$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2564/9CSLI04QulnrnQ-UHevGHlqHnr8.roa File: 9CSLI04QulnrnQ-UHevGHlqHnr8.roa (raw, json) Hash identifier: uGu60xHP16pqv9mEC7avI6PBAyJp8zIpilllX2olr3g= Subject key identifier: F4:24:8B:23:4E:10:BA:59:EB:9D:0F:94:1D:EB:C6:1E:5A:87:9E:BF Certificate issuer: /CN=6A21A11AAC4EAE0A630659B31A230B08D6B58177 Certificate serial: 2077 Authority key identifier: 6A:21:A1:1A:AC:4E:AE:0A:63:06:59:B3:1A:23:0B:08:D6:B5:81:77 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/aiGhGqxOrgpjBlmzGiMLCNa1gXc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2564/9CSLI04QulnrnQ-UHevGHlqHnr8.roa Signing time: Sat 13 Sep 2025 03:10:26 +0000 ROA not before: Sat 13 Sep 2025 03:10:26 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 131482 IP address blocks: 103.98.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2564/aiGhGqxOrgpjBlmzGiMLCNa1gXc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2564/aiGhGqxOrgpjBlmzGiMLCNa1gXc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/aiGhGqxOrgpjBlmzGiMLCNa1gXc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 18:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8311 (0x2077) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A21A11AAC4EAE0A630659B31A230B08D6B58177 Validity Not Before: Sep 13 03:10:26 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=F4248B234E10BA59EB9D0F941DEBC61E5A879EBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:cc:25:f6:97:26:9f:2e:86:02:96:48:16:03: 9b:68:68:c9:af:e6:7a:e8:79:fa:5a:26:f4:b4:8f: 08:0e:92:50:20:0a:f5:86:29:28:da:a5:c4:03:4b: 3b:d0:28:a8:21:6d:46:ff:f1:7f:00:c2:3a:46:ce: 2a:d2:a8:fd:d9:0c:1d:01:42:58:9f:1d:07:2d:a3: 1d:74:cd:0b:84:3e:20:c2:7a:54:9d:d7:e0:26:43: d7:b5:e1:a2:15:a3:ba:4d:9c:16:93:b7:f2:95:0c: da:eb:ab:08:0f:42:1b:98:d7:14:8c:02:bb:bf:d5: 22:4e:f9:60:01:34:e9:45:0c:2b:ab:79:3d:63:dc: 08:f4:d9:f9:71:d1:35:55:a3:20:86:a7:d8:cd:14: fd:62:6e:b8:a8:ba:06:5d:f2:1e:05:70:e5:13:ba: 47:c3:13:24:91:71:4b:3c:02:09:c8:44:93:59:66: 0d:45:58:c9:1a:91:11:cf:fb:20:20:19:33:bc:a1: 1e:c0:d9:e7:c9:76:c2:d4:f6:4d:d2:c7:47:75:ba: 3d:72:cb:fe:05:34:3c:40:1f:9f:2a:35:80:a4:6d: 5e:20:b3:1b:5f:0b:88:6e:35:58:ed:01:2c:e9:ed: 43:4e:ba:ce:5a:b5:c6:80:19:21:28:1a:c4:10:9c: e7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:24:8B:23:4E:10:BA:59:EB:9D:0F:94:1D:EB:C6:1E:5A:87:9E:BF X509v3 Authority Key Identifier: keyid:6A:21:A1:1A:AC:4E:AE:0A:63:06:59:B3:1A:23:0B:08:D6:B5:81:77 