$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/561/gRN2B1s2Qs9d0LhXwV5XKHALsYQ.roa File: gRN2B1s2Qs9d0LhXwV5XKHALsYQ.roa (raw, json) Hash identifier: YwHgMVkqUWXut2Rs4WfXyAC6H7y3BPt8deZJnFjiiAE= Subject key identifier: 81:13:76:07:5B:36:42:CF:5D:D0:B8:57:C1:5E:57:28:70:0B:B1:84 Certificate issuer: /CN=83E77F37B3B93850835BAA30EE8FC12D55F87054 Certificate serial: 2019 Authority key identifier: 83:E7:7F:37:B3:B9:38:50:83:5B:AA:30:EE:8F:C1:2D:55:F8:70:54 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/gRN2B1s2Qs9d0LhXwV5XKHALsYQ.roa Signing time: Tue 26 Aug 2025 04:55:24 +0000 ROA not before: Tue 26 Aug 2025 04:55:24 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 4808 IP address blocks: 103.249.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 04:06:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8217 (0x2019) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83E77F37B3B93850835BAA30EE8FC12D55F87054 Validity Not Before: Aug 26 04:55:24 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=811376075B3642CF5DD0B857C15E5728700BB184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:09:33:79:01:96:6d:ee:12:b4:25:16:00:27: b5:bd:41:d5:84:9a:65:e7:ce:b1:94:af:37:bf:57: c1:62:3a:df:36:b0:05:03:5e:c7:6b:56:20:d9:f8: a9:9e:79:ff:78:95:a4:23:e3:e4:61:c7:f6:49:89: e4:a0:56:80:19:6f:6f:81:ba:3f:c0:79:a2:07:37: 60:3a:20:b5:07:ae:62:45:5e:e2:7f:b7:41:21:bc: 50:bc:af:82:58:35:22:4e:1f:21:ef:36:4f:ff:63: 22:3f:65:ae:ed:6f:e1:11:4e:e6:24:62:ef:63:4c: 59:f8:6c:c7:95:0d:af:6b:6d:51:70:ed:b5:f7:23: eb:c1:bd:1f:18:0a:e0:32:77:7b:a8:a2:4d:4e:30: 2a:d1:0c:97:b4:e9:df:56:96:6d:1f:dc:68:4a:cb: a2:25:e1:7d:d3:e9:9e:c2:9c:c6:b4:94:93:b8:70: 33:ba:cf:1c:e4:e2:f9:2f:94:84:ae:1f:bb:8a:45: 16:b2:e4:b8:b0:c6:16:52:ef:7f:6b:07:bd:fd:40: 14:cb:90:2a:05:14:66:2e:c4:a7:3c:0b:de:73:d6: 81:1a:40:d2:55:17:59:d6:9b:30:33:81:e1:2a:d7: 88:b3:3c:2c:28:ef:d6:02:54:a1:8c:80:05:71:91: f4:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:13:76:07:5B:36:42:CF:5D:D0:B8:57:C1:5E:57:28:70:0B:B1:84 X509v3 Authority Key Identifier: keyid:83:E7:7F:37:B3:B9:38:50:83:5B:AA:30:EE:8F:C1:2D:55:F8:70:54 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/gRN2B1s2Qs9d0LhXwV5XKHALsYQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.249.252.0/22 Signature Algorithm: sha256WithRSAEncryption b1:d3:4d:3d:f8:88:d6:57:d5:05:03:d5:f8:a2:ab:79:0e:5b: 0f:fc:ef:51:d4:31:36:54:7c:51:f6:7c:96:61:fa:db:e6:cf: a8:b6:4d:06:dc:da:0f:6f:be:0e:51:54:1a:fd:5a:7e:6a:08: 84:b3:e4:53:06:6e:a2:7c:84:f9:3e:4d:41:51:4b:18:7f:fc: c5:5b:e0:92:47:90:69:69:c5:1b:99:c0:9a:60:dc:bc:b9:e5: 09:83:b1:ca:fe:bc:1e:b2:91:f0:ec:3a:4d:00:74:81:46:5d: b6:bb:0e:e0:9a:9a:1d:3f:c2:e6:37:a4:26:4c:a5:93:1d:4d: 72:e5:89:31:da:12:0d:9f:d5:a0:53:0b:3b:8f:d6:7d:ac:89: 6c:50:cb:b3:3a:f1:d6:88:f4:92:8e:e4:32:44:67:c6:ce:94: b2:ca:44:10:f9:a7:d0:18:dc:30:1f:f8:db:10:e4:30:70:36: 5a:e1:16:40:47:f6:10:1c:b4:e2:5b:cf:97:41:c8:60:de:6e: 2f:2e:0f:46:b7:8a:05:18:23:e4:10:d2:c5:39:30:53:42:88: d9:05:f1:e2:33:62:24:d9:93:1d:cb:ab:62:5f:f3:44:e8:cb: c8:af:40:d9:dd:82:bb:53:29:51:f0:f6:72:01:77:8d:63:77: 35:4b:b9:44 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICIBkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODNF NzdGMzdCM0I5Mzg1MDgzNUJBQTMwRUU4RkMxMkQ1NUY4NzA1NDAeFw0yNTA4MjYw NDU1MjRaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDgxMTM3NjA3NUIzNjQy Q0Y1REQwQjg1N0MxNUU1NzI4NzAwQkIxODQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjCTN5AZZt7hK0JRYAJ7W9QdWEmmXnzrGUrze/V8FiOt82sAUD XsdrViDZ+Kmeef94laQj4+Rhx/ZJieSgVoAZb2+Buj/AeaIHN2A6ILUHrmJFXuJ/ t0EhvFC8r4JYNSJOHyHvNk//YyI/Za7tb+ERTuYkYu9jTFn4bMeVDa9rbVFw7bX3 I+vBvR8YCuAyd3uook1OMCrRDJe06d9Wlm0f3GhKy6Il4X3T6Z7CnMa0lJO4cDO6 zxzk4vkvlISuH7uKRRay5LiwxhZS739rB739QBTLkCoFFGYuxKc8C95z1oEaQNJV F1nWmzAzgeEq14izPCwo79YCVKGMgAVxkfQFAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUgRN2B1s2Qs9d0LhXwV5XKHALsYQwHwYDVR0jBBgwFoAUg+d/N7O5OFCDW6ow 7o/BLVX4cFQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTYx L2ctZF9ON081T0ZDRFc2b3c3b19CTFZYNGNGUS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZy1kX043TzVPRkNEVzZvdzdvX0JMVlg0Y0ZRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTYxL2dSTjJCMXMyUXM5ZDBM aFh3VjVYS0hBTHNZUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn+fwwDQYJKoZIhvcNAQELBQADggEBALHTTT34iNZX1QUD1fiiq3kOWw/871HU MTZUfFH2fJZh+tvmz6i2TQbc2g9vvg5RVBr9Wn5qCISz5FMGbqJ8hPk+TUFRSxh/ /MVb4JJHkGlpxRuZwJpg3Ly55QmDscr+vB6ykfDsOk0AdIFGXba7DuCamh0/wuY3 pCZMpZMdTXLliTHaEg2f1aBTCzuP1n2siWxQy7M68daI9JKO5DJEZ8bOlLLKRBD5 p9AY3DAf+NsQ5DBwNlrhFkBH9hActOJbz5dByGDebi8uD0a3igUYI+QQ0sU5MFNC iNkF8eIzYiTZkx3Lq2Jf80Toy8ivQNndgrtTKVHw9nIBd41jdzVLuUQ= -----END CERTIFICATE-----Generated at Sun Sep 7 03:28:15 2025 by rpki-client