$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1232/W7FNGZeU9H4i4T2BLs8CXODHjJQ.roa File: W7FNGZeU9H4i4T2BLs8CXODHjJQ.roa (raw, json) Hash identifier: 86UbbjFeTxp7AuSsBiVXg0jfjPHyGV/DSlvQ1avjwxo= Subject key identifier: 5B:B1:4D:19:97:94:F4:7E:22:E1:3D:81:2E:CF:02:5C:E0:C7:8C:94 Certificate issuer: /CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4 Certificate serial: 26 Authority key identifier: F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/W7FNGZeU9H4i4T2BLs8CXODHjJQ.roa Signing time: Fri 22 Aug 2025 06:27:16 +0000 ROA not before: Fri 22 Aug 2025 06:27:16 +0000 ROA not after: Thu 20 Aug 2026 07:49:18 +0000 asID: 139140 IP address blocks: 103.61.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 10:05:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4 Validity Not Before: Aug 22 06:27:16 2025 GMT Not After : Aug 20 07:49:18 2026 GMT Subject: CN=5BB14D199794F47E22E13D812ECF025CE0C78C94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:00:f0:f1:44:b3:83:8b:d5:05:67:d7:eb:3d: c9:cb:0f:7b:73:aa:17:6d:88:1e:9a:a8:6a:f8:1d: 2d:96:25:5d:16:ca:c9:00:cf:55:74:58:8b:88:ba: a1:2d:b0:5b:34:6b:db:5e:c5:0b:8e:c8:51:98:c3: 5b:9c:53:c9:23:a2:c5:cb:db:41:e6:c8:d4:0b:1f: 7b:fb:89:24:ff:61:b9:24:1b:3d:43:ca:13:62:35: b5:0c:73:27:5a:20:ca:fc:96:16:57:fb:46:2b:c8: 5d:7e:1b:86:79:f1:99:f3:a8:f3:0d:c3:00:56:0e: d7:79:3f:32:9a:78:27:e0:79:f2:ed:8d:8f:e3:3a: 07:a9:91:06:02:26:92:f0:00:08:3f:be:6d:9d:bf: 21:df:2a:98:3e:0b:aa:98:d2:af:89:df:17:f7:f2: b1:b1:b1:ad:bf:4e:e1:d7:e7:61:42:4a:b7:12:47: 35:c5:c7:10:fd:16:fe:66:df:10:bb:cd:4e:67:41: c1:03:a9:94:0a:cd:b4:c8:29:65:d5:ce:35:70:a8: 15:f7:e4:f8:c0:23:fe:47:f0:0b:6c:46:ca:ac:98: 09:89:d3:ad:f1:9e:6d:de:b4:3d:fa:b6:99:51:ad: 0f:f0:c0:76:9d:2f:b5:53:ff:8e:c6:25:89:cb:c3: 6a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B1:4D:19:97:94:F4:7E:22:E1:3D:81:2E:CF:02:5C:E0:C7:8C:94 X509v3 Authority Key Identifier: keyid:F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/W7FNGZeU9H4i4T2BLs8CXODHjJQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.61.60.0/24 Signature Algorithm: sha256WithRSAEncryption 36:a4:a3:2a:40:05:70:7d:79:47:e3:a4:b0:91:9d:f6:f1:b2: 3a:18:e9:c6:b5:95:5a:c6:92:54:fb:e2:24:aa:21:7d:a0:03: dc:ff:8d:4e:2e:59:59:3b:88:0a:31:c6:12:b0:b6:88:5b:74: 15:0b:a5:63:20:2f:c4:64:04:18:b2:78:d3:3f:40:18:cd:0e: 8b:2d:99:3e:63:20:a3:d6:e6:5a:98:5f:4a:cb:49:8f:09:ae: cb:ea:18:24:ee:4e:24:a1:31:1d:51:34:49:29:c8:fb:45:bf: 92:e2:3c:51:d4:ef:81:01:9c:da:6c:ff:8f:10:1d:01:4a:c0: d8:ee:58:9c:64:90:03:0f:1b:9c:26:33:7f:23:e1:5f:0f:63: 78:f4:20:6c:e3:88:bb:de:1f:c3:39:26:f7:6e:fc:a0:d4:15: 38:21:3a:a8:cb:47:60:11:d4:78:f4:1f:1e:8c:4d:6f:5a:fc: 9f:b4:42:49:b4:4e:28:bf:2c:b9:93:cb:d0:f7:eb:32:9f:05: fb:77:13:70:02:1b:13:4b:3f:17:30:30:1a:cd:0a:7d:4e:83: 21:91:95:5c:44:a8:6b:01:d3:d1:5c:67:e4:a7:51:e9:15:4b: 69:15:23:01:64:ca:2b:a2:b9:e5:60:9a:7b:c3:52:d6:39:df: 40:3d:f8:f4 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBJjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGMTk4 OUI0MDY5MDFBREY4ODEwQjlEQ0RDNEUwRkM5RTdFODVFRUI0MB4XDTI1MDgyMjA2 MjcxNloXDTI2MDgyMDA3NDkxOFowMzExMC8GA1UEAxMoNUJCMTREMTk5Nzk0RjQ3 RTIyRTEzRDgxMkVDRjAyNUNFMEM3OEM5NDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANcA8PFEs4OL1QVn1+s9ycsPe3OqF22IHpqoavgdLZYlXRbKyQDP VXRYi4i6oS2wWzRr217FC47IUZjDW5xTySOixcvbQebI1Asfe/uJJP9huSQbPUPK E2I1tQxzJ1ogyvyWFlf7RivIXX4bhnnxmfOo8w3DAFYO13k/Mpp4J+B58u2Nj+M6 B6mRBgImkvAACD++bZ2/Id8qmD4LqpjSr4nfF/fysbGxrb9O4dfnYUJKtxJHNcXH EP0W/mbfELvNTmdBwQOplArNtMgpZdXONXCoFffk+MAj/kfwC2xGyqyYCYnTrfGe bd60Pfq2mVGtD/DAdp0vtVP/jsYlicvDatUCAwEAAaOCAfMwggHvMB0GA1UdDgQW BBRbsU0Zl5T0fiLhPYEuzwJc4MeMlDAfBgNVHSMEGDAWgBTxmJtAaQGt+IELnc3E 4PyefoXutDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xMjMy LzhaaWJRR2tCcmZpQkM1M054T0Q4bm42RjdyUS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOFppYlFHa0JyZmlCQzUzTnhPRDhubjZGN3JRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIzMi9XN0ZOR1plVTlINGk0 VDJCTHM4Q1hPREhqSlEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZz08MA0GCSqGSIb3DQEBCwUAA4IBAQA2pKMqQAVwfXlH46SwkZ328bI6GOnG tZVaxpJU++IkqiF9oAPc/41OLllZO4gKMcYSsLaIW3QVC6VjIC/EZAQYsnjTP0AY zQ6LLZk+YyCj1uZamF9Ky0mPCa7L6hgk7k4koTEdUTRJKcj7Rb+S4jxR1O+BAZza bP+PEB0BSsDY7licZJADDxucJjN/I+FfD2N49CBs44i73h/DOSb3bvyg1BU4ITqo y0dgEdR49B8ejE1vWvyftEJJtE4ovyy5k8vQ9+synwX7dxNwAhsTSz8XMDAazQp9 ToMhkZVcRKhrAdPRXGfkp1HpFUtpFSMBZMorornlYJp7w1LWOd9APfj0 -----END CERTIFICATE-----Generated at Mon Sep 8 09:07:35 2025 by rpki-client