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2564/aiGhGqxOrgpjBlmzGiMLCNa1gXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/aiGhGqxOrgpjBlmzGiMLCNa1gXc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2564/9CSLI04QulnrnQ-UHevGHlqHnr8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.98.164.0/22 Signature Algorithm: sha256WithRSAEncryption 34:15:cd:77:9e:87:ca:14:b8:f3:dd:d2:e3:0d:9a:20:e2:13: 09:b6:f7:d6:7a:b9:04:f2:aa:8a:e1:b9:d6:d3:34:f0:ad:25: ee:cc:71:12:a0:f6:93:08:bc:2d:40:16:0f:37:03:a9:47:9e: 88:6a:2d:94:e9:7a:f2:aa:f5:d3:e8:f0:69:41:81:b9:73:a2: 0f:ae:48:60:45:07:6d:6c:7a:a7:b1:9e:a6:73:ea:29:1e:46: 52:64:3c:7d:9e:1b:f9:4d:69:d9:64:9c:5c:e6:0e:22:07:4c: 6c:71:7c:db:e4:e1:c6:06:ce:c3:aa:04:77:47:74:8a:de:3f: 25:98:46:a3:48:76:a4:da:b1:30:fe:05:10:0c:d4:76:65:68: b6:af:6b:f4:08:a7:8b:d6:9a:87:46:10:ee:77:5a:d1:42:b5: f3:dc:76:a6:6a:9c:ed:69:6b:78:58:10:ed:4e:7d:4a:28:e2: ad:8f:7e:3b:93:3c:44:3e:61:7c:4d:2a:55:f2:79:d4:51:12: 10:a6:26:de:ca:4d:23:fa:86:13:bd:f4:1c:b4:97:8f:b9:80: d7:69:95:e1:0b:5d:2c:e8:46:98:f3:da:9e:f5:4c:55:15:62: b5:b5:ed:35:3f:02:f7:a1:3e:9d:1f:9c:61:38:1a:03:7a:24: 1c:ad:b3:83 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIHcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkEy MUExMUFBQzRFQUUwQTYzMDY1OUIzMUEyMzBCMDhENkI1ODE3NzAeFw0yNTA5MTMw MzEwMjZaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEY0MjQ4QjIzNEUxMEJB NTlFQjlEMEY5NDFERUJDNjFFNUE4NzlFQkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhzCX2lyafLoYClkgWA5toaMmv5nroefpaJvS0jwgOklAgCvWG KSjapcQDSzvQKKghbUb/8X8AwjpGzirSqP3ZDB0BQlifHQctox10zQuEPiDCelSd 1+AmQ9e14aIVo7pNnBaTt/KVDNrrqwgPQhuY1xSMAru/1SJO+WABNOlFDCureT1j 3Aj02flx0TVVoyCGp9jNFP1ibriougZd8h4FcOUTukfDEySRcUs8AgnIRJNZZg1F WMkakRHP+yAgGTO8oR7A2efJdsLU9k3Sx0d1uj1yy/4FNDxAH58qNYCkbV4gsxtf C4huNVjtASzp7UNOus5atcaAGSEoGsQQnOcTAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU9CSLI04QulnrnQ+UHevGHlqHnr8wHwYDVR0jBBgwFoAUaiGhGqxOrgpjBlmz GiMLCNa1gXcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjU2 NC9haUdoR3F4T3JncGpCbG16R2lNTENOYTFnWGMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2FpR2hHcXhPcmdwakJsbXpHaU1MQ05hMWdYYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI1NjQvOUNTTEkwNFF1bG5y blEtVUhldkdIbHFIbnI4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmdipDANBgkqhkiG9w0BAQsFAAOCAQEANBXNd56HyhS4893S4w2aIOITCbb3 1nq5BPKqiuG51tM08K0l7sxxEqD2kwi8LUAWDzcDqUeeiGotlOl68qr10+jwaUGB uXOiD65IYEUHbWx6p7GepnPqKR5GUmQ8fZ4b+U1p2WScXOYOIgdMbHF82+ThxgbO w6oEd0d0it4/JZhGo0h2pNqxMP4FEAzUdmVotq9r9Aini9aah0YQ7nda0UK189x2 pmqc7WlreFgQ7U59SijirY9+O5M8RD5hfE0qVfJ51FESEKYm3spNI/qGE730HLSX j7mA12mV4QtdLOhGmPPanvVMVRVitbXtNT8C96E+nR+cYTgaA3okHK2zgw== -----END CERTIFICATE-----Generated at Mon Oct 20 17:52:05 2025 by rpki-client