$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/0DSFoEoR2ikjoEns9ASTTRz8O1Q.roa File: 0DSFoEoR2ikjoEns9ASTTRz8O1Q.roa (raw, json) Hash identifier: yrtVll8USu/Atz2I8R6f6BOjLVhdDcDSglR6ORm/uG4= Subject key identifier: D0:34:85:A0:4A:11:DA:29:23:A0:49:EC:F4:04:93:4D:1C:FC:3B:54 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1EE6 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/0DSFoEoR2ikjoEns9ASTTRz8O1Q.roa Signing time: Sat 13 Sep 2025 03:05:35 +0000 ROA not before: Sat 13 Sep 2025 03:05:35 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 13444 IP address blocks: 103.220.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 13:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7910 (0x1ee6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:05:35 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=D03485A04A11DA2923A049ECF404934D1CFC3B54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:ae:6f:0f:51:fc:7a:f0:50:30:ca:74:48:3d: d3:28:20:f6:98:c8:b2:32:ce:cd:85:e6:41:78:86: a0:9e:f3:0c:68:69:54:3d:b5:60:25:54:c9:47:15: b7:e6:28:b7:6b:fc:96:cd:e6:09:97:5b:ac:20:38: 69:ec:7d:dc:84:a1:c6:84:6e:5d:95:06:97:c5:99: ca:62:5d:3b:23:90:08:92:db:eb:1c:ce:74:22:fb: 19:e1:e5:b5:c3:68:5f:a2:63:af:30:f3:de:c0:7d: e1:35:00:42:3e:2a:c0:3a:7e:b6:80:a9:f4:49:b7: 75:be:be:e5:b9:72:25:aa:d2:3c:ea:47:43:2d:60: 9b:15:67:f6:61:18:c2:e7:9f:f7:28:af:4c:f6:51: af:3d:59:ef:7d:00:af:c3:93:f9:e6:0c:5b:0a:82: d9:9e:dc:71:8c:63:55:eb:d3:d3:da:d6:e3:7f:18: 3c:1c:74:e5:32:a0:1f:ad:76:3b:49:53:96:06:1c: 81:a9:65:48:50:a9:0b:12:8c:43:f7:0e:20:49:b9: bb:62:12:ba:cb:25:ef:70:44:7b:84:a0:e9:0f:5d: 4b:0f:7b:3e:66:fc:96:eb:e7:96:2a:63:04:64:0b: a9:dc:9a:19:c5:f8:64:ff:c0:41:ea:b8:98:26:4e: 62:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:34:85:A0:4A:11:DA:29:23:A0:49:EC:F4:04:93:4D:1C:FC:3B:54 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/0DSFoEoR2ikjoEns9ASTTRz8O1Q.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.220.253.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:46:24:7d:00:b2:39:7d:29:93:1d:57:ef:38:cf:f2:c1:0b: fd:43:c0:29:f7:90:42:5e:4e:62:51:a6:72:4d:48:ee:da:49: 8b:68:00:e7:60:a4:83:bf:ab:cc:60:27:ee:2f:6c:be:94:c3: dd:92:1a:42:7c:7f:46:3b:ff:2b:c0:07:32:30:fc:fb:9d:d0: 0e:a5:e0:a4:cc:3d:5a:a3:88:5e:c9:27:0d:71:1c:1d:eb:d6: 72:20:bf:ac:cd:c3:a6:38:fb:3c:2d:e9:26:b0:1b:28:a4:ba: 65:8d:37:81:05:fd:e3:4d:f0:d0:bc:26:c2:1e:02:a5:32:59: bb:8a:06:f1:ba:4a:84:ab:e5:dc:bf:4b:34:a2:d0:36:1e:e1: 4c:c1:af:4a:1c:e1:9c:8f:21:61:77:ef:c5:2e:29:7e:be:0f: 52:ff:f6:bb:46:c0:5a:16:35:0c:18:92:35:f5:4f:f8:89:a1: 4c:0e:71:49:bb:0e:b5:bd:6b:21:d9:fe:b7:48:9e:8d:be:90: 11:09:88:1f:e6:8d:50:74:9e:fc:5f:8f:92:76:49:8b:fd:c0: 20:44:c8:06:33:b7:a1:78:c7:8b:3c:ba:34:64:6b:bf:87:25: 4f:9d:ea:60:9e:b5:c0:36:84:78:6a:e4:dc:ab:1a:dd:ab:9d: 0c:92:33:dd -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHuYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA1MzVaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEQwMzQ4NUEwNEExMURB MjkyM0EwNDlFQ0Y0MDQ5MzREMUNGQzNCNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDzrm8PUfx68FAwynRIPdMoIPaYyLIyzs2F5kF4hqCe8wxoaVQ9 tWAlVMlHFbfmKLdr/JbN5gmXW6wgOGnsfdyEocaEbl2VBpfFmcpiXTsjkAiS2+sc znQi+xnh5bXDaF+iY68w897AfeE1AEI+KsA6fraAqfRJt3W+vuW5ciWq0jzqR0Mt YJsVZ/ZhGMLnn/cor0z2Ua89We99AK/Dk/nmDFsKgtme3HGMY1Xr09Pa1uN/GDwc dOUyoB+tdjtJU5YGHIGpZUhQqQsSjEP3DiBJubtiErrLJe9wRHuEoOkPXUsPez5m /Jbr55YqYwRkC6ncmhnF+GT/wEHquJgmTmLnAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU0DSFoEoR2ikjoEns9ASTTRz8O1QwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3LzBEU0ZvRW9SMmlram9F bnM5QVNUVFJ6OE8xUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3P0wDQYJKoZIhvcNAQELBQADggEBACxGJH0Asjl9KZMdV+84z/LBC/1DwCn3 kEJeTmJRpnJNSO7aSYtoAOdgpIO/q8xgJ+4vbL6Uw92SGkJ8f0Y7/yvABzIw/Pud 0A6l4KTMPVqjiF7JJw1xHB3r1nIgv6zNw6Y4+zwt6SawGyikumWNN4EF/eNN8NC8 JsIeAqUyWbuKBvG6SoSr5dy/SzSi0DYe4UzBr0oc4ZyPIWF378UuKX6+D1L/9rtG wFoWNQwYkjX1T/iJoUwOcUm7DrW9ayHZ/rdIno2+kBEJiB/mjVB0nvxfj5J2SYv9 wCBEyAYzt6F4x4s8ujRka7+HJU+d6mCetcA2hHhq5NyrGt2rnQySM90= -----END CERTIFICATE-----Generated at Mon Oct 20 13:13:40 2025 by rpki-client