:77: 7c:05:a9:c3:cc:94:16:47:c1:88:91:db:fa:4c:83: bc:20:77:7c:6a:3d:20:d8:dc:37:16:0a:9b:70:15: 0a:be:24:0d:e8:4d:04:81:e1:f1:91:d6:76:81:16: 6b:80:b2:84:34:73:b3:b6:a3:de:93:79:86:7f:2a: 3a:2e:4f:05:50:68:fb:05:f0:82:90:4f:b1:c4:14: 71:01:54:ca:8f:16:56:de:18:58:69:ea:e4:10:69: 3c:6f:9a:f3:76:fe:7c:54:a4:c5:05:0f:31:10:fb: 75:51:27:ef:d4:4e:c7:c4:a1:e8:b7:b9:31:e7:dd: dc:01:28:d4:e3:14:1d:6a:fb:9d:47:f2:64:b2:e5: 46:f5:1d:42:8b:d2:ca:25:1a:dd:78:7c:a4:03:e9: 68:95:87:17:75:ad:8c:08:66:e7:02:fc:d0:67:13: 74:96:31:3b:e2:ef:d2:ee:39:d4:ed:ab:d1:a9:2e: 01:f9:c6:0e:39:1b:45:eb:14:2d:a3:1a:89:09:93: 3f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:C0:9F:2E:16:33:39:46:12:D4:74:13:5F:09:7D:36:9F:E0:D5:3F X509v3 Authority Key Identifier: keyid:F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/QMCfLhYzOUYS1HQTXwl9Np_g1T8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.61.63.0/24 Signature Algorithm: sha256WithRSAEncryption 11:58:40:a1:00:f9:7b:3e:a2:9e:05:b6:1f:60:1b:12:42:1e: 6b:e3:cb:fb:a3:3c:7c:97:4d:2c:f0:dc:ac:90:54:35:c3:5b: 17:cf:44:ed:9b:d0:f9:37:be:87:ce:b9:c8:c5:29:a9:f6:fc: ae:3d:8e:e6:49:36:9c:23:f3:34:6a:03:54:e7:01:96:96:e3: 91:11:2c:16:ff:d7:3c:75:22:08:f3:3d:19:92:cf:a1:06:ea: 25:05:12:be:d1:83:92:9a:4e:a1:70:f4:66:60:3f:42:1e:15: 4b:e8:76:b5:7a:af:b4:cb:02:c6:f4:2b:21:14:f3:7e:84:9d: f2:59:c8:29:4e:e7:40:1c:c1:e2:f7:87:da:6f:3b:a1:12:b3: 5a:d4:78:31:ab:20:c7:ac:b4:ee:58:6d:5e:c7:c3:dd:3a:9d: 71:39:7f:83:92:ad:33:ee:85:e6:01:45:64:44:bc:e5:ae:97: dd:3d:33:24:d7:6b:b0:c9:82:57:e7:f1:94:45:36:5e:40:52: ab:b6:22:a4:3f:cc:37:79:f5:63:0a:89:08:c5:cd:21:81:72: 35:ca:36:db:fd:95:22:24:69:d4:d1:9b:d2:b0:82:8e:c2:d8: b3:c4:eb:c4:e0:24:dc:b9:ef:ef:28:35:34:28:fe:54:4f:42: ce:06:f1:cb -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBHjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGMTk4 OUI0MDY5MDFBREY4ODEwQjlEQ0RDNEUwRkM5RTdFODVFRUI0MB4XDTI1MDgyMjA2 MjQwMloXDTI2MDgyMDA3NDkxOFowMzExMC8GA1UEAxMoNDBDMDlGMkUxNjMzMzk0 NjEyRDQ3NDEzNUYwOTdEMzY5RkUwRDUzRjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALC7EnT0VB2BzflfwE6VzsNMhiDq+dNW9Iq3elmkim6ChUpC7Dbj QIAV5zNYhOCbQPANa8zGpvded5x3fAWpw8yUFkfBiJHb+kyDvCB3fGo9INjcNxYK m3AVCr4kDehNBIHh8ZHWdoEWa4CyhDRzs7aj3pN5hn8qOi5PBVBo+wXwgpBPscQU cQFUyo8WVt4YWGnq5BBpPG+a83b+fFSkxQUPMRD7dVEn79ROx8Sh6Le5Mefd3AEo 1OMUHWr7nUfyZLLlRvUdQovSyiUa3Xh8pAPpaJWHF3WtjAhm5wL80GcTdJYxO+Lv 0u451O2r0akuAfnGDjkbResULaMaiQmTP+8CAwEAAaOCAfMwggHvMB0GA1UdDgQW BBRAwJ8uFjM5RhLUdBNfCX02n+DVPzAfBgNVHSMEGDAWgBTxmJtAaQGt+IELnc3E 4PyefoXutDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xMjMy LzhaaWJRR2tCcmZpQkM1M054T0Q4bm42RjdyUS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOFppYlFHa0JyZmlCQzUzTnhPRDhubjZGN3JRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIzMi9RTUNmTGhZek9VWVMx SFFUWHdsOU5wX2cxVDgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZz0/MA0GCSqGSIb3DQEBCwUAA4IBAQARWEChAPl7PqKeBbYfYBsSQh5r48v7 ozx8l00s8NyskFQ1w1sXz0Ttm9D5N76HzrnIxSmp9vyuPY7mSTacI/M0agNU5wGW luORESwW/9c8dSII8z0Zks+hBuolBRK+0YOSmk6hcPRmYD9CHhVL6Ha1eq+0ywLG 9CshFPN+hJ3yWcgpTudAHMHi94fabzuhErNa1HgxqyDHrLTuWG1ex8PdOp1xOX+D kq0z7oXmAUVkRLzlrpfdPTMk12uwyYJX5/GURTZeQFKrtiKkP8w3efVjCokIxc0h gXI1yjbb/ZUiJGnU0ZvSsIKOwtizxOvE4CTcue/vKDU0KP5UT0LOBvHL -----END CERTIFICATE-----Generated at Mon Sep 8 09:09:10 2025 by rpki-client