$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3331/9yVAX-Q4njb8sfExeTz4wqv6e2A.roa File: 9yVAX-Q4njb8sfExeTz4wqv6e2A.roa (raw, json) Hash identifier: NddH2JQ4KcG/8NxwyE1SyffUbN29gWHicCPTJzMRIUQ= Subject key identifier: F7:25:40:5F:E4:38:9E:36:FC:B1:F1:31:79:3C:F8:C2:AB:FA:7B:60 Certificate issuer: /CN=2EC2CCB83DDFBF43332266B76A6221362143E365 Certificate serial: 0555 Authority key identifier: 2E:C2:CC:B8:3D:DF:BF:43:33:22:66:B7:6A:62:21:36:21:43:E3:65 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LsLMuD3fv0MzIma3amIhNiFD42U.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/9yVAX-Q4njb8sfExeTz4wqv6e2A.roa Signing time: Sun 24 Aug 2025 14:15:45 +0000 ROA not before: Sun 24 Aug 2025 14:15:45 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 4816 IP address blocks: 103.236.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/LsLMuD3fv0MzIma3amIhNiFD42U.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/LsLMuD3fv0MzIma3amIhNiFD42U.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LsLMuD3fv0MzIma3amIhNiFD42U.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 01:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1365 (0x555) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EC2CCB83DDFBF43332266B76A6221362143E365 Validity Not Before: Aug 24 14:15:45 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=F725405FE4389E36FCB1F131793CF8C2ABFA7B60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:21:11:15:1b:2a:76:bd:f2:a6:9a:66:e2:e6: 4b:a0:8c:e9:59:9c:88:94:36:5d:9f:76:48:25:60: 85:c5:e5:0e:3a:6a:bd:37:81:e5:94:1a:ed:8a:d2: 3f:03:8a:64:76:e3:6c:e4:e0:a4:11:fe:51:13:ca: 8e:3c:ee:7c:46:3c:d0:6d:af:0e:7e:f0:2f:e3:71: d0:b6:ce:da:92:01:20:1d:00:d9:02:13:d7:13:ec: d2:ee:27:5a:58:24:27:b5:47:54:da:3f:75:66:93: 45:cb:26:d9:8b:81:5a:4d:4a:7b:90:97:74:d3:26: 41:6d:34:4a:5f:39:ae:34:d2:6c:c2:23:cb:9f:75: 28:cb:f2:b8:e6:91:d1:61:16:b9:8b:6c:80:c9:04: 08:56:ac:ac:2c:36:c5:ff:1c:de:99:92:3a:19:3e: cf:95:f0:97:11:93:cb:fd:34:09:1c:1f:49:36:44: d7:00:3d:42:50:40:7e:ab:e9:e4:da:a3:32:72:74: 63:39:96:4e:15:ba:bb:3a:79:54:f5:ff:8d:dc:1a: 52:e1:ce:a5:16:0e:f0:04:aa:e1:9b:1d:f3:c7:4c: d0:c3:89:7f:70:02:56:66:f9:aa:ac:05:06:c1:01: 40:a3:05:98:80:18:3f:8b:b5:93:55:ce:0b:c9:a7: 1f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:25:40:5F:E4:38:9E:36:FC:B1:F1:31:79:3C:F8:C2:AB:FA:7B:60 X509v3 Authority Key Identifier: keyid:2E:C2:CC:B8:3D:DF:BF:43:33:22:66:B7:6A:62:21:36:21:43:E3:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/LsLMuD3fv0MzIma3amIhNiFD42U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LsLMuD3fv0MzIma3amIhNiFD42U.