$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3326/r4AjqVwkDSUNoMgxyQtmIVkoQMc.roa File: r4AjqVwkDSUNoMgxyQtmIVkoQMc.roa (raw, json) Hash identifier: PM2P1MhouU6OeP4L+yxJmedYMEmSPCxVcGJ0McbUX18= Subject key identifier: AF:80:23:A9:5C:24:0D:25:0D:A0:C8:31:C9:0B:66:21:59:28:40:C7 Certificate issuer: /CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C Certificate serial: 058E Authority key identifier: 6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/r4AjqVwkDSUNoMgxyQtmIVkoQMc.roa Signing time: Fri 01 Aug 2025 06:36:04 +0000 ROA not before: Fri 01 Aug 2025 06:36:04 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 134768 IP address blocks: 103.236.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 06:33:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1422 (0x58e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C Validity Not Before: Aug 1 06:36:04 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=AF8023A95C240D250DA0C831C90B6621592840C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2b:ff:3c:59:bf:ee:d9:2b:43:b0:a2:89:91: 1d:7a:02:25:a9:1c:14:15:43:c4:e2:4d:20:20:4b: d4:90:9e:a8:71:a4:bf:4f:74:5a:a0:65:ca:3c:96: 24:99:80:7c:bb:bb:cc:96:8e:1d:0d:b4:c6:60:d4: 84:76:ee:2b:bf:4b:f5:d1:bf:0d:f3:fb:d1:15:6e: 42:bd:e2:16:2a:eb:f6:de:00:cf:8a:5f:21:ef:83: 27:58:9a:7e:b4:4d:1c:dc:4b:41:07:95:73:d4:f9: 1b:10:93:21:0a:91:63:3f:72:d8:69:c1:e9:f2:3b: c4:2e:08:e4:c6:be:c8:cd:fe:fb:c2:6f:31:60:69: 6a:1f:bf:40:48:08:80:a2:ce:2a:ae:ec:ce:f0:a2: a1:ec:d1:34:1e:6e:02:25:95:b9:a6:c0:44:3d:a9: e8:9a:e3:3f:29:5a:5e:95:34:f1:e7:a1:e7:a4:bd: 10:e6:b5:0a:bc:ca:d0:d8:7f:75:40:88:c6:d0:73: cf:8d:65:c1:ef:46:db:2c:1c:0d:d0:ad:94:f2:18: 29:32:8b:97:05:3a:b2:5c:fd:19:c0:a6:2e:59:6c: c0:85:f3:20:cd:7c:98:e0:89:f2:8c:97:d7:ff:55: a3:41:30:84:39:39:ca:3b:3a:88:61:78:f8:04:a7: 8e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:80:23:A9:5C:24:0D:25:0D:A0:C8:31:C9:0B:66:21:59:28:40:C7 X509v3 Authority Key Identifier: keyid:6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/r4AjqVwkDSUNoMgxyQtmIVkoQMc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.236.94.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:9b:ce:10:13:0d:46:60:f8:5c:02:e6:a3:a3:85:70:03:8c: f3:48:d3:c6:ee:5c:d5:1e:dc:66:83:d2:c4:fd:87:9a:26:b8: 57:a9:05:d8:c3:36:6d:18:fb:b7:38:11:43:77:95:36:0c:7e: 3f:fc:e5:cc:db:db:45:ab:6c:a3:73:0e:6c:02:2b:09:42:c6: f5:f1:30:bc:a0:36:40:8c:0c:4c:80:c5:4f:ef:d4:bf:23:75: f7:0e:ca:5a:7f:99:13:0d:9a:fd:f2:7c:aa:65:b4:fa:ef:5e: 2e:a4:26:54:1d:46:e0:49:3e:25:5c:d2:5d:32:cb:d4:7d:00: 8d:0b:0b:ea:4b:7d:3f:74:75:50:98:4f:67:dd:bf:a7:9e:9a: 50:fb:07:11:8b:09:42:2f:24:b6:6e:20:68:0c:7e:fb:f4:3d: 47:d2:97:9c:dc:68:71:4f:7e:72:2c:3a:73:0a:4b:ce:93:28: 45:b2:a3:7d:1b:98:e2:4b:05:78:c5:e9:1a:57:77:88:09:33: f8:2f:15:cc:81:ad:c1:fb:cf:6a:53:17:7c:11:2f:83:2e:4a: d4:0e:58:56:88:07:6c:73:3c:f8:f4:32:15:3c:65:a9:17:bf: 3d:35:e0:d6:11:c7:77:82:a2:74:3a:35:ed:96:96:12:3b:80: fc:35:a3:ac -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICBY4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkEx MUVFNDc0MjVEMTRFQkFGMkZDRDI0RDIwNjJCMEE1MkJBMDQyQzAeFw0yNTA4MDEw NjM2MDRaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEFGODAyM0E5NUMyNDBE MjUwREEwQzgzMUM5MEI2NjIxNTkyODQwQzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8K/88Wb/u2StDsKKJkR16AiWpHBQVQ8TiTSAgS9SQnqhxpL9P dFqgZco8liSZgHy7u8yWjh0NtMZg1IR27iu/S/XRvw3z+9EVbkK94hYq6/beAM+K XyHvgydYmn60TRzcS0EHlXPU+RsQkyEKkWM/cthpwenyO8QuCOTGvsjN/vvCbzFg aWofv0BICICiziqu7M7woqHs0TQebgIllbmmwEQ9qeia4z8pWl6VNPHnoeekvRDm tQq8ytDYf3VAiMbQc8+NZcHvRtssHA3QrZTyGCkyi5cFOrJc/RnApi5ZbMCF8yDN fJjgifKMl9f/VaNBMIQ5Oco7OohhePgEp44jAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUr4AjqVwkDSUNoMgxyQtmIVkoQMcwHwYDVR0jBBgwFoAUahHuR0JdFOuvL80k 0gYrClK6BCwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy Ni9haEh1UjBKZEZPdXZMODBrMGdZckNsSzZCQ3cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2FoSHVSMEpkRk91dkw4MGswZ1lyQ2xLNkJDdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjYvcjRBanFWd2tEU1VO b01neHlRdG1JVmtvUU1jLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGfsXjANBgkqhkiG9w0BAQsFAAOCAQEAXJvOEBMNRmD4XALmo6OFcAOM80jT xu5c1R7cZoPSxP2Hmia4V6kF2MM2bRj7tzgRQ3eVNgx+P/zlzNvbRatso3MObAIr CULG9fEwvKA2QIwMTIDFT+/UvyN19w7KWn+ZEw2a/fJ8qmW0+u9eLqQmVB1G4Ek+ JVzSXTLL1H0AjQsL6kt9P3R1UJhPZ92/p56aUPsHEYsJQi8ktm4gaAx++/Q9R9KX nNxocU9+ciw6cwpLzpMoRbKjfRuY4ksFeMXpGld3iAkz+C8VzIGtwfvPalMXfBEv gy5K1A5YVogHbHM8+PQyFTxlqRe/PTXg1hHHd4KidDo17ZaWEjuA/DWjrA== -----END CERTIFICATE-----Generated at Sun Aug 24 04:50:10 2025 by rpki-client