$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2894/1Fo2622t1CxTOS46utm9i_gCKOM.roa File: 1Fo2622t1CxTOS46utm9i_gCKOM.roa (raw, json) Hash identifier: pJs24ML5QI0Ul7NQBXviLFJLdUx0dc32wrhKpknC9n8= Subject key identifier: D4:5A:36:EB:6D:AD:D4:2C:53:39:2E:3A:BA:D9:BD:8B:F8:02:28:E3 Certificate issuer: /CN=839F557B9F9F2F6CDD75AFB4ABA8A2A796C610E8 Certificate serial: 18EC Authority key identifier: 83:9F:55:7B:9F:9F:2F:6C:DD:75:AF:B4:AB:A8:A2:A7:96:C6:10:E8 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g59Ve5-fL2zdda-0q6iip5bGEOg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2894/1Fo2622t1CxTOS46utm9i_gCKOM.roa Signing time: Sat 06 Sep 2025 08:03:22 +0000 ROA not before: Sat 06 Sep 2025 08:03:22 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 146834 IP address blocks: 103.139.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2894/g59Ve5-fL2zdda-0q6iip5bGEOg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2894/g59Ve5-fL2zdda-0q6iip5bGEOg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g59Ve5-fL2zdda-0q6iip5bGEOg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 11:04:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6380 (0x18ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=839F557B9F9F2F6CDD75AFB4ABA8A2A796C610E8 Validity Not Before: Sep 6 08:03:22 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=D45A36EB6DADD42C53392E3ABAD9BD8BF80228E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:6b:cd:53:fb:3c:e1:70:e4:e0:8f:bc:ed:74: 52:dd:de:ec:f4:39:aa:47:d9:66:5b:b2:89:c8:d7: c3:67:5d:e9:a5:21:bd:78:9f:98:72:a6:16:08:61: 83:64:4d:f8:10:00:e0:e9:f1:4c:0d:d5:68:d5:c4: fd:9f:9d:99:cd:40:bd:f3:36:e3:11:84:cb:da:8d: 83:35:3c:3b:3d:f4:0b:80:89:a1:78:e8:fd:f8:1c: 60:3b:14:99:07:82:e3:47:03:e6:81:26:7d:3e:42: 14:8d:4b:cb:00:ae:b4:83:7d:75:39:10:71:37:f9: a4:c0:39:3b:35:96:59:b0:78:ec:ef:31:2f:5b:51: c0:21:2f:a6:32:ba:35:f0:ad:38:3c:24:6b:ed:47: f7:3a:05:a0:cb:11:31:1b:b2:87:cd:4e:d4:2d:b9: 37:44:23:e2:8f:e0:5c:4f:4d:0b:e2:40:b6:51:b4: 9e:2a:5e:51:11:2c:01:e9:e0:e6:0e:7d:38:ac:5e: 0d:a6:02:fc:c8:9e:58:0b:8e:c8:5b:85:1d:64:bc: 15:3b:67:d6:6a:54:8a:56:b4:e4:9d:cd:5a:1e:62: 51:47:2c:bc:7a:66:b0:9d:b7:b1:eb:a5:0d:47:6c: 1c:62:99:ed:82:d1:74:d6:01:89:89:7a:8a:8b:6e: a4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:5A:36:EB:6D:AD:D4:2C:53:39:2E:3A:BA:D9:BD:8B:F8:02:28:E3 X509v3 Authority Key Identifier: keyid:83:9F:55:7B:9F:9F:2F:6C:DD:75:AF:B4:AB:A8:A2:A7:96:C6:10:E8 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2894/g59Ve5-fL2zdda-0q6iip5bGEOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g59Ve5-fL2zdda-0q6iip5bGEOg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2894/1Fo2622t1CxTOS46utm9i_gCKOM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.139.136.