$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2682/mzEqRGt0VvtSsWPhPBXfjucZFo8.roa File: mzEqRGt0VvtSsWPhPBXfjucZFo8.roa (raw, json) Hash identifier: tTxxdHg09ks37JVOcdjBMNEqFSmbff56kqtenIT2bzQ= Subject key identifier: 9B:31:2A:44:6B:74:56:FB:52:B1:63:E1:3C:15:DF:8E:E7:19:16:8F Certificate issuer: /CN=F4729CAF435D698D27C7387914801EFDB8478B8B Certificate serial: 04 Authority key identifier: F4:72:9C:AF:43:5D:69:8D:27:C7:38:79:14:80:1E:FD:B8:47:8B:8B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9HKcr0NdaY0nxzh5FIAe_bhHi4s.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2682/mzEqRGt0VvtSsWPhPBXfjucZFo8.roa Signing time: Thu 28 Aug 2025 06:04:57 +0000 ROA not before: Thu 28 Aug 2025 06:04:57 +0000 ROA not after: Fri 28 Aug 2026 05:53:00 +0000 asID: 151252 IP address blocks: 103.109.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2682/9HKcr0NdaY0nxzh5FIAe_bhHi4s.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2682/9HKcr0NdaY0nxzh5FIAe_bhHi4s.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9HKcr0NdaY0nxzh5FIAe_bhHi4s.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 10:05:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F4729CAF435D698D27C7387914801EFDB8478B8B Validity Not Before: Aug 28 06:04:57 2025 GMT Not After : Aug 28 05:53:00 2026 GMT Subject: CN=9B312A446B7456FB52B163E13C15DF8EE719168F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:6a:14:31:c9:4c:49:21:94:a5:f5:3e:97:a7: 58:ab:5b:01:43:c4:6d:1f:d8:2f:0c:9a:c1:a2:be: 7a:1b:33:87:63:35:0e:d4:37:1c:9d:f9:ae:9a:70: 65:df:04:93:12:3c:34:63:2e:41:5f:4e:8a:66:df: 98:bb:28:51:b8:1d:11:69:9d:1a:bf:ee:da:5e:68: 5a:49:39:02:ab:6a:95:c9:3b:65:48:5e:c5:02:b1: 93:08:d9:ee:28:55:7f:f0:6e:13:a2:cf:f9:23:35: 91:46:d4:df:d9:03:87:17:a4:3e:0d:58:37:30:08: a8:a2:a8:84:38:7e:62:62:51:a4:ce:5d:21:6f:af: e9:63:a0:8a:b5:0b:cd:c5:fc:c9:eb:cd:4e:10:6c: 59:70:11:7d:a1:5e:19:4c:2b:88:99:59:d9:6f:2f: 9c:ba:56:17:96:a0:dd:ec:5a:a1:92:97:3d:6a:cf: da:42:97:ff:37:64:aa:26:ed:c4:1e:7d:68:61:10: 14:7c:7d:59:ac:94:e0:9e:84:b2:11:ea:3e:ac:ce: 4d:ad:4a:a8:91:7d:62:e0:df:a0:df:fd:0f:76:59: 3a:2b:26:ba:a3:4d:9c:d2:1a:25:ba:1f:c2:54:3e: ee:7a:cf:ea:8c:66:c4:b8:ac:5f:a8:85:5f:b6:b3: b5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:31:2A:44:6B:74:56:FB:52:B1:63:E1:3C:15:DF:8E:E7:19:16:8F X509v3 Authority Key Identifier: keyid:F4:72:9C:AF:43:5D:69:8D:27:C7:38:79:14:80:1E:FD:B8:47:8B:8B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2682/9HKcr0NdaY0nxzh5FIAe_bhHi4s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9HKcr0NdaY0nxzh5FIAe_bhHi4s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2682/mzEqRGt0VvtSsWPhPBXfjucZFo8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.109.88.0/22 