$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3171/Ch_uvgOlyJqiV-yefalmn6WVTYs.roa File: Ch_uvgOlyJqiV-yefalmn6WVTYs.roa (raw, json) Hash identifier: VBrzBhBwXiP2oCqtSETCfcBKX+9TGPU/nx7Y/1DEDTI= Subject key identifier: 0A:1F:EE:BE:03:A5:C8:9A:A2:57:EC:9E:7D:A9:66:9F:A5:95:4D:8B Certificate issuer: /CN=02FB05DE3C544A9F1C344A63EB5F6CFDD3481156 Certificate serial: 15D9 Authority key identifier: 02:FB:05:DE:3C:54:4A:9F:1C:34:4A:63:EB:5F:6C:FD:D3:48:11:56 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/Ch_uvgOlyJqiV-yefalmn6WVTYs.roa Signing time: Sat 13 Sep 2025 03:03:57 +0000 ROA not before: Sat 13 Sep 2025 03:03:57 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 137443 IP address blocks: 103.197.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5593 (0x15d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02FB05DE3C544A9F1C344A63EB5F6CFDD3481156 Validity Not Before: Sep 13 03:03:57 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=0A1FEEBE03A5C89AA257EC9E7DA9669FA5954D8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f8:fd:d6:7c:86:44:25:ab:58:bc:95:a1:d1: ad:b6:f6:17:fc:ea:a6:bd:99:61:64:8f:3c:9f:5b: 67:1b:12:e8:a1:63:3c:0b:8f:66:6c:b3:db:16:ab: 99:fa:57:dc:55:a9:75:97:14:ab:e3:c8:69:d0:b1: a0:0c:16:2e:92:50:10:25:e3:fa:2b:dd:26:6d:ff: 2e:01:88:a7:7f:c6:74:f7:71:c2:6c:d6:7d:0e:66: f3:c6:a9:15:0c:54:2b:67:d4:40:4e:b0:51:4b:e1: 15:1b:ee:50:11:38:7e:ed:01:77:27:bc:8d:c2:f9: d0:85:9c:45:bc:c8:f8:bb:e8:32:7e:a9:27:4b:4d: 85:7b:d3:05:24:91:ce:5a:46:d0:bd:85:b8:87:c2: b6:dc:65:d4:3a:a9:e4:fe:95:f8:d8:b8:48:41:5c: df:54:4e:7d:64:4f:35:89:b0:ff:9e:73:6d:6b:e8: 2d:48:14:b1:2e:ad:d4:09:b7:c2:68:ee:9e:14:02: 8b:69:2c:bc:3a:81:59:27:db:bb:2a:54:e3:cc:0d: b2:d2:bf:94:1b:d1:e1:15:ad:8e:81:92:b5:20:66: ce:06:e7:2c:44:3a:0d:e0:77:8e:6a:38:14:3b:64: b2:4c:ad:f0:d2:b6:48:dd:52:8f:bf:1c:d9:fa:d5: 63:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:1F:EE:BE:03:A5:C8:9A:A2:57:EC:9E:7D:A9:66:9F:A5:95:4D:8B X509v3 Authority Key Identifier: keyid:02:FB:05:DE:3C:54:4A:9F:1C:34:4A:63:EB:5F:6C:FD:D3:48:11:56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/Ch_uvgOlyJqiV-yefalmn6WVTYs.