$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1232/EddpC0PX3ghbWmMIM3YunZBLCNQ.roa File: EddpC0PX3ghbWmMIM3YunZBLCNQ.roa (raw, json) Hash identifier: 1YQGOZR+yxIYCtoe7phxDtAfptqZ5BJZQiIprcx8QeI= Subject key identifier: 11:D7:69:0B:43:D7:DE:08:5B:5A:63:08:33:76:2E:9D:90:4B:08:D4 Certificate issuer: /CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4 Certificate serial: 1F Authority key identifier: F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/EddpC0PX3ghbWmMIM3YunZBLCNQ.roa Signing time: Fri 22 Aug 2025 06:24:02 +0000 ROA not before: Fri 22 Aug 2025 06:24:02 +0000 ROA not after: Thu 20 Aug 2026 07:49:18 +0000 asID: 63582 IP address blocks: 103.61.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4 Validity Not Before: Aug 22 06:24:02 2025 GMT Not After : Aug 20 07:49:18 2026 GMT Subject: CN=11D7690B43D7DE085B5A630833762E9D904B08D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a0:ed:a2:f9:a7:f4:1f:d2:3f:4f:71:ea:5e: 97:7f:e8:0f:11:33:2e:9c:23:71:11:be:31:30:8d: 7d:6a:ec:05:3c:9d:15:29:2d:37:78:84:16:91:e8: c1:ef:ac:9f:3b:6d:eb:37:2a:8d:f1:ed:75:8d:f2: 0a:94:87:a2:72:23:a3:6f:df:1c:f4:16:5e:12:8b: 2a:fb:12:6d:39:99:93:f7:16:31:96:e1:48:52:8c: ef:51:dd:82:56:aa:15:eb:b8:69:96:a1:1d:9e:b1: 86:6e:16:9b:a3:80:7e:b1:f7:04:80:7d:ff:c1:ac: ef:49:16:cf:b1:9d:1f:35:04:c3:6a:ad:fa:87:b1: 00:82:33:6c:9c:1c:68:16:dc:0c:74:bd:f4:56:86: 5a:82:d2:fd:3b:c6:68:08:d9:6c:9d:ca:0f:f6:e7: 41:a8:1e:6f:e4:8a:fb:38:85:20:96:e2:38:6b:74: 7f:1d:32:44:18:6c:28:ce:45:d1:af:18:8c:05:34: f9:bf:6f:ea:c9:6a:fe:59:bd:cc:81:5c:c5:e4:f2: de:71:29:70:07:97:cd:cc:ba:49:57:fd:f9:4a:55: 2d:30:a7:8a:78:8d:2b:f7:40:fd:e3:35:f4:fc:51: 38:6b:50:9e:af:34:be:13:e9:d2:3c:ff:30:9d:58: 09:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:D7:69:0B:43:D7:DE:08:5B:5A:63:08:33:76:2E:9D:90:4B:08:D4 X509v3 Authority Key Identifier: keyid:F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/EddpC0PX3ghbWmMIM3YunZBLCNQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.61.60.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:40:8b:d7:24:8d:a7:b0:a4:4a:2a:7f:70:ac:f3:4b:7b:78: 57:a8:d3:ed:05:68:92:7d:3d:63:93:33:38:7d:1f:8c:5e:af: 8d:04:7b:0b:08:cb:f3:0f:ca:85:75:24:a7:91:46:99:6f:f8: d6:be:0d:d0:54:40:37:49:0c:4d:34:d8:43:f2:70:f7:94:5e: 55:d3:cb:28:d5:3d:b9:07:06:df:0a:e7:f7:ce:c6:de:d4:16: c6:8b:aa:35:4a:72:dd:cd:6b:39:01:38:72:a7:4b:12:83:26: 84:85:48:37:49:ee:87:4b:5d:86:a8:6b:bb:67:03:a1:0b:a4: 59:c9:a4:a7:d2:17:a2:5f:96:41:54:c3:cd:5c:7c:7a:37:ee: b6:59:58:02:34:4b:4e:64:1d:03:f9:e2:04:19:ff:1e:50:c9: 5e:d4:c7:aa:23:be:d9:b4:92:3a:fc:c3:50:de:12:bc:8f:2a: 27:1f:dc:74:a7:db:ed:ab:9b:6f:fd:ec:99:84:78:80:57:41: a8:5e:8c:d2:a8:0a:ea:ce:5f:73:5b:15:39:9d:11:92:0c:d5: 2f:a4:5f:c8:0e:32:ef:03:e6:d5:c4:83:de:7b:09:5a:3e:a8: 00:3b:e4:ca:b8:e5:3c:63:45:6e:9a:f4:9a:34:15:1d:ab:ab: 3a:fb:d9:9f -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBHzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGMTk4 OUI0MDY5MDFBREY4ODEwQjlEQ0RDNEUwRkM5RTdFODVFRUI0MB4XDTI1MDgyMjA2 MjQwMloXDTI2MDgyMDA3NDkxOFowMzExMC8GA1UEAxMoMTFENzY5MEI0M0Q3REUw ODVCNUE2MzA4MzM3NjJFOUQ5MDRCMDhENDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM+g7aL5p/Qf0j9Pcepel3/oDxEzLpwjcRG+MTCNfWrsBTydFSkt N3iEFpHowe+snztt6zcqjfHtdY3yCpSHonIjo2/fHPQWXhKLKvsSbTmZk/cWMZbh SFKM71HdglaqFeu4aZahHZ6xhm4Wm6OAfrH3BIB9/8Gs70kWz7GdHzUEw2qt+oex AIIzbJwcaBbcDHS99FaGWoLS/TvGaAjZbJ3KD/bnQageb+SK+ziFIJbiOGt0fx0y RBhsKM5F0a8YjAU0+b9v6slq/lm9zIFcxeTy3nEpcAeXzcy6SVf9+UpVLTCniniN K/dA/eM19PxROGtQnq80vhPp0jz/MJ1YCbsCAwEAAaOCAfMwggHvMB0GA1UdDgQW BBQR12kLQ9feCFtaYwgzdi6dkEsI1DAfBgNVHSMEGDAWgBTxmJtAaQGt+IELnc3E 4PyefoXutDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xMjMy LzhaaWJRR2tCcmZpQkM1M054T0Q4bm42RjdyUS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOFppYlFHa0JyZmlCQzUzTnhPRDhubjZGN3JRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIzMi9FZGRwQzBQWDNnaGJX bU1JTTNZdW5aQkxDTlEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZz08MA0GCSqGSIb3DQEBCwUAA4IBAQB7QIvXJI2nsKRKKn9wrPNLe3hXqNPt BWiSfT1jkzM4fR+MXq+NBHsLCMvzD8qFdSSnkUaZb/jWvg3QVEA3SQxNNNhD8nD3 lF5V08so1T25BwbfCuf3zsbe1BbGi6o1SnLdzWs5AThyp0sSgyaEhUg3Se6HS12G qGu7ZwOhC6RZyaSn0heiX5ZBVMPNXHx6N+62WVgCNEtOZB0D+eIEGf8eUMle1Meq I77ZtJI6/MNQ3hK8jyonH9x0p9vtq5tv/eyZhHiAV0GoXozSqArqzl9zWxU5nRGS DNUvpF/IDjLvA+bVxIPeewlaPqgAO+TKuOU8Y0VumvSaNBUdq6s6+9mf -----END CERTIFICATE-----Generated at Mon Oct 20 08:56:58 2025 by rpki-client