$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3252/77rolmzgqpD3vSet3IqqHzcFfMI.roa File: 77rolmzgqpD3vSet3IqqHzcFfMI.roa (raw, json) Hash identifier: hUirENN2S2JXM3+nfYllYmKwMR8y8p+HGuQlmVafNEI= Subject key identifier: EF:BA:E8:96:6C:E0:AA:90:F7:BD:27:AD:DC:8A:AA:1F:37:05:7C:C2 Certificate issuer: /CN=538FC759FAECF98ED7510C8F2E6DE9A718F8DCCE Certificate serial: 0BFB Authority key identifier: 53:8F:C7:59:FA:EC:F9:8E:D7:51:0C:8F:2E:6D:E9:A7:18:F8:DC:CE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/U4_HWfrs-Y7XUQyPLm3ppxj43M4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3252/77rolmzgqpD3vSet3IqqHzcFfMI.roa Signing time: Sat 13 Sep 2025 03:04:29 +0000 ROA not before: Sat 13 Sep 2025 03:04:29 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 63538 IP address blocks: 157.10.34.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3252/U4_HWfrs-Y7XUQyPLm3ppxj43M4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3252/U4_HWfrs-Y7XUQyPLm3ppxj43M4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/U4_HWfrs-Y7XUQyPLm3ppxj43M4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 04:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3067 (0xbfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=538FC759FAECF98ED7510C8F2E6DE9A718F8DCCE Validity Not Before: Sep 13 03:04:29 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=EFBAE8966CE0AA90F7BD27ADDC8AAA1F37057CC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:96:97:3b:3d:7c:47:27:eb:7a:e3:85:13:75: 4f:0e:cc:37:b0:b1:21:b1:33:96:13:a0:14:62:f8: 17:d6:92:ad:4f:1c:e0:f9:d2:91:3c:9e:06:5a:df: 51:d2:27:90:a9:ea:4f:2a:48:58:fc:ef:9e:66:18: db:0c:09:ae:7a:c7:f0:e2:ec:f8:58:a5:a1:f0:e9: da:5e:70:17:25:70:45:e7:d3:86:f3:25:10:76:d2: 72:3f:db:ac:1d:ae:d0:cf:31:0b:3e:e9:1c:78:9b: b9:a3:0d:5d:ab:c6:ab:16:4b:f4:51:9b:6e:e9:d6: 6b:92:0f:10:93:c3:80:03:b8:59:5d:65:ba:10:08: 7f:9b:f7:89:27:fe:ce:67:a1:fc:60:83:44:d2:26: 4a:e2:20:78:51:75:26:6f:ed:50:f8:b2:3a:b8:ff: 1d:50:e3:34:31:e6:5f:24:fa:80:d0:2c:6c:87:55: a0:16:ee:d4:78:d2:c6:0b:26:45:91:67:69:5d:84: 4f:e0:fd:f5:e7:22:02:88:3a:17:12:97:57:b1:46: 8d:82:7d:3c:f5:44:31:c9:cc:ab:cf:d7:76:4c:71: 0b:98:89:0a:4b:5a:ba:83:6f:46:33:1e:3b:70:1e: df:ea:d9:5b:15:10:ba:98:eb:11:e7:08:e3:dc:41: cf:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:BA:E8:96:6C:E0:AA:90:F7:BD:27:AD:DC:8A:AA:1F:37:05:7C:C2 X509v3 Authority Key Identifier: keyid:53:8F:C7:59:FA:EC:F9:8E:D7:51:0C:8F:2E:6D:E9:A7:18:F8:DC:CE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3252/U4_HWfrs-Y7XUQyPLm3ppxj43M4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/U4_HWfrs-Y7XUQyPLm3ppxj43M4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3252/77rolmzgqpD3vSet3IqqHzcFfMI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.10.34.0/23 