$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2537/eTsffFdMnL6y0B2GEjwBvfEfUPA.roa File: eTsffFdMnL6y0B2GEjwBvfEfUPA.roa (raw, json) Hash identifier: i+0Il2mZdyDRfzeqCr7L73/7ajtVoOIidxaMH4BNYJ4= Subject key identifier: 79:3B:1F:7C:57:4C:9C:BE:B2:D0:1D:86:12:3C:01:BD:F1:1F:50:F0 Certificate issuer: /CN=FB653B26775041687D362D4CEF768E58F99EC075 Certificate serial: 0C45 Authority key identifier: FB:65:3B:26:77:50:41:68:7D:36:2D:4C:EF:76:8E:58:F9:9E:C0:75 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-2U7JndQQWh9Ni1M73aOWPmewHU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/eTsffFdMnL6y0B2GEjwBvfEfUPA.roa Signing time: Sat 13 Sep 2025 03:09:36 +0000 ROA not before: Sat 13 Sep 2025 03:09:36 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 152092 IP address blocks: 103.97.56.0/24 maxlen: 24 103.97.57.0/24 maxlen: 24 103.97.58.0/24 maxlen: 24 103.97.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/-2U7JndQQWh9Ni1M73aOWPmewHU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/-2U7JndQQWh9Ni1M73aOWPmewHU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-2U7JndQQWh9Ni1M73aOWPmewHU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 18:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3141 (0xc45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB653B26775041687D362D4CEF768E58F99EC075 Validity Not Before: Sep 13 03:09:36 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=793B1F7C574C9CBEB2D01D86123C01BDF11F50F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:89:09:04:c8:7d:f3:d1:b9:9f:85:c6:d0:57: bf:f0:f8:1e:93:9c:90:1c:31:f7:bc:b7:66:28:89: bf:14:e8:ab:7a:60:03:e8:34:f6:24:2c:32:60:d2: 50:fe:ac:80:a4:73:cd:01:aa:ed:84:e6:13:d0:20: d5:05:f1:26:02:16:f1:b9:b5:31:9b:33:29:06:25: 85:70:79:96:61:a0:2d:df:30:ff:49:6d:fc:13:6f: 23:c8:7a:4b:bf:02:a3:f7:0d:91:bf:ed:9c:52:3f: f7:f1:8f:c9:24:0d:6c:64:c5:dd:bc:3f:71:06:2a: b2:94:81:05:8f:a2:8f:be:8d:de:5d:62:a8:ab:dd: 32:4c:aa:6c:e2:b7:67:a1:96:7d:95:e3:2f:4b:b1: 0f:3b:22:71:88:11:78:b9:b5:38:e2:6c:ea:3e:64: ea:1a:f5:82:37:55:9a:eb:e5:5e:81:85:38:7d:79: 59:f0:71:57:dc:8a:c7:40:08:6c:a7:9e:bb:88:85: 4c:9d:3d:2d:7d:64:2b:c6:59:ac:f6:f6:44:27:8d: f3:83:76:00:9d:95:c1:c4:65:9f:5a:4e:0e:7d:e3: 19:af:66:ed:aa:38:42:48:fd:18:f8:55:26:0b:c2: 7e:65:57:dd:78:18:57:c1:79:8d:e7:f6:6f:7d:e1: a2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:3B:1F:7C:57:4C:9C:BE:B2:D0:1D:86:12:3C:01:BD:F1:1F:50:F0 X509v3 Authority Key Identifier: keyid:FB:65:3B:26:77:50:41:68:7D:36:2D:4C:EF:76:8E:58:F9:9E:C0:75 