$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2578/gALoy-WEClG9nOagRiQccU0WnpE.roa File: gALoy-WEClG9nOagRiQccU0WnpE.roa (raw, json) Hash identifier: Gmv5mtUHklFp3j+m8mMU5eiB9lpckT1KXPsOboMEr50= Subject key identifier: 80:02:E8:CB:E5:84:0A:51:BD:9C:E6:A0:46:24:1C:71:4D:16:9E:91 Certificate issuer: /CN=7CF44C06D5EA7DF0CBD4F68508F14E84DA08B752 Certificate serial: 17CD Authority key identifier: 7C:F4:4C:06:D5:EA:7D:F0:CB:D4:F6:85:08:F1:4E:84:DA:08:B7:52 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fPRMBtXqffDL1PaFCPFOhNoIt1I.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2578/gALoy-WEClG9nOagRiQccU0WnpE.roa Signing time: Tue 05 Aug 2025 13:45:43 +0000 ROA not before: Tue 05 Aug 2025 13:45:43 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 18186 IP address blocks: 103.99.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2578/fPRMBtXqffDL1PaFCPFOhNoIt1I.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2578/fPRMBtXqffDL1PaFCPFOhNoIt1I.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fPRMBtXqffDL1PaFCPFOhNoIt1I.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Sep 2025 12:05:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6093 (0x17cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CF44C06D5EA7DF0CBD4F68508F14E84DA08B752 Validity Not Before: Aug 5 13:45:43 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=8002E8CBE5840A51BD9CE6A046241C714D169E91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6d:cb:22:d3:d4:ef:41:d5:aa:d1:3b:87:8d: 27:54:df:0b:6c:4f:9b:7c:a9:d9:05:96:36:af:c4: e4:7e:a0:9e:15:1c:0d:58:88:fd:2f:25:d9:75:1a: fe:9b:4f:95:d9:dd:36:f7:1a:9a:99:c0:ee:a7:bf: 62:52:7a:b3:58:ad:c6:40:bd:b0:87:5e:6e:55:2a: 32:e5:3a:af:d9:88:76:43:7a:ea:35:b8:39:fe:cc: f3:d9:8f:79:8e:d7:2d:00:55:00:58:b2:f4:16:43: 86:f3:0a:1b:6d:ed:4d:06:eb:f5:c6:74:50:00:11: 1f:3e:33:49:e3:67:9d:da:55:f8:bc:ae:89:92:1e: 56:94:e2:e7:f4:13:56:c6:a5:90:77:d8:fa:a3:a7: 60:81:24:60:ae:b0:74:4b:9a:34:27:92:3c:79:b2: 03:2d:d9:85:68:3c:0f:63:6e:f8:b2:db:4c:df:e8: 75:4a:50:93:16:cd:e5:a9:9d:57:ed:b7:d7:2f:4e: ac:3f:9a:aa:84:fa:8d:5d:83:16:98:32:b9:09:b3: 7a:77:ed:fc:5f:33:8d:9b:59:91:16:26:58:3b:20: 91:30:b4:10:e2:4e:f7:65:90:b8:4f:00:0d:70:04: dd:7d:2c:de:c1:e5:e0:df:b0:8c:53:97:ea:58:a4: 1d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:02:E8:CB:E5:84:0A:51:BD:9C:E6:A0:46:24:1C:71:4D:16:9E:91 X509v3 Authority Key Identifier: keyid:7C:F4:4C:06:D5:EA:7D:F0:CB:D4:F6:85:08:F1:4E:84:DA:08:B7:52 