$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/561/W9EJTyOUqbRzDByAC9iW5bLBI4k.roa File: W9EJTyOUqbRzDByAC9iW5bLBI4k.roa (raw, json) Hash identifier: 8u7flTgkhK7SHxPcvoeMOlGk7ZTJpfJdcvoTifGu8Ow= Subject key identifier: 5B:D1:09:4F:23:94:A9:B4:73:0C:1C:80:0B:D8:96:E5:B2:C1:23:89 Certificate issuer: /CN=83E77F37B3B93850835BAA30EE8FC12D55F87054 Certificate serial: 2032 Authority key identifier: 83:E7:7F:37:B3:B9:38:50:83:5B:AA:30:EE:8F:C1:2D:55:F8:70:54 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/W9EJTyOUqbRzDByAC9iW5bLBI4k.roa Signing time: Tue 26 Aug 2025 05:12:01 +0000 ROA not before: Tue 26 Aug 2025 05:12:01 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 23724 IP address blocks: 103.235.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 05:06:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8242 (0x2032) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83E77F37B3B93850835BAA30EE8FC12D55F87054 Validity Not Before: Aug 26 05:12:01 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=5BD1094F2394A9B4730C1C800BD896E5B2C12389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f9:05:d0:f8:c4:8a:ab:05:4b:25:44:7b:fd: 6f:78:6b:d3:ca:cd:f8:93:a5:ea:6b:23:8e:5f:16: 74:2f:11:36:82:7d:bf:74:42:69:34:73:7e:de:74: bb:2c:64:2d:39:e7:f4:fb:b7:7d:5e:cb:19:16:0a: a9:0b:32:68:69:e0:c7:11:62:f7:bf:49:f9:b5:03: 6b:d8:4b:52:dc:71:c0:54:49:14:81:22:99:e4:b9: b2:62:56:8f:5e:5f:6d:66:d2:4f:77:df:48:55:cc: 35:6a:89:7c:81:8e:99:67:8c:c6:79:34:4d:43:c4: 9d:fe:1b:0f:cf:b1:36:41:69:0c:64:21:42:51:04: af:74:a2:63:71:44:8e:5c:4c:e7:3e:2a:3b:54:73: f8:b7:0e:1f:d3:dd:05:49:69:3c:7d:dc:f7:9e:6e: 83:84:e6:92:e8:45:3b:63:2d:7a:08:8c:5f:16:8f: e8:49:8f:bf:88:b0:88:b0:81:6c:df:1d:1e:86:ea: 6d:ee:28:6b:96:56:a3:34:24:e5:02:70:c7:b1:d8: 29:f3:bc:64:b9:5a:59:17:a7:c4:3c:2d:49:e7:a1: ae:a1:41:c7:49:3e:fa:4e:d7:c2:a9:f6:9b:b8:bc: 93:54:c5:5f:93:8f:9c:52:51:9d:fc:bd:ef:3e:c1: 63:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D1:09:4F:23:94:A9:B4:73:0C:1C:80:0B:D8:96:E5:B2:C1:23:89 X509v3 Authority Key Identifier: keyid:83:E7:7F:37:B3:B9:38:50:83:5B:AA:30:EE:8F:C1:2D:55:F8:70:54 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/W9EJTyOUqbRzDByAC9iW5bLBI4k.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.235.224.0/22 Signature Algorithm: sha256WithRSAEncryption 2c:bb:d9:b9:8b:02:2b:79:63:72:00:21:0a:9d:58:7d:38:e8: 54:a5:c5:22:82:d1:02:e1:00:8e:4c:84:05:1f:d2:fc:3e:37: 89:a9:42:19:69:0e:c3:52:86:bd:09:3e:b9:f4:8f:70:5c:f0: 7b:26:16:29:2e:07:18:29:7e:de:ac:c9:22:d9:35:02:10:47: 81:61:ef:7e:b6:c4:ec:74:dc:e7:3a:e3:bc:ed:59:6a:7e:c0: 5f:03:d0:6b:65:80:0a:1f:e2:14:19:4e:86:1c:d9:3b:d5:6d: a3:24:67:c4:f9:90:c7:3f:55:3a:23:00:71:fe:21:23:33:81: d4:23:53:e2:4a:e0:20:8d:a7:fd:94:2e:2e:4c:cf:0f:9f:6f: ee:47:6b:a1:55:1e:15:88:06:37:6b:bb:1d:c0:23:e5:7c:95: 7f:11:d9:6a:e5:85:1b:dc:3f:80:88:4c:08:75:c2:f1:c3:b2: b7:a3:59:d8:23:9e:e7:07:fb:02:2e:f8:19:7f:f4:ff:84:02: 52:57:33:08:24:99:c2:dc:ad:15:c2:a1:cf:6e:0c:55:5d:e9: 5f:ad:3e:b9:4e:9e:67:81:8f:01:59:dd:4a:51:4f:0d:c1:48: 24:51:46:f3:2c:bf:ab:47:af:5c:08:af:7d:77:0e:59:c9:e9: da:06:3e:4a -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICIDIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODNF NzdGMzdCM0I5Mzg1MDgzNUJBQTMwRUU4RkMxMkQ1NUY4NzA1NDAeFw0yNTA4MjYw NTEyMDFaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDVCRDEwOTRGMjM5NEE5 QjQ3MzBDMUM4MDBCRDg5NkU1QjJDMTIzODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0+QXQ+MSKqwVLJUR7/W94a9PKzfiTpeprI45fFnQvETaCfb90 Qmk0c37edLssZC055/T7t31eyxkWCqkLMmhp4McRYve/Sfm1A2vYS1LcccBUSRSB IpnkubJiVo9eX21m0k9330hVzDVqiXyBjplnjMZ5NE1DxJ3+Gw/PsTZBaQxkIUJR BK90omNxRI5cTOc+KjtUc/i3Dh/T3QVJaTx93PeeboOE5pLoRTtjLXoIjF8Wj+hJ j7+IsIiwgWzfHR6G6m3uKGuWVqM0JOUCcMex2CnzvGS5WlkXp8Q8LUnnoa6hQcdJ PvpO18Kp9pu4vJNUxV+Tj5xSUZ38ve8+wWO7AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUW9EJTyOUqbRzDByAC9iW5bLBI4kwHwYDVR0jBBgwFoAUg+d/N7O5OFCDW6ow 7o/BLVX4cFQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTYx L2ctZF9ON081T0ZDRFc2b3c3b19CTFZYNGNGUS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZy1kX043TzVPRkNEVzZvdzdvX0JMVlg0Y0ZRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTYxL1c5RUpUeU9VcWJSekRC eUFDOWlXNWJMQkk0ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn6+AwDQYJKoZIhvcNAQELBQADggEBACy72bmLAit5Y3IAIQqdWH046FSlxSKC 0QLhAI5MhAUf0vw+N4mpQhlpDsNShr0JPrn0j3Bc8HsmFikuBxgpft6sySLZNQIQ R4Fh7362xOx03Oc647ztWWp+wF8D0GtlgAof4hQZToYc2TvVbaMkZ8T5kMc/VToj AHH+ISMzgdQjU+JK4CCNp/2ULi5Mzw+fb+5Ha6FVHhWIBjdrux3AI+V8lX8R2Wrl hRvcP4CITAh1wvHDsrejWdgjnucH+wIu+Bl/9P+EAlJXMwgkmcLcrRXCoc9uDFVd 6V+tPrlOnmeBjwFZ3UpRTw3BSCRRRvMsv6tHr1wIr313DlnJ6doGPko= -----END CERTIFICATE-----Generated at Mon Sep 8 02:36:03 2025 by rpki-client