$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2741/1_xVmznRbjgrARcOnrUzK3zkMkM.roa File: 1_xVmznRbjgrARcOnrUzK3zkMkM.roa (raw, json) Hash identifier: GCP9qK5uGloZHD8Mka7pysVMWzi2GGVFtT7E7LtKHac= Subject key identifier: D7:FC:55:9B:39:D1:6E:38:2B:01:17:0E:9E:B5:33:2B:7C:E4:32:43 Certificate issuer: /CN=FAD6B43C09D0490A0DF7F891DF9F63B520CF210F Certificate serial: 105D Authority key identifier: FA:D6:B4:3C:09:D0:49:0A:0D:F7:F8:91:DF:9F:63:B5:20:CF:21:0F Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-ta0PAnQSQoN9_iR359jtSDPIQ8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/1_xVmznRbjgrARcOnrUzK3zkMkM.roa Signing time: Mon 04 Aug 2025 13:04:27 +0000 ROA not before: Mon 04 Aug 2025 13:04:27 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 41717 IP address blocks: 103.116.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/-ta0PAnQSQoN9_iR359jtSDPIQ8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/-ta0PAnQSQoN9_iR359jtSDPIQ8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-ta0PAnQSQoN9_iR359jtSDPIQ8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:36:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4189 (0x105d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FAD6B43C09D0490A0DF7F891DF9F63B520CF210F Validity Not Before: Aug 4 13:04:27 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=D7FC559B39D16E382B01170E9EB5332B7CE43243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:91:de:82:fc:ac:d6:ac:c3:47:0a:d8:75:0a: 74:f9:41:87:da:be:3f:41:a2:7d:8a:48:a6:2a:93: a7:e5:48:f4:ba:91:90:51:a4:9e:fd:51:d0:4e:69: e3:0b:27:79:94:1f:27:c8:e6:df:36:d1:1a:45:e8: ab:37:26:d9:69:1f:da:cf:34:64:21:62:f4:e9:6d: 3d:eb:fc:27:a3:e1:54:95:38:ac:d1:fb:70:92:62: 40:4b:8f:99:30:dc:5f:e8:79:ab:dc:18:bc:f1:0b: cc:6a:0c:71:c5:95:df:be:1d:de:42:9d:c5:3e:9b: 96:47:91:c5:1e:06:b6:8b:ae:c5:13:6e:64:06:c7: 29:b8:9d:f1:2e:fa:7c:ff:1b:37:74:f2:cb:58:38: fb:15:db:ba:66:ec:99:23:da:62:04:76:82:b2:c1: cc:b4:c1:a3:24:57:44:db:4c:d6:ea:12:62:e3:c5: 94:5c:24:6c:e3:42:bd:6e:1b:c5:5c:dd:5d:d6:a6: 5e:c1:b5:ac:b4:33:22:3c:f9:d0:e5:50:25:a6:c7: 57:38:ea:6f:9b:fc:ac:8e:dc:5a:e8:85:ee:10:a8: 33:7e:9e:14:79:21:1c:82:f1:22:94:f8:8b:63:2a: f6:62:0f:47:31:2e:a3:55:e4:c3:1a:a0:ff:f7:40: 8f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:FC:55:9B:39:D1:6E:38:2B:01:17:0E:9E:B5:33:2B:7C:E4:32:43 X509v3 Authority Key Identifier: keyid:FA:D6:B4:3C:09:D0:49:0A:0D:F7:F8:91:DF:9F:63:B5:20:CF:21:0F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/-ta0PAnQSQoN9_iR359jtSDPIQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-ta0PAnQSQoN9_iR359jtSDPIQ8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/1_xVmznRbjgrARcOnrUzK3zkMkM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.116.149.0/24 