$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1211/58G6b2HfLzvowflcukkAhs5AXi0.roa File: 58G6b2HfLzvowflcukkAhs5AXi0.roa (raw, json) Hash identifier: E97jTGt5vkPHJlLW0Heus7zh70brz51GgPY79AfsNqE= Subject key identifier: E7:C1:BA:6F:61:DF:2F:3B:E8:C1:F9:5C:BA:49:00:86:CE:40:5E:2D Certificate issuer: /CN=183D882201945BE13993B4C6DAC954F8EE426C97 Certificate serial: 1401 Authority key identifier: 18:3D:88:22:01:94:5B:E1:39:93:B4:C6:DA:C9:54:F8:EE:42:6C:97 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GD2IIgGUW-E5k7TG2slU-O5CbJc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/58G6b2HfLzvowflcukkAhs5AXi0.roa Signing time: Sat 13 Sep 2025 03:06:54 +0000 ROA not before: Sat 13 Sep 2025 03:06:54 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 63701 IP address blocks: 103.125.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/GD2IIgGUW-E5k7TG2slU-O5CbJc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/GD2IIgGUW-E5k7TG2slU-O5CbJc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GD2IIgGUW-E5k7TG2slU-O5CbJc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 13:36:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5121 (0x1401) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=183D882201945BE13993B4C6DAC954F8EE426C97 Validity Not Before: Sep 13 03:06:54 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=E7C1BA6F61DF2F3BE8C1F95CBA490086CE405E2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:45:5b:de:22:6e:35:7b:05:e2:b1:cb:ca:b5: cf:81:49:bd:b7:f0:5e:f1:41:3d:e4:05:b8:80:ca: 83:05:a7:f7:b1:3f:82:bd:9e:d8:e8:99:47:28:b4: b8:77:7a:67:2e:fc:f1:7c:9e:73:05:4d:6e:86:07: ef:25:6c:6b:00:40:e3:58:35:2f:b2:15:63:e8:49: 2e:b7:17:fe:18:70:93:71:ae:36:75:9d:84:70:0a: de:65:9a:b8:1f:91:04:b2:07:2b:d0:6f:5f:b1:24: 90:12:19:4b:56:20:aa:c9:44:5b:45:f5:4f:9e:01: ec:5e:32:e4:31:f1:1f:7c:bd:36:55:dc:e2:b6:11: e1:b7:66:e4:97:ab:3c:62:3b:54:eb:ef:cf:d2:47: 4d:f6:62:fb:de:2b:53:7a:b7:64:8c:44:42:7f:3f: 22:d9:6a:2d:c2:da:cb:e6:3b:27:de:74:01:99:06: 00:fb:3d:f8:d1:42:e3:f4:a9:d6:4d:94:4c:ec:15: b1:ff:20:94:79:1f:44:a7:0a:1b:3c:32:be:b5:f9: 14:48:fd:19:86:46:4a:2b:70:d3:a4:f3:a2:e0:dd: 9f:d2:54:0a:df:31:5e:9d:15:ad:5a:ca:3b:4e:86: ba:7c:91:eb:8a:89:88:1f:53:22:75:e9:c0:c8:0c: 3a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C1:BA:6F:61:DF:2F:3B:E8:C1:F9:5C:BA:49:00:86:CE:40:5E:2D X509v3 Authority Key Identifier: keyid:18:3D:88:22:01:94:5B:E1:39:93:B4:C6:DA:C9:54:F8:EE:42:6C:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/GD2IIgGUW-E5k7TG2slU-O5CbJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GD2IIgGUW-E5k7TG2slU-O5CbJc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/58G6b2HfLzvowflcukkAhs5AXi0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.125.236.0/22 