$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3331/yNqVshGXli1u3opJ5fDOPZQ225g.roa File: yNqVshGXli1u3opJ5fDOPZQ225g.roa (raw, json) Hash identifier: oadm03aEFC5zsx2yDKoF5Znsnmhqk50He7/z+0c/ruU= Subject key identifier: C8:DA:95:B2:11:97:96:2D:6E:DE:8A:49:E5:F0:CE:3D:94:36:DB:98 Certificate issuer: /CN=2EC2CCB83DDFBF43332266B76A6221362143E365 Certificate serial: 0553 Authority key identifier: 2E:C2:CC:B8:3D:DF:BF:43:33:22:66:B7:6A:62:21:36:21:43:E3:65 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LsLMuD3fv0MzIma3amIhNiFD42U.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/yNqVshGXli1u3opJ5fDOPZQ225g.roa Signing time: Sun 24 Aug 2025 14:15:45 +0000 ROA not before: Sun 24 Aug 2025 14:15:45 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 4816 IP address blocks: 103.236.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/LsLMuD3fv0MzIma3amIhNiFD42U.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/LsLMuD3fv0MzIma3amIhNiFD42U.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LsLMuD3fv0MzIma3amIhNiFD42U.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 01:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1363 (0x553) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EC2CCB83DDFBF43332266B76A6221362143E365 Validity Not Before: Aug 24 14:15:45 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=C8DA95B21197962D6EDE8A49E5F0CE3D9436DB98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:ab:bc:eb:89:91:ab:aa:e4:82:05:14:1b:2f: 24:6b:70:69:07:2f:35:17:3f:3d:86:e3:07:17:18: ce:30:d3:9d:e0:01:a4:89:48:c9:81:4b:ad:32:90: 9a:54:01:22:fb:7b:a9:83:68:1a:ee:f9:f7:b2:94: bd:27:d1:30:b4:b3:84:a7:11:6f:91:33:30:2e:2b: ae:b9:10:cd:bc:58:7d:3c:96:70:b0:88:ce:5b:57: 4c:db:18:1c:1b:1d:29:b9:a2:f7:e3:25:9a:3b:e6: c3:47:a1:b3:0b:fe:ba:99:35:88:9b:ab:2d:51:4a: e6:4c:d7:e4:a1:e4:cf:ea:2d:37:04:08:a6:4f:a7: 06:1f:a2:60:78:ac:25:16:c1:56:21:5b:56:e0:41: 4b:64:4d:f4:8f:36:05:7a:86:bd:72:54:3c:0a:e6: 81:ea:88:af:42:8a:88:8d:35:49:a7:dd:9a:ce:f7: 18:2c:4b:bf:c6:e8:e8:27:69:8c:f5:29:25:27:81: cd:9b:17:fc:56:e9:a3:43:58:71:aa:24:b4:b8:5d: e5:c4:a6:95:63:ab:1c:9d:19:58:44:47:79:11:a7: ff:2d:8d:d6:1e:84:4a:37:aa:03:d9:8a:dc:7d:26: 0e:57:73:c1:91:6b:a8:b5:99:d7:fa:c4:f6:77:a8: b9:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:DA:95:B2:11:97:96:2D:6E:DE:8A:49:E5:F0:CE:3D:94:36:DB:98 X509v3 Authority Key Identifier: keyid:2E:C2:CC:B8:3D:DF:BF:43:33:22:66:B7:6A:62:21:36:21:43:E3:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/LsLMuD3fv0MzIma3amIhNiFD42U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LsLMuD3fv0MzIma3amIhNiFD42U.