$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3142/yZP9xERLvknFVQ8OhAsVmrl62u8.roa File: yZP9xERLvknFVQ8OhAsVmrl62u8.roa (raw, json) Hash identifier: B9ySnvG3jk30Wdz7+otDJrdET8+yQ6+DYzAP1wtOTkE= Subject key identifier: C9:93:FD:C4:44:4B:BE:49:C5:55:0F:0E:84:0B:15:9A:B9:7A:DA:EF Certificate issuer: /CN=61A0E1E43F9C59876AA42B1F8C1AE12C21CC6EA0 Certificate serial: 06CC Authority key identifier: 61:A0:E1:E4:3F:9C:59:87:6A:A4:2B:1F:8C:1A:E1:2C:21:CC:6E:A0 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YaDh5D-cWYdqpCsfjBrhLCHMbqA.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3142/yZP9xERLvknFVQ8OhAsVmrl62u8.roa Signing time: Thu 11 Sep 2025 07:35:19 +0000 ROA not before: Thu 11 Sep 2025 07:35:19 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 4837 IP address blocks: 103.186.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3142/YaDh5D-cWYdqpCsfjBrhLCHMbqA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3142/YaDh5D-cWYdqpCsfjBrhLCHMbqA.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YaDh5D-cWYdqpCsfjBrhLCHMbqA.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 18:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1740 (0x6cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61A0E1E43F9C59876AA42B1F8C1AE12C21CC6EA0 Validity Not Before: Sep 11 07:35:19 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=C993FDC4444BBE49C5550F0E840B159AB97ADAEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:62:47:d7:45:c6:42:72:84:6a:c2:3c:e1:4e: 3c:33:3b:6d:65:49:90:43:f9:a8:d5:9d:e9:6f:d1: fa:f8:13:30:45:c0:6c:85:89:22:b2:de:f7:91:eb: ea:92:3c:4f:d6:f9:c4:a8:dc:a0:fc:a3:10:24:f4: 90:ec:7b:4a:e6:3d:69:17:57:ff:42:43:2c:47:b7: ad:a0:55:ee:09:93:e7:ec:07:e9:18:be:a5:1b:cb: fc:1e:c9:5d:36:66:87:5f:1f:52:35:12:4c:02:75: df:0a:f2:f5:65:6c:54:88:53:ad:00:de:05:e3:90: 68:48:39:93:e1:a7:d1:07:d7:9b:4f:80:1b:82:79: 5a:ca:0e:9c:77:c2:23:b8:7e:e3:b7:6b:e9:aa:87: b0:3a:58:45:31:38:a0:5e:94:71:af:a4:4c:95:f6: 52:3e:28:dc:53:1e:c2:69:03:10:d8:b8:5e:2e:29: dd:92:aa:46:f8:d5:49:6c:a8:bb:6c:5f:aa:82:48: 1f:75:d5:60:82:c3:ab:3c:55:1d:2e:24:27:54:36: 8c:ac:28:d8:6e:32:6f:c4:3f:7e:c8:7b:e6:f7:ef: 04:4f:80:27:3f:65:a2:06:cd:f7:53:07:36:84:64: 45:c9:32:e8:4e:7b:09:17:3b:9e:6c:0f:2d:ff:98: e6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:93:FD:C4:44:4B:BE:49:C5:55:0F:0E:84:0B:15:9A:B9:7A:DA:EF X509v3 Authority Key Identifier: keyid:61:A0:E1:E4:3F:9C:59:87:6A:A4:2B:1F:8C:1A:E1:2C:21:CC:6E:A0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3142/YaDh5D-cWYdqpCsfjBrhLCHMbqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YaDh5D-cWYdqpCsfjBrhLCHMbqA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3142/yZP9xERLvknFVQ8OhAsVmrl62u8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.186.4.0/23 