$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2741/rovnomnuVFMNJzTNeyy5W6WRMe0.roa File: rovnomnuVFMNJzTNeyy5W6WRMe0.roa (raw, json) Hash identifier: aVXERw9JByy2HpoXIifbCTO+OLw9MnI6ZPVD8/WtLto= Subject key identifier: AE:8B:E7:A2:69:EE:54:53:0D:27:34:CD:7B:2C:B9:5B:A5:91:31:ED Certificate issuer: /CN=FAD6B43C09D0490A0DF7F891DF9F63B520CF210F Certificate serial: 1069 Authority key identifier: FA:D6:B4:3C:09:D0:49:0A:0D:F7:F8:91:DF:9F:63:B5:20:CF:21:0F Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-ta0PAnQSQoN9_iR359jtSDPIQ8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/rovnomnuVFMNJzTNeyy5W6WRMe0.roa Signing time: Tue 05 Aug 2025 13:49:07 +0000 ROA not before: Tue 05 Aug 2025 13:49:07 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 140224 IP address blocks: 103.116.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/-ta0PAnQSQoN9_iR359jtSDPIQ8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/-ta0PAnQSQoN9_iR359jtSDPIQ8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-ta0PAnQSQoN9_iR359jtSDPIQ8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Sep 2025 12:04:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4201 (0x1069) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FAD6B43C09D0490A0DF7F891DF9F63B520CF210F Validity Not Before: Aug 5 13:49:07 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=AE8BE7A269EE54530D2734CD7B2CB95BA59131ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:bf:f8:b1:93:21:14:a9:3c:94:e4:c9:c3:a2: 11:ff:44:de:6f:58:eb:05:a5:1d:fd:e3:01:56:81: f9:f9:15:19:0c:ec:72:00:9c:8b:ad:9b:9c:0e:0b: 6f:9c:96:2e:dc:73:ad:dd:bb:4b:e1:a0:06:e4:4d: 19:0b:c9:9a:43:fa:b8:97:73:05:11:59:65:67:29: 57:d5:6e:c5:21:bc:47:fe:95:20:71:5e:d4:3e:d6: b9:84:6e:12:7c:98:cf:7d:d2:15:ad:6c:c4:5d:09: 31:2d:ca:e0:86:b9:7f:73:56:88:ff:26:62:13:59: 8b:c7:4d:44:7c:ca:5b:2c:15:2a:8e:a3:70:b0:e1: d0:62:79:d5:16:58:4a:34:41:99:dc:23:db:70:51: b3:09:d3:53:12:9b:d8:a9:c5:5c:5a:ab:14:e2:57: 25:cd:0a:92:76:1d:b7:35:27:41:87:49:5d:23:1c: b8:04:19:06:a5:c8:eb:96:df:a4:ab:1e:9c:a1:68: 0e:a8:04:4d:e8:ac:54:7a:cd:0f:3d:7a:a1:ac:7c: d5:31:d9:26:f6:a9:d7:b2:d8:60:3e:ab:7f:f2:16: 52:e5:78:d8:0b:b1:3e:3e:c2:44:9f:27:06:2c:06: a9:32:f2:40:04:c0:1c:37:87:cb:80:93:df:69:a1: dd:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:8B:E7:A2:69:EE:54:53:0D:27:34:CD:7B:2C:B9:5B:A5:91:31:ED X509v3 Authority Key Identifier: keyid:FA:D6:B4:3C:09:D0:49:0A:0D:F7:F8:91:DF:9F:63:B5:20:CF:21:0F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/-ta0PAnQSQoN9_iR359jtSDPIQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-ta0PAnQSQoN9_iR359jtSDPIQ8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/rovnomnuVFMNJzTNeyy5W6WRMe0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.116.150.0/24 