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/yNqVshGXli1u3opJ5fDOPZQ225g.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.236.60.0/22 Signature Algorithm: sha256WithRSAEncryption 38:24:b9:44:49:dc:bf:6d:d5:20:e7:8c:2a:a2:25:e4:99:96: 64:2d:0c:9e:a6:14:9a:c3:62:34:c1:08:48:dd:b0:2c:cf:f4: 34:39:8d:af:66:b6:24:5d:fe:e1:08:40:b1:e7:a9:43:8f:df: 0f:76:c7:f1:78:66:1a:7c:43:8d:b3:80:90:d8:4a:36:f9:42: fd:90:79:79:6c:92:13:99:91:6e:30:74:28:98:84:62:bc:8b: 2c:f2:49:5c:55:4e:b1:fc:12:3c:16:d0:80:43:63:de:af:f4: 77:11:9e:8b:05:ff:36:c2:d1:db:f1:1f:c5:13:64:a0:d9:4a: de:c9:76:37:fd:3b:2b:0f:c6:3c:85:b6:3e:43:b5:e6:7f:4c: 40:ba:91:e7:a3:f6:5d:c9:bf:41:9b:f3:1c:bf:32:1c:eb:7b: 03:aa:7f:3a:30:34:91:1b:90:ce:ba:5e:d4:4f:36:6c:cf:74: 99:ef:f4:da:b1:46:06:57:b0:e1:c7:7b:7b:0a:62:e8:c5:2f: 8b:1d:16:ff:6f:6a:29:54:0c:01:18:fe:92:80:08:ae:8f:4a: d7:e9:a7:b5:e0:3d:68:57:87:d1:7d:65:ea:21:18:b2:b8:3e: b5:6a:f8:10:d2:a8:b8:fa:41:e6:1a:77:66:07:0a:00:74:05: 11:97:6e:4c -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICBVMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkVD MkNDQjgzRERGQkY0MzMzMjI2NkI3NkE2MjIxMzYyMTQzRTM2NTAeFw0yNTA4MjQx NDE1NDVaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEM4REE5NUIyMTE5Nzk2 MkQ2RURFOEE0OUU1RjBDRTNEOTQzNkRCOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDvq7zriZGrquSCBRQbLyRrcGkHLzUXPz2G4wcXGM4w053gAaSJ SMmBS60ykJpUASL7e6mDaBru+feylL0n0TC0s4SnEW+RMzAuK665EM28WH08lnCw iM5bV0zbGBwbHSm5ovfjJZo75sNHobML/rqZNYibqy1RSuZM1+Sh5M/qLTcECKZP pwYfomB4rCUWwVYhW1bgQUtkTfSPNgV6hr1yVDwK5oHqiK9CioiNNUmn3ZrO9xgs S7/G6OgnaYz1KSUngc2bF/xW6aNDWHGqJLS4XeXEppVjqxydGVhER3kRp/8tjdYe hEo3qgPZitx9Jg5Xc8GRa6i1mdf6xPZ3qLnrAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUyNqVshGXli1u3opJ5fDOPZQ225gwHwYDVR0jBBgwFoAULsLMuD3fv0MzIma3 amIhNiFD42UwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz MS9Mc0xNdUQzZnYwTXpJbWEzYW1JaE5pRkQ0MlUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0xzTE11RDNmdjBNekltYTNhbUloTmlGRDQyVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMzEveU5xVnNoR1hsaTF1 M29wSjVmRE9QWlEyMjVnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmfsPDANBgkqhkiG9w0BAQsFAAOCAQEAOCS5REncv23VIOeMKqIl5JmWZC0M nqYUmsNiNMEISN2wLM/0NDmNr2a2JF3+4QhAseepQ4/fD3bH8XhmGnxDjbOAkNhK NvlC/ZB5eWySE5mRbjB0KJiEYryLLPJJXFVOsfwSPBbQgENj3q/0dxGeiwX/NsLR 2/EfxRNkoNlK3sl2N/07Kw/GPIW2PkO15n9MQLqR56P2Xcm/QZvzHL8yHOt7A6p/ OjA0kRuQzrpe1E82bM90me/02rFGBlew4cd7ewpi6MUvix0W/29qKVQMARj+koAI ro9K1+mnteA9aFeH0X1l6iEYsrg+tWr4ENKouPpB5hp3ZgcKAHQFEZduTA== -----END CERTIFICATE-----Generated at Mon Sep 8 22:31:48 2025 by rpki-client