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.197.182.0/24 Signature Algorithm: sha256WithRSAEncryption ab:61:e2:b0:0c:8e:05:ab:27:2d:52:6b:bd:29:d0:ee:15:d8: fe:55:25:b5:cc:bd:6c:54:ac:10:75:5e:1a:70:59:ba:b5:a1: a0:b7:3e:03:42:a1:cc:bc:9c:df:0f:d2:f8:3e:e6:45:5a:a3: db:3d:54:38:a9:c6:1c:c3:f0:de:57:96:28:18:83:b3:e0:cf: 21:2c:3d:24:ea:7d:8f:59:63:fd:39:5b:5c:36:a8:65:b0:1d: ae:69:28:e1:02:bd:fe:c6:e2:65:5d:25:db:f7:07:a6:97:a8: 20:43:ce:7e:1c:7b:d1:08:61:96:22:32:7a:20:41:cb:6e:cb: 7c:80:b2:00:52:be:fb:f2:3c:75:8a:b4:b9:15:fc:a5:48:9a: 3c:2f:4d:b2:dd:39:89:ab:3b:59:f2:33:50:30:69:42:6a:72: 49:2b:0b:c9:0e:db:ce:22:51:f4:90:77:16:5c:8b:24:dd:ba: f4:e9:0e:df:84:4d:8b:2d:35:34:1f:07:ae:fb:5a:30:18:a8: 4b:54:6c:7b:e3:2c:dc:d3:a4:65:9f:8b:29:5c:4f:2b:62:f3: 01:7a:77:0c:6b:35:bb:a6:f2:b0:ea:a5:e9:5e:7e:7a:4b:47: d1:98:b2:84:e7:08:be:99:30:3d:01:b9:9b:0a:7b:03:01:63: aa:01:38:eb -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFdkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDJG QjA1REUzQzU0NEE5RjFDMzQ0QTYzRUI1RjZDRkREMzQ4MTE1NjAeFw0yNTA5MTMw MzAzNTdaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDBBMUZFRUJFMDNBNUM4 OUFBMjU3RUM5RTdEQTk2NjlGQTU5NTREOEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDK+P3WfIZEJatYvJWh0a229hf86qa9mWFkjzyfW2cbEuihYzwL j2Zss9sWq5n6V9xVqXWXFKvjyGnQsaAMFi6SUBAl4/or3SZt/y4BiKd/xnT3ccJs 1n0OZvPGqRUMVCtn1EBOsFFL4RUb7lAROH7tAXcnvI3C+dCFnEW8yPi76DJ+qSdL TYV70wUkkc5aRtC9hbiHwrbcZdQ6qeT+lfjYuEhBXN9UTn1kTzWJsP+ec21r6C1I FLEurdQJt8Jo7p4UAotpLLw6gVkn27sqVOPMDbLSv5Qb0eEVrY6BkrUgZs4G5yxE Og3gd45qOBQ7ZLJMrfDStkjdUo+/HNn61WNrAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUCh/uvgOlyJqiV+yefalmn6WVTYswHwYDVR0jBBgwFoAUAvsF3jxUSp8cNEpj 619s/dNIEVYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE3 MS9BdnNGM2p4VVNwOGNORXBqNjE5c19kTklFVlkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0F2c0YzanhVU3A4Y05FcGo2MTlzX2ROSUVWWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNzEvQ2hfdXZnT2x5SnFp Vi15ZWZhbG1uNldWVFlzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGfFtjANBgkqhkiG9w0BAQsFAAOCAQEAq2HisAyOBasnLVJrvSnQ7hXY/lUl tcy9bFSsEHVeGnBZurWhoLc+A0KhzLyc3w/S+D7mRVqj2z1UOKnGHMPw3leWKBiD s+DPISw9JOp9j1lj/TlbXDaoZbAdrmko4QK9/sbiZV0l2/cHppeoIEPOfhx70Qhh liIyeiBBy27LfICyAFK++/I8dYq0uRX8pUiaPC9Nst05ias7WfIzUDBpQmpySSsL yQ7bziJR9JB3FlyLJN269OkO34RNiy01NB8HrvtaMBioS1Rse+Ms3NOkZZ+LKVxP K2LzAXp3DGs1u6bysOql6V5+ektH0ZiyhOcIvpkwPQG5mwp7AwFjqgE46w== -----END CERTIFICATE-----Generated at Mon Oct 20 08:31:39 2025 by rpki-client