$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/15vLOdAYzYTG8CGBG11oYxJpmXY.roa File: 15vLOdAYzYTG8CGBG11oYxJpmXY.roa (raw, json) Hash identifier: sSWEP9hKVFH93BUiYzNTfyvSyfSgJ3jR1eDWI7WJG9o= Subject key identifier: D7:9B:CB:39:D0:18:CD:84:C6:F0:21:81:1B:5D:68:63:12:69:99:76 Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0 Certificate serial: 0DD6 Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/15vLOdAYzYTG8CGBG11oYxJpmXY.roa Signing time: Fri 22 Aug 2025 01:33:53 +0000 ROA not before: Fri 22 Aug 2025 01:33:53 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 134773 IP address blocks: 59.107.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 04:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3542 (0xdd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0 Validity Not Before: Aug 22 01:33:53 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=D79BCB39D018CD84C6F021811B5D686312699976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:00:01:24:e9:08:4e:97:b2:ad:eb:81:7f:b2: 2f:19:77:01:90:57:cf:26:44:14:29:37:26:75:48: 20:c2:da:ea:26:62:8d:72:c3:6a:2d:ad:d2:2c:c9: a9:fd:57:a6:3f:20:cf:32:02:6a:a4:2c:f5:77:67: 03:68:f8:a8:82:19:9d:8c:ef:b3:1e:12:b6:37:9b: 1f:80:80:85:f9:c3:f9:17:2f:b0:8b:7b:20:87:c1: b1:47:c2:66:9d:e9:83:30:df:59:88:4d:0f:a2:87: 36:a0:9e:bb:04:22:b7:16:5b:fc:5e:25:ba:b5:9d: b8:56:7e:3f:bd:e2:fa:95:3c:de:70:5b:0e:c5:53: f8:dd:80:43:86:79:a0:45:98:24:d2:28:30:25:78: 4f:d6:9a:0a:f9:da:ac:39:b1:df:a1:ce:dc:ca:6d: 0b:68:33:bd:79:86:40:8c:cd:38:eb:a4:a9:2d:55: 75:f1:70:52:48:7b:d8:30:3d:65:e9:86:44:49:e6: c2:4d:20:82:ca:93:14:73:07:a8:25:2e:d5:91:be: 36:c2:48:b3:9c:75:34:11:ee:3b:71:ee:47:e4:78: 90:e6:76:bd:a3:de:e5:cb:9a:4c:40:4c:aa:ba:da: 80:40:49:df:d2:a4:ff:fd:c4:45:e3:28:f9:48:f4: 83:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:9B:CB:39:D0:18:CD:84:C6:F0:21:81:1B:5D:68:63:12:69:99:76 X509v3 Authority Key Identifier: keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/15vLOdAYzYTG8CGBG11oYxJpmXY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 59.107.64.0/18 Signature Algorithm: sha256WithRSAEncryption c4:0c:5d:03:f6:9e:e0:bf:37:25:d4:21:58:20:e5:3f:df:a7: 11:b1:9f:3d:d8:5f:76:3a:a8:e2:db:f2:43:b4:64:d9:b5:8c: aa:e4:92:72:7d:b9:75:d5:83:d9:41:d2:c6:95:2f:fe:ac:7d: 02:05:47:5a:b5:7e:12:bf:dc:f7:77:d6:65:6a:eb:f6:23:48: 4f:5b:78:0d:33:ba:de:1d:0a:cd:77:99:79:df:41:92:90:40: cc:9f:a7:d2:94:c7:4e:30:15:d5:b2:36:61:bb:93:22:e6:03: 98:9a:2a:79:27:40:68:da:11:71:de:6e:21:34:8b:18:7b:23: be:dc:49:f9:dd:38:12:64:7b:20:ce:c6:6b:a1:f7:3c:d4:a5: f9:eb:c2:17:75:1f:d3:45:d7:bf:2e:9e:37:8e:8b:6c:a5:0e: 59:d0:f7:cf:af:cb:0d:1f:6b:64:20:57:0b:90:a9:6d:92:60: 03:07:ea:dc:1e:12:90:d3:ed:4d:a2:10:bd:01:da:33:37:7b: 84:64:5f:fd:0b:ae:2a:78:a4:fa:95:4b:b7:d8:4b:ab:e9:ba: 80:b9:0b:76:d8:eb:8a:1f:2a:0c:cc:ed:90:d1:fa:be:36:d8: 11:bc:20:5d:34:ca:9c:b3:67:0e:51:f6:95:f3:ba:90:00:d8: a9:f6:b5:ed -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICDdYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTQ4 MUI0RTQwOTAxNUQ4RUI3RDAzRjM2MDM4ODMwRUMxMDk4QUJDMDAeFw0yNTA4MjIw MTMzNTNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEQ3OUJDQjM5RDAxOENE ODRDNkYwMjE4MTFCNUQ2ODYzMTI2OTk5NzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0AAEk6QhOl7Kt64F/si8ZdwGQV88mRBQpNyZ1SCDC2uomYo1y w2otrdIsyan9V6Y/IM8yAmqkLPV3ZwNo+KiCGZ2M77MeErY3mx+AgIX5w/kXL7CL eyCHwbFHwmad6YMw31mITQ+ihzagnrsEIrcWW/xeJbq1nbhWfj+94vqVPN5wWw7F U/jdgEOGeaBFmCTSKDAleE/Wmgr52qw5sd+hztzKbQtoM715hkCMzTjrpKktVXXx cFJIe9gwPWXphkRJ5sJNIILKkxRzB6glLtWRvjbCSLOcdTQR7jtx7kfkeJDmdr2j 3uXLmkxATKq62oBASd/SpP/9xEXjKPlI9INZAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQU15vLOdAYzYTG8CGBG11oYxJpmXYwHwYDVR0jBBgwFoAUlIG05AkBXY630D82 A4gw7BCYq8AwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNi9s SUcwNUFrQlhZNjMwRDgyQTRndzdCQ1lxOEEuY3JsMGMGCCsGAQUFBwEBBFcwVTBT BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw MDAwL2xJRzA1QWtCWFk2MzBEODJBNGd3N0JDWXE4QS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtp LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzYvMTV2TE9kQVl6WVRHOENHQkcx MW9ZeEpwbVhZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNu L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBjtr QDANBgkqhkiG9w0BAQsFAAOCAQEAxAxdA/ae4L83JdQhWCDlP9+nEbGfPdhfdjqo 4tvyQ7Rk2bWMquSScn25ddWD2UHSxpUv/qx9AgVHWrV+Er/c93fWZWrr9iNIT1t4 DTO63h0KzXeZed9BkpBAzJ+n0pTHTjAV1bI2YbuTIuYDmJoqeSdAaNoRcd5uITSL GHsjvtxJ+d04EmR7IM7Ga6H3PNSl+evCF3Uf00XXvy6eN46LbKUOWdD3z6/LDR9r ZCBXC5CpbZJgAwfq3B4SkNPtTaIQvQHaMzd7hGRf/QuuKnik+pVLt9hLq+m6gLkL dtjrih8qDMztkNH6vjbYEbwgXTTKnLNnDlH2lfO6kADYqfa17Q== -----END CERTIFICATE-----Generated at Mon Aug 25 23:59:29 2025 by rpki-client