$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/585/3gLZcEB9b6CcG88DthuUvQzuMng.roa File: 3gLZcEB9b6CcG88DthuUvQzuMng.roa (raw, json) Hash identifier: sTik18vjb2qG/NYnXK3uG9tY/DL8xWE+DymUfLAIlnE= Subject key identifier: DE:02:D9:70:40:7D:6F:A0:9C:1B:CF:03:B6:1B:94:BD:0C:EE:32:78 Certificate issuer: /CN=A8FDF0BBAEA67953693896C763F129DA3B4183EB Certificate serial: 34 Authority key identifier: A8:FD:F0:BB:AE:A6:79:53:69:38:96:C7:63:F1:29:DA:3B:41:83:EB Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qP3wu66meVNpOJbHY_Ep2jtBg-s.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/585/3gLZcEB9b6CcG88DthuUvQzuMng.roa Signing time: Wed 03 Sep 2025 03:49:28 +0000 ROA not before: Wed 03 Sep 2025 03:49:28 +0000 ROA not after: Thu 27 Aug 2026 05:36:57 +0000 asID: 4837 IP address blocks: 103.24.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/585/qP3wu66meVNpOJbHY_Ep2jtBg-s.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/585/qP3wu66meVNpOJbHY_Ep2jtBg-s.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qP3wu66meVNpOJbHY_Ep2jtBg-s.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 15:02:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8FDF0BBAEA67953693896C763F129DA3B4183EB Validity Not Before: Sep 3 03:49:28 2025 GMT Not After : Aug 27 05:36:57 2026 GMT Subject: CN=DE02D970407D6FA09C1BCF03B61B94BD0CEE3278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ae:5c:07:65:2d:5d:e9:d9:ed:86:ce:05:1f: b3:7d:08:f8:05:46:10:5a:36:c8:b9:30:7b:55:66: 42:dc:c7:0d:47:18:34:4c:73:82:2d:ec:2b:0b:55: 4d:bd:9c:2e:73:64:43:4d:b5:be:7d:c3:c4:15:c7: a4:ab:99:5f:39:dc:13:96:45:9f:04:f1:22:7e:2f: d8:b6:e4:d4:3c:04:dc:e7:27:25:56:5a:3e:2b:d3: 85:5d:cc:e0:0c:49:c9:a7:9e:0a:be:d9:58:29:0e: 6a:b9:0a:ac:10:22:2e:35:cf:fe:dd:69:92:31:ec: e4:b8:35:ef:53:71:ea:b5:60:9f:84:17:17:e0:f2: 60:00:44:89:9d:43:1e:68:32:81:4a:33:9a:2e:5b: e3:ec:11:14:01:32:25:51:90:19:3b:8e:ac:31:29: 4a:19:14:d9:e6:58:ef:70:73:64:2a:1a:9a:73:31: ea:82:da:58:7b:a2:a9:8f:d4:72:ab:03:37:60:3d: 47:65:16:86:2f:94:4e:e3:cc:d8:4a:53:5b:e5:8e: ab:67:a2:6f:7a:c7:75:0c:62:40:ac:2f:14:e0:6b: 86:8d:1b:bd:32:93:ba:c1:50:74:12:e7:82:2e:bd: cf:00:77:fc:4c:b1:c4:83:de:13:1d:89:a5:cf:41: 78:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:02:D9:70:40:7D:6F:A0:9C:1B:CF:03:B6:1B:94:BD:0C:EE:32:78 X509v3 Authority Key Identifier: keyid:A8:FD:F0:BB:AE:A6:79:53:69:38:96:C7:63:F1:29:DA:3B:41:83:EB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/585/qP3wu66meVNpOJbHY_Ep2jtBg-s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qP3wu66meVNpOJbHY_Ep2jtBg-s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/585/3gLZcEB9b6CcG88DthuUvQzuMng.