$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/jgjN0IxKws8jDdNRAOYX1CdHt1k.roa File: jgjN0IxKws8jDdNRAOYX1CdHt1k.roa (raw, json) Hash identifier: T74oJ4uT1nguMzcsxBkKWMEPcQYXZBdgwGGLqKFQyh4= Subject key identifier: 8E:08:CD:D0:8C:4A:C2:CF:23:0D:D3:51:00:E6:17:D4:27:47:B7:59 Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Certificate serial: 5CF6 Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/jgjN0IxKws8jDdNRAOYX1CdHt1k.roa Signing time: Sat 13 Sep 2025 03:06:28 +0000 ROA not before: Sat 13 Sep 2025 03:06:28 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 134762 IP address blocks: 103.45.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23798 (0x5cf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Validity Not Before: Sep 13 03:06:28 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=8E08CDD08C4AC2CF230DD35100E617D42747B759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:76:17:dc:8b:ce:40:59:0b:b1:33:02:48:35: a5:92:7c:0e:78:69:ae:fb:de:19:dd:0f:ec:5d:c1: bf:21:fd:c2:b7:84:a1:bc:76:57:c6:4b:84:23:f0: 87:14:89:39:c8:24:dc:72:af:a5:22:47:d8:41:d6: 4d:e9:5c:a2:d4:d4:e6:cc:5a:15:c0:1c:84:76:a7: d9:73:7e:5b:0f:b5:dd:cb:ed:b6:40:a1:70:7a:c8: 93:39:63:8a:fb:0a:6c:a8:3c:88:c9:32:d4:56:b7: e9:19:a3:50:68:6a:13:8e:b4:00:06:3c:b9:ec:3f: fd:bf:9d:46:28:26:2a:6b:f9:c3:0f:f8:d2:5e:ec: 8b:23:da:b8:3a:8c:9c:f0:bd:c9:21:20:8e:11:39: 10:64:c4:99:f0:de:8c:2d:96:2c:07:97:c8:b4:82: 52:ed:a3:04:e8:4e:0e:9e:06:e1:1b:3d:98:a5:dd: e3:2b:71:a0:de:9b:82:16:f1:9e:61:1b:62:39:90: 34:aa:df:51:b6:30:03:75:1b:87:d1:4c:b3:27:8a: b9:a8:d0:44:e2:90:98:37:d0:4b:26:ce:22:34:85: 99:98:86:07:40:b0:c6:8e:24:d5:74:7d:74:56:50: 54:9d:c6:c4:fd:65:16:d0:8e:54:d8:00:fb:9e:55: e9:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:08:CD:D0:8C:4A:C2:CF:23:0D:D3:51:00:E6:17:D4:27:47:B7:59 X509v3 Authority Key Identifier: keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/jgjN0IxKws8jDdNRAOYX1CdHt1k.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.45.176.0/20 Signature Algorithm: sha256WithRSAEncryption 14:43:b8:36:73:4f:cd:b9:86:d6:d7:40:7d:9e:4f:2b:6b:e1: b7:12:0d:b8:9c:a6:a3:70:bf:89:83:ea:b8:97:d6:81:bf:9a: 74:ef:c2:3f:ca:69:c1:2f:c8:dc:55:00:c3:20:e0:8e:df:ab: a0:e5:ad:01:7b:c6:f1:dc:07:3a:25:46:ab:38:46:60:5a:a6: 0e:9e:2a:4e:eb:8e:12:b3:a3:05:b0:98:fe:ae:cc:5e:fd:a7: 9c:eb:f3:84:d5:eb:a0:ba:08:2c:9b:b2:f5:53:02:6c:18:24: bc:c3:bb:29:20:0b:06:ea:dd:eb:14:5c:ab:a3:7f:0b:7f:db: 82:cb:d5:4e:40:44:43:bc:4f:39:49:89:b7:9c:51:ea:5a:fd: e8:5f:a4:c9:d7:90:4d:a3:1d:9a:7c:1a:34:eb:93:c2:e2:a5: 1d:5c:30:9f:99:3c:70:e1:f1:b5:0a:4f:e7:b8:11:64:c5:67: ce:23:35:c7:4f:90:12:2b:54:24:da:9f:89:86:ac:ca:15:ab: 62:86:95:71:33:ca:a7:a3:52:27:fb:8e:cc:93:db:af:c8:6a: 5f:32:96:7b:1b:52:2d:e0:8a:b2:85:d1:51:bf:d3:c6:7d:de: 02:cb:27:24:5c:b5:97:ad:dc:61:ff:d7:56:2d:17:d7:da:d1: 50:40:13:03 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICXPYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEFF NENGNzhCNDlERjBCMkMxRDI5RDMyRTQ4QTk0M0FFNEY0MUFDQzAeFw0yNTA5MTMw MzA2MjhaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDhFMDhDREQwOEM0QUMy Q0YyMzBERDM1MTAwRTYxN0Q0Mjc0N0I3NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCZdhfci85AWQuxMwJINaWSfA54aa773hndD+xdwb8h/cK3hKG8 dlfGS4Qj8IcUiTnIJNxyr6UiR9hB1k3pXKLU1ObMWhXAHIR2p9lzflsPtd3L7bZA oXB6yJM5Y4r7CmyoPIjJMtRWt+kZo1BoahOOtAAGPLnsP/2/nUYoJipr+cMP+NJe 7Isj2rg6jJzwvckhII4RORBkxJnw3owtliwHl8i0glLtowToTg6eBuEbPZil3eMr caDem4IW8Z5hG2I5kDSq31G2MAN1G4fRTLMnirmo0ETikJg30EsmziI0hZmYhgdA sMaOJNV0fXRWUFSdxsT9ZRbQjlTYAPueVem1AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUjgjN0IxKws8jDdNRAOYX1CdHt1kwHwYDVR0jBBgwFoAUiuTPeLSd8LLB0p0y 5IqUOuT0GswwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTY2 My9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2l1VFBlTFNkOExMQjBwMHk1SXFVT3VUMEdzdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2NjMvamdqTjBJeEt3czhq RGROUkFPWVgxQ2RIdDFrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBGctsDANBgkqhkiG9w0BAQsFAAOCAQEAFEO4NnNPzbmG1tdAfZ5PK2vhtxIN uJymo3C/iYPquJfWgb+adO/CP8ppwS/I3FUAwyDgjt+roOWtAXvG8dwHOiVGqzhG YFqmDp4qTuuOErOjBbCY/q7MXv2nnOvzhNXroLoILJuy9VMCbBgkvMO7KSALBurd 6xRcq6N/C3/bgsvVTkBEQ7xPOUmJt5xR6lr96F+kydeQTaMdmnwaNOuTwuKlHVww n5k8cOHxtQpP57gRZMVnziM1x0+QEitUJNqfiYasyhWrYoaVcTPKp6NSJ/uOzJPb r8hqXzKWextSLeCKsoXRUb/Txn3eAssnJFy1l63cYf/XVi0X19rRUEATAw== -----END CERTIFICATE-----Generated at Mon Oct 20 08:42:52 2025 by rpki-client