$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2741/Cni4ivS0aTSHai9yUx7gJbz5jK8.roa File: Cni4ivS0aTSHai9yUx7gJbz5jK8.roa (raw, json) Hash identifier: 84n7AGw6yl+gQsNwUYQ53IvU2VCFXFgTwWVhGMKyhIk= Subject key identifier: 0A:78:B8:8A:F4:B4:69:34:87:6A:2F:72:53:1E:E0:25:BC:F9:8C:AF Certificate issuer: /CN=FAD6B43C09D0490A0DF7F891DF9F63B520CF210F Certificate serial: 1123 Authority key identifier: FA:D6:B4:3C:09:D0:49:0A:0D:F7:F8:91:DF:9F:63:B5:20:CF:21:0F Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-ta0PAnQSQoN9_iR359jtSDPIQ8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/Cni4ivS0aTSHai9yUx7gJbz5jK8.roa Signing time: Fri 12 Sep 2025 04:45:26 +0000 ROA not before: Fri 12 Sep 2025 04:45:26 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 140224 IP address blocks: 103.116.151.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/-ta0PAnQSQoN9_iR359jtSDPIQ8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/-ta0PAnQSQoN9_iR359jtSDPIQ8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-ta0PAnQSQoN9_iR359jtSDPIQ8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Oct 2025 18:36:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4387 (0x1123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FAD6B43C09D0490A0DF7F891DF9F63B520CF210F Validity Not Before: Sep 12 04:45:26 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=0A78B88AF4B46934876A2F72531EE025BCF98CAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ef:cb:da:d1:81:06:f2:ef:1e:93:39:a9:4c: bd:4a:64:1d:0c:cf:c3:1b:77:7b:c5:2c:ee:ed:4d: 33:f4:b2:75:69:a9:f3:4e:b6:8f:2b:93:02:f5:9a: 73:d4:6d:4a:00:5c:0c:d2:bf:f2:c7:4e:66:3a:a3: 23:a8:b9:41:0a:90:f1:1a:12:38:87:89:47:80:9d: 97:9b:a6:0f:e7:c5:28:62:81:6c:91:97:3b:43:45: 4d:5f:63:9c:2a:fa:96:5d:a3:5a:0b:4c:8e:c0:39: 7d:71:d9:e4:ae:59:c1:9e:c1:86:2c:ac:d2:3f:ff: 01:52:3f:38:5e:e8:01:55:7d:47:22:47:8c:91:cc: 6b:53:48:2d:72:4b:29:b1:b2:60:fe:f5:bb:11:19: 99:58:0f:10:a6:86:5d:fc:2a:1f:49:1c:44:11:19: e4:95:6e:fc:66:11:de:29:75:ae:8b:0e:3d:c1:77: e4:8b:a5:86:81:41:52:eb:08:46:01:89:09:8d:db: 03:fa:86:cc:e5:b8:e3:93:f0:21:a5:23:bf:7d:df: b9:ce:c5:a8:ee:7a:ba:8c:4a:28:e2:8f:37:e6:7c: e5:05:b4:b5:bc:97:53:1a:29:7f:aa:85:91:51:c1: 83:56:03:78:c9:86:6a:3b:00:b7:0c:81:84:6c:ff: 8f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:78:B8:8A:F4:B4:69:34:87:6A:2F:72:53:1E:E0:25:BC:F9:8C:AF X509v3 Authority Key Identifier: keyid:FA:D6:B4:3C:09:D0:49:0A:0D:F7:F8:91:DF:9F:63:B5:20:CF:21:0F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/-ta0PAnQSQoN9_iR359jtSDPIQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-ta0PAnQSQoN9_iR359jtSDPIQ8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/Cni4ivS0aTSHai9yUx7gJbz5jK8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.116.151.0/24 