$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/BRCN_L4MnDD87McAMr6V-E_ueCU.roa File: BRCN_L4MnDD87McAMr6V-E_ueCU.roa (raw, json) Hash identifier: DDB+V0eh42p7/RqxbjZ1eEMauER9NPumH6ttwc0sLFQ= Subject key identifier: 05:10:8D:FC:BE:0C:9C:30:FC:EC:C7:00:32:BE:95:F8:4F:EE:78:25 Certificate issuer: /CN=4911CB6D544B3B6905532964C8E1A472BDCBC267 Certificate serial: 24E3 Authority key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/BRCN_L4MnDD87McAMr6V-E_ueCU.roa Signing time: Sat 13 Sep 2025 03:08:48 +0000 ROA not before: Sat 13 Sep 2025 03:08:48 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 61317 IP address blocks: 103.244.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 Oct 2025 04:07:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9443 (0x24e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267 Validity Not Before: Sep 13 03:08:48 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=05108DFCBE0C9C30FCECC70032BE95F84FEE7825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0b:6e:41:fc:b5:b7:47:76:e3:cf:5f:ae:ae: 89:62:ff:ae:bc:35:9d:6d:f6:f1:8f:e6:5f:d9:86: ad:cd:8b:70:ae:2f:69:9a:50:c7:64:04:ce:b8:eb: 15:9a:c6:31:34:dc:2f:db:80:1e:c1:d0:25:54:33: 33:94:06:67:eb:b4:24:f8:a6:a2:0e:dc:87:a8:b5: 71:14:e6:f6:ca:fc:fe:c3:65:ea:82:40:e5:ed:fd: 35:74:0b:6c:19:22:42:58:d5:a7:01:2a:42:1a:81: 4a:74:0f:d1:3d:45:03:cb:42:1a:d7:8e:00:6e:22: 57:b4:f9:03:68:bc:70:fe:6b:e1:11:76:bf:d0:36: 5a:5e:c1:21:35:22:2f:76:94:ef:d1:79:f9:a5:f9: 44:b2:da:80:00:38:fd:8a:bf:f8:6d:2c:9f:99:89: 56:df:5a:ec:6c:82:eb:d3:64:af:8b:75:12:5c:fc: 22:6b:57:5a:56:55:16:68:a1:3e:40:06:a1:76:5d: b1:c5:51:38:e0:f9:b7:fd:46:4b:98:5d:0c:f3:19: 48:07:e3:29:52:99:31:08:32:58:3a:50:68:15:82: 22:e5:14:01:81:cb:6f:4b:13:e7:e4:19:1e:a1:ae: f5:db:d5:05:25:dd:4a:6f:b6:1b:2f:c3:fc:0a:25: 96:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:10:8D:FC:BE:0C:9C:30:FC:EC:C7:00:32:BE:95:F8:4F:EE:78:25 X509v3 Authority Key Identifier: keyid:49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/BRCN_L4MnDD87McAMr6V-E_ueCU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.244.116.0/22 Signature Algorithm: sha256WithRSAEncryption 17:ff:6d:b5:56:4e:9b:07:15:e6:93:a3:33:8c:99:bd:6b:7f: d2:d9:68:62:81:e2:8d:be:72:00:f0:2d:44:50:e1:31:7b:1a: 44:a0:a0:e9:46:95:42:e8:8d:33:21:2b:76:e1:3e:54:32:63: 4f:c2:41:46:a5:88:0f:79:46:52:65:0f:ca:b8:ce:0e:1c:d0: 8b:b1:d6:4d:57:d0:ad:2f:69:de:0a:c1:c8:30:e8:4b:79:82: 2c:ab:d6:0f:c8:52:5f:b0:08:ed:6c:69:aa:72:3d:79:dd:24: 22:bb:2b:ce:04:17:0f:4b:bd:0d:f4:bf:6f:42:e7:58:35:1e: 2a:e8:20:4c:b8:f4:79:10:91:99:3c:6e:08:71:e1:c6:2b:75: 89:84:71:25:8a:e3:79:9e:9f:a5:d3:56:6c:2c:f1:a2:b3:1f: cb:8c:09:33:d9:d6:7f:6a:46:e9:ca:17:52:a7:7f:fe:ed:c3: c1:24:b6:9f:f2:0b:70:45:de:6e:eb:3f:78:8f:31:b6:61:51: 69:15:8e:6a:f2:b1:4d:8e:3f:3c:d6:48:df:64:52:e3:63:c5: 68:f0:ea:97:39:d4:aa:65:71:d0:36:d7:92:f2:aa:4a:04:f2: 91:0d:77:28:d3:90:08:29:15:bf:a4:9b:c0:95:08:14:4e:69: ad:34:c6:69 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICJOMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDkx MUNCNkQ1NDRCM0I2OTA1NTMyOTY0QzhFMUE0NzJCRENCQzI2NzAeFw0yNTA5MTMw MzA4NDhaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDA1MTA4REZDQkUwQzlD MzBGQ0VDQzcwMDMyQkU5NUY4NEZFRTc4MjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIC25B/LW3R3bjz1+uroli/668NZ1t9vGP5l/Zhq3Ni3CuL2ma UMdkBM646xWaxjE03C/bgB7B0CVUMzOUBmfrtCT4pqIO3IeotXEU5vbK/P7DZeqC QOXt/TV0C2wZIkJY1acBKkIagUp0D9E9RQPLQhrXjgBuIle0+QNovHD+a+ERdr/Q NlpewSE1Ii92lO/Refml+USy2oAAOP2Kv/htLJ+ZiVbfWuxsguvTZK+LdRJc/CJr V1pWVRZooT5ABqF2XbHFUTjg+bf9RkuYXQzzGUgH4ylSmTEIMlg6UGgVgiLlFAGB y29LE+fkGR6hrvXb1QUl3Upvthsvw/wKJZbnAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUBRCN/L4MnDD87McAMr6V+E/ueCUwHwYDVR0jBBgwFoAUSRHLbVRLO2kFUylk yOGkcr3LwmcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTQx MS9TUkhMYlZSTE8ya0ZVeWxreU9Ha2NyM0x3bWMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NSSExiVlJMTzJrRlV5bGt5T0drY3IzTHdtYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE0MTEvQlJDTl9MNE1uREQ4 N01jQU1yNlYtRV91ZUNVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmf0dDANBgkqhkiG9w0BAQsFAAOCAQEAF/9ttVZOmwcV5pOjM4yZvWt/0tlo YoHijb5yAPAtRFDhMXsaRKCg6UaVQuiNMyErduE+VDJjT8JBRqWID3lGUmUPyrjO DhzQi7HWTVfQrS9p3grByDDoS3mCLKvWD8hSX7AI7WxpqnI9ed0kIrsrzgQXD0u9 DfS/b0LnWDUeKuggTLj0eRCRmTxuCHHhxit1iYRxJYrjeZ6fpdNWbCzxorMfy4wJ M9nWf2pG6coXUqd//u3DwSS2n/ILcEXebus/eI8xtmFRaRWOavKxTY4/PNZI32RS 42PFaPDqlznUqmVx0DbXkvKqSgTykQ13KNOQCCkVv6SbwJUIFE5prTTGaQ== -----END CERTIFICATE-----Generated at Thu Oct 9 03:45:44 2025 by rpki-client