$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/IZ4YCHgcjpkkOwClRI4xgO5kW-8.roa File: IZ4YCHgcjpkkOwClRI4xgO5kW-8.roa (raw, json) Hash identifier: dHShnRgenGZw938sHM37JJd11wNzAwCG8LhiuALmcKc= Subject key identifier: 21:9E:18:08:78:1C:8E:99:24:3B:00:A5:44:8E:31:80:EE:64:5B:EF Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708 Certificate serial: 21EF Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/IZ4YCHgcjpkkOwClRI4xgO5kW-8.roa Signing time: Sat 13 Sep 2025 03:09:08 +0000 ROA not before: Sat 13 Sep 2025 03:09:08 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 4811 IP address blocks: 14.103.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 18:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8687 (0x21ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708 Validity Not Before: Sep 13 03:09:08 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=219E1808781C8E99243B00A5448E3180EE645BEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:99:8f:24:85:d8:91:93:db:e6:49:d4:58:b8: 58:d9:be:d9:6b:48:30:19:ff:f9:b6:b2:ab:0e:95: 82:2a:1c:af:3e:f5:a9:57:ec:b3:14:6f:05:80:8b: aa:14:97:3a:f4:2b:e1:ba:d7:62:af:f4:6c:7e:69: 37:5c:11:bb:d0:a1:51:ad:f4:ce:10:d6:1b:ee:09: 60:f0:60:78:16:59:48:4c:47:64:6e:b2:35:4b:0a: dc:e8:6b:9d:5e:a2:7b:d9:89:16:37:c8:b1:66:88: 87:fa:f1:f6:f3:0e:60:14:5b:29:ce:65:17:a5:4a: c0:af:81:f4:78:05:1d:79:4b:02:83:07:97:c1:7f: 73:f3:c9:a2:a0:53:8b:2f:61:aa:62:1b:24:21:38: ef:46:8e:e7:18:8c:07:c9:a6:d1:47:16:c3:f2:aa: 45:7a:15:89:e5:9a:bd:8c:f3:c5:ae:39:05:8f:0a: 72:4f:b6:77:14:29:c0:17:0f:fa:bc:f7:80:f1:5d: 0c:5c:aa:c7:79:d1:ae:2c:44:2f:3b:ee:d7:76:48: 8b:cc:aa:91:6a:f9:9d:ca:bc:0b:57:b1:b4:2c:87: 8a:02:88:89:7a:b9:4f:a6:a7:35:43:72:27:35:01: a2:08:be:43:02:12:d2:b3:f1:e5:bb:f9:20:5b:b9: 67:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:9E:18:08:78:1C:8E:99:24:3B:00:A5:44:8E:31:80:EE:64:5B:EF X509v3 Authority Key Identifier: keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/IZ4YCHgcjpkkOwClRI4xgO5kW-8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 14.103.8.0/21 Signature Algorithm: sha256WithRSAEncryption c4:92:eb:fb:a8:dc:62:02:91:20:d0:01:58:f3:4a:f1:6d:83: e6:75:61:5e:4d:42:72:fb:d2:8b:13:ed:a2:64:6a:db:d7:3c: 36:36:44:53:98:19:f0:f0:ab:bc:e5:e4:dc:e8:0f:c5:a0:a2: 85:fa:0d:a1:6f:0c:b6:ae:12:46:74:c3:13:9d:71:65:f2:e6: bd:f1:00:5b:17:d5:f7:0d:7b:33:7a:64:5a:41:b3:64:d1:05: e0:18:5c:0d:61:57:4a:5d:ab:92:cb:ca:b7:17:4b:30:55:cd: f2:e5:e0:5b:f7:ad:03:03:01:ea:8f:9b:c7:2e:f3:31:52:de: 4a:76:96:f0:1f:0b:4f:fb:e8:da:ea:5f:43:31:48:8e:95:a9: d7:92:82:31:c5:6e:ca:a5:0e:97:cd:df:00:2d:a0:f0:0f:4a: 9b:ee:a5:b5:ba:e4:45:60:7f:9c:ba:4a:24:8a:a7:54:86:e3: 6b:af:d3:35:c6:dc:65:fc:1f:0e:3a:a7:92:ae:fc:a9:75:f5: ad:8e:9e:5f:22:0a:58:02:b6:3c:ec:54:48:3b:3e:b8:5e:24: 50:e2:73:4e:c3:12:81:9a:8f:71:14:35:6e:33:ac:9d:1b:27: 0b:d3:26:c4:6a:5d:27:5e:ef:ac:2c:4d:2a:ab:5c:92:02:8c: e7:2f:79:2d -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIe8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4 QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTA5MTMw MzA5MDhaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDIxOUUxODA4NzgxQzhF OTkyNDNCMDBBNTQ0OEUzMTgwRUU2NDVCRUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7mY8khdiRk9vmSdRYuFjZvtlrSDAZ//m2sqsOlYIqHK8+9alX 7LMUbwWAi6oUlzr0K+G612Kv9Gx+aTdcEbvQoVGt9M4Q1hvuCWDwYHgWWUhMR2Ru sjVLCtzoa51eonvZiRY3yLFmiIf68fbzDmAUWynOZRelSsCvgfR4BR15SwKDB5fB f3PzyaKgU4svYapiGyQhOO9GjucYjAfJptFHFsPyqkV6FYnlmr2M88WuOQWPCnJP tncUKcAXD/q894DxXQxcqsd50a4sRC877td2SIvMqpFq+Z3KvAtXsbQsh4oCiIl6 uU+mpzVDcic1AaIIvkMCEtKz8eW7+SBbuWcJAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUIZ4YCHgcjpkkOwClRI4xgO5kW+8wHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvSVo0WUNIZ2NqcGtr T3dDbFJJNHhnTzVrVy04LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAw5nCDANBgkqhkiG9w0BAQsFAAOCAQEAxJLr+6jcYgKRINABWPNK8W2D5nVh Xk1CcvvSixPtomRq29c8NjZEU5gZ8PCrvOXk3OgPxaCihfoNoW8Mtq4SRnTDE51x ZfLmvfEAWxfV9w17M3pkWkGzZNEF4BhcDWFXSl2rksvKtxdLMFXN8uXgW/etAwMB 6o+bxy7zMVLeSnaW8B8LT/vo2upfQzFIjpWp15KCMcVuyqUOl83fAC2g8A9Km+6l tbrkRWB/nLpKJIqnVIbja6/TNcbcZfwfDjqnkq78qXX1rY6eXyIKWAK2POxUSDs+ uF4kUOJzTsMSgZqPcRQ1bjOsnRsnC9MmxGpdJ17vrCxNKqtckgKM5y95LQ== -----END CERTIFICATE-----Generated at Mon Oct 20 16:22:24 2025 by rpki-client