$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3255/oGei8yg9fd9SkrzhzuLc-JojTYY.roa File: oGei8yg9fd9SkrzhzuLc-JojTYY.roa (raw, json) Hash identifier: 2V/6e6KOfi1svdPiW7H733/F3UuvvZUsPn4oRJj/Udc= Subject key identifier: A0:67:A2:F3:28:3D:7D:DF:52:92:BC:E1:CE:E2:DC:F8:9A:23:4D:86 Certificate issuer: /CN=7F918CF26503D1F9BCFA77DC0AA592A57DDF8245 Certificate serial: 0B4D Authority key identifier: 7F:91:8C:F2:65:03:D1:F9:BC:FA:77:DC:0A:A5:92:A5:7D:DF:82:45 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/f5GM8mUD0fm8-nfcCqWSpX3fgkU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3255/oGei8yg9fd9SkrzhzuLc-JojTYY.roa Signing time: Wed 20 Aug 2025 06:37:05 +0000 ROA not before: Wed 20 Aug 2025 06:37:05 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 151295 IP address blocks: 103.74.80.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3255/f5GM8mUD0fm8-nfcCqWSpX3fgkU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3255/f5GM8mUD0fm8-nfcCqWSpX3fgkU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/f5GM8mUD0fm8-nfcCqWSpX3fgkU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2893 (0xb4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F918CF26503D1F9BCFA77DC0AA592A57DDF8245 Validity Not Before: Aug 20 06:37:05 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=A067A2F3283D7DDF5292BCE1CEE2DCF89A234D86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7a:a7:c8:d9:96:df:a4:ae:4d:d8:c8:80:95: a1:10:ee:60:4a:51:b0:88:a0:d6:cb:2f:40:90:09: 8d:83:8b:9f:27:6b:50:d9:3f:ae:d0:4e:1f:6a:b6: 8a:ba:3b:de:0d:dd:d4:f9:40:f2:69:e9:29:6a:6a: 20:56:a2:6c:cc:ce:9b:22:92:3c:7b:46:75:c1:ab: 6e:fc:dd:7d:00:f9:38:d1:4f:3d:ac:d1:e8:30:c9: 03:83:f2:2f:f4:66:4c:48:1a:c5:97:ab:ec:63:ab: 59:5f:1b:24:23:e1:43:10:8b:13:01:c6:1d:7b:ca: 6f:8e:93:d7:37:26:7b:63:ec:c1:8f:d7:be:fa:de: 0e:f4:f5:fa:1a:68:90:60:f5:be:98:64:c6:46:cf: d5:3f:a8:a9:e5:da:01:6b:20:fa:a6:39:6d:31:89: 65:5e:a8:5d:8f:c3:a8:1a:14:d0:65:98:81:eb:15: 7a:ce:be:59:94:c8:b5:64:f7:19:20:3c:b9:1e:76: 79:50:1e:c7:1e:e6:a1:19:01:43:32:25:59:df:22: 4e:63:af:0e:70:6d:22:a5:cd:7b:29:3d:ce:a2:be: 49:38:c4:f7:36:08:db:99:f8:b9:56:49:b0:2b:25: 35:99:4a:bc:73:58:13:fb:ac:7e:8e:77:e2:57:cb: 1e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:67:A2:F3:28:3D:7D:DF:52:92:BC:E1:CE:E2:DC:F8:9A:23:4D:86 X509v3 Authority Key Identifier: keyid:7F:91:8C:F2:65:03:D1:F9:BC:FA:77:DC:0A:A5:92:A5:7D:DF:82:45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3255/f5GM8mUD0fm8-nfcCqWSpX3fgkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/f5GM8mUD0fm8-nfcCqWSpX3fgkU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3255/oGei8yg9fd9SkrzhzuLc-JojTYY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.74.80.0/22 