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/9yVAX-Q4njb8sfExeTz4wqv6e2A.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.236.56.0/22 Signature Algorithm: sha256WithRSAEncryption 0a:d6:3a:e3:9f:bf:51:ee:22:f3:3e:47:0f:2b:88:06:f3:32: c8:8e:7a:4e:61:67:a5:1e:63:f4:ae:a1:ae:62:bf:fa:f4:4a: 0d:a8:f4:6b:dc:ee:4b:85:28:91:06:bd:f5:c4:e8:98:03:f5: 2b:94:5d:ee:9a:11:7b:fd:e7:4d:ba:81:aa:3b:e0:bf:c1:6a: 0e:42:c1:10:b2:56:7a:4f:7e:e7:74:45:6d:78:c3:8b:26:2b: e5:59:d5:45:4f:28:73:f9:8c:f9:b2:ce:7b:e7:24:10:b6:cd: ab:8a:7f:64:e6:bc:72:cc:31:dc:91:66:ef:b7:6e:bb:13:9b: 3d:4d:a2:da:cb:16:eb:22:8d:21:c4:7b:f0:cc:7e:d0:51:3d: 4b:87:41:35:a2:22:0f:e2:fb:30:b8:92:6a:a5:26:77:f9:b0: 60:b1:b3:93:28:c0:72:e4:e7:01:cc:1e:53:14:e4:da:86:fe: 4b:be:ad:a0:fa:91:e3:74:4b:bd:ab:e8:20:93:99:9e:0a:d4: 8f:42:8f:a5:e8:7f:a3:cc:e7:c8:f0:34:30:39:4b:fd:c2:02: 0c:87:59:a4:d9:9c:99:a2:7f:1f:e0:0c:4e:5f:43:f9:c8:b5: 2f:ea:f7:4c:d0:2e:72:15:64:be:ba:37:06:dd:86:40:cb:0f: a5:ca:dc:13 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICBVUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkVD MkNDQjgzRERGQkY0MzMzMjI2NkI3NkE2MjIxMzYyMTQzRTM2NTAeFw0yNTA4MjQx NDE1NDVaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEY3MjU0MDVGRTQzODlF MzZGQ0IxRjEzMTc5M0NGOEMyQUJGQTdCNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6IREVGyp2vfKmmmbi5kugjOlZnIiUNl2fdkglYIXF5Q46ar03 geWUGu2K0j8DimR242zk4KQR/lETyo487nxGPNBtrw5+8C/jcdC2ztqSASAdANkC E9cT7NLuJ1pYJCe1R1TaP3Vmk0XLJtmLgVpNSnuQl3TTJkFtNEpfOa400mzCI8uf dSjL8rjmkdFhFrmLbIDJBAhWrKwsNsX/HN6ZkjoZPs+V8JcRk8v9NAkcH0k2RNcA PUJQQH6r6eTaozJydGM5lk4Vurs6eVT1/43cGlLhzqUWDvAEquGbHfPHTNDDiX9w AlZm+aqsBQbBAUCjBZiAGD+LtZNVzgvJpx8BAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU9yVAX+Q4njb8sfExeTz4wqv6e2AwHwYDVR0jBBgwFoAULsLMuD3fv0MzIma3 amIhNiFD42UwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz MS9Mc0xNdUQzZnYwTXpJbWEzYW1JaE5pRkQ0MlUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0xzTE11RDNmdjBNekltYTNhbUloTmlGRDQyVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMzEvOXlWQVgtUTRuamI4 c2ZFeGVUejR3cXY2ZTJBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmfsODANBgkqhkiG9w0BAQsFAAOCAQEACtY645+/Ue4i8z5HDyuIBvMyyI56 TmFnpR5j9K6hrmK/+vRKDaj0a9zuS4UokQa99cTomAP1K5Rd7poRe/3nTbqBqjvg v8FqDkLBELJWek9+53RFbXjDiyYr5VnVRU8oc/mM+bLOe+ckELbNq4p/ZOa8cswx 3JFm77duuxObPU2i2ssW6yKNIcR78Mx+0FE9S4dBNaIiD+L7MLiSaqUmd/mwYLGz kyjAcuTnAcweUxTk2ob+S76toPqR43RLvavoIJOZngrUj0KPpeh/o8znyPA0MDlL /cICDIdZpNmcmaJ/H+AMTl9D+ci1L+r3TNAuchVkvro3Bt2GQMsPpcrcEw== -----END CERTIFICATE-----Generated at Mon Sep 8 22:30:48 2025 by rpki-client