$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/EExzCfqhzEPTvKs3n3_pPfHSG1M.roa File: EExzCfqhzEPTvKs3n3_pPfHSG1M.roa (raw, json) Hash identifier: nd5SJw+9I3Y4ZD1q/qhqcNyVh+RWp4rRS1xXvOpjSyg= Subject key identifier: 10:4C:73:09:FA:A1:CC:43:D3:BC:AB:37:9F:7F:E9:3D:F1:D2:1B:53 Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708 Certificate serial: 21E9 Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/EExzCfqhzEPTvKs3n3_pPfHSG1M.roa Signing time: Sat 13 Sep 2025 03:09:06 +0000 ROA not before: Sat 13 Sep 2025 03:09:06 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 4811 IP address blocks: 14.103.48.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 18:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8681 (0x21e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708 Validity Not Before: Sep 13 03:09:06 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=104C7309FAA1CC43D3BCAB379F7FE93DF1D21B53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f7:98:71:09:4a:39:99:ca:48:82:dd:62:68: 48:a3:6c:78:21:55:23:82:27:df:b0:12:75:0a:6f: 72:8c:78:d2:e2:7b:ad:b3:df:89:99:23:98:89:3e: 70:d0:09:f6:3f:29:cb:59:67:9e:85:8a:97:e5:03: f3:f0:27:2b:6a:36:ad:e1:64:a4:24:c2:21:8c:38: fe:18:28:0d:17:3b:d2:66:dc:2c:2a:fa:c8:f3:98: 1b:18:a1:ff:61:18:35:47:1f:9f:ef:95:63:f1:64: 98:a8:39:77:c0:02:fc:b6:0d:a6:bb:17:62:74:3c: 1f:ca:93:da:aa:c8:f4:33:ec:45:62:16:e9:fe:04: 9e:ce:8f:3b:95:db:26:fd:94:09:b1:8d:d5:bc:80: 93:87:fa:c5:4e:41:79:4a:2e:e2:62:87:64:32:27: 79:34:1f:37:68:0a:81:f7:a5:ef:60:75:97:c0:eb: a8:28:e2:0c:09:ff:55:0d:06:ec:a0:92:e2:d6:7c: 02:bb:e6:56:23:f9:1a:f4:3a:d4:d9:49:82:b9:b3: ba:18:21:13:fa:b0:8c:a8:45:2b:32:79:96:77:a8: d9:80:db:0d:97:06:70:34:b0:a4:f3:b9:f2:cb:44: 72:6c:c3:a0:98:94:b4:99:17:13:94:4e:e9:b1:c2: c3:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:4C:73:09:FA:A1:CC:43:D3:BC:AB:37:9F:7F:E9:3D:F1:D2:1B:53 X509v3 Authority Key Identifier: keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/EExzCfqhzEPTvKs3n3_pPfHSG1M.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 14.103.48.0/21 Signature Algorithm: sha256WithRSAEncryption 11:d8:38:da:1e:5c:2d:4e:c5:67:7c:b1:47:ca:6f:04:f9:ec: 02:e6:ef:38:9c:79:49:73:dd:ba:63:38:c8:9f:e3:f7:a6:72: 62:33:b3:10:62:7c:d6:ef:9a:0e:c4:e9:56:4e:08:b1:f9:a8: 6d:1f:5a:73:19:1f:1a:ee:4c:b9:2c:17:50:22:61:10:43:b4: d8:d8:54:7a:2b:ce:58:82:41:ae:f7:08:d2:36:ee:58:9c:61: 97:70:fb:04:e4:be:6e:24:9c:77:25:b7:ac:01:b0:f1:3b:14: 64:bd:bf:51:dc:39:5f:0e:d8:cb:3f:5c:c5:39:d6:e4:c4:12: 0c:0b:37:a6:7b:a9:9d:0f:79:e9:b6:74:bf:1a:e5:b4:7d:38: 87:ea:9d:c2:9c:5c:ec:e3:89:19:4d:fc:96:e8:4c:2e:72:44: cd:df:bb:f5:17:19:7d:bd:6b:aa:b7:ec:34:3b:cf:07:0e:1f: 4d:6c:4e:6c:3e:44:29:69:94:12:67:11:78:ed:fe:2e:bb:4a: a2:70:86:1c:02:d3:75:6e:6e:cf:dd:6c:6f:c0:85:92:eb:63: 70:7b:db:ad:7d:2c:cb:c4:2d:ab:82:85:6f:45:a0:33:99:67: 75:59:0e:e3:a4:43:3b:21:3b:a5:5f:51:ba:05:59:8b:5c:10: 6e:0d:98:c4 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIekwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4 QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTA5MTMw MzA5MDZaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDEwNEM3MzA5RkFBMUND NDNEM0JDQUIzNzlGN0ZFOTNERjFEMjFCNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCu95hxCUo5mcpIgt1iaEijbHghVSOCJ9+wEnUKb3KMeNLie62z 34mZI5iJPnDQCfY/KctZZ56FipflA/PwJytqNq3hZKQkwiGMOP4YKA0XO9Jm3Cwq +sjzmBsYof9hGDVHH5/vlWPxZJioOXfAAvy2Daa7F2J0PB/Kk9qqyPQz7EViFun+ BJ7OjzuV2yb9lAmxjdW8gJOH+sVOQXlKLuJih2QyJ3k0HzdoCoH3pe9gdZfA66go 4gwJ/1UNBuygkuLWfAK75lYj+Rr0OtTZSYK5s7oYIRP6sIyoRSsyeZZ3qNmA2w2X BnA0sKTzufLLRHJsw6CYlLSZFxOUTumxwsO/AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUEExzCfqhzEPTvKs3n3/pPfHSG1MwHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvRUV4ekNmcWh6RVBU dktzM24zX3BQZkhTRzFNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAw5nMDANBgkqhkiG9w0BAQsFAAOCAQEAEdg42h5cLU7FZ3yxR8pvBPnsAubv OJx5SXPdumM4yJ/j96ZyYjOzEGJ81u+aDsTpVk4IsfmobR9acxkfGu5MuSwXUCJh EEO02NhUeivOWIJBrvcI0jbuWJxhl3D7BOS+biScdyW3rAGw8TsUZL2/Udw5Xw7Y yz9cxTnW5MQSDAs3pnupnQ956bZ0vxrltH04h+qdwpxc7OOJGU38luhMLnJEzd+7 9RcZfb1rqrfsNDvPBw4fTWxObD5EKWmUEmcReO3+LrtKonCGHALTdW5uz91sb8CF kutjcHvbrX0sy8Qtq4KFb0WgM5lndVkO46RDOyE7pV9RugVZi1wQbg2YxA== -----END CERTIFICATE-----Generated at Mon Oct 20 16:22:35 2025 by rpki-client