$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3326/dzJRSOB3z-IGlo4DzrSkNqTnMiM.roa File: dzJRSOB3z-IGlo4DzrSkNqTnMiM.roa (raw, json) Hash identifier: fe0R0O/tDcwRGtS8LBxBn0ubT/H+sW0PL+PcZP5HPRE= Subject key identifier: 77:32:51:48:E0:77:CF:E2:06:96:8E:03:CE:B4:A4:36:A4:E7:32:23 Certificate issuer: /CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C Certificate serial: 0573 Authority key identifier: 6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/dzJRSOB3z-IGlo4DzrSkNqTnMiM.roa Signing time: Fri 01 Aug 2025 06:34:43 +0000 ROA not before: Fri 01 Aug 2025 06:34:43 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 134768 IP address blocks: 103.236.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 06:33:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1395 (0x573) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C Validity Not Before: Aug 1 06:34:43 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=77325148E077CFE206968E03CEB4A436A4E73223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:40:3d:c0:80:d7:91:72:10:f6:30:a4:3c:fc: 18:74:15:bc:a7:b7:5f:a8:c2:43:ac:46:99:7c:0d: 12:be:30:ba:3c:fa:56:79:f1:f5:74:70:b4:23:8d: 6e:ba:be:bd:99:d7:bd:8c:fd:02:56:62:a3:7b:6c: 63:cd:50:31:25:72:54:4e:13:cd:f1:c3:9f:e3:67: 6e:38:bd:82:c9:81:f9:6c:26:eb:b6:c4:2d:d4:3f: 26:4d:f3:9c:c8:c2:ec:8b:5c:63:41:53:2a:5d:8f: ec:2a:82:99:c8:c4:08:ea:f6:13:66:25:bf:0c:48: ce:2a:fe:96:7c:af:b8:0d:9c:ef:f9:60:dc:88:87: 86:69:a5:40:50:ea:cb:83:96:56:d7:e2:13:f4:6e: ba:01:47:c0:bc:41:57:09:ad:55:97:94:67:b7:2e: 3a:05:4b:82:69:3f:62:ae:76:83:5d:e1:af:b8:e6: 1d:b6:01:b7:45:f4:ff:b7:99:e0:a9:79:78:03:db: 82:c1:61:ba:09:90:52:f2:56:c5:c9:b5:3f:48:ab: 92:eb:e9:73:9e:9a:1a:a7:25:b3:96:69:fd:4a:c2: 74:e4:f7:ec:ab:b7:19:73:78:0e:3e:f2:59:e8:72: 5d:db:9f:ae:3d:74:f9:b1:78:d1:d7:3a:11:29:a4: 4d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:32:51:48:E0:77:CF:E2:06:96:8E:03:CE:B4:A4:36:A4:E7:32:23 X509v3 Authority Key Identifier: keyid:6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/dzJRSOB3z-IGlo4DzrSkNqTnMiM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.236.76.0/24 Signature Algorithm: sha256WithRSAEncryption 65:67:96:f1:87:d3:15:77:71:d0:9e:0a:1f:61:d0:ff:eb:c7: 8e:d2:8d:6b:2d:5b:6a:61:c7:a1:89:2f:76:59:50:af:24:90: 16:e7:2e:44:5a:a1:78:00:6d:53:c1:f9:61:67:ec:63:c2:20: 2a:59:ae:a4:7a:d4:e3:16:64:b5:6f:9e:39:e9:9b:a0:a3:88: 33:3d:ea:ed:f6:10:1b:6b:e6:96:7b:ec:60:c8:4e:e9:4d:47: 58:d5:6e:17:ac:ec:40:dc:75:be:33:aa:c3:ac:5a:36:b7:8e: c8:70:04:3b:30:0b:55:13:61:a5:4b:97:7d:06:cc:03:a0:fd: b3:e2:5b:81:cf:4a:7c:48:47:cb:cf:5f:28:cf:6d:ef:bc:92: 8e:4d:4e:97:8f:6f:d3:5c:58:78:ed:cf:34:99:5d:8b:ba:61: 23:a3:4d:67:be:39:79:0a:7c:9f:09:d9:f4:ca:32:40:86:33: 2c:5a:be:52:62:7f:92:c8:2f:c2:55:29:16:6a:5c:f0:07:51: d2:27:f0:fc:24:1b:de:18:01:17:a3:7e:df:8d:3b:84:4e:e8: 51:9c:33:56:15:6b:61:23:57:03:b3:8f:72:da:58:d2:24:99: 25:2f:c7:3e:14:58:d8:7e:57:e7:08:ae:1c:5c:e0:73:40:5c: b7:c5:65:c4 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICBXMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkEx MUVFNDc0MjVEMTRFQkFGMkZDRDI0RDIwNjJCMEE1MkJBMDQyQzAeFw0yNTA4MDEw NjM0NDNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDc3MzI1MTQ4RTA3N0NG RTIwNjk2OEUwM0NFQjRBNDM2QTRFNzMyMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFQD3AgNeRchD2MKQ8/Bh0Fbynt1+owkOsRpl8DRK+MLo8+lZ5 8fV0cLQjjW66vr2Z172M/QJWYqN7bGPNUDElclROE83xw5/jZ244vYLJgflsJuu2 xC3UPyZN85zIwuyLXGNBUypdj+wqgpnIxAjq9hNmJb8MSM4q/pZ8r7gNnO/5YNyI h4ZppUBQ6suDllbX4hP0broBR8C8QVcJrVWXlGe3LjoFS4JpP2KudoNd4a+45h22 AbdF9P+3meCpeXgD24LBYboJkFLyVsXJtT9Iq5Lr6XOemhqnJbOWaf1KwnTk9+yr txlzeA4+8lnocl3bn649dPmxeNHXOhEppE2BAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUdzJRSOB3z+IGlo4DzrSkNqTnMiMwHwYDVR0jBBgwFoAUahHuR0JdFOuvL80k 0gYrClK6BCwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy Ni9haEh1UjBKZEZPdXZMODBrMGdZckNsSzZCQ3cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2FoSHVSMEpkRk91dkw4MGswZ1lyQ2xLNkJDdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjYvZHpKUlNPQjN6LUlH bG80RHpyU2tOcVRuTWlNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGfsTDANBgkqhkiG9w0BAQsFAAOCAQEAZWeW8YfTFXdx0J4KH2HQ/+vHjtKN ay1bamHHoYkvdllQrySQFucuRFqheABtU8H5YWfsY8IgKlmupHrU4xZktW+eOemb oKOIMz3q7fYQG2vmlnvsYMhO6U1HWNVuF6zsQNx1vjOqw6xaNreOyHAEOzALVRNh pUuXfQbMA6D9s+Jbgc9KfEhHy89fKM9t77ySjk1Ol49v01xYeO3PNJldi7phI6NN Z745eQp8nwnZ9MoyQIYzLFq+UmJ/ksgvwlUpFmpc8AdR0ifw/CQb3hgBF6N+3407 hE7oUZwzVhVrYSNXA7OPctpY0iSZJS/HPhRY2H5X5wiuHFzgc0Bct8VlxA== -----END CERTIFICATE-----Generated at Sun Aug 24 04:50:13 2025 by rpki-client