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/-2U7JndQQWh9Ni1M73aOWPmewHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-2U7JndQQWh9Ni1M73aOWPmewHU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/eTsffFdMnL6y0B2GEjwBvfEfUPA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.97.56.0/22 Signature Algorithm: sha256WithRSAEncryption d1:67:96:7b:c3:11:bb:6a:07:8b:db:73:2f:b3:7c:3f:39:1f: 65:fd:1a:a4:37:8b:2a:c8:db:91:71:a6:49:77:d0:76:f3:96: ab:b8:56:f3:18:ad:d4:21:86:90:8b:f6:cb:bb:1e:49:fc:10: 87:87:52:bb:33:72:36:61:29:08:48:c5:fc:cb:8c:70:03:fc: 17:d6:04:38:f2:c0:a7:fa:8a:69:62:6a:ec:a6:27:e8:4b:ea: 0a:f9:93:a9:ee:c3:c6:d5:4f:9f:73:3b:c6:8d:01:ca:6e:53: 0a:b1:07:6d:30:a5:40:d2:1a:21:27:cf:bc:19:7e:50:64:4f: 6f:cb:5d:16:55:23:7a:81:1b:66:d7:5b:af:6c:ec:7e:e2:cf: 6d:11:cf:5b:e1:40:aa:79:db:a2:c9:51:12:c9:fc:de:eb:da: 48:1c:ee:58:eb:ba:fb:e7:d4:1f:1b:6d:61:6e:37:d4:e3:54: 76:5c:48:06:20:df:8f:32:ff:75:d0:d6:f1:1c:b9:c6:8f:c9: 5b:d7:8d:e8:65:80:2a:38:51:1b:20:1b:60:16:ba:8b:6d:60: 6b:64:58:5e:38:86:ba:2c:b3:d3:8b:33:61:b5:48:f1:1c:74: d4:8e:06:3c:64:de:37:3b:d6:67:ab:c9:e0:ac:69:f3:9d:e6: 1d:05:50:ce -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICDEUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkI2 NTNCMjY3NzUwNDE2ODdEMzYyRDRDRUY3NjhFNThGOTlFQzA3NTAeFw0yNTA5MTMw MzA5MzZaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDc5M0IxRjdDNTc0QzlD QkVCMkQwMUQ4NjEyM0MwMUJERjExRjUwRjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPiQkEyH3z0bmfhcbQV7/w+B6TnJAcMfe8t2Yoib8U6Kt6YAPo NPYkLDJg0lD+rICkc80Bqu2E5hPQINUF8SYCFvG5tTGbMykGJYVweZZhoC3fMP9J bfwTbyPIeku/AqP3DZG/7ZxSP/fxj8kkDWxkxd28P3EGKrKUgQWPoo++jd5dYqir 3TJMqmzit2ehln2V4y9LsQ87InGIEXi5tTjibOo+ZOoa9YI3VZrr5V6BhTh9eVnw cVfcisdACGynnruIhUydPS19ZCvGWaz29kQnjfODdgCdlcHEZZ9aTg594xmvZu2q OEJI/Rj4VSYLwn5lV914GFfBeY3n9m994aL7AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUeTsffFdMnL6y0B2GEjwBvfEfUPAwHwYDVR0jBBgwFoAU+2U7JndQQWh9Ni1M 73aOWPmewHUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjUz Ny8tMlU3Sm5kUVFXaDlOaTFNNzNhT1dQbWV3SFUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLy0yVTdKbmRRUVdoOU5pMU03M2FPV1BtZXdIVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI1MzcvZVRzZmZGZE1uTDZ5 MEIyR0Vqd0J2ZkVmVVBBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmdhODANBgkqhkiG9w0BAQsFAAOCAQEA0WeWe8MRu2oHi9tzL7N8PzkfZf0a pDeLKsjbkXGmSXfQdvOWq7hW8xit1CGGkIv2y7seSfwQh4dSuzNyNmEpCEjF/MuM cAP8F9YEOPLAp/qKaWJq7KYn6EvqCvmTqe7DxtVPn3M7xo0Bym5TCrEHbTClQNIa ISfPvBl+UGRPb8tdFlUjeoEbZtdbr2zsfuLPbRHPW+FAqnnboslREsn83uvaSBzu WOu6++fUHxttYW431ONUdlxIBiDfjzL/ddDW8Ry5xo/JW9eN6GWAKjhRGyAbYBa6 i21ga2RYXjiGuiyz04szYbVI8Rx01I4GPGTeNzvWZ6vJ4Kxp853mHQVQzg== -----END CERTIFICATE-----Generated at Mon Oct 20 17:52:05 2025 by rpki-client