$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3262/0aaQTihIfdrNBC-sqa6kFV8aaj4.roa File: 0aaQTihIfdrNBC-sqa6kFV8aaj4.roa (raw, json) Hash identifier: jDTUudHwNSFoMtymGfbOC2mFSExOkoZe2Rt3GA1WJoU= Subject key identifier: D1:A6:90:4E:28:48:7D:DA:CD:04:2F:AC:A9:AE:A4:15:5F:1A:6A:3E Certificate issuer: /CN=E5C6CEFC8782F89731A2C72966EDC181DAB5AE22 Certificate serial: 0AFD Authority key identifier: E5:C6:CE:FC:87:82:F8:97:31:A2:C7:29:66:ED:C1:81:DA:B5:AE:22 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5cbO_IeC-JcxoscpZu3Bgdq1riI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3262/0aaQTihIfdrNBC-sqa6kFV8aaj4.roa Signing time: Sun 17 Aug 2025 01:39:50 +0000 ROA not before: Sun 17 Aug 2025 01:39:50 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 37969 IP address blocks: 103.83.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3262/5cbO_IeC-JcxoscpZu3Bgdq1riI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3262/5cbO_IeC-JcxoscpZu3Bgdq1riI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5cbO_IeC-JcxoscpZu3Bgdq1riI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2813 (0xafd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5C6CEFC8782F89731A2C72966EDC181DAB5AE22 Validity Not Before: Aug 17 01:39:50 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=D1A6904E28487DDACD042FACA9AEA4155F1A6A3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d5:82:a4:0c:b8:5d:57:6d:2e:6b:30:ef:e1: df:2f:32:8b:de:48:1f:74:81:5b:ff:32:21:2e:ef: bc:ec:6e:40:59:e8:bf:33:4a:6b:28:b3:24:d6:e6: b9:01:9b:0e:d6:a6:78:c0:12:88:b9:35:d4:78:01: c7:41:16:51:43:e9:5a:9e:ce:64:21:1f:9a:31:90: ef:30:eb:cd:3a:03:31:ee:82:ee:b3:54:96:7f:fa: ae:26:dd:09:52:78:5b:fc:45:28:97:26:70:0a:f6: f0:2b:6e:bb:b8:15:b2:2c:6e:67:ae:57:b6:96:e4: 41:74:29:8d:a0:db:d6:b5:9b:03:a2:35:74:4b:93: 19:fa:dc:8f:b9:ab:d3:e2:69:19:df:99:06:60:d9: 58:c6:d3:f5:44:11:a4:37:c8:ed:89:63:43:14:d0: dd:8f:70:e7:ee:f5:b8:cd:47:ee:d6:50:90:a1:e6: 3d:20:17:3f:22:7a:9d:11:38:d9:b3:17:c7:73:85: a4:f8:fa:fc:de:94:b3:61:f2:61:a8:05:6a:79:ea: 4b:f2:d7:4b:73:c2:05:56:7b:eb:2d:ab:8c:d1:c8: 15:36:92:26:fb:ce:21:da:9f:d4:e2:8d:db:27:dc: df:31:1a:b7:24:80:05:35:9e:25:6c:78:09:ad:a0: 9e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:A6:90:4E:28:48:7D:DA:CD:04:2F:AC:A9:AE:A4:15:5F:1A:6A:3E X509v3 Authority Key Identifier: keyid:E5:C6:CE:FC:87:82:F8:97:31:A2:C7:29:66:ED:C1:81:DA:B5:AE:22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3262/5cbO_IeC-JcxoscpZu3Bgdq1riI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5cbO_IeC-JcxoscpZu3Bgdq1riI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3262/0aaQTihIfdrNBC-sqa6kFV8aaj4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.83.64.0/23 