$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1823/RpoLiulNqmsqUEsS8d5G_TL8cnk.roa File: RpoLiulNqmsqUEsS8d5G_TL8cnk.roa (raw, json) Hash identifier: dNqlAyj4PE+XHsuOy3X9ipugCAca/u8pXRLKJ5EvoGs= Subject key identifier: 46:9A:0B:8A:E9:4D:AA:6B:2A:50:4B:12:F1:DE:46:FD:32:FC:72:79 Certificate issuer: /CN=46E7400FC97FC7A2093E054CF0DF42CB77564023 Certificate serial: 06CE Authority key identifier: 46:E7:40:0F:C9:7F:C7:A2:09:3E:05:4C:F0:DF:42:CB:77:56:40:23 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RudAD8l_x6IJPgVM8N9Cy3dWQCM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1823/RpoLiulNqmsqUEsS8d5G_TL8cnk.roa Signing time: Thu 11 Sep 2025 03:04:26 +0000 ROA not before: Thu 11 Sep 2025 03:04:26 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 1449 IP address blocks: 103.59.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1823/RudAD8l_x6IJPgVM8N9Cy3dWQCM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1823/RudAD8l_x6IJPgVM8N9Cy3dWQCM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RudAD8l_x6IJPgVM8N9Cy3dWQCM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 13:36:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1742 (0x6ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46E7400FC97FC7A2093E054CF0DF42CB77564023 Validity Not Before: Sep 11 03:04:26 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=469A0B8AE94DAA6B2A504B12F1DE46FD32FC7279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:48:2d:56:47:df:a7:bf:1b:d0:c3:88:82:5f: 55:a9:02:b4:77:cb:60:d7:aa:74:c2:f4:61:1f:a3: 09:51:56:96:e0:d3:4d:dc:50:92:48:3b:dd:be:c8: 68:c3:6a:a1:7c:27:ef:73:25:69:80:e8:ab:70:51: 16:42:5f:22:0e:50:4c:25:cd:e9:c7:87:db:2c:35: fc:9c:80:6b:98:62:83:62:c5:b7:de:b3:ee:15:91: 20:fa:92:1d:15:de:bc:9f:eb:68:29:8b:1c:c0:bc: 85:c6:44:bf:10:a4:a3:9b:c5:e0:51:bf:9b:78:0d: 0b:b5:19:f8:2e:82:38:68:37:7d:65:60:14:30:12: e9:72:38:38:17:77:12:d6:92:50:3a:79:76:a5:1e: b7:8c:14:f5:88:55:7e:5f:d6:9f:ba:0f:f4:a7:b9: 7c:d7:c2:a2:c5:ba:f0:0c:c7:91:b8:6b:0e:a3:04: 5a:db:e9:3b:f3:b4:e2:d7:fc:f4:52:e8:a4:ad:8b: f3:4d:02:36:3d:b4:fb:a3:f1:1b:b0:d6:11:18:9e: 8f:c8:b9:37:f0:9e:ce:c7:38:16:e8:4c:e3:43:76: 07:5d:a4:c4:88:57:08:88:a2:a7:4f:cb:2f:b0:c9: aa:10:99:1e:9e:fc:20:d0:12:ec:52:df:38:41:57: 18:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:9A:0B:8A:E9:4D:AA:6B:2A:50:4B:12:F1:DE:46:FD:32:FC:72:79 X509v3 Authority Key Identifier: keyid:46:E7:40:0F:C9:7F:C7:A2:09:3E:05:4C:F0:DF:42:CB:77:56:40:23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1823/RudAD8l_x6IJPgVM8N9Cy3dWQCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RudAD8l_x6IJPgVM8N9Cy3dWQCM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1823/RpoLiulNqmsqUEsS8d5G_TL8cnk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.59.122.0/24 