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2578/fPRMBtXqffDL1PaFCPFOhNoIt1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fPRMBtXqffDL1PaFCPFOhNoIt1I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2578/gALoy-WEClG9nOagRiQccU0WnpE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.99.76.0/24 Signature Algorithm: sha256WithRSAEncryption 04:59:5b:2f:00:fc:a8:ec:05:e2:45:8a:eb:2b:8b:e2:79:50: c7:08:5d:2d:fc:55:d7:ad:71:b9:8c:89:cd:b9:09:8e:92:6f: 12:67:9a:c0:6a:c7:73:6f:ef:62:ca:09:03:14:a6:0f:67:3e: 75:83:dc:5d:82:4c:3f:5a:32:e6:76:96:7e:69:61:86:a0:af: 17:a2:ce:9b:56:c1:01:4c:c1:c6:01:d4:89:9a:26:4a:0b:73: 2b:b2:98:0b:a1:cd:9d:8b:4f:06:6f:8b:61:eb:96:a7:2e:94: bc:ea:e0:0a:24:d3:09:e8:bd:95:59:ed:cf:70:ed:30:64:52: 26:4d:00:09:33:c0:7c:45:ba:10:30:d2:d8:7d:d5:5d:55:4e: 5d:2b:42:50:cf:81:a4:db:25:ac:e2:4f:69:29:5e:ee:73:27: b8:22:0f:10:7f:e7:9d:7e:01:10:b5:8f:05:5a:57:93:04:1f: b6:ff:bf:4b:16:f2:1f:71:d4:19:54:f5:b9:0a:7b:c9:fa:d6: 0b:84:a5:c8:2d:c7:5f:93:22:85:93:bf:72:ef:5e:e6:36:6c: 4f:82:b8:29:93:e9:76:b9:e3:7e:17:7b:3d:80:6a:fb:d5:1a: c0:e4:e3:13:59:db:3a:9b:b0:cf:46:a2:ff:d0:61:fe:97:40: 6d:0d:2b:e6 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICF80wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0NG NDRDMDZENUVBN0RGMENCRDRGNjg1MDhGMTRFODREQTA4Qjc1MjAeFw0yNTA4MDUx MzQ1NDNaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDgwMDJFOENCRTU4NDBB NTFCRDlDRTZBMDQ2MjQxQzcxNEQxNjlFOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPbcsi09TvQdWq0TuHjSdU3wtsT5t8qdkFljavxOR+oJ4VHA1Y iP0vJdl1Gv6bT5XZ3Tb3GpqZwO6nv2JSerNYrcZAvbCHXm5VKjLlOq/ZiHZDeuo1 uDn+zPPZj3mO1y0AVQBYsvQWQ4bzChtt7U0G6/XGdFAAER8+M0njZ53aVfi8romS HlaU4uf0E1bGpZB32Pqjp2CBJGCusHRLmjQnkjx5sgMt2YVoPA9jbviy20zf6HVK UJMWzeWpnVftt9cvTqw/mqqE+o1dgxaYMrkJs3p37fxfM42bWZEWJlg7IJEwtBDi TvdlkLhPAA1wBN19LN7B5eDfsIxTl+pYpB3lAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUgALoy+WEClG9nOagRiQccU0WnpEwHwYDVR0jBBgwFoAUfPRMBtXqffDL1PaF CPFOhNoIt1IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjU3 OC9mUFJNQnRYcWZmREwxUGFGQ1BGT2hOb0l0MUkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2ZQUk1CdFhxZmZETDFQYUZDUEZPaE5vSXQxSS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI1NzgvZ0FMb3ktV0VDbEc5 bk9hZ1JpUWNjVTBXbnBFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGdjTDANBgkqhkiG9w0BAQsFAAOCAQEABFlbLwD8qOwF4kWK6yuL4nlQxwhd LfxV161xuYyJzbkJjpJvEmeawGrHc2/vYsoJAxSmD2c+dYPcXYJMP1oy5naWfmlh hqCvF6LOm1bBAUzBxgHUiZomSgtzK7KYC6HNnYtPBm+LYeuWpy6UvOrgCiTTCei9 lVntz3DtMGRSJk0ACTPAfEW6EDDS2H3VXVVOXStCUM+BpNslrOJPaSle7nMnuCIP EH/nnX4BELWPBVpXkwQftv+/SxbyH3HUGVT1uQp7yfrWC4SlyC3HX5MihZO/cu9e 5jZsT4K4KZPpdrnjfhd7PYBq+9UawOTjE1nbOpuwz0ai/9Bh/pdAbQ0r5g== -----END CERTIFICATE-----Generated at Fri Sep 5 08:46:30 2025 by rpki-client