$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2639/t9WTIJ1TRjh8rZopCPRf_iIHYUU.roa File: t9WTIJ1TRjh8rZopCPRf_iIHYUU.roa (raw, json) Hash identifier: la2rEUz5kkHEaBt/K48HZr9Mj3Po4nBshdox32WpoNw= Subject key identifier: B7:D5:93:20:9D:53:46:38:7C:AD:9A:29:08:F4:5F:FE:22:07:61:45 Certificate issuer: /CN=262CFF5632E4BCD10211BFA08B63F49FC9469F03 Certificate serial: 2462 Authority key identifier: 26:2C:FF:56:32:E4:BC:D1:02:11:BF:A0:8B:63:F4:9F:C9:46:9F:03 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Jiz_VjLkvNECEb-gi2P0n8lGnwM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2639/t9WTIJ1TRjh8rZopCPRf_iIHYUU.roa Signing time: Sat 13 Sep 2025 03:06:34 +0000 ROA not before: Sat 13 Sep 2025 03:06:34 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 24424 IP address blocks: 103.104.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2639/Jiz_VjLkvNECEb-gi2P0n8lGnwM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2639/Jiz_VjLkvNECEb-gi2P0n8lGnwM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Jiz_VjLkvNECEb-gi2P0n8lGnwM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 18:06:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9314 (0x2462) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=262CFF5632E4BCD10211BFA08B63F49FC9469F03 Validity Not Before: Sep 13 03:06:34 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=B7D593209D5346387CAD9A2908F45FFE22076145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:97:2d:7e:00:26:85:31:36:28:aa:2e:81:fb: d2:34:b6:d1:1d:4a:fa:0e:3f:ce:4a:d7:1b:fc:20: 02:23:15:93:2d:22:b7:e5:fd:43:57:b1:0e:08:d9: 55:70:f2:ca:b7:b8:62:55:86:7e:6a:38:95:0d:f4: 73:58:7b:6c:5a:76:e1:e8:24:e6:73:ca:99:8e:de: 42:0a:4a:f7:75:f9:40:b8:53:95:c2:91:6e:6c:3e: 24:3f:14:53:c2:1f:e7:6c:a7:df:33:2f:b3:5f:c9: c1:85:a6:fa:c8:93:51:46:b9:c9:ae:10:7d:0c:d0: d2:a5:57:25:1b:d5:c3:50:8c:48:0e:d2:55:15:78: 1f:58:34:0d:0f:2a:0b:97:6d:92:8e:19:16:7f:c1: ea:2b:78:3d:f1:43:34:c2:af:25:09:57:b2:f7:3f: e1:c6:71:ee:f7:2d:e1:23:f2:22:45:61:1b:ad:26: 32:30:0b:cc:39:e5:0c:98:2f:6f:51:d0:cf:d1:30: 54:dd:04:15:50:18:db:3d:ae:7c:ce:47:90:7a:f5: 60:65:2a:57:d8:1a:f6:51:de:89:e3:a6:d1:db:40: 3a:3b:d4:cc:d1:b0:85:28:fb:a8:a0:9b:da:81:d9: 26:13:3e:ba:1b:03:55:73:c4:20:f7:e0:e6:da:7b: e1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:D5:93:20:9D:53:46:38:7C:AD:9A:29:08:F4:5F:FE:22:07:61:45 X509v3 Authority Key Identifier: keyid:26:2C:FF:56:32:E4:BC:D1:02:11:BF:A0:8B:63:F4:9F:C9:46:9F:03 