$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/-VFTOHq-kfrs-S1aFXg3OLh32t0.roa File: -VFTOHq-kfrs-S1aFXg3OLh32t0.roa (raw, json) Hash identifier: KKL5tA1fxZ54oeYSPCZVI5IyoX1wO5glXumYi+lzjdY= Subject key identifier: F9:51:53:38:7A:BE:91:FA:EC:F9:2D:5A:15:78:37:38:B8:77:DA:DD Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1E43 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/-VFTOHq-kfrs-S1aFXg3OLh32t0.roa Signing time: Sat 13 Sep 2025 03:04:58 +0000 ROA not before: Sat 13 Sep 2025 03:04:58 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 139259 IP address blocks: 103.221.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 00:35:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7747 (0x1e43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:04:58 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=F95153387ABE91FAECF92D5A15783738B877DADD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:06:93:e5:52:29:86:23:c3:47:06:d6:3b:80: c4:2f:e6:e4:d6:1b:8a:e6:b2:4d:01:0e:5c:c6:6a: 12:86:ff:f1:88:cc:e5:ec:94:60:51:c9:55:51:00: fd:0f:c0:fc:74:32:9c:cb:a9:d1:70:48:de:f6:30: f4:25:73:21:c8:98:18:3e:24:2c:d2:31:51:f2:bb: 6a:d2:bc:78:d7:8b:8e:04:98:47:72:2e:d8:fc:8a: d0:8d:54:4e:b3:f4:19:2f:3c:b1:9d:9a:f0:6c:e1: 5a:dc:4a:e0:66:b8:3b:ea:32:aa:dc:8d:f0:53:19: 9f:22:ad:e1:75:a9:48:3c:6d:00:64:e6:ec:96:05: 52:d5:ba:7f:c5:64:94:c6:fa:37:1e:6c:7a:97:6f: 8a:7b:d7:85:d0:fa:b7:b9:22:93:a4:10:ba:d6:21: ea:9e:07:f2:c8:32:99:58:db:29:59:80:c5:75:50: 9d:21:ab:b2:eb:4f:8b:fc:05:17:2f:b8:82:f3:42: dc:ea:74:f0:88:8c:ca:f1:35:8f:99:98:5f:f8:ce: 8e:f7:3c:91:d5:f8:ee:1f:c3:ad:7d:93:d0:16:6e: 0e:23:a8:a3:5d:7d:26:4d:0a:10:f2:68:52:2f:13: 64:2f:0c:66:7b:0c:ed:ad:15:49:92:56:56:49:47: ac:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:51:53:38:7A:BE:91:FA:EC:F9:2D:5A:15:78:37:38:B8:77:DA:DD X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/-VFTOHq-kfrs-S1aFXg3OLh32t0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.93.0/24 Signature Algorithm: sha256WithRSAEncryption 69:9c:b2:61:39:9f:bf:44:26:1a:fb:a4:65:13:1e:c3:69:6b: 22:35:7c:59:52:89:d3:72:01:b6:05:a5:36:e9:40:23:58:33: 60:d1:a3:81:cd:22:ee:db:9d:38:80:1c:02:49:74:f9:0a:25: 8a:cf:ad:68:fc:ff:d8:74:61:d0:c3:26:ff:19:31:62:cc:8e: 19:a8:5d:09:3b:59:f8:3e:ff:c0:6c:88:32:e3:ee:1b:27:ab: e1:46:b8:b2:91:60:06:3c:7f:11:f5:79:85:51:97:d0:da:31: d8:bb:fb:2b:d9:0e:c3:be:78:6c:5e:98:d5:bc:c4:b8:d5:c5: a1:48:b4:72:ef:b0:6b:bf:ab:83:4e:3e:0e:a5:74:8b:3d:38: 93:cd:bd:5a:74:cb:7a:e5:5e:81:03:ca:f5:de:30:8e:3c:f7: 60:7f:7d:a3:16:a3:31:e4:9f:06:d4:bd:d4:85:fd:08:fc:24: 7c:16:d4:4d:35:df:1c:ab:d1:29:df:8a:7e:db:ce:29:f8:60: fc:c7:a5:d5:a6:1c:e0:89:37:88:71:b0:d5:8c:2a:3f:0b:69: 0e:8c:75:d5:a2:f4:5f:9c:ee:15:20:d9:ea:68:43:50:9b:12: de:a3:69:ce:65:8b:d8:bf:82:7d:fe:52:13:bf:12:0f:1a:7b: a1:d8:39:fd -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHkMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA0NThaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEY5NTE1MzM4N0FCRTkx RkFFQ0Y5MkQ1QTE1NzgzNzM4Qjg3N0RBREQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDjBpPlUimGI8NHBtY7gMQv5uTWG4rmsk0BDlzGahKG//GIzOXs lGBRyVVRAP0PwPx0MpzLqdFwSN72MPQlcyHImBg+JCzSMVHyu2rSvHjXi44EmEdy Ltj8itCNVE6z9BkvPLGdmvBs4VrcSuBmuDvqMqrcjfBTGZ8ireF1qUg8bQBk5uyW BVLVun/FZJTG+jcebHqXb4p714XQ+re5IpOkELrWIeqeB/LIMplY2ylZgMV1UJ0h q7LrT4v8BRcvuILzQtzqdPCIjMrxNY+ZmF/4zo73PJHV+O4fw619k9AWbg4jqKNd fSZNChDyaFIvE2QvDGZ7DO2tFUmSVlZJR6z/AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU+VFTOHq+kfrs+S1aFXg3OLh32t0wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3Ly1WRlRPSHEta2Zycy1T MWFGWGczT0xoMzJ0MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3V0wDQYJKoZIhvcNAQELBQADggEBAGmcsmE5n79EJhr7pGUTHsNpayI1fFlS idNyAbYFpTbpQCNYM2DRo4HNIu7bnTiAHAJJdPkKJYrPrWj8/9h0YdDDJv8ZMWLM jhmoXQk7Wfg+/8BsiDLj7hsnq+FGuLKRYAY8fxH1eYVRl9DaMdi7+yvZDsO+eGxe mNW8xLjVxaFItHLvsGu/q4NOPg6ldIs9OJPNvVp0y3rlXoEDyvXeMI4892B/faMW ozHknwbUvdSF/Qj8JHwW1E013xyr0Snfin7bzin4YPzHpdWmHOCJN4hxsNWMKj8L aQ6MddWi9F+c7hUg2epoQ1CbEt6jac5li9i/gn3+UhO/Eg8ae6HYOf0= -----END CERTIFICATE-----Generated at Mon Oct 20 23:27:23 2025 by rpki-client