$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3171/v4AAxFJbbTiRR_KP0xELNmVo8bA.roa File: v4AAxFJbbTiRR_KP0xELNmVo8bA.roa (raw, json) Hash identifier: R/ssDd6LgSKrUio2Uz4xAHOlqcn6ipq1sdzBp22bRHc= Subject key identifier: BF:80:00:C4:52:5B:6D:38:91:47:F2:8F:D3:11:0B:36:65:68:F1:B0 Certificate issuer: /CN=02FB05DE3C544A9F1C344A63EB5F6CFDD3481156 Certificate serial: 15D1 Authority key identifier: 02:FB:05:DE:3C:54:4A:9F:1C:34:4A:63:EB:5F:6C:FD:D3:48:11:56 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/v4AAxFJbbTiRR_KP0xELNmVo8bA.roa Signing time: Sat 13 Sep 2025 03:03:55 +0000 ROA not before: Sat 13 Sep 2025 03:03:55 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 137443 IP address blocks: 103.197.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 02:03:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5585 (0x15d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02FB05DE3C544A9F1C344A63EB5F6CFDD3481156 Validity Not Before: Sep 13 03:03:55 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=BF8000C4525B6D389147F28FD3110B366568F1B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2d:16:e0:3c:de:bd:55:c6:d3:c2:41:1f:ae: 95:48:9b:ed:99:a1:0f:4f:e1:65:3d:87:17:5c:2d: 42:ab:98:d5:eb:ab:57:98:d1:28:79:b6:51:32:04: 68:85:ae:87:32:b3:eb:a6:e2:78:9e:86:51:28:90: 08:03:f3:a8:a4:0d:71:72:3c:53:36:7a:d6:5a:e3: 8c:32:92:4e:02:ea:bb:b0:ee:aa:40:af:07:f4:36: fa:df:c7:43:1c:1f:cb:44:c8:c1:7b:57:51:88:f9: b1:1d:7c:cf:b4:c6:4a:e1:76:16:e1:1b:3b:64:69: ec:bf:d6:92:f5:b5:16:e2:38:47:ef:bf:a1:f4:95: 91:e0:85:9f:4e:dc:ab:9e:e6:9e:ff:5e:bf:92:7d: d1:79:2a:cb:db:6c:8e:a6:e0:35:e0:b5:4f:d3:bb: 6a:85:61:b5:da:77:a9:3c:79:1e:96:dd:1b:3f:0e: 9f:11:35:39:b8:1f:49:d2:d7:2f:fb:73:9e:ad:d5: 29:35:51:75:a1:9f:be:73:42:b5:30:24:34:ab:a7: a7:f1:88:02:f0:3b:97:51:4a:8a:b4:05:cd:45:8e: 71:90:94:be:39:6f:fd:0f:11:55:fa:84:2c:34:2b: ef:65:09:28:1e:f2:f9:07:f6:cc:e2:db:36:1b:d4: 30:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:80:00:C4:52:5B:6D:38:91:47:F2:8F:D3:11:0B:36:65:68:F1:B0 X509v3 Authority Key Identifier: keyid:02:FB:05:DE:3C:54:4A:9F:1C:34:4A:63:EB:5F:6C:FD:D3:48:11:56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/v4AAxFJbbTiRR_KP0xELNmVo8bA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.197.183.0/24 Signature Algorithm: sha256WithRSAEncryption a2:d9:42:1e:be:6b:ae:62:27:31:63:fb:f6:af:da:cc:af:d7: