$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3146/1-DT5N4BVnYL4adLY10dJcE271Q.roa File: 1-DT5N4BVnYL4adLY10dJcE271Q.roa (raw, json) Hash identifier: UnTAl2o0f9TBX/631I/Ht7IBWTLisaKq0cn2qfGi4pg= Subject key identifier: D7:E0:D3:E4:DE:01:56:76:0B:E1:A7:4B:63:5D:1D:25:C1:36:EF:54 Certificate issuer: /CN=C1DE29DF9ECB8BDACBFBE1FDDB86DF296B6908EB Certificate serial: 317B Authority key identifier: C1:DE:29:DF:9E:CB:8B:DA:CB:FB:E1:FD:DB:86:DF:29:6B:69:08:EB Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wd4p357Li9rL--H924bfKWtpCOs.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3146/1-DT5N4BVnYL4adLY10dJcE271Q.roa Signing time: Sun 15 Jun 2025 05:42:27 +0000 ROA not before: Sun 15 Jun 2025 05:42:27 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 151492 IP address blocks: 103.186.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3146/wd4p357Li9rL--H924bfKWtpCOs.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3146/wd4p357Li9rL--H924bfKWtpCOs.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wd4p357Li9rL--H924bfKWtpCOs.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12667 (0x317b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1DE29DF9ECB8BDACBFBE1FDDB86DF296B6908EB Validity Not Before: Jun 15 05:42:27 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=D7E0D3E4DE0156760BE1A74B635D1D25C136EF54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e5:29:24:f5:6e:c3:cc:c9:5c:ef:14:3c:e5: e2:20:8b:54:b2:e5:ba:e0:59:05:38:41:ab:a0:c6: ab:7d:80:d4:13:51:11:4d:07:03:e8:6a:36:1a:10: 86:58:2c:ec:e5:53:4a:85:3a:10:86:47:96:56:9d: ec:9a:1e:6f:b7:61:31:ec:a2:f2:7f:3a:02:1e:f6: f6:17:b9:15:99:6b:cf:8d:23:e8:67:0a:df:5c:11: 37:79:af:7e:18:12:44:ad:2d:02:41:e1:f2:92:a4: 94:d5:c0:a6:2c:41:67:36:49:e4:70:17:68:06:5b: 78:10:dc:c1:7a:66:07:3c:2b:2b:c7:00:bc:5b:a9: 4d:28:c1:f7:84:5e:16:5c:24:92:7c:a0:23:0d:0a: b7:50:2d:43:84:8b:8f:8f:ea:0d:a2:b3:43:66:10: a3:57:87:de:ee:b5:0a:a3:d2:58:be:7c:d7:0b:e4: 8c:99:d0:58:ee:74:d5:11:b2:e9:36:f7:6c:0a:62: 50:4e:98:81:96:d5:d3:13:f9:b8:9f:54:cc:88:ca: 89:82:5f:73:bd:41:f3:48:4c:98:c3:12:d3:dc:e2: 7a:ae:18:56:76:13:cc:03:36:ea:90:0b:d6:db:9c: b2:b8:76:a2:cf:3d:15:89:fa:05:14:08:d1:06:9d: 15:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:E0:D3:E4:DE:01:56:76:0B:E1:A7:4B:63:5D:1D:25:C1:36:EF:54 X509v3 Authority Key Identifier: keyid:C1:DE:29:DF:9E:CB:8B:DA:CB:FB:E1:FD:DB:86:DF:29:6B:69:08:EB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3146/wd4p357Li9rL--H924bfKWtpCOs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wd4p357Li9rL--H924bfKWtpCOs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3146/1-DT5N4BVnYL4adLY10dJcE271Q.