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.24.231.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:b7:73:a5:ea:a8:26:2c:36:d1:cf:8f:59:37:78:40:02:44: 48:d8:1f:a4:ba:9b:50:84:74:9c:d8:56:b5:a1:fc:a0:28:97: 44:65:70:b2:63:4b:1b:b1:11:f0:16:82:85:51:fd:3e:01:cf: d6:96:c6:95:50:e6:c8:77:f4:cd:95:a8:46:26:82:04:01:2f: e1:b3:b0:41:6c:f3:94:37:cc:a1:8f:21:8e:fd:c0:0b:55:4a: 28:15:6c:f6:ab:f8:93:e2:57:1b:9d:82:e8:25:6a:74:e7:30: 40:e8:5d:02:92:31:b6:a9:15:58:45:3a:e6:64:49:96:81:46: ce:34:cf:e3:f6:77:75:03:dc:d2:dd:97:56:b0:39:17:a1:86: 75:c4:6c:1e:5b:95:b0:e8:5c:8d:ac:f5:92:59:27:e9:27:ef: 28:ac:75:42:6e:67:f9:1e:1f:59:f6:2c:8f:c3:b7:ec:68:53: 92:7f:72:71:ad:d9:3e:6d:96:6c:da:94:93:d9:df:1e:64:93: 36:7c:85:8e:e0:61:68:24:f7:a8:fa:23:bb:5a:44:03:09:6c: 45:41:a8:1c:91:26:c3:89:22:27:3b:f5:bf:7b:d6:97:72:1f: 5a:cf:8d:f6:a2:86:e6:f6:a2:0a:17:2f:30:73:1d:c5:1e:c3: 9e:9b:3f:7b -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIBNDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBOEZE RjBCQkFFQTY3OTUzNjkzODk2Qzc2M0YxMjlEQTNCNDE4M0VCMB4XDTI1MDkwMzAz NDkyOFoXDTI2MDgyNzA1MzY1N1owMzExMC8GA1UEAxMoREUwMkQ5NzA0MDdENkZB MDlDMUJDRjAzQjYxQjk0QkQwQ0VFMzI3ODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMGuXAdlLV3p2e2GzgUfs30I+AVGEFo2yLkwe1VmQtzHDUcYNExz gi3sKwtVTb2cLnNkQ021vn3DxBXHpKuZXzncE5ZFnwTxIn4v2Lbk1DwE3OcnJVZa PivThV3M4AxJyaeeCr7ZWCkOarkKrBAiLjXP/t1pkjHs5Lg171Nx6rVgn4QXF+Dy YABEiZ1DHmgygUozmi5b4+wRFAEyJVGQGTuOrDEpShkU2eZY73BzZCoamnMx6oLa WHuiqY/UcqsDN2A9R2UWhi+UTuPM2EpTW+WOq2eib3rHdQxiQKwvFOBrho0bvTKT usFQdBLngi69zwB3/EyxxIPeEx2Jpc9BeHECAwEAAaOCAfEwggHtMB0GA1UdDgQW BBTeAtlwQH1voJwbzwO2G5S9DO4yeDAfBgNVHSMEGDAWgBSo/fC7rqZ5U2k4lsdj 8SnaO0GD6zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFwGA1UdHwRVMFMwUaBP oE2GS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC81ODUv cVAzd3U2Nm1lVk5wT0piSFlfRXAyanRCZy1zLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9xUDN3dTY2bWVWTnBPSmJIWV9FcDJqdEJnLXMuY2VyMA4GA1UdDwEB/wQE AwIHgDCBnAYIKwYBBQUHAQsEgY8wgYwwVwYIKwYBBQUHMAuGS3JzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC81ODUvM2dMWmNFQjliNkNjRzg4 RHRodVV2UXp1TW5nLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmlj LmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AGcY5zANBgkqhkiG9w0BAQsFAAOCAQEAn7dzpeqoJiw20c+PWTd4QAJESNgfpLqb UIR0nNhWtaH8oCiXRGVwsmNLG7ER8BaChVH9PgHP1pbGlVDmyHf0zZWoRiaCBAEv 4bOwQWzzlDfMoY8hjv3AC1VKKBVs9qv4k+JXG52C6CVqdOcwQOhdApIxtqkVWEU6 5mRJloFGzjTP4/Z3dQPc0t2XVrA5F6GGdcRsHluVsOhcjaz1klkn6SfvKKx1Qm5n +R4fWfYsj8O37GhTkn9yca3ZPm2WbNqUk9nfHmSTNnyFjuBhaCT3qPoju1pEAwls RUGoHJEmw4kiJzv1v3vWl3IfWs+N9qKG5vaiChcvMHMdxR7Dnps/ew== -----END CERTIFICATE-----Generated at Sat Sep 6 13:17:41 2025 by rpki-client