$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/QN4SStdxiyHsm3cXbHBOKsdo89A.roa File: QN4SStdxiyHsm3cXbHBOKsdo89A.roa (raw, json) Hash identifier: 0XomjnXUTcnvYBeABG8yy1W+UI5UedFeSWuh1nDT7mM= Subject key identifier: 40:DE:12:4A:D7:71:8B:21:EC:9B:77:17:6C:70:4E:2A:C7:68:F3:D0 Certificate issuer: /CN=4911CB6D544B3B6905532964C8E1A472BDCBC267 Certificate serial: 24F0 Authority key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/QN4SStdxiyHsm3cXbHBOKsdo89A.roa Signing time: Sat 13 Sep 2025 03:08:51 +0000 ROA not before: Sat 13 Sep 2025 03:08:51 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 209242 IP address blocks: 103.244.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Sep 2025 01:35:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9456 (0x24f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267 Validity Not Before: Sep 13 03:08:51 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=40DE124AD7718B21EC9B77176C704E2AC768F3D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f3:3e:90:23:b3:3b:a8:38:87:46:1e:07:01: 20:e2:ca:bf:b5:68:91:88:d5:52:8d:1a:f5:77:b5: b2:bf:cf:ac:1a:7e:e8:6b:ba:bd:fc:a8:80:2d:24: e5:e5:7a:a6:2c:cd:d8:11:6c:ea:a6:c4:78:fc:61: d8:b3:7c:15:ee:cb:c9:5e:93:24:d7:1f:22:71:ea: b5:2e:56:28:57:a1:64:f5:68:c5:a9:06:b1:c8:3a: 86:1f:26:14:11:47:09:05:ce:3b:a5:ef:6b:2f:a1: c5:71:d0:32:20:db:29:3b:aa:6d:00:5e:d2:cc:ab: e2:39:fc:f7:77:b5:d9:75:74:9d:5c:f1:a7:38:39: b8:31:d7:8d:a2:36:ee:11:0e:e6:30:14:ca:81:0a: d3:b2:d5:f0:dc:72:4b:dc:79:86:19:f8:63:4e:9e: 3a:01:5d:bb:d4:c8:60:4a:89:e5:21:ab:b9:23:7c: c9:cf:8a:01:a3:bd:8f:d9:a7:a8:3f:c3:dd:8d:7e: ba:3f:4d:77:8f:a3:80:ae:7f:ce:c9:b0:0f:7b:ec: a5:83:df:7d:40:cb:e3:c2:b3:13:4a:15:d1:71:31: 73:52:66:e8:80:a6:e5:ef:51:2c:20:a8:8d:58:c0: ed:22:41:da:12:52:c2:35:a3:d4:02:2c:1b:3a:ac: 78:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:DE:12:4A:D7:71:8B:21:EC:9B:77:17:6C:70:4E:2A:C7:68:F3:D0 X509v3 Authority Key Identifier: keyid:49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/QN4SStdxiyHsm3cXbHBOKsdo89A.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.244.116.0/22 Signature Algorithm: sha256WithRSAEncryption bb:00:4a:0b:64:66:90:d0:a6:8a:53:0a:ea:e6:20:b2:81:25: 3e:2e:db:7e:b0:cf:59:f0:d3:f5:36:1b:f2:67:00:b2:78:ee: ce:d1:43:e2:6d:4a:ea:f2:b7:43:2d:9a:96:23:51:ba:2c:05: 7e:b9:74:e0:ac:b7:c1:16:27:51:1e:bc:f0:0c:23:c8:58:39: 4b:ac:8d:d5:8d:e5:37:12:7d:4f:23:d4:d3:24:84:89:82:52: a5:a9:7b:02:30:84:f4:4e:48:ff:8d:a0:8b:71:eb:03:fe:d1: 88:5a:6b:a5:17:62:dc:d1:e1:86:38:5c:6d:e4:01:70:3f:04: 9d:81:e8:92:4a:ef:a7:00:6f:6f:d0:aa:86:15:23:5f:1c:9c: 9e:8c:2f:30:c6:b6:4e:7b:55:4e:e8:8a:57:55:51:84:c8:81: 94:53:d6:21:82:1f:20:63:f1:97:f3:9f:d0:b0:eb:38:10:d5: 93:3f:20:be:f0:a2:53:8e:6e:2b:55:55:ff:84:5e:bd:84:d3: 65:f0:08:b9:4b:fa:06:7f:ac:08:07:20:77:7c:08:be:06:b3: 24:ee:88:f8:09:79:15:38:8a:7c:bb:d6:8c:6c:f2:47:d2:e3: 22:81:bd:bb:a9:df:6e:a9:69:7d:85:28:4e:78:4a:86:93:8b: 9c:1f:b7:cb -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICJPAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDkx MUNCNkQ1NDRCM0I2OTA1NTMyOTY0QzhFMUE0NzJCRENCQzI2NzAeFw0yNTA5MTMw MzA4NTFaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDQwREUxMjRBRDc3MThC MjFFQzlCNzcxNzZDNzA0RTJBQzc2OEYzRDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC08z6QI7M7qDiHRh4HASDiyr+1aJGI1VKNGvV3tbK/z6wafuhr ur38qIAtJOXleqYszdgRbOqmxHj8YdizfBXuy8lekyTXHyJx6rUuVihXoWT1aMWp BrHIOoYfJhQRRwkFzjul72svocVx0DIg2yk7qm0AXtLMq+I5/Pd3tdl1dJ1c8ac4 Obgx142iNu4RDuYwFMqBCtOy1fDcckvceYYZ+GNOnjoBXbvUyGBKieUhq7kjfMnP igGjvY/Zp6g/w92Nfro/TXePo4Cuf87JsA977KWD331Ay+PCsxNKFdFxMXNSZuiA puXvUSwgqI1YwO0iQdoSUsI1o9QCLBs6rHhHAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUQN4SStdxiyHsm3cXbHBOKsdo89AwHwYDVR0jBBgwFoAUSRHLbVRLO2kFUylk yOGkcr3LwmcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTQx MS9TUkhMYlZSTE8ya0ZVeWxreU9Ha2NyM0x3bWMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NSSExiVlJMTzJrRlV5bGt5T0drY3IzTHdtYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE0MTEvUU40U1N0ZHhpeUhz bTNjWGJIQk9Lc2RvODlBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmf0dDANBgkqhkiG9w0BAQsFAAOCAQEAuwBKC2RmkNCmilMK6uYgsoElPi7b frDPWfDT9TYb8mcAsnjuztFD4m1K6vK3Qy2aliNRuiwFfrl04Ky3wRYnUR688Awj yFg5S6yN1Y3lNxJ9TyPU0ySEiYJSpal7AjCE9E5I/42gi3HrA/7RiFprpRdi3NHh hjhcbeQBcD8EnYHokkrvpwBvb9CqhhUjXxycnowvMMa2TntVTuiKV1VRhMiBlFPW IYIfIGPxl/Of0LDrOBDVkz8gvvCiU45uK1VV/4RevYTTZfAIuUv6Bn+sCAcgd3wI vgazJO6I+Al5FTiKfLvWjGzyR9LjIoG9u6nfbqlpfYUoTnhKhpOLnB+3yw== -----END CERTIFICATE-----Generated at Wed Sep 17 23:28:29 2025 by rpki-client