$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/a7L_07koyPh5_E3ty4kZUu5VtoY.roa File: a7L_07koyPh5_E3ty4kZUu5VtoY.roa (raw, json) Hash identifier: dBeSDiTPBb65QrxLS13TO64umQ7Cfy2EttAVhG9XAP8= Subject key identifier: 6B:B2:FF:D3:B9:28:C8:F8:79:FC:4D:ED:CB:89:19:52:EE:55:B6:86 Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708 Certificate serial: 21F7 Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/a7L_07koyPh5_E3ty4kZUu5VtoY.roa Signing time: Sat 13 Sep 2025 03:09:10 +0000 ROA not before: Sat 13 Sep 2025 03:09:10 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 4811 IP address blocks: 14.103.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 18:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8695 (0x21f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708 Validity Not Before: Sep 13 03:09:10 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=6BB2FFD3B928C8F879FC4DEDCB891952EE55B686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2f:20:5e:d3:7c:7f:a6:31:12:18:e6:c9:8e: db:34:63:ed:85:dd:a1:77:f4:78:e0:c4:09:51:b8: 07:32:87:3e:41:96:f7:66:19:1e:48:e7:08:27:75: 99:6c:6b:e9:0b:50:8f:f1:5f:2e:bb:55:84:58:c1: 43:ed:c9:7d:3d:52:8d:5d:52:81:57:ee:20:b7:cf: 0b:4f:3d:84:70:c2:aa:7c:65:f5:48:3e:e9:2d:8f: ef:fc:a6:f2:30:ed:ec:02:d1:f6:b6:3c:6f:e9:a8: 2c:73:8d:23:0a:0c:86:73:39:50:a2:d9:7f:9a:55: d1:e8:04:d1:e5:4b:2f:f2:1b:31:c1:63:f0:5e:c8: 96:57:73:29:a0:62:a6:df:fb:aa:d1:d7:fc:1b:46: 2d:2d:35:8e:c0:45:ad:87:d0:b9:95:6e:70:7b:7f: 6b:e6:55:ea:a5:c7:ac:1c:47:a0:2e:d8:32:f7:ff: 21:a3:f6:98:e4:13:56:21:cd:aa:ac:73:28:4c:8f: c5:b8:43:f7:7e:3b:e3:11:d4:1b:f8:9e:56:f1:ec: e8:d2:31:57:ef:2f:9f:0e:96:f6:85:91:c4:24:58: 3a:9d:90:f6:bf:1d:12:2a:36:5a:d8:3a:a7:f2:08: a2:4a:7a:37:c6:fe:b2:d1:dd:9d:d5:fd:21:d5:15: f3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:B2:FF:D3:B9:28:C8:F8:79:FC:4D:ED:CB:89:19:52:EE:55:B6:86 X509v3 Authority Key Identifier: keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/a7L_07koyPh5_E3ty4kZUu5VtoY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 14.103.40.0/21 Signature Algorithm: sha256WithRSAEncryption aa:05:4f:0d:b6:ab:96:38:cf:db:6b:e2:03:76:9b:ec:3f:4f: 62:16:1a:ff:0b:6b:6c:01:4d:e2:46:ce:92:51:5b:01:68:c1: ec:5d:3c:11:ef:12:fb:1e:75:03:f1:6d:ee:a9:29:c3:2b:38: ae:55:ed:31:9f:23:2d:f6:53:94:a4:ea:bf:ed:9d:b6:da:82: 90:4c:ec:4d:e6:d1:17:f0:bb:2a:8b:92:1b:7d:92:99:a6:22: ee:c1:6a:69:05:6c:36:58:2d:fb:58:ac:38:6e:e1:16:a3:cc: 7e:9d:23:c3:8c:90:4a:93:16:39:ed:dc:05:bf:8c:0a:22:ec: 6f:be:3d:09:f1:fe:07:ba:30:d2:b8:a5:9f:2e:42:2b:48:c6: ab:5d:16:19:bf:6b:5d:8d:f6:27:c6:87:fa:33:5a:99:c8:2f: 0e:38:da:bf:59:22:3c:1d:11:55:7a:4c:11:10:9f:d4:09:5b: 7e:dd:be:d6:59:23:28:93:b6:d5:c0:40:06:7a:f5:55:2e:28: e1:d4:5d:6e:f3:33:9f:33:1f:f5:0b:5c:59:1f:71:ae:98:d2: c3:4d:13:79:94:0c:89:0a:5a:fa:e3:91:6f:92:a2:d3:9b:11: cc:57:dc:45:58:c0:8e:c4:ab:ea:f8:d9:a9:46:fb:06:f3:15: e8:76:5f:7b -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIfcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4 QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTA5MTMw MzA5MTBaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDZCQjJGRkQzQjkyOEM4 Rjg3OUZDNERFRENCODkxOTUyRUU1NUI2ODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpLyBe03x/pjESGObJjts0Y+2F3aF39HjgxAlRuAcyhz5Blvdm GR5I5wgndZlsa+kLUI/xXy67VYRYwUPtyX09Uo1dUoFX7iC3zwtPPYRwwqp8ZfVI Puktj+/8pvIw7ewC0fa2PG/pqCxzjSMKDIZzOVCi2X+aVdHoBNHlSy/yGzHBY/Be yJZXcymgYqbf+6rR1/wbRi0tNY7ARa2H0LmVbnB7f2vmVeqlx6wcR6Au2DL3/yGj 9pjkE1YhzaqscyhMj8W4Q/d+O+MR1Bv4nlbx7OjSMVfvL58OlvaFkcQkWDqdkPa/ HRIqNlrYOqfyCKJKejfG/rLR3Z3V/SHVFfOZAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUa7L/07koyPh5/E3ty4kZUu5VtoYwHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvYTdMXzA3a295UGg1 X0UzdHk0a1pVdTVWdG9ZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAw5nKDANBgkqhkiG9w0BAQsFAAOCAQEAqgVPDbarljjP22viA3ab7D9PYhYa /wtrbAFN4kbOklFbAWjB7F08Ee8S+x51A/Ft7qkpwys4rlXtMZ8jLfZTlKTqv+2d ttqCkEzsTebRF/C7KouSG32SmaYi7sFqaQVsNlgt+1isOG7hFqPMfp0jw4yQSpMW Oe3cBb+MCiLsb749CfH+B7ow0rilny5CK0jGq10WGb9rXY32J8aH+jNamcgvDjja v1kiPB0RVXpMERCf1Albft2+1lkjKJO21cBABnr1VS4o4dRdbvMznzMf9QtcWR9x rpjSw00TeZQMiQpa+uORb5Ki05sRzFfcRVjAjsSr6vjZqUb7BvMV6HZfew== -----END CERTIFICATE-----Generated at Mon Oct 20 16:22:24 2025 by rpki-client