Signature Algorithm: sha256WithRSAEncryption 83:69:a0:cd:71:a2:37:94:51:16:91:b0:94:db:bc:2d:ea:b5: fd:a1:87:13:1c:22:82:39:62:c9:3b:be:52:c9:22:20:aa:d7: 93:5f:03:44:ac:85:a0:6d:ca:63:84:c7:58:ce:61:fe:4a:e9: dc:9d:c1:7a:f6:7f:6b:ae:65:cf:bc:57:6f:66:69:65:29:c9: 90:52:31:61:3a:ee:79:71:e9:77:cb:9c:2e:da:83:45:ee:9d: 2f:fb:8d:82:7b:31:1c:51:80:fd:45:b6:a6:35:82:71:83:b4: 0a:c6:85:b3:52:6f:e4:dc:86:4f:61:0a:9d:21:96:84:2f:e2: 8b:85:02:9f:ed:57:8e:61:ca:67:68:fe:0a:bc:bc:b4:1f:00: d0:ce:2f:35:95:13:86:54:03:e6:4f:cb:56:59:09:c3:3c:23: 64:3e:b3:2c:4c:5a:73:21:9c:16:9d:61:a3:4c:97:2d:a3:de: 55:40:3b:e5:ac:40:bf:ed:9e:f3:60:c1:f1:6e:b8:93:7c:b6: 76:4e:4f:13:fe:a2:77:08:7a:32:f6:d6:a1:65:da:fd:16:9a: af:16:22:64:51:bc:11:e8:67:0f:bb:81:3a:d6:4c:eb:72:2e: f1:e3:7d:49:2d:e3:b0:c3:4c:b1:f1:8e:65:b7:7f:c1:d9:8b: 2b:87:6a:71 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGNDcy OUNBRjQzNUQ2OThEMjdDNzM4NzkxNDgwMUVGREI4NDc4QjhCMB4XDTI1MDgyODA2 MDQ1N1oXDTI2MDgyODA1NTMwMFowMzExMC8GA1UEAxMoOUIzMTJBNDQ2Qjc0NTZG QjUyQjE2M0UxM0MxNURGOEVFNzE5MTY4RjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOpqFDHJTEkhlKX1PpenWKtbAUPEbR/YLwyawaK+ehszh2M1DtQ3 HJ35rppwZd8EkxI8NGMuQV9OimbfmLsoUbgdEWmdGr/u2l5oWkk5Aqtqlck7ZUhe xQKxkwjZ7ihVf/BuE6LP+SM1kUbU39kDhxekPg1YNzAIqKKohDh+YmJRpM5dIW+v 6WOgirULzcX8yevNThBsWXARfaFeGUwriJlZ2W8vnLpWF5ag3exaoZKXPWrP2kKX /zdkqibtxB59aGEQFHx9WayU4J6EshHqPqzOTa1KqJF9YuDfoN/9D3ZZOismuqNN nNIaJbofwlQ+7nrP6oxmxLisX6iFX7aztZcCAwEAAaOCAfMwggHvMB0GA1UdDgQW BBSbMSpEa3RW+1KxY+E8Fd+O5xkWjzAfBgNVHSMEGDAWgBT0cpyvQ11pjSfHOHkU gB79uEeLizAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNjgy LzlIS2NyME5kYVkwbnh6aDVGSUFlX2JoSGk0cy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOUhLY3IwTmRhWTBueHpoNUZJQWVfYmhIaTRzLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY4Mi9tekVxUkd0MFZ2dFNz V1BoUEJYZmp1Y1pGbzgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ21YMA0GCSqGSIb3DQEBCwUAA4IBAQCDaaDNcaI3lFEWkbCU27wt6rX9oYcT HCKCOWLJO75SySIgqteTXwNErIWgbcpjhMdYzmH+SuncncF69n9rrmXPvFdvZmll KcmQUjFhOu55cel3y5wu2oNF7p0v+42CezEcUYD9RbamNYJxg7QKxoWzUm/k3IZP YQqdIZaEL+KLhQKf7VeOYcpnaP4KvLy0HwDQzi81lROGVAPmT8tWWQnDPCNkPrMs TFpzIZwWnWGjTJcto95VQDvlrEC/7Z7zYMHxbriTfLZ2Tk8T/qJ3CHoy9tahZdr9 FpqvFiJkUbwR6GcPu4E61kzrci7x431JLeOww0yx8Y5lt3/B2Ysrh2px -----END CERTIFICATE-----Generated at Mon Sep 8 09:13:27 2025 by rpki-client