$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/561/qOZk9rWPszVKmAVRffoXPM8F3uw.roa File: qOZk9rWPszVKmAVRffoXPM8F3uw.roa (raw, json) Hash identifier: +1uSwYgkXsruDb5BTYshXC4JoWfvyf2ytNrKNBEWXGM= Subject key identifier: A8:E6:64:F6:B5:8F:B3:35:4A:98:05:51:7D:FA:17:3C:CF:05:DE:EC Certificate issuer: /CN=83E77F37B3B93850835BAA30EE8FC12D55F87054 Certificate serial: 2018 Authority key identifier: 83:E7:7F:37:B3:B9:38:50:83:5B:AA:30:EE:8F:C1:2D:55:F8:70:54 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/qOZk9rWPszVKmAVRffoXPM8F3uw.roa Signing time: Tue 26 Aug 2025 04:55:24 +0000 ROA not before: Tue 26 Aug 2025 04:55:24 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 56282 IP address blocks: 103.249.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 05:06:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8216 (0x2018) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83E77F37B3B93850835BAA30EE8FC12D55F87054 Validity Not Before: Aug 26 04:55:24 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=A8E664F6B58FB3354A9805517DFA173CCF05DEEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3d:69:bb:f2:db:7f:9c:5b:d6:12:07:a4:15: df:e8:56:85:eb:10:fc:68:b5:d6:87:f9:12:af:8b: 0b:e2:b1:e3:82:82:bd:0b:3c:4a:8e:09:3d:97:39: 21:70:ce:93:97:e1:76:6e:1e:7d:ce:1d:4d:93:bc: 35:ec:03:99:fe:10:a5:1d:96:23:b8:6c:a7:ef:3a: f5:c5:5b:a8:65:48:1d:a7:3f:ef:24:47:c4:33:a0: cf:eb:b6:a7:fd:0a:74:60:77:c1:17:73:05:c5:06: a8:8b:00:17:ab:1f:35:74:35:4e:79:e2:eb:4d:02: 38:4e:2e:62:ec:9f:29:ed:96:d3:6c:55:d2:24:b2: bd:2d:c0:bc:29:0f:48:0e:26:27:d1:93:f9:30:be: 4f:a4:2a:58:d5:2f:9f:86:84:61:f6:56:27:d9:54: 09:e9:71:37:31:a6:63:3f:c7:f6:b1:ef:07:d7:0e: 4a:29:b0:98:32:71:00:ac:8f:5e:d9:41:d6:6b:c7: 09:4e:d6:a6:ee:b4:1c:a3:82:8e:58:ee:43:35:4c: 2b:0d:ac:10:11:01:db:3f:96:f8:c4:9b:52:3c:7a: a1:b8:c6:02:fe:e0:0b:e3:a8:7b:6b:63:2f:00:14: d8:37:3a:aa:89:73:38:81:e6:c7:29:d4:e1:23:bc: 5b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E6:64:F6:B5:8F:B3:35:4A:98:05:51:7D:FA:17:3C:CF:05:DE:EC X509v3 Authority Key Identifier: keyid:83:E7:7F:37:B3:B9:38:50:83:5B:AA:30:EE:8F:C1:2D:55:F8:70:54 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/qOZk9rWPszVKmAVRffoXPM8F3uw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.249.252.0/22 Signature Algorithm: sha256WithRSAEncryption 7f:1c:77:7f:ff:09:d2:e4:d1:92:af:51:25:74:5c:25:8e:11: 16:aa:1d:8e:3e:fb:52:05:d7:01:04:45:21:f0:b6:96:47:f7: 97:79:d5:f5:90:03:5e:78:b0:88:66:6e:ad:de:cd:b0:8f:55: 2b:87:5b:e1:88:3e:4d:e3:eb:df:3b:d1:d9:5c:ef:f3:39:2b: 7e:28:a5:99:c2:b1:30:1b:3e:4d:6c:13:2c:35:e9:a2:fa:45: a3:38:c8:31:4e:f7:ef:fe:fe:ed:bc:98:db:20:3d:0e:f6:ae: 08:c4:4b:84:fe:05:3d:14:81:5f:eb:b2:97:c2:ea:45:a7:0b: 7c:5b:76:39:49:67:3e:4b:c3:14:96:19:55:77:5f:ce:f3:03: 2a:e1:98:b6:50:e3:7a:a2:3f:d2:4c:9f:5b:1f:15:08:6c:a3: 65:09:6e:0e:ec:a1:37:a2:e6:6a:43:4d:d0:d9:3a:a2:44:3d: 0d:63:d8:33:bd:b2:b7:bc:29:6d:40:97:94:b4:85:ce:a2:b0: c7:a6:8c:b8:10:a7:2f:59:31:92:6d:6f:cc:f7:e8:c2:d3:a9: be:9c:c6:5b:fc:92:5b:ca:dc:90:56:35:ae:f3:f3:f7:fc:7e: e8:d9:57:9f:56:87:3f:3f:6d:cf:cc:c2:1d:0d:fe:17:eb:e0: 33:d1:4c:9e -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICIBgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODNF NzdGMzdCM0I5Mzg1MDgzNUJBQTMwRUU4RkMxMkQ1NUY4NzA1NDAeFw0yNTA4MjYw NDU1MjRaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEE4RTY2NEY2QjU4RkIz MzU0QTk4MDU1MTdERkExNzNDQ0YwNURFRUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0PWm78tt/nFvWEgekFd/oVoXrEPxotdaH+RKviwviseOCgr0L PEqOCT2XOSFwzpOX4XZuHn3OHU2TvDXsA5n+EKUdliO4bKfvOvXFW6hlSB2nP+8k R8QzoM/rtqf9CnRgd8EXcwXFBqiLABerHzV0NU554utNAjhOLmLsnyntltNsVdIk sr0twLwpD0gOJifRk/kwvk+kKljVL5+GhGH2VifZVAnpcTcxpmM/x/ax7wfXDkop sJgycQCsj17ZQdZrxwlO1qbutByjgo5Y7kM1TCsNrBARAds/lvjEm1I8eqG4xgL+ 4AvjqHtrYy8AFNg3OqqJcziB5scp1OEjvFtdAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUqOZk9rWPszVKmAVRffoXPM8F3uwwHwYDVR0jBBgwFoAUg+d/N7O5OFCDW6ow 7o/BLVX4cFQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTYx L2ctZF9ON081T0ZDRFc2b3c3b19CTFZYNGNGUS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZy1kX043TzVPRkNEVzZvdzdvX0JMVlg0Y0ZRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTYxL3FPWms5cldQc3pWS21B VlJmZm9YUE04RjN1dy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn+fwwDQYJKoZIhvcNAQELBQADggEBAH8cd3//CdLk0ZKvUSV0XCWOERaqHY4+ +1IF1wEERSHwtpZH95d51fWQA154sIhmbq3ezbCPVSuHW+GIPk3j69870dlc7/M5 K34opZnCsTAbPk1sEyw16aL6RaM4yDFO9+/+/u28mNsgPQ72rgjES4T+BT0UgV/r spfC6kWnC3xbdjlJZz5LwxSWGVV3X87zAyrhmLZQ43qiP9JMn1sfFQhso2UJbg7s oTei5mpDTdDZOqJEPQ1j2DO9sre8KW1Al5S0hc6isMemjLgQpy9ZMZJtb8z36MLT qb6cxlv8klvK3JBWNa7z8/f8fujZV59Whz8/bc/Mwh0N/hfr4DPRTJ4= -----END CERTIFICATE-----Generated at Mon Sep 8 02:36:01 2025 by rpki-client