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.186.137.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:5b:50:7b:e3:b3:0c:63:1d:cf:80:9d:31:58:cb:f2:df:32: 08:6e:b4:81:7b:ea:a7:a3:3a:8b:2c:b4:20:31:e4:ba:d1:0f: 41:41:c3:d3:3a:4f:b2:b1:5e:2b:92:79:3b:f7:b7:64:99:35: 4e:90:05:4f:61:7c:68:2b:35:fd:c7:c2:5a:8f:4c:15:dc:86: ac:9a:d5:88:2c:73:99:d0:41:62:0c:88:a4:51:50:fc:a1:3a: 2b:bd:8c:38:3e:fd:af:d8:1f:a9:d9:c1:9b:0a:9f:1e:85:9e: d2:f6:3f:00:ad:65:7f:ad:1c:d9:17:c5:c4:f1:9d:cc:60:1a: 0b:ec:f1:a1:7d:06:51:01:f6:82:1b:16:26:c5:63:4f:49:d5: d6:52:6d:4b:a6:e9:48:e2:2c:d3:cd:41:69:a4:75:23:88:4c: c5:77:6a:82:56:f3:03:a6:2d:51:1f:30:44:c2:e8:ea:51:79: 72:df:e3:c9:26:98:4a:5b:ba:a3:a0:b5:59:0d:58:08:58:db: a4:a2:64:4a:c2:58:b7:5f:d1:c7:7c:8a:eb:98:1e:f1:66:b9: f0:a8:d8:87:0f:bc:63:38:69:ea:7e:f7:33:55:85:63:99:07: 31:61:83:85:1e:83:92:89:42:83:20:30:79:a8:84:e9:a9:48: f1:5c:4d:54 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICMXswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzFE RTI5REY5RUNCOEJEQUNCRkJFMUZEREI4NkRGMjk2QjY5MDhFQjAeFw0yNTA2MTUw NTQyMjdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEQ3RTBEM0U0REUwMTU2 NzYwQkUxQTc0QjYzNUQxRDI1QzEzNkVGNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC55Skk9W7DzMlc7xQ85eIgi1Sy5brgWQU4Qaugxqt9gNQTURFN BwPoajYaEIZYLOzlU0qFOhCGR5ZWneyaHm+3YTHsovJ/OgIe9vYXuRWZa8+NI+hn Ct9cETd5r34YEkStLQJB4fKSpJTVwKYsQWc2SeRwF2gGW3gQ3MF6Zgc8KyvHALxb qU0owfeEXhZcJJJ8oCMNCrdQLUOEi4+P6g2is0NmEKNXh97utQqj0li+fNcL5IyZ 0FjudNURsuk292wKYlBOmIGW1dMT+bifVMyIyomCX3O9QfNITJjDEtPc4nquGFZ2 E8wDNuqQC9bbnLK4dqLPPRWJ+gUUCNEGnRXpAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU1+DT5N4BVnYL4adLY10dJcE271QwHwYDVR0jBBgwFoAUwd4p357Li9rL++H9 24bfKWtpCOswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE0 Ni93ZDRwMzU3TGk5ckwtLUg5MjRiZktXdHBDT3MuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3dkNHAzNTdMaTlyTC0tSDkyNGJmS1d0cENPcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNDYvMS1EVDVONEJWbllM NGFkTFkxMGRKY0UyNzFRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGe6iTANBgkqhkiG9w0BAQsFAAOCAQEAK1tQe+OzDGMdz4CdMVjL8t8yCG60 gXvqp6M6iyy0IDHkutEPQUHD0zpPsrFeK5J5O/e3ZJk1TpAFT2F8aCs1/cfCWo9M FdyGrJrViCxzmdBBYgyIpFFQ/KE6K72MOD79r9gfqdnBmwqfHoWe0vY/AK1lf60c 2RfFxPGdzGAaC+zxoX0GUQH2ghsWJsVjT0nV1lJtS6bpSOIs081BaaR1I4hMxXdq glbzA6YtUR8wRMLo6lF5ct/jySaYSlu6o6C1WQ1YCFjbpKJkSsJYt1/Rx3yK65ge 8Wa58KjYhw+8Yzhp6n73M1WFY5kHMWGDhR6DkolCgyAweaiE6alI8VxNVA== -----END CERTIFICATE-----Generated at Mon Oct 20 21:00:17 2025 by rpki-client