Signature Algorithm: sha256WithRSAEncryption 29:60:ea:83:01:35:fb:89:d1:82:79:bf:98:ea:c5:ac:d1:b1: 8c:c4:44:43:9a:b2:77:21:e5:09:f1:0b:5a:82:83:6b:6c:33: 1d:e0:2b:9d:1f:36:b2:b2:03:7a:55:74:ed:b2:5d:a3:42:db: 85:cf:dd:fc:cc:5e:04:0a:45:57:a5:aa:8d:8b:db:bd:54:68: 13:84:a5:cc:72:28:7d:56:26:84:e7:cb:ec:79:e8:4f:d6:2f: 7f:92:8a:2b:09:34:a0:2d:09:57:fa:54:13:ba:b7:88:26:29: 68:06:2a:e4:54:1e:af:10:79:7f:fe:8b:34:c0:1c:f1:ae:0e: cf:7f:94:70:57:13:a3:e2:2c:ad:ff:a9:50:19:c1:36:5e:04: ca:6a:9f:46:36:f6:5a:1e:ec:d8:4c:21:b5:29:de:22:85:c1: 0e:b5:63:21:cd:21:9b:2a:c6:ed:35:1e:c0:9e:14:f1:36:5f: 25:57:d5:a9:33:a6:36:3a:29:26:b9:66:e9:6d:a5:a0:d5:07: 42:ca:c6:58:e3:a0:c1:fc:87:c5:89:50:d0:94:18:3a:63:47: 47:b6:83:50:5d:73:6f:5d:1e:9c:f4:fc:d6:d3:81:1e:8c:24: dc:d2:94:bb:c8:01:1e:ec:1b:7c:a3:6c:7d:dc:9c:0c:25:e2: 3e:d6:1d:26 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICEGkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkFE NkI0M0MwOUQwNDkwQTBERjdGODkxREY5RjYzQjUyMENGMjEwRjAeFw0yNTA4MDUx MzQ5MDdaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEFFOEJFN0EyNjlFRTU0 NTMwRDI3MzRDRDdCMkNCOTVCQTU5MTMxRUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCWv/ixkyEUqTyU5MnDohH/RN5vWOsFpR394wFWgfn5FRkM7HIA nIutm5wOC2+cli7cc63du0vhoAbkTRkLyZpD+riXcwURWWVnKVfVbsUhvEf+lSBx XtQ+1rmEbhJ8mM990hWtbMRdCTEtyuCGuX9zVoj/JmITWYvHTUR8ylssFSqOo3Cw 4dBiedUWWEo0QZncI9twUbMJ01MSm9ipxVxaqxTiVyXNCpJ2Hbc1J0GHSV0jHLgE GQalyOuW36SrHpyhaA6oBE3orFR6zQ89eqGsfNUx2Sb2qdey2GA+q3/yFlLleNgL sT4+wkSfJwYsBqky8kAEwBw3h8uAk99pod1dAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUrovnomnuVFMNJzTNeyy5W6WRMe0wHwYDVR0jBBgwFoAU+ta0PAnQSQoN9/iR 359jtSDPIQ8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjc0 MS8tdGEwUEFuUVNRb045X2lSMzU5anRTRFBJUTguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLy10YTBQQW5RU1FvTjlfaVIzNTlqdFNEUElROC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3NDEvcm92bm9tbnVWRk1O SnpUTmV5eTVXNldSTWUwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGd0ljANBgkqhkiG9w0BAQsFAAOCAQEAKWDqgwE1+4nRgnm/mOrFrNGxjMRE Q5qydyHlCfELWoKDa2wzHeArnR82srIDelV07bJdo0Lbhc/d/MxeBApFV6WqjYvb vVRoE4SlzHIofVYmhOfL7HnoT9Yvf5KKKwk0oC0JV/pUE7q3iCYpaAYq5FQerxB5 f/6LNMAc8a4Oz3+UcFcTo+Isrf+pUBnBNl4EymqfRjb2Wh7s2EwhtSneIoXBDrVj Ic0hmyrG7TUewJ4U8TZfJVfVqTOmNjopJrlm6W2loNUHQsrGWOOgwfyHxYlQ0JQY OmNHR7aDUF1zb10enPT81tOBHowk3NKUu8gBHuwbfKNsfdycDCXiPtYdJg== -----END CERTIFICATE-----Generated at Fri Sep 5 09:00:21 2025 by rpki-client