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:49:8b:2a:f6:15:6b:57:ac:23:71:18:5a:a9:f3:97:06:f9: 14:1b:17:78:41:ff:e9:2f:5f:9e:80:0c:0e:1f:7f:97:6e:05: 66:e1:e5:c2:f4:34:07:21:3a:4e:e4:c3:3c:f4:92:d7:43:86: c1:e1:70:13:3b:03:d1:9b:96:a6:44:b3:c8:c1:c9:a5:65:c0: 5b:fe:0a:0d:a5:20:1a:6f:66:8b:25:90:25:56:8c:2b:0d:e2: 8c:75:81:7a:01:8a:3c:b8:65:5f:24:95:27:fa:b7:4a:0f:d1: 5c:87:c1:2a:ec:04:26:b6:6c:2d:ac:53:c7:7f:68:92:b3:59: 2b:b1:4c:f7:08:9a:32:1b:34:07:b8:09:1a:4e:c8:ae:ce:ee: 9f:4c:3b:3d:2a:a0:a6:57:b3:6c:e4:0e:e0:5f:0b:32:5f:bc: dc:28:2c:b4:11:3f:ab:7e:29:f2:cf:2b:8c:d7:de:a9:d7:4a: 83:88:42:24:64:cc:d3:23:c8:f9:62:94:43:52:87:76:5a:2f: 26:fd:5c:4f:b7:63:a3:61:6e:a9:ab:1d:61:1a:06:59:b7:9f: c1:e4:48:6b:61:a6:2f:4a:35:ae:d9:bf:8e:e5:f5:a8:21:fb: b3:45:9e:0b:c3:e7:2e:2f:3b:00:7c:21:c7:52:58:db:96:11: d8:8d:97:59 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICGOwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODM5 RjU1N0I5RjlGMkY2Q0RENzVBRkI0QUJBOEEyQTc5NkM2MTBFODAeFw0yNTA5MDYw ODAzMjJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEQ0NUEzNkVCNkRBREQ0 MkM1MzM5MkUzQUJBRDlCRDhCRjgwMjI4RTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDba81T+zzhcOTgj7ztdFLd3uz0OapH2WZbsonI18NnXemlIb14 n5hyphYIYYNkTfgQAODp8UwN1WjVxP2fnZnNQL3zNuMRhMvajYM1PDs99AuAiaF4 6P34HGA7FJkHguNHA+aBJn0+QhSNS8sArrSDfXU5EHE3+aTAOTs1llmweOzvMS9b UcAhL6YyujXwrTg8JGvtR/c6BaDLETEbsofNTtQtuTdEI+KP4FxPTQviQLZRtJ4q XlERLAHp4OYOfTisXg2mAvzInlgLjshbhR1kvBU7Z9ZqVIpWtOSdzVoeYlFHLLx6 ZrCdt7HrpQ1HbBxime2C0XTWAYmJeoqLbqQtAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU1Fo2622t1CxTOS46utm9i/gCKOMwHwYDVR0jBBgwFoAUg59Ve5+fL2zdda+0 q6iip5bGEOgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjg5 NC9nNTlWZTUtZkwyemRkYS0wcTZpaXA1YkdFT2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2c1OVZlNS1mTDJ6ZGRhLTBxNmlpcDViR0VPZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4OTQvMUZvMjYyMnQxQ3hU T1M0NnV0bTlpX2dDS09NLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAWeLiDANBgkqhkiG9w0BAQsFAAOCAQEAGkmLKvYVa1esI3EYWqnzlwb5FBsX eEH/6S9fnoAMDh9/l24FZuHlwvQ0ByE6TuTDPPSS10OGweFwEzsD0ZuWpkSzyMHJ pWXAW/4KDaUgGm9miyWQJVaMKw3ijHWBegGKPLhlXySVJ/q3Sg/RXIfBKuwEJrZs LaxTx39okrNZK7FM9wiaMhs0B7gJGk7Irs7un0w7PSqgplezbOQO4F8LMl+83Cgs tBE/q34p8s8rjNfeqddKg4hCJGTM0yPI+WKUQ1KHdlovJv1cT7djo2FuqasdYRoG WbefweRIa2GmL0o1rtm/juX1qCH7s0WeC8PnLi87AHwhx1JY25YR2I2XWQ== -----END CERTIFICATE-----Generated at Mon Sep 8 09:11:47 2025 by rpki-client