$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2741/sZKnapg00fgKKe4LkAFvTWPY7bc.roa File: sZKnapg00fgKKe4LkAFvTWPY7bc.roa (raw, json) Hash identifier: QsFYItD1U7Qqi5MRKBnZXLcVx+4eR2sBukx9xvp60fM= Subject key identifier: B1:92:A7:6A:98:34:D1:F8:0A:29:EE:0B:90:01:6F:4D:63:D8:ED:B7 Certificate issuer: /CN=FAD6B43C09D0490A0DF7F891DF9F63B520CF210F Certificate serial: 112C Authority key identifier: FA:D6:B4:3C:09:D0:49:0A:0D:F7:F8:91:DF:9F:63:B5:20:CF:21:0F Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-ta0PAnQSQoN9_iR359jtSDPIQ8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/sZKnapg00fgKKe4LkAFvTWPY7bc.roa Signing time: Sat 13 Sep 2025 03:07:10 +0000 ROA not before: Sat 13 Sep 2025 03:07:10 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 21859 IP address blocks: 103.116.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/-ta0PAnQSQoN9_iR359jtSDPIQ8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/-ta0PAnQSQoN9_iR359jtSDPIQ8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-ta0PAnQSQoN9_iR359jtSDPIQ8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Sep 2025 07:06:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4396 (0x112c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FAD6B43C09D0490A0DF7F891DF9F63B520CF210F Validity Not Before: Sep 13 03:07:10 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=B192A76A9834D1F80A29EE0B90016F4D63D8EDB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:aa:b3:97:25:f5:fe:b5:14:77:57:c5:18:d5: 2e:be:52:0d:de:7b:9a:d9:87:d4:4c:95:42:ad:75: 0d:57:de:a2:4e:67:90:9b:ac:1b:aa:42:6c:44:03: 8a:c9:fe:6b:e9:bb:c6:42:f2:d8:74:f4:52:30:14: 59:df:8b:26:78:b1:5e:52:87:a8:ad:c8:2d:ae:eb: 8b:2f:75:18:13:66:46:52:ad:8b:81:1d:94:f4:d5: bf:d3:f9:7b:40:cf:07:a3:0e:f2:18:df:f7:80:7a: 1b:f2:54:91:ae:23:c8:c6:35:06:52:fb:63:12:63: 64:3b:6d:30:07:ca:6b:d7:5c:d2:10:7a:d9:ae:b1: d4:73:69:fa:39:cc:0a:45:5d:2c:e3:45:f7:d2:10: 0d:09:04:0a:87:f3:01:0f:de:15:36:45:29:6a:29: 62:11:4a:2d:2c:1d:4e:e0:83:5a:26:0a:18:bb:a6: 0b:ea:24:d7:8f:5b:4b:8b:07:52:5a:a9:0c:53:40: 84:35:cc:5d:01:df:88:4d:8e:73:3a:d4:fe:cd:e2: e2:db:72:19:b4:ff:6e:d5:03:87:10:24:ac:1b:88: 4c:51:e5:49:2a:45:ad:6a:61:85:6c:48:cd:5f:ee: ef:4b:a7:2b:dd:58:42:c6:dc:f0:90:1b:b0:9d:96: 5d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:92:A7:6A:98:34:D1:F8:0A:29:EE:0B:90:01:6F:4D:63:D8:ED:B7 X509v3 Authority Key Identifier: keyid:FA:D6:B4:3C:09:D0:49:0A:0D:F7:F8:91:DF:9F:63:B5:20:CF:21:0F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/-ta0PAnQSQoN9_iR359jtSDPIQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-ta0PAnQSQoN9_iR359jtSDPIQ8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/sZKnapg00fgKKe4LkAFvTWPY7bc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.116.148.0/24 