$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/BcoIhNLXAk_MeR_es7VC-Hq8E5c.roa File: BcoIhNLXAk_MeR_es7VC-Hq8E5c.roa (raw, json) Hash identifier: bbUHi1fzb2B2KpHotp6GJiaeELWgjCP5WOc4FU74NME= Subject key identifier: 05:CA:08:84:D2:D7:02:4F:CC:79:1F:DE:B3:B5:42:F8:7A:BC:13:97 Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708 Certificate serial: 21D8 Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/BcoIhNLXAk_MeR_es7VC-Hq8E5c.roa Signing time: Sat 13 Sep 2025 03:09:02 +0000 ROA not before: Sat 13 Sep 2025 03:09:02 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 4811 IP address blocks: 14.103.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 18:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8664 (0x21d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708 Validity Not Before: Sep 13 03:09:02 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=05CA0884D2D7024FCC791FDEB3B542F87ABC1397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a0:03:6f:9b:dc:c8:3d:45:b3:15:ac:0f:e4: f1:d6:ac:81:23:81:30:af:c8:f3:36:65:82:fd:d2: 29:22:bf:9a:f7:e0:67:9d:12:64:13:58:89:12:d8: 81:36:96:8f:cd:96:c3:34:4e:d8:c3:91:d1:dd:54: 01:76:94:19:6b:ee:e7:88:c0:d2:85:4e:d9:84:56: b8:e7:b2:6e:c3:f9:7f:36:f9:bd:60:21:7d:49:0a: 09:57:51:96:2d:28:7d:1c:74:f2:34:26:4c:aa:a5: c8:06:5c:c3:77:43:0d:f8:e1:df:8c:3d:0b:ba:7b: ee:f8:54:ee:3c:ef:f2:66:92:de:56:03:2e:78:e7: c4:f7:2c:20:74:0b:7e:10:d5:44:be:da:0e:47:ac: 72:fc:d3:07:59:8d:55:04:b9:bc:d5:fa:88:1e:c1: 08:65:31:db:cb:c8:bb:6b:15:22:24:93:5c:78:d6: 13:2d:26:16:54:15:ce:ba:5a:9e:8f:24:9d:30:db: 81:9a:8a:76:58:40:32:56:d7:a6:fc:90:3a:bf:6c: c8:34:2b:85:f2:36:97:17:7b:a4:e9:fe:52:27:18: f8:36:78:e7:cf:a9:81:e4:6d:18:ed:71:d3:96:cf: 59:ba:b5:12:dc:3f:ea:fd:f1:57:8b:3f:ee:b1:cc: a9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:CA:08:84:D2:D7:02:4F:CC:79:1F:DE:B3:B5:42:F8:7A:BC:13:97 X509v3 Authority Key Identifier: keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/BcoIhNLXAk_MeR_es7VC-Hq8E5c.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 14.103.64.0/21 Signature Algorithm: sha256WithRSAEncryption b8:39:bf:27:c4:77:31:54:0c:60:6c:59:e6:df:33:e4:94:47: 3d:c1:cb:74:e9:f1:f0:11:6c:6b:0f:00:5e:97:93:42:ba:57: ac:6c:6b:5b:f4:70:44:89:c6:ee:85:66:5c:bc:e8:2b:93:61: ac:24:dd:e9:df:f4:31:86:b2:ed:3c:67:37:88:c7:50:23:ae: b5:c9:8c:65:a3:e0:9a:2a:22:85:1d:f9:5b:8f:4c:5d:bb:90: 34:7e:a0:6c:25:6a:0f:2c:71:ec:26:33:dd:00:dd:69:24:96: bf:c8:09:af:95:69:56:18:3e:2d:fe:28:13:37:14:38:a3:f9: 69:9e:d1:7f:b9:f8:9d:56:f7:e9:1b:b5:ea:d3:2a:0e:34:ca: d4:2d:06:26:4d:86:1e:8b:3a:d4:6a:e8:72:eb:1d:56:af:bd: c6:a9:d6:ba:7b:df:17:22:d1:05:af:0b:24:ac:41:e3:2d:34: bd:88:f9:e2:54:2e:75:e7:8c:ba:97:94:88:46:90:04:31:f4: 53:eb:37:37:e6:a7:09:8a:89:9d:fe:30:5c:2e:cd:d1:6a:fa: 83:08:b8:6e:24:ee:af:b1:2a:99:bb:8d:86:58:c9:93:30:42: 11:ed:c2:6b:cc:8b:bf:ef:8a:f9:b8:60:89:0e:18:21:42:28: b7:8a:0f:68 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIdgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4 QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTA5MTMw MzA5MDJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDA1Q0EwODg0RDJENzAy NEZDQzc5MUZERUIzQjU0MkY4N0FCQzEzOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHoANvm9zIPUWzFawP5PHWrIEjgTCvyPM2ZYL90ikiv5r34Ged EmQTWIkS2IE2lo/NlsM0TtjDkdHdVAF2lBlr7ueIwNKFTtmEVrjnsm7D+X82+b1g IX1JCglXUZYtKH0cdPI0JkyqpcgGXMN3Qw344d+MPQu6e+74VO487/Jmkt5WAy54 58T3LCB0C34Q1US+2g5HrHL80wdZjVUEubzV+ogewQhlMdvLyLtrFSIkk1x41hMt JhZUFc66Wp6PJJ0w24GainZYQDJW16b8kDq/bMg0K4XyNpcXe6Tp/lInGPg2eOfP qYHkbRjtcdOWz1m6tRLcP+r98VeLP+6xzKn5AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUBcoIhNLXAk/MeR/es7VC+Hq8E5cwHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvQmNvSWhOTFhBa19N ZVJfZXM3VkMtSHE4RTVjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAw5nQDANBgkqhkiG9w0BAQsFAAOCAQEAuDm/J8R3MVQMYGxZ5t8z5JRHPcHL dOnx8BFsaw8AXpeTQrpXrGxrW/RwRInG7oVmXLzoK5NhrCTd6d/0MYay7TxnN4jH UCOutcmMZaPgmioihR35W49MXbuQNH6gbCVqDyxx7CYz3QDdaSSWv8gJr5VpVhg+ Lf4oEzcUOKP5aZ7Rf7n4nVb36Ru16tMqDjTK1C0GJk2GHos61GrocusdVq+9xqnW unvfFyLRBa8LJKxB4y00vYj54lQudeeMupeUiEaQBDH0U+s3N+anCYqJnf4wXC7N 0Wr6gwi4biTur7EqmbuNhljJkzBCEe3Ca8yLv++K+bhgiQ4YIUIot4oPaA== -----END CERTIFICATE-----Generated at Mon Oct 20 16:22:28 2025 by rpki-client