$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2618/J_1NZYT_wrWzR1NgnNVZbHtpj-Q.roa File: J_1NZYT_wrWzR1NgnNVZbHtpj-Q.roa (raw, json) Hash identifier: JZqbb7i6bVnvHtRzZU32RSdzBfvZIDA6IYjDqF9aNjc= Subject key identifier: 27:FD:4D:65:84:FF:C2:B5:B3:47:53:60:9C:D5:59:6C:7B:69:8F:E4 Certificate issuer: /CN=0136041A2F53F26B420D6BD4FD0E9C2D77320971 Certificate serial: 4F8E Authority key identifier: 01:36:04:1A:2F:53:F2:6B:42:0D:6B:D4:FD:0E:9C:2D:77:32:09:71 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/J_1NZYT_wrWzR1NgnNVZbHtpj-Q.roa Signing time: Sat 13 Sep 2025 03:02:35 +0000 ROA not before: Sat 13 Sep 2025 03:02:35 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 63603 IP address blocks: 103.102.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 15:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20366 (0x4f8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0136041A2F53F26B420D6BD4FD0E9C2D77320971 Validity Not Before: Sep 13 03:02:35 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=27FD4D6584FFC2B5B34753609CD5596C7B698FE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:10:9a:f0:97:d7:c4:0f:ba:0a:55:69:37:be: ac:f3:55:85:3c:0f:6b:55:23:68:85:a9:96:08:9c: a7:fa:c0:73:b7:1d:55:f5:ff:fd:d3:93:f8:38:c7: 3d:f3:fc:12:f3:90:09:94:f5:81:3b:f5:47:f0:f8: 63:a9:7d:09:38:3a:59:be:be:ee:86:43:8a:28:42: 37:b3:4f:3d:32:54:d0:3b:b5:ab:12:fd:76:8e:4a: 69:9a:45:fd:2c:76:74:6c:43:cc:f3:fb:c9:88:bf: 77:aa:cd:9d:2d:79:d0:80:6d:e1:b2:92:4e:b5:68: 15:dd:68:2c:25:0e:bd:33:87:d5:37:b8:7e:1b:93: a4:31:e5:bf:f9:b2:41:c8:4e:06:f9:5c:12:a9:25: d3:5a:24:b3:04:03:78:f1:65:3c:22:4b:5a:83:88: 54:34:51:47:d2:22:73:60:41:95:63:bd:46:68:32: 78:99:76:96:f1:f2:1a:21:f1:ad:c9:15:95:9a:4a: 8f:15:3a:49:12:17:f3:22:05:b3:26:e8:4a:d7:1e: e4:01:aa:9f:f5:9e:b5:99:d5:d6:1a:b1:04:04:ce: ac:36:51:63:d2:86:12:04:36:f0:4d:d1:c6:6f:72: fa:ab:a8:e3:bb:ea:be:68:9f:c9:ca:1e:32:84:01: 24:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:FD:4D:65:84:FF:C2:B5:B3:47:53:60:9C:D5:59:6C:7B:69:8F:E4 X509v3 Authority Key Identifier: keyid:01:36:04:1A:2F:53:F2:6B:42:0D:6B:D4:FD:0E:9C:2D:77:32:09:71 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/J_1NZYT_wrWzR1NgnNVZbHtpj-Q.