Signature Algorithm: sha256WithRSAEncryption 79:2f:a2:83:c3:3d:40:e9:44:20:a6:2d:26:b3:d2:7c:fb:9c: 82:55:8e:d3:61:27:0f:0c:09:b0:9e:02:68:55:18:d8:a4:c8: ec:8b:7e:ad:5a:cf:c3:4a:15:92:53:72:bc:9e:59:53:3c:21: 5e:cc:95:40:20:74:19:af:8e:66:27:6e:43:d9:7d:3f:23:0c: 06:14:ae:44:0a:d1:54:9d:ef:76:ef:8e:f6:ae:f9:c3:63:ed: 3d:71:b4:28:39:d5:cb:5b:77:fb:30:81:ae:38:b5:85:8d:27: ad:3f:6f:19:e1:54:2c:f0:4d:97:e8:99:97:66:a9:51:9c:8d: 5d:75:f7:89:89:94:ff:6a:68:1b:7a:9d:82:9b:8a:5b:d1:a5: c2:e0:2f:c2:d8:a8:13:a2:82:b6:51:3a:10:75:19:76:ea:85: 2e:99:9d:4c:59:b9:41:ec:3c:a6:61:30:f1:aa:ff:af:60:39: 4c:0a:72:7c:c6:be:e2:27:51:9c:ac:cf:d4:16:7c:3e:29:e6: 76:80:97:79:a4:76:52:28:71:9c:8b:9b:a1:e7:e9:9d:e6:6e: 37:3e:0e:8f:a8:b6:27:76:af:b1:3d:74:4e:c2:98:2d:90:ac: 1f:bd:ee:ff:68:8a:19:40:a3:59:1c:c2:be:12:2b:ae:60:1c: 56:df:7f:72 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICC00wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0Y5 MThDRjI2NTAzRDFGOUJDRkE3N0RDMEFBNTkyQTU3RERGODI0NTAeFw0yNTA4MjAw NjM3MDVaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEEwNjdBMkYzMjgzRDdE REY1MjkyQkNFMUNFRTJEQ0Y4OUEyMzREODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCleqfI2ZbfpK5N2MiAlaEQ7mBKUbCIoNbLL0CQCY2Di58na1DZ P67QTh9qtoq6O94N3dT5QPJp6SlqaiBWomzMzpsikjx7RnXBq2783X0A+TjRTz2s 0egwyQOD8i/0ZkxIGsWXq+xjq1lfGyQj4UMQixMBxh17ym+Ok9c3Jntj7MGP1776 3g709foaaJBg9b6YZMZGz9U/qKnl2gFrIPqmOW0xiWVeqF2Pw6gaFNBlmIHrFXrO vlmUyLVk9xkgPLkednlQHsce5qEZAUMyJVnfIk5jrw5wbSKlzXspPc6ivkk4xPc2 CNuZ+LlWSbArJTWZSrxzWBP7rH6Od+JXyx4FAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUoGei8yg9fd9SkrzhzuLc+JojTYYwHwYDVR0jBBgwFoAUf5GM8mUD0fm8+nfc CqWSpX3fgkUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI1 NS9mNUdNOG1VRDBmbTgtbmZjQ3FXU3BYM2Zna1UuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2Y1R004bVVEMGZtOC1uZmNDcVdTcFgzZmdrVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNTUvb0dlaTh5ZzlmZDlT a3J6aHp1TGMtSm9qVFlZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmdKUDANBgkqhkiG9w0BAQsFAAOCAQEAeS+ig8M9QOlEIKYtJrPSfPucglWO 02EnDwwJsJ4CaFUY2KTI7It+rVrPw0oVklNyvJ5ZUzwhXsyVQCB0Ga+OZiduQ9l9 PyMMBhSuRArRVJ3vdu+O9q75w2PtPXG0KDnVy1t3+zCBrji1hY0nrT9vGeFULPBN l+iZl2apUZyNXXX3iYmU/2poG3qdgpuKW9GlwuAvwtioE6KCtlE6EHUZduqFLpmd TFm5Qew8pmEw8ar/r2A5TApyfMa+4idRnKzP1BZ8PinmdoCXeaR2UihxnIuboefp neZuNz4Oj6i2J3avsT10TsKYLZCsH73u/2iKGUCjWRzCvhIrrmAcVt9/cg== -----END CERTIFICATE-----Generated at Sat Oct 25 21:16:00 2025 by rpki-client