$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3168/EA8sm7PzBaXuOYCraL71UF0R5XU.roa File: EA8sm7PzBaXuOYCraL71UF0R5XU.roa (raw, json) Hash identifier: vjzXDi6KFY88S9l7oJU5rOi44DWy5kPljwK3csb8lAI= Subject key identifier: 10:0F:2C:9B:B3:F3:05:A5:EE:39:80:AB:68:BE:F5:50:5D:11:E5:75 Certificate issuer: /CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094 Certificate serial: 164F Authority key identifier: 24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/EA8sm7PzBaXuOYCraL71UF0R5XU.roa Signing time: Mon 08 Sep 2025 09:24:02 +0000 ROA not before: Mon 08 Sep 2025 09:24:02 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 13335 IP address blocks: 103.219.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Oct 2025 23:35:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5711 (0x164f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094 Validity Not Before: Sep 8 09:24:02 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=100F2C9BB3F305A5EE3980AB68BEF5505D11E575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5c:46:09:46:a9:52:6d:24:ba:05:10:01:e0: a5:7c:a7:35:d1:a2:72:b8:4f:5c:f2:ec:4f:e1:6a: d0:cd:f9:6e:ba:10:6d:12:85:db:1f:3e:23:d7:8d: f1:0f:11:3e:45:03:5b:9e:e6:0e:3f:04:e7:3f:24: 46:7f:28:99:1f:53:9a:6a:6c:8d:ad:96:e9:9f:45: 74:c2:0f:62:09:7c:d9:cf:e2:18:cd:4f:c1:dd:72: 98:2c:7e:4f:27:6e:f4:2d:87:da:b6:97:fb:78:0e: e1:4f:83:a7:12:96:a6:10:03:d6:c8:64:f5:84:4a: 77:5d:5c:22:a3:25:30:d9:df:28:69:a4:65:5e:06: 59:ac:ef:53:9a:5c:a1:42:0c:1b:d0:60:d8:1f:71: 58:d9:89:e4:6f:fc:66:84:18:18:78:5f:07:d1:4d: 58:c6:ff:cc:d3:a3:73:64:54:c8:d1:76:5b:fd:16: 13:20:d3:8c:1b:64:c7:69:67:8c:5c:9a:b9:b4:a5: fd:e1:9a:af:a3:95:93:a7:d9:c6:27:26:b0:78:31: cc:38:8f:f6:ad:e2:d3:13:71:18:59:0c:1a:a2:e4: 95:90:ad:24:22:63:3a:98:4e:c4:0a:f1:a4:7b:e9: ab:40:4b:0d:51:cb:29:f1:4e:45:a8:84:21:db:7f: 5f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:0F:2C:9B:B3:F3:05:A5:EE:39:80:AB:68:BE:F5:50:5D:11:E5:75 X509v3 Authority Key Identifier: keyid:24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/EA8sm7PzBaXuOYCraL71UF0R5XU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.219.64.0/22 Signature Algorithm: sha256WithRSAEncryption c2:87:06:b5:ff:c8:d4:74:6e:94:ef:5a:60:74:55:00:42:7b: a7:3c:eb:a1:83:64:b3:82:3c:5c:e7:db:f2:85:4b:25:14:44: 47:aa:7d:b3:49:74:eb:0d:59:0d:8d:3a:89:be:01:18:f7:bf: 5c:94:da:a9:e6:ae:1b:7a:01:14:ed:65:64:26:5f:d4:cd:82: 9a:bc:e3:8a:ee:91:fe:97:a0:59:d6:7d:e5:37:b5:7d:af:57: 26:a0:df:f3:13:1c:47:18:a6:f7:d3:6b:de:56:73:7f:0d:7b: 42:03:b5:68:ae:b9:e6:39:c8:5c:c7:3b:17:f6:58:a6:b4:f4: 6c:31:b5:2b:97:fb:23:5f:60:65:7e:09:39:c2:04:b0:77:28: 82:54:12:66:96:75:e5:98:a9:45:c2:0a:4c:ec:0e:c0:3f:72: 74:1d:1c:9e:fb:17:50:36:18:f3:28:31:50:5d:4c:57:23:2f: 4f:5e:5c:e9:b6:44:b6:be:bd:ca:9c:86:e5:9a:19:a5:92:5c: fc:69:e1:be:80:47:91:ba:bc:47:5b:dd:e9:7a:e9:0d:40:ca: 59:3e:9b:83:a2:ab:55:93:f5:f6:ab:21:48:2c:59:19:a3:a6: 69:03:64:14:b1:fb:de:5c:87:54:b5:81:20:bb:eb:f0:fd:8b: 82:92:68:66 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFk8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjQw OTg3RjQwQTYwMzBDREZBMzNERUQxRUVFN0NGNERDN0MzMDA5NDAeFw0yNTA5MDgw OTI0MDJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDEwMEYyQzlCQjNGMzA1 QTVFRTM5ODBBQjY4QkVGNTUwNUQxMUU1NzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNXEYJRqlSbSS6BRAB4KV8pzXRonK4T1zy7E/hatDN+W66EG0S hdsfPiPXjfEPET5FA1ue5g4/BOc/JEZ/KJkfU5pqbI2tlumfRXTCD2IJfNnP4hjN T8Hdcpgsfk8nbvQth9q2l/t4DuFPg6cSlqYQA9bIZPWESnddXCKjJTDZ3yhppGVe Blms71OaXKFCDBvQYNgfcVjZieRv/GaEGBh4XwfRTVjG/8zTo3NkVMjRdlv9FhMg 04wbZMdpZ4xcmrm0pf3hmq+jlZOn2cYnJrB4Mcw4j/at4tMTcRhZDBqi5JWQrSQi YzqYTsQK8aR76atASw1RyynxTkWohCHbf1+lAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUEA8sm7PzBaXuOYCraL71UF0R5XUwHwYDVR0jBBgwFoAUJAmH9ApgMM36M97R 7ufPTcfDAJQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE2 OC9KQW1IOUFwZ01NMzZNOTdSN3VmUFRjZkRBSlEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0pBbUg5QXBnTU0zNk05N1I3dWZQVGNmREFKUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNjgvRUE4c203UHpCYVh1 T1lDcmFMNzFVRjBSNVhVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmfbQDANBgkqhkiG9w0BAQsFAAOCAQEAwocGtf/I1HRulO9aYHRVAEJ7pzzr oYNks4I8XOfb8oVLJRRER6p9s0l06w1ZDY06ib4BGPe/XJTaqeauG3oBFO1lZCZf 1M2Cmrzjiu6R/pegWdZ95Te1fa9XJqDf8xMcRxim99Nr3lZzfw17QgO1aK655jnI XMc7F/ZYprT0bDG1K5f7I19gZX4JOcIEsHcoglQSZpZ15ZipRcIKTOwOwD9ydB0c nvsXUDYY8ygxUF1MVyMvT15c6bZEtr69ypyG5ZoZpZJc/GnhvoBHkbq8R1vd6Xrp DUDKWT6bg6KrVZP19qshSCxZGaOmaQNkFLH73lyHVLWBILvr8P2LgpJoZg== -----END CERTIFICATE-----Generated at Sun Oct 19 21:08:50 2025 by rpki-client