$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3171/LSOjrTIMQsbtHD4lXKOKPPkKZ0E.roa File: LSOjrTIMQsbtHD4lXKOKPPkKZ0E.roa (raw, json) Hash identifier: tblbD2ZyIp2Q8bqb+1/afrHogCQsO4U8fqTKgNs9MC8= Subject key identifier: 2D:23:A3:AD:32:0C:42:C6:ED:1C:3E:25:5C:A3:8A:3C:F9:0A:67:41 Certificate issuer: /CN=02FB05DE3C544A9F1C344A63EB5F6CFDD3481156 Certificate serial: 15D4 Authority key identifier: 02:FB:05:DE:3C:54:4A:9F:1C:34:4A:63:EB:5F:6C:FD:D3:48:11:56 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/LSOjrTIMQsbtHD4lXKOKPPkKZ0E.roa Signing time: Sat 13 Sep 2025 03:03:56 +0000 ROA not before: Sat 13 Sep 2025 03:03:56 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 137443 IP address blocks: 103.197.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 18:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5588 (0x15d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02FB05DE3C544A9F1C344A63EB5F6CFDD3481156 Validity Not Before: Sep 13 03:03:56 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=2D23A3AD320C42C6ED1C3E255CA38A3CF90A6741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1d:fe:7a:ee:f0:a7:98:54:60:07:f5:ed:69: 47:7d:16:bc:2c:45:3a:74:20:85:66:f4:b1:da:93: 0b:ad:37:bf:8c:6f:84:a3:23:6e:39:89:d2:59:b0: 09:5d:2f:7d:10:0e:bd:70:f6:f4:a4:54:78:7e:af: e8:91:27:07:a0:64:a6:4a:9a:65:b7:e6:4b:a3:73: db:e8:40:3e:ca:8e:65:62:5a:62:9a:74:c4:98:9d: cf:b7:e4:fe:c7:ef:a8:e5:2e:62:ef:2c:31:58:40: 36:5a:ae:31:d6:5f:42:9f:62:2d:1e:eb:83:07:48: 59:86:28:ec:67:40:5c:88:25:bc:f7:dd:e7:e2:c5: 94:3e:c1:8d:6e:71:61:32:7a:e1:1c:55:ca:13:30: a7:84:62:02:07:6e:05:85:56:a8:56:1d:eb:ea:27: 2b:2c:c0:28:0d:27:30:6f:f5:d0:20:c4:02:5c:7f: 22:42:89:e7:b2:f5:bd:ae:b8:86:47:20:19:94:20: 74:18:40:8f:7a:1a:d1:50:bb:f2:1a:2e:9d:95:ac: e4:d3:d0:d4:83:28:01:dd:16:64:46:47:f1:7e:10: 04:17:0a:de:13:af:49:41:6d:c9:1e:f1:45:8b:fe: 90:95:f2:c0:1e:e8:7a:dc:79:ca:0b:25:37:43:9c: 0c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:23:A3:AD:32:0C:42:C6:ED:1C:3E:25:5C:A3:8A:3C:F9:0A:67:41 X509v3 Authority Key Identifier: keyid:02:FB:05:DE:3C:54:4A:9F:1C:34:4A:63:EB:5F:6C:FD:D3:48:11:56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/LSOjrTIMQsbtHD4lXKOKPPkKZ0E.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.197.181.0/24 Signature Algorithm: sha256WithRSAEncryption 28:2c:b3:21:93:6e:2e:24:d3:a3:ff:dd:89:b4:57:45:19:55: b8:0f:9d:ca:3b:d1:13:2a:d1:ce:c7:8d:ae:59:8f:3e:c9:82: 82:d6:bc:fa:3f:15:05:a9:8e:4f:6f:cb:f6:34:c2:a1:16:14: 10:16:93:63:3b:19:67:66:6b:bb:09:9c:0f:dc:bd:a9:19:fc: 30:c3:c9:93:65:5d:4e:7b:0a:59:52:6e:74:6d:2e:a6:fd:bf: a3:68:bd:98:4f:46:20:1e:90:0c:07:3f:76:87:f6:07:05:a2: 00:4b:b5:d3:a8:b1:4c:6a:18:52:e2:b0:0d:07:4b:20:bf:f5: 40:f5:fb:f2:6b:70:f2:9b:f8:bb:75:15:67:15:3e:3b:43:c2: 83:75:53:b8:64:da:29:50:89:0d:24:d6:60:50:c6:f1:88:b4: 69:40:50:be:cd:6f:a6:68:f8:0f:04:28:4e:b0:33:9e:ed:95: 4d:58:a1:05:83:e2:b8:85:ce:44:d5:64:fb:e9:58:d2:cc:0d: 59:7f:cc:70:04:78:92:ac:2e:4d:53:b9:6a:22:6c:d0:b8:aa: e9:64:9d:50:1f:03:08:87:51:9d:98:30:4c:27:a4:1c:a1:e2: ef:9f:65:85:e4:66:47:60:36:86:d9:01:4a:f0:75:cd:a0:66: 77:98:94:66 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFdQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDJG QjA1REUzQzU0NEE5RjFDMzQ0QTYzRUI1RjZDRkREMzQ4MTE1NjAeFw0yNTA5MTMw MzAzNTZaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDJEMjNBM0FEMzIwQzQy QzZFRDFDM0UyNTVDQTM4QTNDRjkwQTY3NDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQClHf567vCnmFRgB/XtaUd9FrwsRTp0IIVm9LHakwutN7+Mb4Sj I245idJZsAldL30QDr1w9vSkVHh+r+iRJwegZKZKmmW35kujc9voQD7KjmViWmKa dMSYnc+35P7H76jlLmLvLDFYQDZarjHWX0KfYi0e64MHSFmGKOxnQFyIJbz33efi xZQ+wY1ucWEyeuEcVcoTMKeEYgIHbgWFVqhWHevqJysswCgNJzBv9dAgxAJcfyJC ieey9b2uuIZHIBmUIHQYQI96GtFQu/IaLp2VrOTT0NSDKAHdFmRGR/F+EAQXCt4T r0lBbcke8UWL/pCV8sAe6HrcecoLJTdDnAyTAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQULSOjrTIMQsbtHD4lXKOKPPkKZ0EwHwYDVR0jBBgwFoAUAvsF3jxUSp8cNEpj 619s/dNIEVYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE3 MS9BdnNGM2p4VVNwOGNORXBqNjE5c19kTklFVlkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0F2c0YzanhVU3A4Y05FcGo2MTlzX2ROSUVWWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNzEvTFNPanJUSU1Rc2J0 SEQ0bFhLT0tQUGtLWjBFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGfFtTANBgkqhkiG9w0BAQsFAAOCAQEAKCyzIZNuLiTTo//dibRXRRlVuA+d yjvREyrRzseNrlmPPsmCgta8+j8VBamOT2/L9jTCoRYUEBaTYzsZZ2ZruwmcD9y9 qRn8MMPJk2VdTnsKWVJudG0upv2/o2i9mE9GIB6QDAc/dof2BwWiAEu106ixTGoY UuKwDQdLIL/1QPX78mtw8pv4u3UVZxU+O0PCg3VTuGTaKVCJDSTWYFDG8Yi0aUBQ vs1vpmj4DwQoTrAznu2VTVihBYPiuIXORNVk++lY0swNWX/McAR4kqwuTVO5aiJs 0Liq6WSdUB8DCIdRnZgwTCekHKHi759lheRmR2A2htkBSvB1zaBmd5iUZg== -----END CERTIFICATE-----Generated at Mon Oct 20 17:58:19 2025 by rpki-client