$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3168/bILqsSSMjV6zsB2V4XNyhR98QMI.roa File: bILqsSSMjV6zsB2V4XNyhR98QMI.roa (raw, json) Hash identifier: 0ol/AMXvdewcuTmyh5mPtnYJSlqD+56hLkiVj3HPlhI= Subject key identifier: 6C:82:EA:B1:24:8C:8D:5E:B3:B0:1D:95:E1:73:72:85:1F:7C:40:C2 Certificate issuer: /CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094 Certificate serial: 1443 Authority key identifier: 24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/bILqsSSMjV6zsB2V4XNyhR98QMI.roa Signing time: Tue 27 May 2025 00:03:43 +0000 ROA not before: Tue 27 May 2025 00:03:43 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 209242 IP address blocks: 103.79.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:06:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5187 (0x1443) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094 Validity Not Before: May 27 00:03:43 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=6C82EAB1248C8D5EB3B01D95E17372851F7C40C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:39:90:e9:da:8c:b4:5d:e2:bf:d5:30:f0:dc: 94:2c:8b:35:17:b5:ac:33:81:da:b1:67:b9:3e:9a: 0e:01:29:17:3a:ba:79:1a:fd:ed:43:2c:0c:bc:fb: 61:66:92:88:2e:22:fb:5c:1e:f2:88:8f:fd:76:5f: 3b:4b:c5:8a:bf:64:90:46:2e:fe:e2:98:09:71:19: af:72:f2:ff:7b:53:ba:43:19:5a:1c:20:2e:c6:6c: 9e:22:18:58:b9:74:ac:79:73:c0:1a:5f:52:9a:16: 1f:e9:55:9d:dc:ca:28:f9:f6:fb:4d:08:8e:e9:76: 05:c3:6d:dc:a9:bf:5a:be:ec:22:76:3f:28:57:f2: f7:f0:26:f8:d4:eb:95:a6:e5:5a:ad:10:79:e3:49: bb:7d:29:b2:d7:1b:2d:1e:88:f0:b3:f1:45:b3:17: 90:33:dc:fd:72:32:1d:7b:15:f7:74:b1:31:68:97: 33:cd:56:10:bc:94:7b:c3:5d:d6:23:03:65:2d:48: 7e:89:7b:3a:18:f5:50:59:88:9f:ff:8c:00:a2:84: cc:c1:b9:4c:b5:2d:8e:32:91:39:68:c9:f7:11:9e: 57:5e:c9:7f:da:f6:83:e6:99:0b:b8:59:71:24:a4: 0b:02:84:27:55:45:7a:a7:7f:cb:67:60:85:83:4e: a6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:82:EA:B1:24:8C:8D:5E:B3:B0:1D:95:E1:73:72:85:1F:7C:40:C2 X509v3 Authority Key Identifier: keyid:24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/bILqsSSMjV6zsB2V4XNyhR98QMI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.79.228.0/23 Signature Algorithm: sha256WithRSAEncryption 3e:ce:90:85:86:b0:fa:0a:ca:a3:48:07:eb:f7:cc:8f:ed:94: c6:20:b7:d8:24:53:4e:71:40:2d:3e:5c:ee:18:f7:aa:81:09: 4e:87:71:f5:0b:9f:3d:bf:0d:36:d4:0d:38:67:7b:8e:6e:f2: 64:e3:24:b3:fb:87:e6:17:93:1e:d0:e8:ee:47:3f:54:c6:08: 38:10:07:f9:c8:13:f0:bf:44:8e:e1:ed:30:e1:db:49:cf:5f: 75:08:6f:6c:20:7a:3b:54:cb:38:a3:e7:b6:50:81:ce:ef:1a: c5:15:2d:d4:46:01:b1:ea:2c:42:fe:11:19:63:ae:0c:a4:6f: c3:13:93:ae:53:5e:94:94:c4:47:df:a8:d7:39:d5:b4:d2:37: fd:79:60:85:b0:3c:e2:31:6d:90:59:85:27:70:76:14:3e:27: 6a:ab:5b:f8:71:74:8a:49:8e:12:8d:c0:4a:79:9e:23:0a:c4: 7f:71:b2:c5:6d:58:37:90:fa:a9:7c:ca:90:96:f0:9d:75:ae: ee:ae:34:58:d9:70:7c:f7:77:1f:d4:b3:c0:2f:26:28:b2:9e: 50:94:50:af:5f:05:81:31:59:6c:e9:6b:89:b7:85:d8:72:62: ba:44:d8:0d:aa:8b:9d:9d:ea:75:ea:9f:29:d7:c5:e9:b2:48: 9c:9a:64:36 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFEMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjQw OTg3RjQwQTYwMzBDREZBMzNERUQxRUVFN0NGNERDN0MzMDA5NDAeFw0yNTA1Mjcw MDAzNDNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDZDODJFQUIxMjQ4QzhE NUVCM0IwMUQ5NUUxNzM3Mjg1MUY3QzQwQzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzOZDp2oy0XeK/1TDw3JQsizUXtawzgdqxZ7k+mg4BKRc6unka /e1DLAy8+2FmkoguIvtcHvKIj/12XztLxYq/ZJBGLv7imAlxGa9y8v97U7pDGVoc IC7GbJ4iGFi5dKx5c8AaX1KaFh/pVZ3cyij59vtNCI7pdgXDbdypv1q+7CJ2PyhX 8vfwJvjU65Wm5VqtEHnjSbt9KbLXGy0eiPCz8UWzF5Az3P1yMh17Ffd0sTFolzPN VhC8lHvDXdYjA2UtSH6JezoY9VBZiJ//jACihMzBuUy1LY4ykTloyfcRnldeyX/a 9oPmmQu4WXEkpAsChCdVRXqnf8tnYIWDTqY7AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUbILqsSSMjV6zsB2V4XNyhR98QMIwHwYDVR0jBBgwFoAUJAmH9ApgMM36M97R 7ufPTcfDAJQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE2 OC9KQW1IOUFwZ01NMzZNOTdSN3VmUFRjZkRBSlEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0pBbUg5QXBnTU0zNk05N1I3dWZQVGNmREFKUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNjgvYklMcXNTU01qVjZ6 c0IyVjRYTnloUjk4UU1JLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAWdP5DANBgkqhkiG9w0BAQsFAAOCAQEAPs6QhYaw+grKo0gH6/fMj+2UxiC3 2CRTTnFALT5c7hj3qoEJTodx9QufPb8NNtQNOGd7jm7yZOMks/uH5heTHtDo7kc/ VMYIOBAH+cgT8L9EjuHtMOHbSc9fdQhvbCB6O1TLOKPntlCBzu8axRUt1EYBseos Qv4RGWOuDKRvwxOTrlNelJTER9+o1znVtNI3/XlghbA84jFtkFmFJ3B2FD4naqtb +HF0ikmOEo3ASnmeIwrEf3GyxW1YN5D6qXzKkJbwnXWu7q40WNlwfPd3H9SzwC8m KLKeUJRQr18FgTFZbOlribeF2HJiukTYDaqLnZ3qdeqfKdfF6bJInJpkNg== -----END CERTIFICATE-----Generated at Sun Oct 26 03:37:30 2025 by rpki-client