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2639/Jiz_VjLkvNECEb-gi2P0n8lGnwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Jiz_VjLkvNECEb-gi2P0n8lGnwM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2639/t9WTIJ1TRjh8rZopCPRf_iIHYUU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.104.152.0/22 Signature Algorithm: sha256WithRSAEncryption 76:ba:66:3a:22:77:9f:8b:fd:c0:de:98:a1:0f:9e:40:21:c7: d1:b0:f9:b0:32:74:0a:b6:ab:2e:cd:cf:cc:83:3d:1a:26:08: 01:0a:64:bc:41:66:57:18:55:15:13:65:e5:a5:38:06:36:d8: 01:25:0f:32:2f:22:ff:e1:01:d8:d8:1b:38:86:cf:17:81:98: a4:32:45:6f:9c:15:c5:e2:af:a4:b5:d2:18:2d:61:4b:85:4d: 2d:56:f0:b8:02:d0:02:45:47:23:0a:c2:07:e7:cb:3d:2c:2a: 86:b8:87:70:a7:16:10:f3:9b:83:76:40:f3:44:89:2f:d9:3b: d3:70:00:ae:ab:5c:ae:dc:e3:67:38:bd:a7:e0:54:1f:93:c2: 7e:7d:dd:18:9d:81:d9:ce:c5:cf:6a:89:40:48:2c:47:5e:4a: 32:9f:5d:9b:4a:5c:2a:54:e1:65:99:3b:ad:30:96:12:07:91: 53:1b:e1:40:66:93:28:48:a8:b7:7d:1f:97:10:38:bf:41:32: 48:e0:0a:79:1f:3e:d5:1c:dc:3d:6b:c3:c8:10:d8:5f:c9:39: 84:e4:aa:0a:b2:80:f0:6a:4b:bc:90:7f:b6:1c:85:bc:89:ab: c2:7a:46:6b:b6:0e:06:1c:c1:39:40:0d:fb:ed:97:73:a7:f9: 09:35:c5:23 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICJGIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjYy Q0ZGNTYzMkU0QkNEMTAyMTFCRkEwOEI2M0Y0OUZDOTQ2OUYwMzAeFw0yNTA5MTMw MzA2MzRaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEI3RDU5MzIwOUQ1MzQ2 Mzg3Q0FEOUEyOTA4RjQ1RkZFMjIwNzYxNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwly1+ACaFMTYoqi6B+9I0ttEdSvoOP85K1xv8IAIjFZMtIrfl /UNXsQ4I2VVw8sq3uGJVhn5qOJUN9HNYe2xaduHoJOZzypmO3kIKSvd1+UC4U5XC kW5sPiQ/FFPCH+dsp98zL7NfycGFpvrIk1FGucmuEH0M0NKlVyUb1cNQjEgO0lUV eB9YNA0PKguXbZKOGRZ/weoreD3xQzTCryUJV7L3P+HGce73LeEj8iJFYRutJjIw C8w55QyYL29R0M/RMFTdBBVQGNs9rnzOR5B69WBlKlfYGvZR3onjptHbQDo71MzR sIUo+6igm9qB2SYTProbA1VzxCD34Obae+ELAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUt9WTIJ1TRjh8rZopCPRf/iIHYUUwHwYDVR0jBBgwFoAUJiz/VjLkvNECEb+g i2P0n8lGnwMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjYz OS9KaXpfVmpMa3ZORUNFYi1naTJQMG44bEdud00uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0ppel9Wakxrdk5FQ0ViLWdpMlAwbjhsR253TS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2MzkvdDlXVElKMVRSamg4 clpvcENQUmZfaUlIWVVVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmdomDANBgkqhkiG9w0BAQsFAAOCAQEAdrpmOiJ3n4v9wN6YoQ+eQCHH0bD5 sDJ0CrarLs3PzIM9GiYIAQpkvEFmVxhVFRNl5aU4BjbYASUPMi8i/+EB2NgbOIbP F4GYpDJFb5wVxeKvpLXSGC1hS4VNLVbwuALQAkVHIwrCB+fLPSwqhriHcKcWEPOb g3ZA80SJL9k703AArqtcrtzjZzi9p+BUH5PCfn3dGJ2B2c7Fz2qJQEgsR15KMp9d m0pcKlThZZk7rTCWEgeRUxvhQGaTKEiot30flxA4v0EySOAKeR8+1RzcPWvDyBDY X8k5hOSqCrKA8GpLvJB/thyFvImrwnpGa7YOBhzBOUAN++2Xc6f5CTXFIw== -----END CERTIFICATE-----Generated at Mon Oct 20 16:30:57 2025 by rpki-client