Signature Algorithm: sha256WithRSAEncryption 63:7e:50:1e:ca:87:41:fa:8d:8d:75:61:69:ae:4b:f1:00:cf: f4:b7:6a:82:70:ce:9d:fa:a7:59:70:30:41:ca:cd:0c:36:4b: 82:a2:bd:2b:3f:a5:4f:70:bf:8c:8b:da:0a:ba:34:29:89:8a: 4c:69:d6:1f:37:48:55:87:62:66:8e:56:ee:b3:de:35:22:91: 0f:c5:48:b6:b1:2e:ca:3a:a7:4c:0f:8e:cd:04:71:41:b7:b1: bb:b1:c3:08:c0:5b:c9:17:8d:c3:50:b2:63:f7:29:87:b7:d1: d5:07:68:c4:a8:59:69:0b:ec:04:7d:56:ee:70:0f:b6:68:d7: e3:00:a4:0d:b0:6d:3f:72:eb:79:79:32:38:b2:77:36:05:cf: 65:b1:67:9a:f4:90:fd:54:12:09:a7:da:0c:19:ab:a8:a5:17: 2e:24:04:49:bf:a8:0b:db:24:e9:f0:c6:b7:b8:51:8e:05:53: 86:97:82:35:a6:f7:cc:db:7a:37:c0:e6:6c:67:f5:b9:ca:a1: 87:cb:05:0e:87:bb:8b:81:05:99:90:6a:8c:08:9f:05:4d:93: a2:0f:99:63:21:d3:b3:d3:8c:0c:75:31:36:40:8a:6c:43:c0: 45:5e:80:b0:5b:75:af:b1:33:c4:56:0e:89:8f:d5:5b:fb:ca: ab:28:9d:32 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICEF0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkFE NkI0M0MwOUQwNDkwQTBERjdGODkxREY5RjYzQjUyMENGMjEwRjAeFw0yNTA4MDQx MzA0MjdaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEQ3RkM1NTlCMzlEMTZF MzgyQjAxMTcwRTlFQjUzMzJCN0NFNDMyNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCskd6C/KzWrMNHCth1CnT5QYfavj9Bon2KSKYqk6flSPS6kZBR pJ79UdBOaeMLJ3mUHyfI5t820RpF6Ks3JtlpH9rPNGQhYvTpbT3r/Cej4VSVOKzR +3CSYkBLj5kw3F/oeavcGLzxC8xqDHHFld++Hd5CncU+m5ZHkcUeBraLrsUTbmQG xym4nfEu+nz/Gzd08stYOPsV27pm7Jkj2mIEdoKywcy0waMkV0TbTNbqEmLjxZRc JGzjQr1uG8Vc3V3Wpl7Btay0MyI8+dDlUCWmx1c46m+b/KyO3Frohe4QqDN+nhR5 IRyC8SKU+ItjKvZiD0cxLqNV5MMaoP/3QI83AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU1/xVmznRbjgrARcOnrUzK3zkMkMwHwYDVR0jBBgwFoAU+ta0PAnQSQoN9/iR 359jtSDPIQ8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjc0 MS8tdGEwUEFuUVNRb045X2lSMzU5anRTRFBJUTguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLy10YTBQQW5RU1FvTjlfaVIzNTlqdFNEUElROC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3NDEvMV94Vm16blJiamdy QVJjT25yVXpLM3prTWtNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGd0lTANBgkqhkiG9w0BAQsFAAOCAQEAY35QHsqHQfqNjXVhaa5L8QDP9Ldq gnDOnfqnWXAwQcrNDDZLgqK9Kz+lT3C/jIvaCro0KYmKTGnWHzdIVYdiZo5W7rPe NSKRD8VItrEuyjqnTA+OzQRxQbexu7HDCMBbyReNw1CyY/cph7fR1QdoxKhZaQvs BH1W7nAPtmjX4wCkDbBtP3LreXkyOLJ3NgXPZbFnmvSQ/VQSCafaDBmrqKUXLiQE Sb+oC9sk6fDGt7hRjgVThpeCNab3zNt6N8DmbGf1ucqhh8sFDoe7i4EFmZBqjAif BU2Tog+ZYyHTs9OMDHUxNkCKbEPARV6AsFt1r7EzxFYOiY/VW/vKqyidMg== -----END CERTIFICATE-----Generated at Sun Oct 26 00:06:33 2025 by rpki-client