$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2972/oN6OAGOV0cdaPZu11iVZrCiBcBI.roa File: oN6OAGOV0cdaPZu11iVZrCiBcBI.roa (raw, json) Hash identifier: 3mNZCkp2vcw1/UmFCrK3Wmr5EPSAZSqKxAaz6I4tKuA= Subject key identifier: A0:DE:8E:00:63:95:D1:C7:5A:3D:9B:B5:D6:25:59:AC:28:81:70:12 Certificate issuer: /CN=A8EBEAD4B13A791850CAF7914EA30D0F5036C3E7 Certificate serial: 04 Authority key identifier: A8:EB:EA:D4:B1:3A:79:18:50:CA:F7:91:4E:A3:0D:0F:50:36:C3:E7 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qOvq1LE6eRhQyveRTqMND1A2w-c.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2972/oN6OAGOV0cdaPZu11iVZrCiBcBI.roa Signing time: Wed 15 Oct 2025 07:43:33 +0000 ROA not before: Wed 15 Oct 2025 07:43:33 +0000 ROA not after: Thu 15 Oct 2026 07:34:23 +0000 asID: 139138 IP address blocks: 103.150.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2972/qOvq1LE6eRhQyveRTqMND1A2w-c.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2972/qOvq1LE6eRhQyveRTqMND1A2w-c.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qOvq1LE6eRhQyveRTqMND1A2w-c.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 18:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8EBEAD4B13A791850CAF7914EA30D0F5036C3E7 Validity Not Before: Oct 15 07:43:33 2025 GMT Not After : Oct 15 07:34:23 2026 GMT Subject: CN=A0DE8E006395D1C75A3D9BB5D62559AC28817012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:5d:1d:74:01:a7:39:a9:66:d6:90:f3:c5:53: e9:15:83:66:80:6b:88:b0:70:8b:6a:37:1c:ad:de: e1:04:f6:33:00:77:14:4c:1c:1e:02:ab:99:1a:a3: 8f:52:6b:c8:8c:8a:b4:5e:1e:b6:a9:27:98:b8:69: 0a:c3:e0:05:72:5c:25:0c:b7:dc:8f:04:82:1c:44: 76:2c:0a:da:43:78:c1:82:ad:7f:1a:9c:b3:b4:60: 71:18:e2:89:be:da:a8:51:08:d1:08:c6:dc:66:c2: e7:7f:7b:36:80:54:12:d4:7f:46:8e:69:b5:ae:96: f2:3a:73:5a:3f:f5:31:7f:bb:22:b7:5e:aa:4b:a6: 77:61:de:78:7c:97:ac:8b:83:6c:a0:ce:35:ba:d4: 1a:64:92:2b:de:ba:a0:e6:29:31:7b:f9:ae:1e:c9: eb:74:20:d6:95:41:80:ad:bb:9b:e4:d6:bf:26:41: 2e:e6:15:4d:6d:3e:f7:32:2f:5d:15:e2:87:41:88: f8:d8:77:fb:c9:3b:17:ee:6a:4d:7c:a0:a7:0c:0e: a0:f0:69:7c:b0:d6:23:3e:94:16:68:a7:ca:66:88: b4:cf:57:ac:8b:46:b0:eb:2e:34:64:89:df:5f:31: d8:69:f8:c1:67:48:cd:e1:da:b8:7e:bf:61:68:01: 51:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:DE:8E:00:63:95:D1:C7:5A:3D:9B:B5:D6:25:59:AC:28:81:70:12 X509v3 Authority Key Identifier: keyid:A8:EB:EA:D4:B1:3A:79:18:50:CA:F7:91:4E:A3:0D:0F:50:36:C3:E7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2972/qOvq1LE6eRhQyveRTqMND1A2w-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qOvq1LE6eRhQyveRTqMND1A2w-c.