Signature Algorithm: sha256WithRSAEncryption 13:b1:58:dc:69:e1:e8:f7:a0:00:01:7d:a9:bf:28:7b:87:e4: 66:b9:43:74:92:ef:b5:4a:7f:82:2f:31:fd:b9:c9:e7:03:98: 67:47:ad:54:c3:44:0e:a4:dd:06:33:03:e1:9f:44:4d:b7:3a: 67:7b:fb:b4:82:d5:ab:00:c6:f0:c8:d4:16:fe:d9:a3:b1:c1: 63:6a:44:91:b8:30:8f:93:07:87:63:36:5b:ab:59:c5:fd:90: a9:d2:5e:b6:dc:7d:5b:02:f0:23:d4:66:af:3b:b0:2e:cc:34: 14:bf:b6:f0:b0:a5:65:98:d0:27:7a:a6:10:75:90:29:40:03: f3:11:70:d6:55:74:64:33:01:a0:d3:94:cf:72:10:4f:73:26: 33:28:8d:30:de:1d:36:54:84:bf:f9:a1:f6:bd:f2:1f:be:0d: 71:f2:48:97:89:6d:13:bb:2f:4e:e7:c8:56:fd:84:3d:7b:df: fe:8c:40:49:d4:1a:ce:33:17:7f:c9:a7:40:9b:fe:24:d8:e5: 2c:b7:40:23:43:29:46:d2:0c:99:aa:2c:9e:ca:40:e1:7b:0e: 50:b9:a3:3e:3f:5d:91:74:3e:a2:09:7e:80:a1:d3:92:b1:a9: 88:22:cb:31:3d:9d:8a:e2:1a:cb:ac:f8:82:bd:6b:2e:f4:6f: 69:e7:50:ba -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICESwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkFE NkI0M0MwOUQwNDkwQTBERjdGODkxREY5RjYzQjUyMENGMjEwRjAeFw0yNTA5MTMw MzA3MTBaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEIxOTJBNzZBOTgzNEQx RjgwQTI5RUUwQjkwMDE2RjRENjNEOEVEQjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD4qrOXJfX+tRR3V8UY1S6+Ug3ee5rZh9RMlUKtdQ1X3qJOZ5Cb rBuqQmxEA4rJ/mvpu8ZC8th09FIwFFnfiyZ4sV5Sh6ityC2u64svdRgTZkZSrYuB HZT01b/T+XtAzwejDvIY3/eAehvyVJGuI8jGNQZS+2MSY2Q7bTAHymvXXNIQetmu sdRzafo5zApFXSzjRffSEA0JBAqH8wEP3hU2RSlqKWIRSi0sHU7gg1omChi7pgvq JNePW0uLB1JaqQxTQIQ1zF0B34hNjnM61P7N4uLbchm0/27VA4cQJKwbiExR5Ukq Ra1qYYVsSM1f7u9LpyvdWELG3PCQG7Cdll11AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUsZKnapg00fgKKe4LkAFvTWPY7bcwHwYDVR0jBBgwFoAU+ta0PAnQSQoN9/iR 359jtSDPIQ8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjc0 MS8tdGEwUEFuUVNRb045X2lSMzU5anRTRFBJUTguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLy10YTBQQW5RU1FvTjlfaVIzNTlqdFNEUElROC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3NDEvc1pLbmFwZzAwZmdL S2U0TGtBRnZUV1BZN2JjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGd0lDANBgkqhkiG9w0BAQsFAAOCAQEAE7FY3Gnh6PegAAF9qb8oe4fkZrlD dJLvtUp/gi8x/bnJ5wOYZ0etVMNEDqTdBjMD4Z9ETbc6Z3v7tILVqwDG8MjUFv7Z o7HBY2pEkbgwj5MHh2M2W6tZxf2QqdJettx9WwLwI9RmrzuwLsw0FL+28LClZZjQ J3qmEHWQKUAD8xFw1lV0ZDMBoNOUz3IQT3MmMyiNMN4dNlSEv/mh9r3yH74NcfJI l4ltE7svTufIVv2EPXvf/oxASdQazjMXf8mnQJv+JNjlLLdAI0MpRtIMmaosnspA 4XsOULmjPj9dkXQ+ogl+gKHTkrGpiCLLMT2diuIay6z4gr1rLvRvaedQug== -----END CERTIFICATE-----Generated at Fri Sep 19 05:57:18 2025 by rpki-client