$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/aeaTXJYDN1H19KP32IEBQ7uI5Uk.roa File: aeaTXJYDN1H19KP32IEBQ7uI5Uk.roa (raw, json) Hash identifier: dVjhOF2144eyIjWIeWWX6sKCj0UYhK7MCmL2metjAjQ= Subject key identifier: 69:E6:93:5C:96:03:37:51:F5:F4:A3:F7:D8:81:01:43:BB:88:E5:49 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1FC9 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/aeaTXJYDN1H19KP32IEBQ7uI5Uk.roa Signing time: Thu 16 Oct 2025 03:30:08 +0000 ROA not before: Thu 16 Oct 2025 03:30:08 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 24373 IP address blocks: 103.6.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 15:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8137 (0x1fc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Oct 16 03:30:08 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=69E6935C96033751F5F4A3F7D8810143BB88E549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6b:51:4a:df:bd:13:d6:d9:e9:f6:a8:5d:bf: 6c:fe:50:4a:ef:fa:12:81:4e:8f:e5:81:6e:22:e4: a0:52:42:ac:5f:13:3e:66:3f:a2:59:d4:d3:38:af: 24:02:16:a1:a2:6b:64:dd:72:c5:86:a8:82:33:a2: c6:a6:cb:87:2f:2f:c4:c8:a9:66:b1:5d:23:b7:ab: 9f:aa:17:d3:fd:53:a9:6a:fb:7b:3d:a2:0c:4f:e3: 95:13:c6:f5:0d:0e:d4:b9:b1:3c:56:7a:e0:71:5b: 89:ed:e7:4f:1d:ae:1f:a8:3f:8b:e2:4f:88:b3:12: 5b:d6:6c:8f:ba:0f:e2:44:df:25:02:05:11:cd:f3: 4f:7d:16:7d:7a:45:f5:39:bc:71:2c:89:43:8c:20: 1c:64:a2:46:81:0a:fa:a4:7d:2f:05:67:f6:a9:49: f3:87:86:91:4a:54:d4:9a:0c:6a:0c:dd:98:be:f8: 67:4c:eb:be:07:e7:48:41:8c:6d:34:6c:c5:10:82: 9c:e6:a6:1d:af:07:1b:c7:b4:89:89:ad:8d:fa:15: 8e:bf:01:6c:f4:a0:1a:31:f6:4b:28:b0:75:10:b1: a9:c4:08:e3:79:03:d9:db:6e:56:0e:05:ba:0a:74: 21:4e:48:97:16:eb:a3:27:7b:02:83:92:a6:77:0e: d4:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E6:93:5C:96:03:37:51:F5:F4:A3:F7:D8:81:01:43:BB:88:E5:49 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/aeaTXJYDN1H19KP32IEBQ7uI5Uk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.6.228.0/24 Signature Algorithm: sha256WithRSAEncryption 65:57:45:12:f3:e5:74:65:d7:63:e4:43:c7:fa:02:97:30:9d: 09:08:2b:a9:7b:02:e9:cb:24:1a:61:61:78:70:c0:37:a1:f8: 9c:91:a5:4d:91:fd:69:71:d7:4d:85:e5:c0:7c:1e:e3:42:52: 0e:d8:9d:77:8b:99:c4:ac:72:90:d3:b0:c9:56:74:45:1e:d7: 26:1e:f8:de:25:72:74:72:ef:24:b0:87:62:b8:17:be:a7:e6: a0:25:d9:f9:5d:7f:d3:6d:e9:2b:9a:8d:3e:52:19:8a:a0:49: 76:25:0a:ce:ba:ee:47:43:b0:f9:bc:97:6e:7b:1d:70:c9:3c: 84:68:a5:2b:9c:8c:0c:eb:4c:e5:a2:35:bf:58:e3:15:44:ee: c5:f5:b4:25:bd:22:c2:96:51:ce:6e:2a:52:f8:7e:9f:72:a5: 40:f9:5b:4a:be:7c:4d:a3:86:b5:26:45:63:08:43:c4:94:28: 24:59:a0:92:0c:57:de:18:85:4f:91:f8:5a:88:6e:d6:20:5e: 84:46:ac:80:18:7b:97:17:64:3c:d6:8e:ff:fc:a1:d5:2b:8b: 42:56:a9:e4:d0:fa:f6:21:51:b6:8c:cf:80:63:a0:bb:58:9c: 4d:8f:01:6b:0c:1b:a0:a9:b5:6d:20:c8:a0:e8:50:02:1b:c8: 87:97:79:6f -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICH8kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTEwMTYw MzMwMDhaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDY5RTY5MzVDOTYwMzM3 NTFGNUY0QTNGN0Q4ODEwMTQzQkI4OEU1NDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCya1FK370T1tnp9qhdv2z+UErv+hKBTo/lgW4i5KBSQqxfEz5m P6JZ1NM4ryQCFqGia2TdcsWGqIIzosamy4cvL8TIqWaxXSO3q5+qF9P9U6lq+3s9 ogxP45UTxvUNDtS5sTxWeuBxW4nt508drh+oP4viT4izElvWbI+6D+JE3yUCBRHN 8099Fn16RfU5vHEsiUOMIBxkokaBCvqkfS8FZ/apSfOHhpFKVNSaDGoM3Zi++GdM 674H50hBjG00bMUQgpzmph2vBxvHtImJrY36FY6/AWz0oBox9ksosHUQsanECON5 A9nbblYOBboKdCFOSJcW66MnewKDkqZ3DtSNAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUaeaTXJYDN1H19KP32IEBQ7uI5UkwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2FlYVRYSllETjFIMTlL UDMySUVCUTd1STVVay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnBuQwDQYJKoZIhvcNAQELBQADggEBAGVXRRLz5XRl12PkQ8f6ApcwnQkIK6l7 AunLJBphYXhwwDeh+JyRpU2R/Wlx102F5cB8HuNCUg7YnXeLmcSscpDTsMlWdEUe 1yYe+N4lcnRy7ySwh2K4F76n5qAl2fldf9Nt6SuajT5SGYqgSXYlCs667kdDsPm8 l257HXDJPIRopSucjAzrTOWiNb9Y4xVE7sX1tCW9IsKWUc5uKlL4fp9ypUD5W0q+ fE2jhrUmRWMIQ8SUKCRZoJIMV94YhU+R+FqIbtYgXoRGrIAYe5cXZDzWjv/8odUr i0JWqeTQ+vYhUbaMz4BjoLtYnE2PAWsMG6CptW0gyKDoUAIbyIeXeW8= -----END CERTIFICATE-----Generated at Mon Oct 20 14:31:50 2025 by rpki-client