$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3262/M1a3BKPFf7WC3-7V5TFc36-ce6k.roa File: M1a3BKPFf7WC3-7V5TFc36-ce6k.roa (raw, json) Hash identifier: VJ4GOBoOX2iLhS1SGPonu/jlqH6UM/QjN6LvcAOlSns= Subject key identifier: 33:56:B7:04:A3:C5:7F:B5:82:DF:EE:D5:E5:31:5C:DF:AF:9C:7B:A9 Certificate issuer: /CN=E5C6CEFC8782F89731A2C72966EDC181DAB5AE22 Certificate serial: 0AFB Authority key identifier: E5:C6:CE:FC:87:82:F8:97:31:A2:C7:29:66:ED:C1:81:DA:B5:AE:22 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5cbO_IeC-JcxoscpZu3Bgdq1riI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3262/M1a3BKPFf7WC3-7V5TFc36-ce6k.roa Signing time: Sun 17 Aug 2025 01:39:49 +0000 ROA not before: Sun 17 Aug 2025 01:39:49 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 37969 IP address blocks: 103.98.92.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3262/5cbO_IeC-JcxoscpZu3Bgdq1riI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3262/5cbO_IeC-JcxoscpZu3Bgdq1riI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5cbO_IeC-JcxoscpZu3Bgdq1riI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:05:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2811 (0xafb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5C6CEFC8782F89731A2C72966EDC181DAB5AE22 Validity Not Before: Aug 17 01:39:49 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=3356B704A3C57FB582DFEED5E5315CDFAF9C7BA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:08:86:b6:21:5b:d4:3c:a7:68:6c:a2:78:f8: 2c:75:45:a3:87:81:ff:7b:a2:3e:d6:25:bc:77:4b: 4f:87:13:73:22:a9:fb:60:af:bf:cf:ee:73:07:a2: e2:51:11:66:d7:31:1b:40:aa:13:b5:80:bb:e1:e5: 64:b5:3b:b8:4b:71:65:97:28:7c:c0:f1:76:8c:f7: b7:b4:b9:be:79:9b:57:cd:34:bc:d2:f4:99:35:8d: b8:89:e7:af:c7:55:a7:9f:ce:fa:60:f2:af:8a:20: b0:0e:bf:b2:0d:01:4e:e1:7b:bd:77:1a:19:bc:f3: 96:49:1a:19:99:cd:a1:db:2c:3a:9c:db:04:6c:44: f8:fc:0a:88:c2:fb:d7:d6:5e:e1:3b:09:08:64:5d: db:e3:d0:39:4b:38:15:ec:43:bf:fd:61:9c:17:7b: 95:5a:bc:78:f5:27:61:03:66:9c:cb:75:4d:a5:63: 3d:26:76:88:e0:b9:ce:0d:61:40:c0:8a:d6:d2:56: 23:4f:ca:10:d5:30:9f:09:d3:f6:1f:e1:00:32:bf: e2:bc:c0:c6:40:a7:f5:5b:f6:10:e0:c0:ee:c9:67: a0:55:1f:bb:9e:af:d6:57:e2:dc:14:bc:27:ff:65: fa:e1:0f:32:d2:04:33:7c:5f:98:8c:3a:3a:b9:7e: 53:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:56:B7:04:A3:C5:7F:B5:82:DF:EE:D5:E5:31:5C:DF:AF:9C:7B:A9 X509v3 Authority Key Identifier: keyid:E5:C6:CE:FC:87:82:F8:97:31:A2:C7:29:66:ED:C1:81:DA:B5:AE:22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3262/5cbO_IeC-JcxoscpZu3Bgdq1riI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5cbO_IeC-JcxoscpZu3Bgdq1riI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3262/M1a3BKPFf7WC3-7V5TFc36-ce6k.