Signature Algorithm: sha256WithRSAEncryption a0:10:38:40:44:85:62:44:14:0d:da:6c:66:18:4a:75:84:d7: d6:d8:f1:75:7f:88:5f:df:d6:b9:9a:ba:82:7c:61:a0:12:71: 4a:f3:f3:e4:15:70:3e:93:cf:54:92:a6:e2:7a:86:8d:b5:b6: 56:be:8a:cf:f3:b6:53:e3:f3:16:5b:08:ab:09:09:a8:ee:6c: d3:c3:2c:f9:72:9e:aa:eb:67:22:6c:8f:6d:df:08:0d:c5:2a: 39:46:8c:41:83:8f:37:e4:62:ef:54:1e:66:3c:3b:4d:11:e1: 60:ce:f9:41:42:61:66:da:2d:27:de:43:ca:a2:d3:7a:d3:38: d6:85:ec:1f:39:92:20:aa:58:b2:49:b6:92:95:8b:b0:95:d6: b9:30:71:00:27:6d:63:17:16:d8:e7:19:49:bd:47:c6:15:7f: 50:e2:04:d7:c8:68:7f:ee:d6:c1:f5:27:32:3f:d0:ce:84:38: 15:a1:0f:da:78:3c:2f:b7:eb:0c:ff:70:45:23:b6:89:a6:63: e3:30:e1:04:04:1f:1a:78:4d:53:1f:b7:e9:e5:a9:ff:74:21: ee:96:4f:a9:5f:4d:06:0e:9b:bf:3a:5e:ec:17:e8:4c:22:24: 43:03:7e:9b:0d:e4:82:62:62:e7:f7:e9:13:fc:bb:28:56:47: f0:14:c9:a9 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFAEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTgz RDg4MjIwMTk0NUJFMTM5OTNCNEM2REFDOTU0RjhFRTQyNkM5NzAeFw0yNTA5MTMw MzA2NTRaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEU3QzFCQTZGNjFERjJG M0JFOEMxRjk1Q0JBNDkwMDg2Q0U0MDVFMkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYRVveIm41ewXiscvKtc+BSb238F7xQT3kBbiAyoMFp/exP4K9 ntjomUcotLh3emcu/PF8nnMFTW6GB+8lbGsAQONYNS+yFWPoSS63F/4YcJNxrjZ1 nYRwCt5lmrgfkQSyByvQb1+xJJASGUtWIKrJRFtF9U+eAexeMuQx8R98vTZV3OK2 EeG3ZuSXqzxiO1Tr78/SR032YvveK1N6t2SMREJ/PyLZai3C2svmOyfedAGZBgD7 PfjRQuP0qdZNlEzsFbH/IJR5H0SnChs8Mr61+RRI/RmGRkorcNOk86Lg3Z/SVArf MV6dFa1ayjtOhrp8keuKiYgfUyJ16cDIDDr3AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU58G6b2HfLzvowflcukkAhs5AXi0wHwYDVR0jBBgwFoAUGD2IIgGUW+E5k7TG 2slU+O5CbJcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIx MS9HRDJJSWdHVVctRTVrN1RHMnNsVS1PNUNiSmMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0dEMklJZ0dVVy1FNWs3VEcyc2xVLU81Q2JKYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEyMTEvNThHNmIySGZMenZv d2ZsY3Vra0FoczVBWGkwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmd97DANBgkqhkiG9w0BAQsFAAOCAQEAoBA4QESFYkQUDdpsZhhKdYTX1tjx dX+IX9/WuZq6gnxhoBJxSvPz5BVwPpPPVJKm4nqGjbW2Vr6Kz/O2U+PzFlsIqwkJ qO5s08Ms+XKequtnImyPbd8IDcUqOUaMQYOPN+Ri71QeZjw7TRHhYM75QUJhZtot J95DyqLTetM41oXsHzmSIKpYskm2kpWLsJXWuTBxACdtYxcW2OcZSb1HxhV/UOIE 18hof+7WwfUnMj/QzoQ4FaEP2ng8L7frDP9wRSO2iaZj4zDhBAQfGnhNUx+36eWp /3Qh7pZPqV9NBg6bvzpe7BfoTCIkQwN+mw3kgmJi5/fpE/y7KFZH8BTJqQ== -----END CERTIFICATE-----Generated at Tue Oct 21 11:28:40 2025 by rpki-client