$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/9N0DmiHc5sYqOByshJDwmHs3fnw.roa File: 9N0DmiHc5sYqOByshJDwmHs3fnw.roa (raw, json) Hash identifier: aS4esybjp0VrUr6VZjn+hpnrn5QY9g34AoVK8f/C31w= Subject key identifier: F4:DD:03:9A:21:DC:E6:C6:2A:38:1C:AC:84:90:F0:98:7B:37:7E:7C Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708 Certificate serial: 21ED Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/9N0DmiHc5sYqOByshJDwmHs3fnw.roa Signing time: Sat 13 Sep 2025 03:09:07 +0000 ROA not before: Sat 13 Sep 2025 03:09:07 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 137718 IP address blocks: 103.159.142.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8685 (0x21ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708 Validity Not Before: Sep 13 03:09:07 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=F4DD039A21DCE6C62A381CAC8490F0987B377E7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:aa:8c:b5:5c:9d:a1:16:79:5c:0b:1d:69:34: 15:0b:b5:a5:51:f1:4b:7f:c2:99:95:42:21:6d:28: cd:af:ff:5d:ab:c2:33:dd:be:26:75:53:3d:23:d6: bb:8e:f6:d2:4f:66:3a:97:12:46:e6:8b:bd:32:08: a5:60:2b:b2:59:4e:7b:c0:2c:47:64:d3:3e:b0:13: f9:13:1d:2f:e6:eb:69:af:06:b3:1a:7a:31:30:cd: 19:f2:85:da:df:e2:77:b7:d7:07:35:39:48:af:0c: 06:ed:67:04:de:d1:c4:1f:1b:8d:4d:e3:fd:9a:7d: 1f:3c:fb:aa:f5:c5:b1:42:8e:c0:11:db:ff:16:1f: 1e:67:5f:9a:f6:0c:41:a7:14:48:84:a6:1d:31:50: 3a:10:da:31:b7:4d:8a:cb:96:8e:00:28:e0:d5:2d: ca:00:77:50:6b:25:be:2e:07:0e:23:19:28:93:a0: 6e:10:48:f4:73:ef:a5:f7:82:72:3e:83:f8:84:eb: d2:9f:78:14:1e:db:4c:bc:93:c2:9a:40:5a:47:96: ea:70:98:bb:cc:25:99:45:1d:7b:20:90:c0:6f:47: f9:15:c7:5c:eb:e1:6d:a6:c4:ae:0c:00:6c:a9:be: 1f:19:47:af:e9:cc:1d:8f:0e:a7:cb:cc:50:5e:e1: 44:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:DD:03:9A:21:DC:E6:C6:2A:38:1C:AC:84:90:F0:98:7B:37:7E:7C X509v3 Authority Key Identifier: keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/9N0DmiHc5sYqOByshJDwmHs3fnw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.159.142.0/23 Signature Algorithm: sha256WithRSAEncryption c0:86:11:7a:ee:fa:e8:ca:6e:8d:de:ee:3a:79:a2:2d:7f:37: 2c:e9:b9:1c:47:0a:23:bc:57:e2:97:16:2b:38:b9:d4:40:c0: 00:d6:04:65:02:9e:45:59:58:86:8c:64:af:81:dc:b0:85:ff: 13:ff:01:b5:13:ff:ac:f1:23:5b:11:8b:a2:38:63:fd:7a:7a: c4:64:3c:85:a9:ba:00:13:6d:0b:59:1f:da:40:08:59:24:67: e4:6a:3b:bb:a6:fe:70:6f:22:06:cb:d1:f7:95:5e:52:8c:80: a0:aa:89:2b:f8:ce:29:92:6e:59:86:44:ee:06:c6:44:7d:2f: 22:9a:68:f9:20:dd:74:fc:4b:7d:7f:52:5b:aa:88:07:1b:03: 80:f4:e3:b0:5a:29:ca:0b:29:a3:dd:51:72:ca:08:d5:8b:44: 3e:79:fe:e2:3e:cc:d1:e5:f7:f7:48:fc:17:fd:81:8e:3a:d4: fe:2c:3b:8e:cc:92:2b:9b:c6:b1:d6:75:7b:c0:40:52:97:b3: 77:63:dd:9f:c6:a6:7e:14:24:e0:7e:f7:eb:aa:4c:0f:76:46: ad:03:03:0a:67:5a:b5:7d:5f:47:48:00:fe:b0:dc:6b:09:9f: 86:55:06:fa:6b:d0:c1:29:e5:70:a2:c0:75:49:1c:20:7b:d5: 85:d6:3f:ff -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIe0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4 QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTA5MTMw MzA5MDdaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEY0REQwMzlBMjFEQ0U2 QzYyQTM4MUNBQzg0OTBGMDk4N0IzNzdFN0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJqoy1XJ2hFnlcCx1pNBULtaVR8Ut/wpmVQiFtKM2v/12rwjPd viZ1Uz0j1ruO9tJPZjqXEkbmi70yCKVgK7JZTnvALEdk0z6wE/kTHS/m62mvBrMa ejEwzRnyhdrf4ne31wc1OUivDAbtZwTe0cQfG41N4/2afR88+6r1xbFCjsAR2/8W Hx5nX5r2DEGnFEiEph0xUDoQ2jG3TYrLlo4AKODVLcoAd1BrJb4uBw4jGSiToG4Q SPRz76X3gnI+g/iE69KfeBQe20y8k8KaQFpHlupwmLvMJZlFHXsgkMBvR/kVx1zr 4W2mxK4MAGypvh8ZR6/pzB2PDqfLzFBe4UTJAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU9N0DmiHc5sYqOByshJDwmHs3fnwwHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvOU4wRG1pSGM1c1lx T0J5c2hKRHdtSHMzZm53LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAWefjjANBgkqhkiG9w0BAQsFAAOCAQEAwIYReu766Mpujd7uOnmiLX83LOm5 HEcKI7xX4pcWKzi51EDAANYEZQKeRVlYhoxkr4HcsIX/E/8BtRP/rPEjWxGLojhj /Xp6xGQ8ham6ABNtC1kf2kAIWSRn5Go7u6b+cG8iBsvR95VeUoyAoKqJK/jOKZJu WYZE7gbGRH0vIppo+SDddPxLfX9SW6qIBxsDgPTjsFopygspo91RcsoI1YtEPnn+ 4j7M0eX390j8F/2BjjrU/iw7jsySK5vGsdZ1e8BAUpezd2Pdn8amfhQk4H7366pM D3ZGrQMDCmdatX1fR0gA/rDcawmfhlUG+mvQwSnlcKLAdUkcIHvVhdY//w== -----END CERTIFICATE-----Generated at Mon Oct 20 22:37:03 2025 by rpki-client