Signature Algorithm: sha256WithRSAEncryption 71:1c:b5:fd:fd:c2:0c:7b:71:ae:8f:54:25:a8:c1:a6:55:ef: 4f:83:f0:33:07:ae:11:cb:6f:35:e7:ba:ef:61:d4:a0:c7:38: a5:46:b6:cf:d0:ba:6f:2e:fd:65:38:75:45:ff:cd:8f:b5:55: da:f9:52:6a:a0:34:1f:39:27:68:e6:a2:0b:c3:c6:a1:a5:da: d6:84:29:c0:a9:aa:18:13:55:06:ef:e5:9b:92:82:d2:51:17: 06:a0:25:1f:42:1d:9c:d1:77:22:ae:20:dc:63:61:20:4e:3a: 3e:48:66:07:ea:37:21:2a:aa:08:08:b7:3b:38:c6:7e:d1:c7: 40:53:26:67:4c:d9:18:7a:8a:38:aa:a5:4d:ec:36:97:05:47: bc:c6:f2:51:7a:21:84:52:a4:0c:cc:5f:cc:03:5d:6a:dc:d7: 28:c2:59:79:64:84:fb:eb:80:45:21:28:f1:6e:dd:9d:9a:c6: ca:38:a9:f5:26:86:e5:b0:fa:76:ac:93:b8:aa:e1:7e:28:07: 4d:aa:1b:6e:f4:b1:cb:45:dd:67:48:b7:f2:10:23:d4:5f:54: 36:21:b0:df:3b:06:f9:60:8e:4e:96:86:f5:14:de:dd:c5:6c: 7d:d4:be:e5:57:02:94:72:d5:32:d1:bd:0c:d6:90:9f:e7:d2: c9:4c:79:37 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICESMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkFE NkI0M0MwOUQwNDkwQTBERjdGODkxREY5RjYzQjUyMENGMjEwRjAeFw0yNTA5MTIw NDQ1MjZaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDBBNzhCODhBRjRCNDY5 MzQ4NzZBMkY3MjUzMUVFMDI1QkNGOThDQUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCf78va0YEG8u8ekzmpTL1KZB0Mz8Mbd3vFLO7tTTP0snVpqfNO to8rkwL1mnPUbUoAXAzSv/LHTmY6oyOouUEKkPEaEjiHiUeAnZebpg/nxShigWyR lztDRU1fY5wq+pZdo1oLTI7AOX1x2eSuWcGewYYsrNI//wFSPzhe6AFVfUciR4yR zGtTSC1ySymxsmD+9bsRGZlYDxCmhl38Kh9JHEQRGeSVbvxmEd4pda6LDj3Bd+SL pYaBQVLrCEYBiQmN2wP6hszluOOT8CGlI79937nOxajuerqMSijijzfmfOUFtLW8 l1MaKX+qhZFRwYNWA3jJhmo7ALcMgYRs/49HAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUCni4ivS0aTSHai9yUx7gJbz5jK8wHwYDVR0jBBgwFoAU+ta0PAnQSQoN9/iR 359jtSDPIQ8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjc0 MS8tdGEwUEFuUVNRb045X2lSMzU5anRTRFBJUTguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLy10YTBQQW5RU1FvTjlfaVIzNTlqdFNEUElROC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3NDEvQ25pNGl2UzBhVFNI YWk5eVV4N2dKYno1aks4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGd0lzANBgkqhkiG9w0BAQsFAAOCAQEAcRy1/f3CDHtxro9UJajBplXvT4Pw MweuEctvNee672HUoMc4pUa2z9C6by79ZTh1Rf/Nj7VV2vlSaqA0HzknaOaiC8PG oaXa1oQpwKmqGBNVBu/lm5KC0lEXBqAlH0IdnNF3Iq4g3GNhIE46PkhmB+o3ISqq CAi3OzjGftHHQFMmZ0zZGHqKOKqlTew2lwVHvMbyUXohhFKkDMxfzANdatzXKMJZ eWSE++uARSEo8W7dnZrGyjip9SaG5bD6dqyTuKrhfigHTaobbvSxy0XdZ0i38hAj 1F9UNiGw3zsG+WCOTpaG9RTe3cVsfdS+5VcClHLVMtG9DNaQn+fSyUx5Nw== -----END CERTIFICATE-----Generated at Sun Oct 19 16:11:43 2025 by rpki-client