$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/1IIgpi_sz5RY5VQ_bt580-fWcAc.roa File: 1IIgpi_sz5RY5VQ_bt580-fWcAc.roa (raw, json) Hash identifier: ezpPqow3iSYQrdptIMzWjF5mocNjgDTWlLrWeT4Elq4= Subject key identifier: D4:82:20:A6:2F:EC:CF:94:58:E5:54:3F:6E:DE:7C:D3:E7:D6:70:07 Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708 Certificate serial: 21CE Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/1IIgpi_sz5RY5VQ_bt580-fWcAc.roa Signing time: Sat 13 Sep 2025 03:09:01 +0000 ROA not before: Sat 13 Sep 2025 03:09:01 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 4811 IP address blocks: 14.103.72.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 18:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8654 (0x21ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708 Validity Not Before: Sep 13 03:09:01 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=D48220A62FECCF9458E5543F6EDE7CD3E7D67007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:65:b9:30:bf:17:8d:d2:76:da:05:61:fd:03: 1b:31:93:64:97:ac:ac:bd:65:17:06:8e:5f:37:2a: 6e:02:a6:91:95:6b:c6:0d:4c:35:ab:7e:5b:ab:69: 83:17:6a:b1:9e:45:cb:5c:66:fc:09:5c:11:39:2a: 22:9a:ee:8c:e9:12:17:79:65:2e:aa:73:2e:6d:f3: ff:1c:36:57:0f:5e:17:fa:e7:8b:64:e5:47:98:3f: fc:30:06:8f:b6:e4:b2:5d:1e:9e:c7:5f:29:22:41: 37:de:70:e7:f5:4a:22:b5:4f:e8:52:28:29:91:34: 0c:80:b4:20:b5:98:f5:d8:e3:3c:b4:58:ab:07:b5: 0a:71:47:9d:3c:f5:3b:69:91:32:7d:bf:40:da:69: 8a:7e:48:b1:f2:3e:85:2a:ea:d8:40:a8:fe:df:e4: 6d:d6:31:29:57:7b:8b:12:82:df:ff:db:da:fb:99: 52:4f:90:0b:3c:2f:ba:35:9f:32:5e:92:29:09:59: 0b:70:d1:d6:ba:d9:67:2e:99:cb:3a:01:ac:af:4e: 9e:70:e5:27:c3:3e:e4:54:78:3e:a7:6d:7a:8c:36: b1:a2:9f:ab:34:65:e3:f9:3b:b7:a3:4e:4b:6e:ba: 0f:58:ad:4d:ad:e2:bb:ce:2f:27:61:1d:c1:f9:53: c9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:82:20:A6:2F:EC:CF:94:58:E5:54:3F:6E:DE:7C:D3:E7:D6:70:07 X509v3 Authority Key Identifier: keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/1IIgpi_sz5RY5VQ_bt580-fWcAc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 14.103.72.0/23 Signature Algorithm: sha256WithRSAEncryption 45:46:35:7e:b6:94:b4:c9:f4:6e:13:8c:e9:c0:f8:d3:f1:a3: b0:b5:61:3e:04:46:40:64:1f:18:b3:46:7a:d0:f5:81:53:7c: a4:5f:c5:8d:4a:e6:15:8f:5b:92:45:78:21:fb:50:72:e4:a9: 8f:2e:bf:dc:30:ca:0d:da:27:1b:ce:7f:f8:55:7f:09:13:34: d2:e8:10:38:dd:a2:3d:82:ba:e2:8e:8a:4b:c6:b0:2d:8e:19: 75:02:21:d1:ae:49:b1:12:fd:af:ea:e0:93:a6:45:aa:42:1c: 46:43:13:59:b4:26:f3:d1:4c:ff:35:08:18:88:52:67:d4:90: c4:c8:46:ec:3b:3b:6e:3f:91:01:1f:6e:6d:a7:83:3c:7e:d6: ac:f2:fb:8b:cc:ce:20:87:f0:64:ff:79:5d:46:97:a8:d0:d7: 8b:e2:42:4a:45:fb:d8:56:c6:d1:86:87:cb:46:ab:4a:a2:a6: bb:aa:e9:84:34:1e:48:d1:93:df:5a:86:00:ad:5a:0b:ea:9a: 90:86:4f:31:95:bd:82:df:f5:9d:cf:13:24:11:29:b9:cf:97: b5:e9:69:24:5c:bc:3a:2d:88:57:8e:de:19:fc:63:90:c7:dd: b8:4e:82:15:4e:43:69:8b:b3:f6:f0:d9:1f:99:2e:ad:17:9d: 30:8b:79:e9 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIc4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4 QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTA5MTMw MzA5MDFaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEQ0ODIyMEE2MkZFQ0NG OTQ1OEU1NTQzRjZFREU3Q0QzRTdENjcwMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdZbkwvxeN0nbaBWH9Axsxk2SXrKy9ZRcGjl83Km4CppGVa8YN TDWrfluraYMXarGeRctcZvwJXBE5KiKa7ozpEhd5ZS6qcy5t8/8cNlcPXhf654tk 5UeYP/wwBo+25LJdHp7HXykiQTfecOf1SiK1T+hSKCmRNAyAtCC1mPXY4zy0WKsH tQpxR5089TtpkTJ9v0DaaYp+SLHyPoUq6thAqP7f5G3WMSlXe4sSgt//29r7mVJP kAs8L7o1nzJekikJWQtw0da62Wcumcs6AayvTp5w5SfDPuRUeD6nbXqMNrGin6s0 ZeP5O7ejTktuug9YrU2t4rvOLydhHcH5U8lbAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU1IIgpi/sz5RY5VQ/bt580+fWcAcwHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvMUlJZ3BpX3N6NVJZ NVZRX2J0NTgwLWZXY0FjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAQ5nSDANBgkqhkiG9w0BAQsFAAOCAQEARUY1fraUtMn0bhOM6cD40/GjsLVh PgRGQGQfGLNGetD1gVN8pF/FjUrmFY9bkkV4IftQcuSpjy6/3DDKDdonG85/+FV/ CRM00ugQON2iPYK64o6KS8awLY4ZdQIh0a5JsRL9r+rgk6ZFqkIcRkMTWbQm89FM /zUIGIhSZ9SQxMhG7Ds7bj+RAR9ubaeDPH7WrPL7i8zOIIfwZP95XUaXqNDXi+JC SkX72FbG0YaHy0arSqKmu6rphDQeSNGT31qGAK1aC+qakIZPMZW9gt/1nc8TJBEp uc+XtelpJFy8Oi2IV47eGfxjkMfduE6CFU5DaYuz9vDZH5kurRedMIt56Q== -----END CERTIFICATE-----Generated at Mon Oct 20 16:22:25 2025 by rpki-client