$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1232/g8BXWJDXSKFT2uSGIcywRjv_HH8.roa File: g8BXWJDXSKFT2uSGIcywRjv_HH8.roa (raw, json) Hash identifier: TPbpk3vp/sOx+1ZhzBkgJgC5zFiJpjOwZu9ZBSNYftg= Subject key identifier: 83:C0:57:58:90:D7:48:A1:53:DA:E4:86:21:CC:B0:46:3B:FF:1C:7F Certificate issuer: /CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4 Certificate serial: 1A Authority key identifier: F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/g8BXWJDXSKFT2uSGIcywRjv_HH8.roa Signing time: Fri 22 Aug 2025 06:24:01 +0000 ROA not before: Fri 22 Aug 2025 06:24:01 +0000 ROA not after: Thu 20 Aug 2026 07:49:18 +0000 asID: 138457 IP address blocks: 103.61.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 04:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4 Validity Not Before: Aug 22 06:24:01 2025 GMT Not After : Aug 20 07:49:18 2026 GMT Subject: CN=83C0575890D748A153DAE48621CCB0463BFF1C7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e8:17:58:38:d4:86:8a:52:53:b3:26:33:ec: c6:56:b4:e6:7a:56:dc:fe:a6:db:8f:47:cf:e2:7c: c0:e9:24:a5:3e:70:33:b4:d0:3a:4b:21:ea:e0:87: a9:fe:1f:a4:48:d9:58:44:0f:c4:ca:4a:d3:cf:db: 85:8b:36:2c:04:47:bc:ed:50:f3:52:55:df:ea:50: c4:6a:cb:8b:a0:8d:b6:56:51:e9:b5:a6:92:01:74: 1e:c1:a2:a3:65:e6:43:2e:eb:89:e2:67:74:6a:00: 8f:35:53:b0:2c:ac:f5:e7:33:8f:55:47:9c:33:37: 63:86:cc:cd:5e:1d:60:c8:87:34:25:2b:8e:a0:75: f1:f9:32:19:d5:18:d7:64:65:ad:78:f9:8e:65:42: f6:14:76:13:93:90:4c:cb:b3:51:ed:2c:d8:fb:23: 6b:bf:ea:f3:6d:5f:d7:c8:8b:23:97:92:91:96:13: b0:70:dd:c0:d3:62:19:29:98:00:a1:46:e7:e9:e2: ef:77:c3:57:5b:28:aa:cc:ec:49:fb:10:97:55:05: da:7f:7d:4f:1f:a4:f4:10:c6:b9:f4:9b:59:ab:7e: f4:ac:a3:88:57:c6:aa:b5:b6:33:e8:44:c1:bd:f0: e6:64:ff:41:59:68:49:d3:b2:09:81:d6:19:d9:ef: 3c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:C0:57:58:90:D7:48:A1:53:DA:E4:86:21:CC:B0:46:3B:FF:1C:7F X509v3 Authority Key Identifier: keyid:F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/g8BXWJDXSKFT2uSGIcywRjv_HH8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.61.60.0/24 Signature Algorithm: sha256WithRSAEncryption 15:38:2c:9a:07:8d:55:e6:62:6e:a2:14:86:68:16:ba:a1:82: 42:03:20:f4:74:e1:3e:b5:b5:c2:ed:e9:6e:75:f3:c1:73:af: 7d:95:28:e7:f5:bd:5e:a8:34:11:b2:3f:ac:2d:c2:33:b7:32: 1c:dc:51:d8:46:bd:4f:9c:c5:48:33:e9:6b:86:64:e4:d5:15: bf:33:3b:6a:53:6f:3b:5b:4b:96:82:54:09:90:e2:89:61:28: 91:bf:7e:29:17:31:13:d1:28:3b:b1:9d:1c:29:28:65:6e:dd: a4:c3:e6:1e:5e:21:a4:bf:aa:2e:24:27:ad:58:d0:5a:ba:04: 80:a7:ce:4e:e7:26:3c:c8:4b:6f:8b:0c:23:95:77:dd:ee:dd: 54:9d:9a:69:47:63:82:e5:af:64:e8:5e:58:6d:76:c6:38:4a: 9f:cb:c9:57:5e:c0:d3:5f:65:fa:4c:cc:93:1c:6a:50:c6:5a: 46:c8:2f:1a:18:82:1d:e6:eb:8f:09:47:de:91:a7:cc:9d:72: b5:97:e8:aa:fc:d3:40:10:57:cb:02:2a:ea:2e:4f:e4:e2:ab: b9:46:a1:b1:df:2f:e4:be:20:b6:a1:d5:ab:7e:ff:1d:3c:a0: eb:95:36:17:42:a5:59:a8:68:0c:2f:4d:35:54:82:61:cc:a1: 83:0f:c4:fc -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBGjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGMTk4 OUI0MDY5MDFBREY4ODEwQjlEQ0RDNEUwRkM5RTdFODVFRUI0MB4XDTI1MDgyMjA2 MjQwMVoXDTI2MDgyMDA3NDkxOFowMzExMC8GA1UEAxMoODNDMDU3NTg5MEQ3NDhB MTUzREFFNDg2MjFDQ0IwNDYzQkZGMUM3RjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALPoF1g41IaKUlOzJjPsxla05npW3P6m249Hz+J8wOkkpT5wM7TQ Oksh6uCHqf4fpEjZWEQPxMpK08/bhYs2LARHvO1Q81JV3+pQxGrLi6CNtlZR6bWm kgF0HsGio2XmQy7rieJndGoAjzVTsCys9eczj1VHnDM3Y4bMzV4dYMiHNCUrjqB1 8fkyGdUY12RlrXj5jmVC9hR2E5OQTMuzUe0s2Psja7/q821f18iLI5eSkZYTsHDd wNNiGSmYAKFG5+ni73fDV1soqszsSfsQl1UF2n99Tx+k9BDGufSbWat+9KyjiFfG qrW2M+hEwb3w5mT/QVloSdOyCYHWGdnvPLsCAwEAAaOCAfMwggHvMB0GA1UdDgQW BBSDwFdYkNdIoVPa5IYhzLBGO/8cfzAfBgNVHSMEGDAWgBTxmJtAaQGt+IELnc3E 4PyefoXutDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xMjMy LzhaaWJRR2tCcmZpQkM1M054T0Q4bm42RjdyUS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOFppYlFHa0JyZmlCQzUzTnhPRDhubjZGN3JRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIzMi9nOEJYV0pEWFNLRlQy dVNHSWN5d1Jqdl9ISDgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZz08MA0GCSqGSIb3DQEBCwUAA4IBAQAVOCyaB41V5mJuohSGaBa6oYJCAyD0 dOE+tbXC7eludfPBc699lSjn9b1eqDQRsj+sLcIztzIc3FHYRr1PnMVIM+lrhmTk 1RW/MztqU287W0uWglQJkOKJYSiRv34pFzET0Sg7sZ0cKShlbt2kw+YeXiGkv6ou JCetWNBaugSAp85O5yY8yEtviwwjlXfd7t1UnZppR2OC5a9k6F5YbXbGOEqfy8lX XsDTX2X6TMyTHGpQxlpGyC8aGIId5uuPCUfekafMnXK1l+iq/NNAEFfLAirqLk/k 4qu5RqGx3y/kviC2odWrfv8dPKDrlTYXQqVZqGgML001VIJhzKGDD8T8 -----END CERTIFICATE-----Generated at Sun Aug 24 02:42:44 2025 by rpki-client