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.102.199.0/24 Signature Algorithm: sha256WithRSAEncryption c9:6f:c4:13:75:f1:5c:04:53:14:a6:80:08:7f:40:e8:a7:d2: d7:d2:3f:74:7e:7a:21:b1:c3:65:29:ec:4a:cd:7b:13:a1:dc: ba:5f:66:59:e8:25:cb:4b:82:3d:92:07:35:c9:72:80:bb:9d: 7e:60:f6:39:35:fe:b8:27:c4:23:fb:7f:c1:1d:ee:d6:16:95: 51:e6:4f:e2:ec:e8:a3:f0:0e:da:cc:08:f5:4a:f2:29:19:1a: a5:52:91:8d:ea:79:7b:b7:20:8f:d4:14:9a:ad:b8:c7:11:92: 28:15:a0:2b:22:a8:a8:0f:61:91:94:4e:5d:22:1c:53:ab:92: 84:b3:c0:99:82:8f:9f:21:7c:ed:7c:34:a0:85:9c:70:06:fe: 9f:1c:94:c8:6f:12:f8:cb:67:11:44:f3:d4:78:d0:d1:03:12: bb:6f:5b:a4:a9:89:57:bd:dc:59:2d:f2:e4:1f:29:72:2d:46: 4b:01:41:ed:e2:b6:c2:96:a1:fd:d9:38:8e:59:a6:a3:b4:06: 63:7b:d6:14:4b:3a:0e:12:ed:49:d5:62:51:d8:cc:90:1f:65: 9c:24:5a:cd:3a:9c:a2:2c:e0:f7:83:93:c7:f2:69:98:10:07: 8d:f9:a5:5b:5e:a1:74:85:f6:e5:b4:33:06:41:5c:c3:93:18: 04:fd:5e:b2 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICT44wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDEz NjA0MUEyRjUzRjI2QjQyMEQ2QkQ0RkQwRTlDMkQ3NzMyMDk3MTAeFw0yNTA5MTMw MzAyMzVaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDI3RkQ0RDY1ODRGRkMy QjVCMzQ3NTM2MDlDRDU1OTZDN0I2OThGRTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCbEJrwl9fED7oKVWk3vqzzVYU8D2tVI2iFqZYInKf6wHO3HVX1 //3Tk/g4xz3z/BLzkAmU9YE79Ufw+GOpfQk4Olm+vu6GQ4ooQjezTz0yVNA7tasS /XaOSmmaRf0sdnRsQ8zz+8mIv3eqzZ0tedCAbeGykk61aBXdaCwlDr0zh9U3uH4b k6Qx5b/5skHITgb5XBKpJdNaJLMEA3jxZTwiS1qDiFQ0UUfSInNgQZVjvUZoMniZ dpbx8hoh8a3JFZWaSo8VOkkSF/MiBbMm6ErXHuQBqp/1nrWZ1dYasQQEzqw2UWPS hhIENvBN0cZvcvqrqOO76r5on8nKHjKEASTDAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUJ/1NZYT/wrWzR1NgnNVZbHtpj+QwHwYDVR0jBBgwFoAUATYEGi9T8mtCDWvU /Q6cLXcyCXEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjYx OC9BVFlFR2k5VDhtdENEV3ZVX1E2Y0xYY3lDWEUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0FUWUVHaTlUOG10Q0RXdlVfUTZjTFhjeUNYRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2MTgvSl8xTlpZVF93cld6 UjFOZ25OVlpiSHRwai1RLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGdmxzANBgkqhkiG9w0BAQsFAAOCAQEAyW/EE3XxXARTFKaACH9A6KfS19I/ dH56IbHDZSnsSs17E6Hcul9mWegly0uCPZIHNclygLudfmD2OTX+uCfEI/t/wR3u 1haVUeZP4uzoo/AO2swI9UryKRkapVKRjep5e7cgj9QUmq24xxGSKBWgKyKoqA9h kZROXSIcU6uShLPAmYKPnyF87Xw0oIWccAb+nxyUyG8S+MtnEUTz1HjQ0QMSu29b pKmJV73cWS3y5B8pci1GSwFB7eK2wpah/dk4jlmmo7QGY3vWFEs6DhLtSdViUdjM kB9lnCRazTqcoizg94OTx/JpmBAHjfmlW16hdIX25bQzBkFcw5MYBP1esg== -----END CERTIFICATE-----Generated at Tue Oct 21 13:27:59 2025 by rpki-client