$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/jdk-CSjp-DnsGgxKtNBly3BZLFI.roa File: jdk-CSjp-DnsGgxKtNBly3BZLFI.roa (raw, json) Hash identifier: +c7IxUXSeUZyt/aC1lx5lCauSTiFamk05J/CR/f7OLs= Subject key identifier: 8D:D9:3E:09:28:E9:F8:39:EC:1A:0C:4A:B4:D0:65:CB:70:59:2C:52 Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708 Certificate serial: 21C9 Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/jdk-CSjp-DnsGgxKtNBly3BZLFI.roa Signing time: Sat 13 Sep 2025 03:09:00 +0000 ROA not before: Sat 13 Sep 2025 03:09:00 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 4811 IP address blocks: 14.103.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 18:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8649 (0x21c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708 Validity Not Before: Sep 13 03:09:00 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=8DD93E0928E9F839EC1A0C4AB4D065CB70592C52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:83:2a:1b:d0:71:6e:f6:e2:98:d2:a1:29:ce: 92:cd:1f:0a:30:ea:3f:7f:b1:2b:6e:12:8f:d0:c0: 8e:43:e4:dd:26:34:a2:eb:1e:34:07:13:c0:65:0c: d9:52:33:39:bb:8a:b7:b3:d9:c0:3d:a0:f0:56:70: 58:c2:3c:bf:17:f5:0d:25:dd:92:88:94:ee:12:ff: ff:c6:f0:29:7d:3e:e1:b4:da:97:c3:6e:af:d3:6b: 57:18:31:81:76:3f:78:5f:5f:15:5c:40:28:08:34: 5c:4a:fa:c3:bd:61:6c:21:b3:20:68:e0:9b:10:0c: b4:67:dc:71:96:19:0d:aa:c9:f0:0e:af:80:dd:4b: 3a:0f:ee:60:e6:84:e4:5e:47:36:e2:d5:5b:4f:4a: 76:62:96:13:f0:9a:42:71:49:d1:60:ba:9f:1e:50: 98:34:61:93:31:94:10:5b:d1:50:b6:97:cb:05:77: 20:e8:b3:56:a4:4b:7a:b0:4e:66:98:3d:ea:53:bc: c4:1e:e9:f6:62:eb:4d:66:0a:8d:59:16:33:79:dd: b4:96:29:2c:da:ff:45:e0:60:d0:d4:62:7c:d6:57: e7:2c:d5:b6:83:4b:44:3f:d6:c2:b4:1f:7d:19:ea: a5:75:dd:e4:3c:7e:6c:80:e2:a0:62:38:29:22:00: ef:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:D9:3E:09:28:E9:F8:39:EC:1A:0C:4A:B4:D0:65:CB:70:59:2C:52 X509v3 Authority Key Identifier: keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/jdk-CSjp-DnsGgxKtNBly3BZLFI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 14.103.0.0/16 Signature Algorithm: sha256WithRSAEncryption 27:f2:9d:e1:07:b8:84:52:39:08:6a:41:da:21:93:26:c5:f8: e7:b4:77:f0:76:c3:8a:96:48:32:ec:18:cb:28:99:0c:b8:9e: 2a:b5:cb:e6:c7:36:81:53:53:cc:8b:ac:e3:73:74:eb:a9:ee: da:83:36:14:9e:60:77:45:c0:78:0b:4c:09:fc:53:82:81:ce: ce:01:8a:1d:54:ca:1b:8d:42:7b:7f:81:da:d5:69:dc:c3:46: a1:da:ff:52:7b:ab:5e:11:81:be:1f:f8:b3:28:be:34:03:ba: f7:6d:c3:ae:44:40:15:7d:71:91:c2:b7:9b:71:9b:73:16:23: 6c:2c:2f:77:b2:8e:f8:c0:93:16:fd:f0:d5:03:d6:e7:4d:79: 40:0f:1d:1f:57:d2:4b:f0:da:ce:03:20:3c:5c:5b:cc:43:5f: 96:96:2f:b5:17:7e:71:78:95:07:95:4f:d9:22:75:de:56:58: 14:91:46:ea:c5:fd:e0:fc:3f:e4:55:78:e8:54:a9:1e:95:b0: 76:57:02:16:fd:97:d2:3b:5d:19:10:8a:46:6c:3c:a1:d6:d7: b5:19:c6:f1:05:7c:d9:52:98:96:6e:ab:55:87:c0:3e:39:00: 5d:0c:59:8c:45:6a:70:cf:8c:d5:fd:7e:e5:95:0a:aa:4c:92: f5:18:4e:bc -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICIckwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4 QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTA5MTMw MzA5MDBaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDhERDkzRTA5MjhFOUY4 MzlFQzFBMEM0QUI0RDA2NUNCNzA1OTJDNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGgyob0HFu9uKY0qEpzpLNHwow6j9/sStuEo/QwI5D5N0mNKLr HjQHE8BlDNlSMzm7irez2cA9oPBWcFjCPL8X9Q0l3ZKIlO4S///G8Cl9PuG02pfD bq/Ta1cYMYF2P3hfXxVcQCgINFxK+sO9YWwhsyBo4JsQDLRn3HGWGQ2qyfAOr4Dd SzoP7mDmhOReRzbi1VtPSnZilhPwmkJxSdFgup8eUJg0YZMxlBBb0VC2l8sFdyDo s1akS3qwTmaYPepTvMQe6fZi601mCo1ZFjN53bSWKSza/0XgYNDUYnzWV+cs1baD S0Q/1sK0H30Z6qV13eQ8fmyA4qBiOCkiAO9JAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUjdk+CSjp+DnsGgxKtNBly3BZLFIwHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvamRrLUNTanAtRG5z R2d4S3ROQmx5M0JaTEZJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw BQMDAA5nMA0GCSqGSIb3DQEBCwUAA4IBAQAn8p3hB7iEUjkIakHaIZMmxfjntHfw dsOKlkgy7BjLKJkMuJ4qtcvmxzaBU1PMi6zjc3Trqe7agzYUnmB3RcB4C0wJ/FOC gc7OAYodVMobjUJ7f4Ha1Wncw0ah2v9Se6teEYG+H/izKL40A7r3bcOuREAVfXGR wrebcZtzFiNsLC93so74wJMW/fDVA9bnTXlADx0fV9JL8NrOAyA8XFvMQ1+Wli+1 F35xeJUHlU/ZInXeVlgUkUbqxf3g/D/kVXjoVKkelbB2VwIW/ZfSO10ZEIpGbDyh 1te1GcbxBXzZUpiWbqtVh8A+OQBdDFmMRWpwz4zV/X7llQqqTJL1GE68 -----END CERTIFICATE-----Generated at Mon Oct 20 16:22:40 2025 by rpki-client