$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/585/RXJSANHbZrdpPxa1bsPmTvjO39Q.roa File: RXJSANHbZrdpPxa1bsPmTvjO39Q.roa (raw, json) Hash identifier: 95CUp/VfY7PSkOcAscjkDxH3xv1Hjai/9RJJgyl0Hqs= Subject key identifier: 45:72:52:00:D1:DB:66:B7:69:3F:16:B5:6E:C3:E6:4E:F8:CE:DF:D4 Certificate issuer: /CN=A8FDF0BBAEA67953693896C763F129DA3B4183EB Certificate serial: 33 Authority key identifier: A8:FD:F0:BB:AE:A6:79:53:69:38:96:C7:63:F1:29:DA:3B:41:83:EB Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qP3wu66meVNpOJbHY_Ep2jtBg-s.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/585/RXJSANHbZrdpPxa1bsPmTvjO39Q.roa Signing time: Wed 03 Sep 2025 03:49:28 +0000 ROA not before: Wed 03 Sep 2025 03:49:28 +0000 ROA not after: Thu 27 Aug 2026 05:36:57 +0000 asID: 4837 IP address blocks: 103.24.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/585/qP3wu66meVNpOJbHY_Ep2jtBg-s.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/585/qP3wu66meVNpOJbHY_Ep2jtBg-s.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qP3wu66meVNpOJbHY_Ep2jtBg-s.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 15:02:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8FDF0BBAEA67953693896C763F129DA3B4183EB Validity Not Before: Sep 3 03:49:28 2025 GMT Not After : Aug 27 05:36:57 2026 GMT Subject: CN=45725200D1DB66B7693F16B56EC3E64EF8CEDFD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:78:8a:8f:93:39:0c:86:3f:d4:ed:eb:a9:e5: 46:af:8d:1b:b5:df:57:c7:07:47:74:82:2f:78:2d: 01:31:2c:9c:40:f0:b8:1f:19:a4:0c:cc:02:54:03: 19:5f:57:ef:3e:a6:3a:1f:d0:bd:51:67:e4:1d:48: 68:f6:88:ec:35:ad:35:0f:a6:f3:00:8b:61:a3:39: 21:d9:c9:80:c5:eb:44:0d:5f:6c:96:41:35:b3:39: 26:fb:e3:3a:25:6f:20:5a:ec:42:12:00:c8:72:01: ce:3f:2d:45:fa:12:cd:fb:80:54:6e:05:71:bd:11: ac:46:3f:c6:00:be:61:01:79:e9:e2:52:0d:0b:91: 07:f8:b5:90:e1:7b:0a:78:ea:19:26:a5:9e:28:3d: 8f:c5:e1:01:1b:7e:8e:87:96:c5:86:b1:d5:7e:5c: d5:49:44:4e:92:1b:98:aa:4d:9b:8e:5f:5a:46:fc: d7:44:0b:47:33:6c:35:15:4e:f7:6d:10:d0:c8:4e: 78:b6:a5:12:3d:77:ee:69:6e:41:97:da:07:bd:c6: 3e:cd:49:da:cd:ff:a2:05:c7:ee:c0:4e:12:e2:39: d6:0a:78:0d:b5:4d:70:f9:46:7b:97:b0:90:ec:e1: bc:ea:c5:56:04:79:14:2d:a3:4f:c3:8e:ef:74:0b: c2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:72:52:00:D1:DB:66:B7:69:3F:16:B5:6E:C3:E6:4E:F8:CE:DF:D4 X509v3 Authority Key Identifier: keyid:A8:FD:F0:BB:AE:A6:79:53:69:38:96:C7:63:F1:29:DA:3B:41:83:EB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/585/qP3wu66meVNpOJbHY_Ep2jtBg-s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qP3wu66meVNpOJbHY_Ep2jtBg-s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/585/RXJSANHbZrdpPxa1bsPmTvjO39Q.