b9:80:17:3c:39:17:90:88:30:26:4d:77:be:08:63:f6:c7:48: bb:a3:e8:8d:dc:b5:a1:95:4f:e0:00:d5:a4:c9:77:2f:a7:6f: 50:a4:ed:e4:d1:bc:1c:1a:d5:ba:3d:84:16:81:3d:51:f2:60: 3a:31:c0:d9:4c:2d:21:4b:59:02:a0:65:29:da:15:65:4a:d5: d5:2a:ae:5c:c3:87:f7:5b:85:ba:df:8f:fc:5f:a0:0c:a7:3e: e4:38:a6:ea:1a:92:19:e1:89:83:02:10:e3:f2:dc:07:d3:c5: b7:d7:fd:7b:bc:07:f5:f4:0c:8f:d7:0b:1a:e2:9b:32:b2:dd: 8d:af:64:5f:ee:32:ad:06:6b:08:ca:30:e3:1e:24:df:f6:5c: cb:d2:eb:9b:25:83:ef:b0:83:b4:a8:e9:4e:aa:02:4f:63:fc: 90:60:f7:8b:2d:27:40:a1:8a:13:74:39:2a:5b:a1:e7:f0:3e: 07:cf:6d:84:14:20:49:6f:04:b0:03:21:4d:fa:76:60:41:cf: ac:44:ec:09:81:be:0a:2c:3a:34:5d:d5:bf:b5:aa:b8:ba:cb: 99:d2:56:2a:35:2d:38:b8:1f:0d:42:6f:6b:ab:97:b0:6f:d7: 46:e2:ab:50 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFdEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDJG QjA1REUzQzU0NEE5RjFDMzQ0QTYzRUI1RjZDRkREMzQ4MTE1NjAeFw0yNTA5MTMw MzAzNTVaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEJGODAwMEM0NTI1QjZE Mzg5MTQ3RjI4RkQzMTEwQjM2NjU2OEYxQjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpLRbgPN69VcbTwkEfrpVIm+2ZoQ9P4WU9hxdcLUKrmNXrq1eY 0Sh5tlEyBGiFrocys+um4niehlEokAgD86ikDXFyPFM2etZa44wykk4C6ruw7qpA rwf0Nvrfx0McH8tEyMF7V1GI+bEdfM+0xkrhdhbhGztkaey/1pL1tRbiOEfvv6H0 lZHghZ9O3Kue5p7/Xr+SfdF5KsvbbI6m4DXgtU/Tu2qFYbXad6k8eR6W3Rs/Dp8R NTm4H0nS1y/7c56t1Sk1UXWhn75zQrUwJDSrp6fxiALwO5dRSoq0Bc1FjnGQlL45 b/0PEVX6hCw0K+9lCSge8vkH9szi2zYb1DBRAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUv4AAxFJbbTiRR/KP0xELNmVo8bAwHwYDVR0jBBgwFoAUAvsF3jxUSp8cNEpj 619s/dNIEVYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE3 MS9BdnNGM2p4VVNwOGNORXBqNjE5c19kTklFVlkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0F2c0YzanhVU3A4Y05FcGo2MTlzX2ROSUVWWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNzEvdjRBQXhGSmJiVGlS Ul9LUDB4RUxObVZvOGJBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGfFtzANBgkqhkiG9w0BAQsFAAOCAQEAotlCHr5rrmInMWP79q/azK/XuYAX PDkXkIgwJk13vghj9sdIu6Pojdy1oZVP4ADVpMl3L6dvUKTt5NG8HBrVuj2EFoE9 UfJgOjHA2UwtIUtZAqBlKdoVZUrV1SquXMOH91uFut+P/F+gDKc+5Dim6hqSGeGJ gwIQ4/LcB9PFt9f9e7wH9fQMj9cLGuKbMrLdja9kX+4yrQZrCMow4x4k3/Zcy9Lr myWD77CDtKjpTqoCT2P8kGD3iy0nQKGKE3Q5Kluh5/A+B89thBQgSW8EsAMhTfp2 YEHPrETsCYG+Ciw6NF3Vv7WquLrLmdJWKjUtOLgfDUJva6uXsG/XRuKrUA== -----END CERTIFICATE-----Generated at Tue Sep 16 01:40:58 2025 by rpki-client