Signature Algorithm: sha256WithRSAEncryption 15:eb:d4:f8:16:02:fd:34:0e:9a:63:4f:2f:11:1a:ab:7f:da: ea:a4:b6:3a:48:87:26:e4:88:f8:8a:42:c3:14:fe:ef:25:56: 85:df:31:c4:c4:7d:ad:1a:c1:c3:89:c4:f6:4c:78:d9:c2:4e: 7c:7e:58:1b:a7:57:54:47:22:bd:c0:6b:82:3d:5a:fc:4d:e9: c7:20:bb:f7:5b:bb:ad:03:6c:bd:ea:49:ba:16:16:e2:0a:91: 62:e8:f7:f5:a6:3e:76:9a:dc:83:21:e3:44:84:59:b1:be:92: 2a:9a:91:81:b4:4a:f7:85:bd:ca:15:4c:ca:12:dd:ba:12:0a: e8:81:71:bf:1a:e0:ab:24:a2:1a:42:48:f0:44:d1:e3:45:24: 62:fa:69:61:00:1d:a2:b0:bd:1e:34:89:e4:5e:b5:5f:07:c3: f5:93:6d:b7:b5:70:ec:6b:58:3e:bd:90:e4:35:4b:f5:c0:3d: 3d:6b:20:d9:3a:3e:35:a3:01:28:74:aa:e0:15:d9:fe:7b:93: 71:60:c9:2b:17:6d:75:60:f1:a7:9f:34:a7:85:31:85:1a:fa: d9:f5:57:73:08:8f:12:68:ab:86:43:2e:15:6c:1a:13:8f:2a: 05:9d:7a:cc:8a:ca:14:eb:f1:95:51:e6:3a:75:14:43:ea:cd: 46:6c:66:8f -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICBswwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjFB MEUxRTQzRjlDNTk4NzZBQTQyQjFGOEMxQUUxMkMyMUNDNkVBMDAeFw0yNTA5MTEw NzM1MTlaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEM5OTNGREM0NDQ0QkJF NDlDNTU1MEYwRTg0MEIxNTlBQjk3QURBRUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHYkfXRcZCcoRqwjzhTjwzO21lSZBD+ajVnelv0fr4EzBFwGyF iSKy3veR6+qSPE/W+cSo3KD8oxAk9JDse0rmPWkXV/9CQyxHt62gVe4Jk+fsB+kY vqUby/weyV02ZodfH1I1EkwCdd8K8vVlbFSIU60A3gXjkGhIOZPhp9EH15tPgBuC eVrKDpx3wiO4fuO3a+mqh7A6WEUxOKBelHGvpEyV9lI+KNxTHsJpAxDYuF4uKd2S qkb41UlsqLtsX6qCSB911WCCw6s8VR0uJCdUNoysKNhuMm/EP37Ie+b37wRPgCc/ ZaIGzfdTBzaEZEXJMuhOewkXO55sDy3/mOYjAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUyZP9xERLvknFVQ8OhAsVmrl62u8wHwYDVR0jBBgwFoAUYaDh5D+cWYdqpCsf jBrhLCHMbqAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE0 Mi9ZYURoNUQtY1dZZHFwQ3NmakJyaExDSE1icUEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1lhRGg1RC1jV1lkcXBDc2ZqQnJoTENITWJxQS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNDIveVpQOXhFUkx2a25G VlE4T2hBc1Ztcmw2MnU4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAWe6BDANBgkqhkiG9w0BAQsFAAOCAQEAFevU+BYC/TQOmmNPLxEaq3/a6qS2 OkiHJuSI+IpCwxT+7yVWhd8xxMR9rRrBw4nE9kx42cJOfH5YG6dXVEcivcBrgj1a /E3pxyC791u7rQNsvepJuhYW4gqRYuj39aY+dprcgyHjRIRZsb6SKpqRgbRK94W9 yhVMyhLduhIK6IFxvxrgqySiGkJI8ETR40UkYvppYQAdorC9HjSJ5F61XwfD9ZNt t7Vw7GtYPr2Q5DVL9cA9PWsg2To+NaMBKHSq4BXZ/nuTcWDJKxdtdWDxp580p4Ux hRr62fVXcwiPEmirhkMuFWwaE48qBZ16zIrKFOvxlVHmOnUUQ+rNRmxmjw== -----END CERTIFICATE-----Generated at Mon Oct 20 14:31:15 2025 by rpki-client