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.24.229.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:63:4d:06:d8:a3:65:ec:81:0e:1b:af:12:01:09:cc:73:8d: 15:f6:fe:ac:50:87:7f:6c:e4:c0:45:d3:67:aa:41:de:1e:09: 54:be:a2:33:d2:5f:d2:83:6d:9f:48:8a:de:a1:5d:60:07:48: 55:94:9b:15:c2:9e:5a:1d:ed:28:cc:2f:60:56:37:41:b4:52: d0:6e:16:67:56:57:52:5b:46:66:c9:46:c0:cc:e8:2f:b7:f4: 80:75:5b:c9:cb:33:f3:46:f7:d1:73:65:97:18:ef:c8:8e:0c: fa:07:0e:15:19:75:ff:85:b1:b0:5a:dd:ba:b2:e3:49:3e:3d: 47:6d:51:eb:82:9c:ee:de:e8:4f:59:d1:6c:43:c1:a2:7f:3e: a7:7c:7e:42:cb:d8:05:f0:d1:60:a9:23:02:ba:86:54:7e:cb: 78:72:db:65:f1:96:0b:1b:44:50:2b:3b:51:d7:9d:91:1b:18: 44:cc:aa:e2:45:36:10:c3:66:b4:ee:32:d6:ed:43:21:82:7a: bd:91:bf:f8:0a:09:f4:ec:f7:20:26:0c:7b:03:0b:39:84:42: 73:8e:b6:14:09:a8:1b:d1:f5:12:b8:ae:f3:f9:bd:88:69:c0: 65:31:37:ef:ec:31:76:84:81:bc:c3:e2:23:6b:1f:b0:1d:f1: ba:c6:3f:3c -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIBMzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBOEZE RjBCQkFFQTY3OTUzNjkzODk2Qzc2M0YxMjlEQTNCNDE4M0VCMB4XDTI1MDkwMzAz NDkyOFoXDTI2MDgyNzA1MzY1N1owMzExMC8GA1UEAxMoNDU3MjUyMDBEMURCNjZC NzY5M0YxNkI1NkVDM0U2NEVGOENFREZENDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALx4io+TOQyGP9Tt66nlRq+NG7XfV8cHR3SCL3gtATEsnEDwuB8Z pAzMAlQDGV9X7z6mOh/QvVFn5B1IaPaI7DWtNQ+m8wCLYaM5IdnJgMXrRA1fbJZB NbM5JvvjOiVvIFrsQhIAyHIBzj8tRfoSzfuAVG4Fcb0RrEY/xgC+YQF56eJSDQuR B/i1kOF7CnjqGSalnig9j8XhARt+joeWxYax1X5c1UlETpIbmKpNm45fWkb810QL RzNsNRVO920Q0MhOeLalEj137mluQZfaB73GPs1J2s3/ogXH7sBOEuI51gp4DbVN cPlGe5ewkOzhvOrFVgR5FC2jT8OO73QLwpkCAwEAAaOCAfEwggHtMB0GA1UdDgQW BBRFclIA0dtmt2k/FrVuw+ZO+M7f1DAfBgNVHSMEGDAWgBSo/fC7rqZ5U2k4lsdj 8SnaO0GD6zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFwGA1UdHwRVMFMwUaBP oE2GS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC81ODUv cVAzd3U2Nm1lVk5wT0piSFlfRXAyanRCZy1zLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9xUDN3dTY2bWVWTnBPSmJIWV9FcDJqdEJnLXMuY2VyMA4GA1UdDwEB/wQE AwIHgDCBnAYIKwYBBQUHAQsEgY8wgYwwVwYIKwYBBQUHMAuGS3JzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC81ODUvUlhKU0FOSGJacmRwUHhh MWJzUG1UdmpPMzlRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmlj LmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AGcY5TANBgkqhkiG9w0BAQsFAAOCAQEAOmNNBtijZeyBDhuvEgEJzHONFfb+rFCH f2zkwEXTZ6pB3h4JVL6iM9Jf0oNtn0iK3qFdYAdIVZSbFcKeWh3tKMwvYFY3QbRS 0G4WZ1ZXUltGZslGwMzoL7f0gHVbycsz80b30XNllxjvyI4M+gcOFRl1/4WxsFrd urLjST49R21R64Kc7t7oT1nRbEPBon8+p3x+QsvYBfDRYKkjArqGVH7LeHLbZfGW CxtEUCs7UdedkRsYRMyq4kU2EMNmtO4y1u1DIYJ6vZG/+AoJ9Oz3ICYMewMLOYRC c462FAmoG9H1Eriu8/m9iGnAZTE37+wxdoSBvMPiI2sfsB3xusY/PA== -----END CERTIFICATE-----Generated at Sat Sep 6 13:17:42 2025 by rpki-client