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2972/oN6OAGOV0cdaPZu11iVZrCiBcBI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.150.164.0/24 Signature Algorithm: sha256WithRSAEncryption 53:c5:5b:19:1a:de:cd:7f:8e:24:34:28:8c:7e:70:33:1d:64: fd:61:1a:b7:8e:d8:92:4a:5b:ad:b4:f1:b4:a2:c7:25:36:7e: ea:80:db:6f:fd:9f:16:64:2a:69:64:1a:cd:e8:ed:c9:4a:ea: b1:03:a1:dc:36:6c:8c:f6:f9:92:72:a9:1c:ed:7c:71:71:1a: 9b:0a:a4:ad:56:27:b1:c6:8a:2a:5c:98:f0:93:46:e3:03:3a: 8f:d1:ae:80:86:5d:af:64:63:67:a9:75:60:a5:ab:f4:0f:b8: f6:ca:32:8d:88:01:0e:66:0f:76:a5:d9:df:55:f6:38:c1:6a: 0b:8a:7f:62:a6:68:8d:96:8c:d2:67:88:c9:54:93:09:15:d5: 06:2f:4c:a9:97:c1:72:ef:05:2a:5b:29:5a:c3:12:59:65:57: c1:07:e4:fd:83:0a:23:02:69:f1:73:34:90:06:32:14:14:96: 18:f6:99:02:69:4e:e8:62:4d:37:12:28:d4:2d:b5:66:7e:8f: e1:4a:18:7b:32:e9:ae:1e:07:ed:d5:b2:02:44:69:21:c7:7f: 32:ed:99:f2:d9:de:47:a4:f8:9e:c5:4f:7b:05:89:d8:7b:87: 8a:c4:ca:fe:8b:48:22:20:fb:76:5e:ca:7c:41:16:fc:3f:cc: cb:de:be:6e -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBOEVC RUFENEIxM0E3OTE4NTBDQUY3OTE0RUEzMEQwRjUwMzZDM0U3MB4XDTI1MTAxNTA3 NDMzM1oXDTI2MTAxNTA3MzQyM1owMzExMC8GA1UEAxMoQTBERThFMDA2Mzk1RDFD NzVBM0Q5QkI1RDYyNTU5QUMyODgxNzAxMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOFdHXQBpzmpZtaQ88VT6RWDZoBriLBwi2o3HK3e4QT2MwB3FEwc HgKrmRqjj1JryIyKtF4etqknmLhpCsPgBXJcJQy33I8EghxEdiwK2kN4wYKtfxqc s7RgcRjiib7aqFEI0QjG3GbC5397NoBUEtR/Ro5pta6W8jpzWj/1MX+7Irdeqkum d2HeeHyXrIuDbKDONbrUGmSSK966oOYpMXv5rh7J63Qg1pVBgK27m+TWvyZBLuYV TW0+9zIvXRXih0GI+Nh3+8k7F+5qTXygpwwOoPBpfLDWIz6UFminymaItM9XrItG sOsuNGSJ318x2Gn4wWdIzeHauH6/YWgBUdECAwEAAaOCAfMwggHvMB0GA1UdDgQW BBSg3o4AY5XRx1o9m7XWJVmsKIFwEjAfBgNVHSMEGDAWgBSo6+rUsTp5GFDK95FO ow0PUDbD5zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yOTcy L3FPdnExTEU2ZVJoUXl2ZVJUcU1ORDFBMnctYy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvcU92cTFMRTZlUmhReXZlUlRxTU5EMUEydy1jLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjk3Mi9vTjZPQUdPVjBjZGFQ WnUxMWlWWnJDaUJjQkkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ5akMA0GCSqGSIb3DQEBCwUAA4IBAQBTxVsZGt7Nf44kNCiMfnAzHWT9YRq3 jtiSSluttPG0osclNn7qgNtv/Z8WZCppZBrN6O3JSuqxA6HcNmyM9vmScqkc7Xxx cRqbCqStViexxooqXJjwk0bjAzqP0a6Ahl2vZGNnqXVgpav0D7j2yjKNiAEOZg92 pdnfVfY4wWoLin9ipmiNlozSZ4jJVJMJFdUGL0ypl8Fy7wUqWylawxJZZVfBB+T9 gwojAmnxczSQBjIUFJYY9pkCaU7oYk03EijULbVmfo/hShh7MumuHgft1bICRGkh x38y7Zny2d5HpPiexU97BYnYe4eKxMr+i0giIPt2Xsp8QRb8P8zL3r5u -----END CERTIFICATE-----Generated at Mon Oct 20 16:09:31 2025 by rpki-client