$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/rxyDbiHjHqHktzT51WBKvqlD2ak.roa File: rxyDbiHjHqHktzT51WBKvqlD2ak.roa (raw, json) Hash identifier: RP/tjO7vhVUbJRR8coeqd0k2i51BmSvwo+RTVGbrXUo= Subject key identifier: AF:1C:83:6E:21:E3:1E:A1:E4:B7:34:F9:D5:60:4A:BE:A9:43:D9:A9 Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708 Certificate serial: 21F2 Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/rxyDbiHjHqHktzT51WBKvqlD2ak.roa Signing time: Sat 13 Sep 2025 03:09:08 +0000 ROA not before: Sat 13 Sep 2025 03:09:08 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 137718 IP address blocks: 14.103.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 03:36:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8690 (0x21f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708 Validity Not Before: Sep 13 03:09:08 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=AF1C836E21E31EA1E4B734F9D5604ABEA943D9A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9b:0e:64:1f:34:79:d7:cf:64:eb:29:ff:11: 39:fd:66:41:bf:8b:75:3e:ce:d4:a0:33:fa:09:cd: fb:b4:5d:d9:62:dd:f9:9e:22:68:52:51:13:74:15: 30:e5:29:a1:31:45:8d:a8:b0:83:e5:43:c5:c3:30: cb:2b:26:f0:ff:b6:d5:9a:82:d9:c6:d3:5b:ac:ba: 2f:19:40:66:3b:be:56:91:ad:c7:ed:b8:09:dd:4d: 88:ae:46:1d:ff:30:c4:d4:58:b5:62:ab:21:7b:43: c6:60:93:da:2a:ff:e6:0c:01:ea:00:b7:03:24:42: 71:1c:d0:8a:38:27:83:59:0d:52:09:d4:d9:1f:01: 50:af:7f:ec:be:c3:5a:68:ca:cd:27:62:ce:e6:17: e1:5c:55:55:49:07:f9:89:5d:3e:af:2b:46:d3:ce: c6:20:6b:a1:86:01:3b:91:bf:95:19:48:97:73:fe: 80:62:bb:c4:66:d0:81:71:f5:0a:1f:d6:76:cd:88: 5b:ef:c0:e7:0a:3a:61:60:95:b9:3f:06:ad:b7:0e: 58:ab:60:90:5e:79:26:75:02:3e:e9:3a:1f:a1:9c: 00:c7:06:56:ea:c4:44:70:57:3e:18:96:08:67:6f: e4:18:28:84:1d:43:24:fa:f5:18:28:77:2a:19:d1: 17:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:1C:83:6E:21:E3:1E:A1:E4:B7:34:F9:D5:60:4A:BE:A9:43:D9:A9 X509v3 Authority Key Identifier: keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/rxyDbiHjHqHktzT51WBKvqlD2ak.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 14.103.0.0/16 Signature Algorithm: sha256WithRSAEncryption bc:6d:bb:0f:3f:c1:c9:60:3c:82:0e:5b:43:0c:67:cc:9b:15: 84:0a:00:cc:70:85:4e:76:56:2f:4d:bb:4b:1d:c0:ff:6c:ec: a1:09:f2:6e:08:d4:7b:d2:a8:b8:91:c1:cd:66:6f:ad:49:f4: 8a:d5:ad:52:8c:db:2c:2b:0b:9f:8e:19:08:f5:32:7a:b4:e4: 45:29:c2:7f:fa:37:ac:60:29:a4:6e:c5:86:1f:3b:65:ca:d9: 2a:f3:51:13:ed:ee:f1:0e:ba:e9:f8:6f:ab:aa:8c:77:db:49: 70:29:91:6f:ab:62:e5:d9:df:c5:0e:56:ba:fc:2e:4c:12:d7: 4f:b9:02:26:f8:12:5b:bc:97:ee:d5:83:6e:ea:bf:4b:f4:b0: a6:6f:d4:f3:fc:c6:22:45:96:be:a2:5a:22:59:45:d4:d8:2b: a1:e3:27:bd:27:82:cc:a5:bd:6c:ba:9d:91:a9:ad:2c:ab:a2: 7e:5b:9f:18:09:cf:66:3e:77:6d:6b:92:a9:48:ee:80:b3:f3: bb:e6:7d:a3:8c:f7:bd:33:6a:79:08:57:4d:2d:98:fc:f0:5e: f0:56:3a:2b:35:19:7e:5a:51:ed:38:02:b8:d7:1f:f8:46:75: 31:06:5e:32:5e:5b:46:a9:6f:68:7f:77:a1:87:04:f1:1f:7d: 99:c8:e2:0d -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICIfIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4 QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTA5MTMw MzA5MDhaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEFGMUM4MzZFMjFFMzFF QTFFNEI3MzRGOUQ1NjA0QUJFQTk0M0Q5QTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJmw5kHzR5189k6yn/ETn9ZkG/i3U+ztSgM/oJzfu0Xdli3fme ImhSURN0FTDlKaExRY2osIPlQ8XDMMsrJvD/ttWagtnG01usui8ZQGY7vlaRrcft uAndTYiuRh3/MMTUWLViqyF7Q8Zgk9oq/+YMAeoAtwMkQnEc0Io4J4NZDVIJ1Nkf AVCvf+y+w1poys0nYs7mF+FcVVVJB/mJXT6vK0bTzsYga6GGATuRv5UZSJdz/oBi u8Rm0IFx9Qof1nbNiFvvwOcKOmFglbk/Bq23DlirYJBeeSZ1Aj7pOh+hnADHBlbq xERwVz4Ylghnb+QYKIQdQyT69RgodyoZ0RdJAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUrxyDbiHjHqHktzT51WBKvqlD2akwHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvcnh5RGJpSGpIcUhr dHpUNTFXQkt2cWxEMmFrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw BQMDAA5nMA0GCSqGSIb3DQEBCwUAA4IBAQC8bbsPP8HJYDyCDltDDGfMmxWECgDM cIVOdlYvTbtLHcD/bOyhCfJuCNR70qi4kcHNZm+tSfSK1a1SjNssKwufjhkI9TJ6 tORFKcJ/+jesYCmkbsWGHztlytkq81ET7e7xDrrp+G+rqox320lwKZFvq2Ll2d/F Dla6/C5MEtdPuQIm+BJbvJfu1YNu6r9L9LCmb9Tz/MYiRZa+oloiWUXU2Cuh4ye9 J4LMpb1sup2Rqa0sq6J+W58YCc9mPndta5KpSO6As/O75n2jjPe9M2p5CFdNLZj8 8F7wVjorNRl+WlHtOAK41x/4RnUxBl4yXltGqW9of3ehhwTxH32ZyOIN -----END CERTIFICATE-----Generated at Tue Oct 21 01:20:12 2025 by rpki-client