$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3168/LAGXNa5EniBKRH4vtqRQfPHsuuE.roa File: LAGXNa5EniBKRH4vtqRQfPHsuuE.roa (raw, json) Hash identifier: V/pBdiKaEEjm9ZPK16Mcjv0Q0tMM1EnGcY7x7LKGG+Q= Subject key identifier: 2C:01:97:35:AE:44:9E:20:4A:44:7E:2F:B6:A4:50:7C:F1:EC:BA:E1 Certificate issuer: /CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094 Certificate serial: 142C Authority key identifier: 24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/LAGXNa5EniBKRH4vtqRQfPHsuuE.roa Signing time: Mon 26 May 2025 23:39:25 +0000 ROA not before: Mon 26 May 2025 23:39:25 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 146806 IP address blocks: 103.79.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:06:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5164 (0x142c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094 Validity Not Before: May 26 23:39:25 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=2C019735AE449E204A447E2FB6A4507CF1ECBAE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f6:2d:e8:41:d6:2c:36:79:c6:73:1a:e7:35: 36:74:6b:5b:19:bf:18:01:53:26:4d:89:f1:59:6e: 6a:cd:69:71:7c:a2:d7:43:35:79:f0:2e:d9:23:a4: 05:e9:34:e5:96:5c:58:17:83:2c:ed:76:ae:06:ae: 4a:0f:cf:26:17:a8:32:88:e1:57:a6:fd:ff:d6:30: ef:a8:66:b4:cc:2b:b0:b8:69:01:5a:9f:60:7e:de: d0:f4:c7:db:c6:e6:87:75:9c:64:f4:f9:e7:6c:8a: 19:58:d1:32:bc:56:41:29:98:3b:8c:36:18:16:35: a3:6e:c0:87:89:0b:f0:e1:a8:43:7d:02:df:de:22: 34:35:16:66:a9:5b:c7:d8:82:00:88:62:f2:8a:83: 25:e0:b3:89:87:da:95:c3:0a:1f:33:e7:a0:df:88: 14:2a:ab:c0:a7:9b:6d:e1:c9:8f:76:96:53:10:0f: 5f:1a:f8:0c:86:31:78:52:30:12:e8:a9:9a:63:67: 7b:ea:f6:8a:11:c0:d5:65:7d:4b:89:96:47:f6:cf: 9e:b4:87:1b:aa:d2:d1:7e:ff:73:03:d0:03:73:4e: 24:38:9a:8d:1c:4a:94:48:6a:90:f2:a5:68:89:19: 48:59:51:4b:cc:1f:c1:6c:f0:2d:04:d3:3b:a2:1c: e8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:01:97:35:AE:44:9E:20:4A:44:7E:2F:B6:A4:50:7C:F1:EC:BA:E1 X509v3 Authority Key Identifier: keyid:24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/LAGXNa5EniBKRH4vtqRQfPHsuuE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.79.228.0/23 Signature Algorithm: sha256WithRSAEncryption 03:11:a4:14:e7:54:f7:c3:b9:9c:31:92:e5:5b:a2:7e:3c:9c: 23:23:dd:3e:b6:8c:3d:31:ab:5d:96:8a:42:a7:0c:8e:e5:2a: 0b:cd:a3:bf:df:2e:17:5b:dc:bc:fb:b6:41:99:eb:3e:16:ea: 61:2b:cb:59:09:32:57:fa:06:b9:d8:47:84:07:41:1c:d5:b1: 88:dc:6b:d7:d1:31:10:9c:f0:7b:46:4a:cc:00:d4:98:7d:9f: f5:f7:40:37:12:14:4c:93:a3:f7:ac:62:17:03:20:ff:be:7d: e7:17:a1:85:3a:3e:38:e6:0c:41:f8:62:ff:a0:33:75:67:69: 02:c6:2d:18:c9:86:93:69:6d:3d:e0:49:43:4b:83:e2:27:b6: f0:bc:03:f8:c2:9e:74:f3:91:47:69:44:58:41:95:a3:d6:f7: e8:41:35:5b:2f:41:73:8f:6c:1f:0c:44:bb:f7:85:bd:34:9b: 72:25:db:40:82:23:ae:d5:e1:b7:1d:b6:ad:d7:8c:6f:22:fc: 6d:22:c2:02:8a:7a:ca:ed:bf:f0:51:07:86:fb:62:84:fd:95: a2:11:86:5d:18:dd:3e:85:ea:b6:02:9f:76:36:49:b7:81:51: de:8d:32:ee:96:d9:f9:b5:bd:54:6b:45:77:8a:45:87:6b:9d: 4a:9b:6e:fb -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFCwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjQw OTg3RjQwQTYwMzBDREZBMzNERUQxRUVFN0NGNERDN0MzMDA5NDAeFw0yNTA1MjYy MzM5MjVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDJDMDE5NzM1QUU0NDlF MjA0QTQ0N0UyRkI2QTQ1MDdDRjFFQ0JBRTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCz9i3oQdYsNnnGcxrnNTZ0a1sZvxgBUyZNifFZbmrNaXF8otdD NXnwLtkjpAXpNOWWXFgXgyztdq4GrkoPzyYXqDKI4Vem/f/WMO+oZrTMK7C4aQFa n2B+3tD0x9vG5od1nGT0+edsihlY0TK8VkEpmDuMNhgWNaNuwIeJC/DhqEN9At/e IjQ1FmapW8fYggCIYvKKgyXgs4mH2pXDCh8z56DfiBQqq8Cnm23hyY92llMQD18a +AyGMXhSMBLoqZpjZ3vq9ooRwNVlfUuJlkf2z560hxuq0tF+/3MD0ANzTiQ4mo0c SpRIapDypWiJGUhZUUvMH8Fs8C0E0zuiHOidAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQULAGXNa5EniBKRH4vtqRQfPHsuuEwHwYDVR0jBBgwFoAUJAmH9ApgMM36M97R 7ufPTcfDAJQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE2 OC9KQW1IOUFwZ01NMzZNOTdSN3VmUFRjZkRBSlEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0pBbUg5QXBnTU0zNk05N1I3dWZQVGNmREFKUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNjgvTEFHWE5hNUVuaUJL Ukg0dnRxUlFmUEhzdXVFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAWdP5DANBgkqhkiG9w0BAQsFAAOCAQEAAxGkFOdU98O5nDGS5VuifjycIyPd PraMPTGrXZaKQqcMjuUqC82jv98uF1vcvPu2QZnrPhbqYSvLWQkyV/oGudhHhAdB HNWxiNxr19ExEJzwe0ZKzADUmH2f9fdANxIUTJOj96xiFwMg/7595xehhTo+OOYM Qfhi/6AzdWdpAsYtGMmGk2ltPeBJQ0uD4ie28LwD+MKedPORR2lEWEGVo9b36EE1 Wy9Bc49sHwxEu/eFvTSbciXbQIIjrtXhtx22rdeMbyL8bSLCAop6yu2/8FEHhvti hP2VohGGXRjdPoXqtgKfdjZJt4FR3o0y7pbZ+bW9VGtFd4pFh2udSptu+w== -----END CERTIFICATE-----Generated at Sun Oct 26 05:00:11 2025 by rpki-client