Signature Algorithm: sha256WithRSAEncryption 80:f5:b1:f0:1d:99:aa:41:4d:77:b4:e2:25:a2:ed:cc:21:24: 7c:98:25:d5:d5:bc:31:d7:8d:6a:3d:ef:c1:b9:cd:b3:1a:85: f5:4c:d2:a6:56:4b:d9:f9:17:fe:ea:b9:78:e6:97:d6:e5:4b: da:49:b5:65:08:b1:c1:7a:74:fc:1f:e4:c7:ea:e6:b9:e9:29: 0c:bc:38:83:a4:31:09:dc:4a:e2:2e:81:ab:5a:b7:b6:f5:58: f0:42:e3:20:09:b3:2a:3e:c3:8c:a3:ff:5c:62:0a:c8:c4:43: 29:1a:69:9d:e3:f1:e8:8f:8a:53:2d:80:9f:4c:28:0b:6c:aa: 7d:39:bd:f9:29:82:8e:91:13:aa:01:c2:4e:e9:f2:28:0b:93: 7a:e3:1b:ba:76:f9:b9:4e:f6:18:4a:d8:ab:47:65:85:91:b9: 3d:94:13:fb:a8:ac:ec:1e:14:09:77:d1:fb:50:2d:e6:40:d8: 9b:8a:f6:4a:ed:e9:15:11:16:28:7a:90:0c:e9:a0:0e:99:22: 51:b3:37:b5:49:ef:cb:86:1f:38:f3:f3:ad:9d:14:4c:50:43: d1:bf:d4:d2:33:40:b5:1d:02:a9:15:15:b8:f2:6c:de:f9:52: c0:ce:16:50:03:88:da:e9:ea:f4:4e:57:89:34:19:cf:27:c8: 9f:61:85:0e -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICBs4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDZF NzQwMEZDOTdGQzdBMjA5M0UwNTRDRjBERjQyQ0I3NzU2NDAyMzAeFw0yNTA5MTEw MzA0MjZaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDQ2OUEwQjhBRTk0REFB NkIyQTUwNEIxMkYxREU0NkZEMzJGQzcyNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZSC1WR9+nvxvQw4iCX1WpArR3y2DXqnTC9GEfowlRVpbg003c UJJIO92+yGjDaqF8J+9zJWmA6KtwURZCXyIOUEwlzenHh9ssNfycgGuYYoNixbfe s+4VkSD6kh0V3ryf62gpixzAvIXGRL8QpKObxeBRv5t4DQu1GfgugjhoN31lYBQw EulyODgXdxLWklA6eXalHreMFPWIVX5f1p+6D/SnuXzXwqLFuvAMx5G4aw6jBFrb 6TvztOLX/PRS6KSti/NNAjY9tPuj8Ruw1hEYno/IuTfwns7HOBboTONDdgddpMSI VwiIoqdPyy+wyaoQmR6e/CDQEuxS3zhBVxitAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQURpoLiulNqmsqUEsS8d5G/TL8cnkwHwYDVR0jBBgwFoAURudAD8l/x6IJPgVM 8N9Cy3dWQCMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTgy My9SdWRBRDhsX3g2SUpQZ1ZNOE45Q3kzZFdRQ00uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1J1ZEFEOGxfeDZJSlBnVk04TjlDeTNkV1FDTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE4MjMvUnBvTGl1bE5xbXNx VUVzUzhkNUdfVEw4Y25rLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGc7ejANBgkqhkiG9w0BAQsFAAOCAQEAgPWx8B2ZqkFNd7TiJaLtzCEkfJgl 1dW8MdeNaj3vwbnNsxqF9UzSplZL2fkX/uq5eOaX1uVL2km1ZQixwXp0/B/kx+rm uekpDLw4g6QxCdxK4i6Bq1q3tvVY8ELjIAmzKj7DjKP/XGIKyMRDKRppnePx6I+K Uy2An0woC2yqfTm9+SmCjpETqgHCTunyKAuTeuMbunb5uU72GErYq0dlhZG5PZQT +6is7B4UCXfR+1At5kDYm4r2Su3pFREWKHqQDOmgDpkiUbM3tUnvy4YfOPPzrZ0U TFBD0b/U0jNAtR0CqRUVuPJs3vlSwM4WUAOI2unq9E5XiTQZzyfIn2GFDg== -----END CERTIFICATE-----Generated at Mon Oct 20 13:30:44 2025 by rpki-client