$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1232/bEAAH5aATzK8eqhZ-B9SgShK9jE.roa File: bEAAH5aATzK8eqhZ-B9SgShK9jE.roa (raw, json) Hash identifier: TytTcgxV6k1C6oJeXYis5QY2UElY5/5TFAMkioSUlDo= Subject key identifier: 6C:40:00:1F:96:80:4F:32:BC:7A:A8:59:F8:1F:52:81:28:4A:F6:31 Certificate issuer: /CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4 Certificate serial: 11 Authority key identifier: F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/bEAAH5aATzK8eqhZ-B9SgShK9jE.roa Signing time: Fri 22 Aug 2025 06:23:59 +0000 ROA not before: Fri 22 Aug 2025 06:23:59 +0000 ROA not after: Thu 20 Aug 2026 07:49:18 +0000 asID: 139137 IP address blocks: 103.61.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 10:05:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4 Validity Not Before: Aug 22 06:23:59 2025 GMT Not After : Aug 20 07:49:18 2026 GMT Subject: CN=6C40001F96804F32BC7AA859F81F5281284AF631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:05:2d:49:ed:79:f0:8d:59:46:16:39:af:24: ed:a9:3e:15:de:56:f3:b4:e2:53:da:19:7d:ef:6c: 93:e3:78:e4:56:9e:fa:d4:52:cb:e6:37:6b:3d:b5: 70:7a:eb:b5:7d:c7:c7:b6:d5:1d:c2:ca:db:b1:b8: 91:f0:37:21:a1:6f:bf:6e:31:13:eb:52:51:10:28: 6f:09:38:0d:35:18:8a:19:7c:d0:7d:50:e2:54:0b: eb:34:52:88:03:f0:80:42:e7:f0:e9:3a:e1:6a:c8: 53:30:52:cf:5f:5b:a9:dd:bb:6b:68:8e:74:64:ae: 06:87:43:31:47:97:df:13:60:37:1f:0b:6f:a4:a7: 29:3d:fc:03:a8:19:ba:ea:cd:02:1d:fa:4a:b1:4e: 90:69:6c:ee:b4:3e:0f:5f:5b:f4:1c:7f:29:3f:37: 3e:83:0f:43:33:92:0b:fa:0c:3b:be:3a:21:1a:d6: f9:ea:3c:82:62:d9:0e:ea:74:f8:16:b9:09:82:8f: cf:5e:d7:aa:8a:ba:27:d1:dd:18:36:6e:b1:79:2f: 18:6f:ae:ff:24:79:9a:42:09:5f:eb:92:b5:e3:b1: 83:01:46:1e:90:dd:ca:81:14:e8:93:0c:5c:74:d1: 85:c6:7d:4a:f1:3c:b4:2b:4c:d1:77:7c:28:27:c2: 31:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:40:00:1F:96:80:4F:32:BC:7A:A8:59:F8:1F:52:81:28:4A:F6:31 X509v3 Authority Key Identifier: keyid:F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/bEAAH5aATzK8eqhZ-B9SgShK9jE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.61.62.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:df:84:34:38:00:c9:83:68:ea:27:3c:62:58:17:95:c1:1b: a7:a5:3d:e6:f3:a5:d5:22:08:45:1b:9e:57:ae:82:e9:3a:9a: 51:37:e8:7d:27:45:a8:22:07:7b:61:48:99:47:94:f3:46:fb: 88:56:1c:b8:4c:82:76:92:bc:31:ce:1a:b7:a0:cf:bd:ab:83: b1:78:42:56:c6:7a:40:3c:cf:1f:eb:88:99:69:f0:1b:38:73: 43:dd:2f:82:21:a7:49:63:fd:9a:6a:6d:3f:2b:43:7e:2d:03: 65:31:6c:27:75:d6:cb:2e:7e:1c:1a:df:cb:ab:97:ea:86:66: 94:45:08:a6:8e:25:70:84:61:4b:e7:22:5b:09:fc:c4:21:a2: 74:c9:62:cd:b7:85:c4:a9:f8:06:f1:32:1a:55:b1:7e:45:9d: 87:1f:f6:ee:4f:bd:bc:03:c3:68:30:b8:fb:1d:b5:62:53:89: c9:70:df:7b:13:f5:b8:83:2d:64:1d:92:76:4c:80:6f:c0:bd: 54:1f:63:e9:46:21:0c:6f:6d:dd:54:16:51:0a:5d:c7:f2:f1: 23:bb:70:09:85:98:72:4e:01:16:4c:bb:5b:38:b8:10:b9:7a: c1:98:41:3e:f3:4e:48:72:22:98:d1:ed:b9:36:7e:27:e4:50: 94:d5:71:ed -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBETANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGMTk4 OUI0MDY5MDFBREY4ODEwQjlEQ0RDNEUwRkM5RTdFODVFRUI0MB4XDTI1MDgyMjA2 MjM1OVoXDTI2MDgyMDA3NDkxOFowMzExMC8GA1UEAxMoNkM0MDAwMUY5NjgwNEYz MkJDN0FBODU5RjgxRjUyODEyODRBRjYzMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKkFLUntefCNWUYWOa8k7ak+Fd5W87TiU9oZfe9sk+N45Fae+tRS y+Y3az21cHrrtX3Hx7bVHcLK27G4kfA3IaFvv24xE+tSURAobwk4DTUYihl80H1Q 4lQL6zRSiAPwgELn8Ok64WrIUzBSz19bqd27a2iOdGSuBodDMUeX3xNgNx8Lb6Sn KT38A6gZuurNAh36SrFOkGls7rQ+D19b9Bx/KT83PoMPQzOSC/oMO746IRrW+eo8 gmLZDup0+Ba5CYKPz17Xqoq6J9HdGDZusXkvGG+u/yR5mkIJX+uSteOxgwFGHpDd yoEU6JMMXHTRhcZ9SvE8tCtM0Xd8KCfCMSsCAwEAAaOCAfMwggHvMB0GA1UdDgQW BBRsQAAfloBPMrx6qFn4H1KBKEr2MTAfBgNVHSMEGDAWgBTxmJtAaQGt+IELnc3E 4PyefoXutDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xMjMy LzhaaWJRR2tCcmZpQkM1M054T0Q4bm42RjdyUS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOFppYlFHa0JyZmlCQzUzTnhPRDhubjZGN3JRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIzMi9iRUFBSDVhQVR6Szhl cWhaLUI5U2dTaEs5akUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZz0+MA0GCSqGSIb3DQEBCwUAA4IBAQA+34Q0OADJg2jqJzxiWBeVwRunpT3m 86XVIghFG55XroLpOppRN+h9J0WoIgd7YUiZR5TzRvuIVhy4TIJ2krwxzhq3oM+9 q4OxeEJWxnpAPM8f64iZafAbOHND3S+CIadJY/2aam0/K0N+LQNlMWwnddbLLn4c Gt/Lq5fqhmaURQimjiVwhGFL5yJbCfzEIaJ0yWLNt4XEqfgG8TIaVbF+RZ2HH/bu T728A8NoMLj7HbViU4nJcN97E/W4gy1kHZJ2TIBvwL1UH2PpRiEMb23dVBZRCl3H 8vEju3AJhZhyTgEWTLtbOLgQuXrBmEE+805IciKY0e25Nn4n5FCU1XHt -----END CERTIFICATE-----Generated at Mon Sep 8 09:07:37 2025 by rpki-client