$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3171/5MVnjDfL4W4g1C5aRhoUWw5lwns.roa File: 5MVnjDfL4W4g1C5aRhoUWw5lwns.roa (raw, json) Hash identifier: Ks9rggPSQfURozZUvcRptR+8LOfLqBBEYlij7wVKkSw= Subject key identifier: E4:C5:67:8C:37:CB:E1:6E:20:D4:2E:5A:46:1A:14:5B:0E:65:C2:7B Certificate issuer: /CN=02FB05DE3C544A9F1C344A63EB5F6CFDD3481156 Certificate serial: 15D7 Authority key identifier: 02:FB:05:DE:3C:54:4A:9F:1C:34:4A:63:EB:5F:6C:FD:D3:48:11:56 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/5MVnjDfL4W4g1C5aRhoUWw5lwns.roa Signing time: Sat 13 Sep 2025 03:03:56 +0000 ROA not before: Sat 13 Sep 2025 03:03:56 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 137443 IP address blocks: 103.139.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 02:03:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5591 (0x15d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02FB05DE3C544A9F1C344A63EB5F6CFDD3481156 Validity Not Before: Sep 13 03:03:56 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=E4C5678C37CBE16E20D42E5A461A145B0E65C27B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4b:61:e1:4b:82:e9:42:ba:bf:eb:b2:20:b5: 6d:b9:9a:9f:26:c8:06:9e:86:d1:39:a3:0c:a7:9f: 7c:07:5d:6a:3c:fc:34:8f:ba:29:84:69:ad:c3:51: 82:46:2b:f6:4c:4a:44:5e:1b:30:70:de:4d:e8:1a: 4b:d4:77:1b:3c:4a:14:a4:6f:cb:7e:d2:a8:18:28: 78:88:ed:22:ce:5e:82:8c:8d:48:90:4a:ab:96:e0: 17:74:5a:c0:17:dc:2e:af:de:ee:a5:ac:e2:4c:80: b0:47:19:ab:2f:5a:c4:fa:43:50:23:04:67:5b:2c: be:92:2e:2e:94:be:29:dd:25:ad:fe:d1:a2:13:bc: 27:93:5a:75:3f:c8:01:a5:22:e7:29:10:9e:17:3e: 42:eb:f6:b9:9c:4c:4b:10:ed:aa:d8:66:ee:b3:79: 58:d6:bd:e5:6a:19:d2:c6:16:89:c7:29:ae:ff:74: 41:82:a2:4d:8e:c1:f4:94:a9:1b:41:99:45:05:99: bd:b2:44:41:60:9c:c5:96:0c:41:fd:b9:d2:13:ba: f0:fd:67:b8:41:2e:30:4c:5a:d1:20:de:79:ba:08: f7:7c:45:a3:f6:fc:3c:ac:4b:21:0c:9c:01:bb:6e: 92:f2:8a:64:9f:72:48:85:3b:9c:89:11:e7:bf:2c: 11:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:C5:67:8C:37:CB:E1:6E:20:D4:2E:5A:46:1A:14:5B:0E:65:C2:7B X509v3 Authority Key Identifier: keyid:02:FB:05:DE:3C:54:4A:9F:1C:34:4A:63:EB:5F:6C:FD:D3:48:11:56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/5MVnjDfL4W4g1C5aRhoUWw5lwns.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.139.93.0/24 Signature Algorithm: sha256WithRSAEncryption c8:3e:11:cf:72:5b:de:42:99:f1:21:86:aa:1f:81:1a:47:10: fa:c9:a7:f2:8d:e9:b2:1c:dc:41:40:89:af:42:8d:ad:9f:44: 8c:1e:00:dc:a2:56:14:df:a3:17:94:7d:02:4f:39:06:6e:e1: f7:bd:2f:3b:82:7c:e8:75:18:f6:06:9d:48:27:59:bc:83:67: af:b0:6c:0b:98:7b:77:1f:60:47:09:bf:63:6f:6a:86:13:9b: 8f:fb:de:db:6c:f1:3a:85:85:23:99:81:74:21:14:71:35:ea: 4d:4c:38:fc:71:ec:df:80:1d:31:68:5f:66:f9:54:f9:b7:ed: 7e:b1:b2:1a:a0:f9:ee:0e:c1:9c:e4:42:a0:3f:bd:41:19:5e: bf:e5:12:f1:49:1f:c8:2c:4e:44:04:8f:5b:fc:63:26:c6:72: eb:26:88:fd:5f:f2:9d:78:fa:bd:9c:b0:79:ae:b9:77:53:f2: 68:6a:74:cb:19:7f:b3:ce:68:99:57:bb:9f:31:a7:68:3d:43: 18:f4:57:e8:9c:f1:7e:71:20:ce:d8:4a:3f:16:92:95:c0:d8: 57:1d:5e:b0:21:29:2c:c2:b5:47:ff:5f:39:e5:37:73:e2:19: 6e:d3:14:9d:eb:76:21:e0:89:f5:3e:0d:ad:3e:b5:f8:ea:82: e8:b1:eb:e3 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFdcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDJG QjA1REUzQzU0NEE5RjFDMzQ0QTYzRUI1RjZDRkREMzQ4MTE1NjAeFw0yNTA5MTMw MzAzNTZaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEU0QzU2NzhDMzdDQkUx NkUyMEQ0MkU1QTQ2MUExNDVCMEU2NUMyN0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDS2HhS4LpQrq/67IgtW25mp8myAaehtE5owynn3wHXWo8/DSP uimEaa3DUYJGK/ZMSkReGzBw3k3oGkvUdxs8ShSkb8t+0qgYKHiI7SLOXoKMjUiQ SquW4Bd0WsAX3C6v3u6lrOJMgLBHGasvWsT6Q1AjBGdbLL6SLi6UvindJa3+0aIT vCeTWnU/yAGlIucpEJ4XPkLr9rmcTEsQ7arYZu6zeVjWveVqGdLGFonHKa7/dEGC ok2OwfSUqRtBmUUFmb2yREFgnMWWDEH9udITuvD9Z7hBLjBMWtEg3nm6CPd8RaP2 /DysSyEMnAG7bpLyimSfckiFO5yJEee/LBFtAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU5MVnjDfL4W4g1C5aRhoUWw5lwnswHwYDVR0jBBgwFoAUAvsF3jxUSp8cNEpj 619s/dNIEVYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE3 MS9BdnNGM2p4VVNwOGNORXBqNjE5c19kTklFVlkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0F2c0YzanhVU3A4Y05FcGo2MTlzX2ROSUVWWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNzEvNU1WbmpEZkw0VzRn MUM1YVJob1VXdzVsd25zLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGeLXTANBgkqhkiG9w0BAQsFAAOCAQEAyD4Rz3Jb3kKZ8SGGqh+BGkcQ+smn 8o3pshzcQUCJr0KNrZ9EjB4A3KJWFN+jF5R9Ak85Bm7h970vO4J86HUY9gadSCdZ vINnr7BsC5h7dx9gRwm/Y29qhhObj/ve22zxOoWFI5mBdCEUcTXqTUw4/HHs34Ad MWhfZvlU+bftfrGyGqD57g7BnORCoD+9QRlev+US8UkfyCxORASPW/xjJsZy6yaI /V/ynXj6vZywea65d1PyaGp0yxl/s85omVe7nzGnaD1DGPRX6JzxfnEgzthKPxaS lcDYVx1esCEpLMK1R/9fOeU3c+IZbtMUnet2IeCJ9T4NrT61+OqC6LHr4w== -----END CERTIFICATE-----Generated at Tue Sep 16 01:41:41 2025 by rpki-client