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.98.92.0/23 Signature Algorithm: sha256WithRSAEncryption ca:2d:91:87:65:4b:9b:d6:e4:23:28:79:7b:33:0d:69:39:b5: a3:3e:05:0e:cf:a4:44:81:c0:22:0f:70:d6:dd:5e:3e:8c:a2: 95:62:41:b1:f8:c7:f5:d4:c2:4e:cc:5e:da:94:23:ce:6d:1c: 41:4e:90:a4:6f:fb:ba:1c:fc:d5:55:65:7a:94:87:c7:69:06: d2:9b:30:83:92:5d:fe:29:e5:3e:f1:ae:96:0c:9e:e9:a5:f2: 9e:fc:14:40:f2:9e:f6:82:f9:b6:c4:df:39:bb:15:dc:b8:91: 19:df:ab:04:2f:3d:a4:5c:67:fb:99:06:ad:82:a5:b3:2b:50: e3:f6:4c:52:5d:67:c8:2d:64:59:82:12:d1:77:77:60:3e:65: 82:91:5d:95:bb:a5:c0:f6:a4:99:a3:35:13:ad:b9:e1:5e:f7: 4c:78:71:93:31:85:b4:c1:c5:2c:2b:f6:94:6f:7c:46:c8:c1: 17:a5:36:7c:c7:4c:a9:69:1f:65:b6:ee:5c:be:36:a3:7a:c5: e3:ad:68:f9:60:bf:2b:df:4d:31:a4:3f:20:c5:e7:15:33:1e: 5b:67:99:eb:a1:77:7b:25:6e:1d:b9:7c:c0:81:a1:4c:0f:36: 00:1f:44:bc:d7:a6:db:29:d8:25:1d:f7:e3:02:a4:61:41:03: a9:0f:54:93 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICCvswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTVD NkNFRkM4NzgyRjg5NzMxQTJDNzI5NjZFREMxODFEQUI1QUUyMjAeFw0yNTA4MTcw MTM5NDlaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDMzNTZCNzA0QTNDNTdG QjU4MkRGRUVENUU1MzE1Q0RGQUY5QzdCQTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrCIa2IVvUPKdobKJ4+Cx1RaOHgf97oj7WJbx3S0+HE3Miqftg r7/P7nMHouJREWbXMRtAqhO1gLvh5WS1O7hLcWWXKHzA8XaM97e0ub55m1fNNLzS 9Jk1jbiJ56/HVaefzvpg8q+KILAOv7INAU7he713Ghm885ZJGhmZzaHbLDqc2wRs RPj8CojC+9fWXuE7CQhkXdvj0DlLOBXsQ7/9YZwXe5VavHj1J2EDZpzLdU2lYz0m dojguc4NYUDAitbSViNPyhDVMJ8J0/Yf4QAyv+K8wMZAp/Vb9hDgwO7JZ6BVH7ue r9ZX4twUvCf/ZfrhDzLSBDN8X5iMOjq5flNPAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUM1a3BKPFf7WC3+7V5TFc36+ce6kwHwYDVR0jBBgwFoAU5cbO/IeC+Jcxoscp Zu3Bgdq1riIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI2 Mi81Y2JPX0llQy1KY3hvc2NwWnUzQmdkcTFyaUkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzVjYk9fSWVDLUpjeG9zY3BadTNCZ2RxMXJpSS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNjIvTTFhM0JLUEZmN1dD My03VjVURmMzNi1jZTZrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAWdiXDANBgkqhkiG9w0BAQsFAAOCAQEAyi2Rh2VLm9bkIyh5ezMNaTm1oz4F Ds+kRIHAIg9w1t1ePoyilWJBsfjH9dTCTsxe2pQjzm0cQU6QpG/7uhz81VVlepSH x2kG0pswg5Jd/inlPvGulgye6aXynvwUQPKe9oL5tsTfObsV3LiRGd+rBC89pFxn +5kGrYKlsytQ4/ZMUl1nyC1kWYIS0Xd3YD5lgpFdlbulwPakmaM1E6254V73THhx kzGFtMHFLCv2lG98RsjBF6U2fMdMqWkfZbbuXL42o3rF461o+WC/K99NMaQ/IMXn FTMeW2eZ66F3eyVuHbl8wIGhTA82AB9EvNem2ynYJR334wKkYUEDqQ9Ukw== -----END CERTIFICATE-----Generated at Sun Oct 26 04:58:24 2025 by rpki-client