Signature Algorithm: sha256WithRSAEncryption a4:7f:d6:39:44:16:c5:cf:5b:2d:98:0e:83:d2:ef:4a:75:f2: 06:1a:c7:35:bc:44:5e:19:34:da:5f:75:5a:d2:bb:09:be:6d: ff:ee:61:08:ac:2d:86:38:ee:7f:b0:e2:cf:6c:67:c3:e1:46: 37:62:ad:94:d8:07:1b:fd:40:2a:fb:bd:ab:ef:b4:18:23:85: ae:01:2b:26:d6:75:6d:35:09:f2:01:86:78:09:84:8b:3b:2e: a4:01:c9:2a:65:74:be:cb:98:70:ed:b0:24:74:50:44:16:76: ac:c7:32:73:e1:0f:08:be:19:b8:4e:fd:49:08:60:cb:e6:79: 46:08:2a:d6:2c:11:1c:9a:e0:1b:4c:70:69:8b:c9:a7:9a:54: eb:6b:1a:1c:37:ce:b0:4c:c9:ef:98:aa:82:9f:53:c5:e4:eb: 0e:ef:00:83:38:e2:12:b6:41:f9:2b:79:d9:0a:b8:51:eb:3b: 08:6b:51:3b:24:fe:3e:81:79:bf:c7:2b:41:0e:4e:6f:be:6c: 8f:0f:1d:3c:45:2a:88:d7:b1:08:4f:0b:99:89:ee:20:94:24: 98:35:f9:35:55:f8:8d:fc:c2:f7:fe:f4:fd:ea:0d:c7:9e:7a: 60:2e:7f:70:8b:75:65:96:23:69:6f:36:e1:f3:e2:88:5a:23: bb:a1:0a:a4 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICC/swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTM4 RkM3NTlGQUVDRjk4RUQ3NTEwQzhGMkU2REU5QTcxOEY4RENDRTAeFw0yNTA5MTMw MzA0MjlaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEVGQkFFODk2NkNFMEFB OTBGN0JEMjdBRERDOEFBQTFGMzcwNTdDQzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSlpc7PXxHJ+t644UTdU8OzDewsSGxM5YToBRi+BfWkq1PHOD5 0pE8ngZa31HSJ5Cp6k8qSFj8755mGNsMCa56x/Di7PhYpaHw6dpecBclcEXn04bz JRB20nI/26wdrtDPMQs+6Rx4m7mjDV2rxqsWS/RRm27p1muSDxCTw4ADuFldZboQ CH+b94kn/s5nofxgg0TSJkriIHhRdSZv7VD4sjq4/x1Q4zQx5l8k+oDQLGyHVaAW 7tR40sYLJkWRZ2ldhE/g/fXnIgKIOhcSl1exRo2CfTz1RDHJzKvP13ZMcQuYiQpL WrqDb0YzHjtwHt/q2VsVELqY6xHnCOPcQc/fAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU77rolmzgqpD3vSet3IqqHzcFfMIwHwYDVR0jBBgwFoAUU4/HWfrs+Y7XUQyP Lm3ppxj43M4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI1 Mi9VNF9IV2Zycy1ZN1hVUXlQTG0zcHB4ajQzTTQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1U0X0hXZnJzLVk3WFVReVBMbTNwcHhqNDNNNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNTIvNzdyb2xtemdxcEQz dlNldDNJcXFIemNGZk1JLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAZ0KIjANBgkqhkiG9w0BAQsFAAOCAQEApH/WOUQWxc9bLZgOg9LvSnXyBhrH NbxEXhk02l91WtK7Cb5t/+5hCKwthjjuf7Diz2xnw+FGN2KtlNgHG/1AKvu9q++0 GCOFrgErJtZ1bTUJ8gGGeAmEizsupAHJKmV0vsuYcO2wJHRQRBZ2rMcyc+EPCL4Z uE79SQhgy+Z5Rggq1iwRHJrgG0xwaYvJp5pU62saHDfOsEzJ75iqgp9TxeTrDu8A gzjiErZB+St52Qq4Ues7CGtROyT+PoF5v8crQQ5Ob75sjw8dPEUqiNexCE8LmYnu IJQkmDX5NVX4jfzC9/70/eoNx556YC5/cIt1ZZYjaW824fPiiFoju6EKpA== -----END CERTIFICATE-----Generated at Tue Oct 21 02:17:12 2025 by rpki-client