Signature Algorithm: sha256WithRSAEncryption ac:57:da:9e:32:f0:21:b7:fa:88:7f:4b:fb:55:f1:65:e2:48: e5:60:f1:93:ae:3c:e7:50:c0:b1:ee:2e:bb:74:58:ff:8d:6a: bd:d9:a6:47:ab:13:8b:b6:41:2f:0a:cb:dc:b6:7e:10:a7:92: f4:d0:97:2c:30:ff:48:04:a2:44:51:9b:1e:fd:42:15:98:ac: 50:2b:9f:9c:50:92:51:d8:8e:c1:c5:ad:2c:a2:30:70:e0:89: 4d:72:98:17:05:b3:0c:de:6a:b8:82:a5:9a:a9:2c:13:25:fb: ef:83:2b:28:88:16:ba:2f:97:9a:f2:91:c6:c3:b9:8e:68:a5: 15:3d:8c:cc:56:4c:75:7d:61:18:1b:46:21:c3:42:8b:1c:fb: 8b:b9:9a:18:b5:9b:b5:ed:15:ab:8b:d6:20:0f:87:0a:3f:4b: e9:71:88:df:5e:54:4a:3b:e9:b0:c8:3c:2c:2b:b3:dd:8b:5e: b7:df:50:84:d1:d9:b7:e8:3e:3e:bb:2d:53:3a:61:ed:cf:81: 50:b0:35:1a:07:bd:9c:2e:99:c8:c3:75:8b:f1:79:49:36:dc: ed:ff:47:a3:1b:52:49:72:50:f7:7f:d7:86:6c:ba:7b:07:3d: f7:e6:bc:f8:f4:ab:e4:98:26:15:d1:b6:9d:8e:f4:80:2c:7c: 6a:b3:3a:6f -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICCv0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTVD NkNFRkM4NzgyRjg5NzMxQTJDNzI5NjZFREMxODFEQUI1QUUyMjAeFw0yNTA4MTcw MTM5NTBaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEQxQTY5MDRFMjg0ODdE REFDRDA0MkZBQ0E5QUVBNDE1NUYxQTZBM0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDd1YKkDLhdV20uazDv4d8vMoveSB90gVv/MiEu77zsbkBZ6L8z SmsosyTW5rkBmw7WpnjAEoi5NdR4AcdBFlFD6VqezmQhH5oxkO8w6806AzHugu6z VJZ/+q4m3QlSeFv8RSiXJnAK9vArbru4FbIsbmeuV7aW5EF0KY2g29a1mwOiNXRL kxn63I+5q9PiaRnfmQZg2VjG0/VEEaQ3yO2JY0MU0N2PcOfu9bjNR+7WUJCh5j0g Fz8iep0RONmzF8dzhaT4+vzelLNh8mGoBWp56kvy10tzwgVWe+stq4zRyBU2kib7 ziHan9Tijdsn3N8xGrckgAU1niVseAmtoJ71AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU0aaQTihIfdrNBC+sqa6kFV8aaj4wHwYDVR0jBBgwFoAU5cbO/IeC+Jcxoscp Zu3Bgdq1riIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI2 Mi81Y2JPX0llQy1KY3hvc2NwWnUzQmdkcTFyaUkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzVjYk9fSWVDLUpjeG9zY3BadTNCZ2RxMXJpSS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNjIvMGFhUVRpaElmZHJO QkMtc3FhNmtGVjhhYWo0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAWdTQDANBgkqhkiG9w0BAQsFAAOCAQEArFfanjLwIbf6iH9L+1XxZeJI5WDx k64851DAse4uu3RY/41qvdmmR6sTi7ZBLwrL3LZ+EKeS9NCXLDD/SASiRFGbHv1C FZisUCufnFCSUdiOwcWtLKIwcOCJTXKYFwWzDN5quIKlmqksEyX774MrKIgWui+X mvKRxsO5jmilFT2MzFZMdX1hGBtGIcNCixz7i7maGLWbte0Vq4vWIA+HCj9L6XGI 315USjvpsMg8LCuz3Ytet99QhNHZt+g+PrstUzph7c+BULA1Gge9nC6ZyMN1i/F5 STbc7f9HoxtSSXJQ93/Xhmy6ewc99+a8+PSr5JgmFdG2nY70gCx8arM6bw== -----END CERTIFICATE-----Generated at Sun Aug 24 11:42:18 2025 by rpki-client