$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/2G7NzKCQXhT-GCCsQgepwZdqCTI.roa File: 2G7NzKCQXhT-GCCsQgepwZdqCTI.roa (raw, json) Hash identifier: p3EVQSvI6t9HYq8sp456LqW4swO0xTFD+hl3rjMg9wo= Subject key identifier: D8:6E:CD:CC:A0:90:5E:14:FE:18:20:AC:42:07:A9:C1:97:6A:09:32 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1E5E Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/2G7NzKCQXhT-GCCsQgepwZdqCTI.roa Signing time: Sat 13 Sep 2025 03:05:05 +0000 ROA not before: Sat 13 Sep 2025 03:05:05 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 13444 IP address blocks: 103.221.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 13:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7774 (0x1e5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:05:05 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=D86ECDCCA0905E14FE1820AC4207A9C1976A0932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7f:42:20:7d:cd:3b:d2:ca:d7:d4:8d:62:7e: 55:e7:76:d2:f1:37:a0:88:cd:47:68:91:e9:af:6a: 07:1e:c7:80:55:af:61:e0:b5:fe:10:29:a5:24:ce: e9:32:be:30:4f:e2:1e:97:8a:c3:f1:1c:6c:45:aa: 70:d7:ec:aa:45:fb:82:d9:c5:7e:49:1a:82:e3:29: 0a:70:f9:56:d9:cd:ae:f9:e0:ce:a7:35:d1:9b:a0: 1e:81:06:d1:c1:9d:d8:6b:a6:d7:b4:d6:c5:33:0c: 28:5e:3e:c5:a1:7f:72:7c:cd:9b:b9:38:67:8b:6a: 91:74:49:9d:dd:c7:85:5f:7f:f2:51:e1:09:93:9e: 5c:e4:e9:1b:6b:f2:70:4c:4f:98:09:4f:07:8c:61: 2d:82:90:4a:fd:e9:6a:8e:e6:d1:15:e6:61:b9:a3: 5e:da:84:e8:e8:1b:87:55:f1:02:da:41:d4:d4:84: 03:12:bd:10:6d:b9:be:64:de:b3:53:d6:83:b1:f3: c9:46:42:53:d4:3c:fe:a7:08:cc:27:e5:a9:0d:12: 72:05:fb:93:6d:06:4f:83:18:a6:9b:64:c8:42:45: 1d:6d:62:b2:c4:65:4d:09:d0:95:9d:0f:c3:17:e8: b3:2a:67:3c:06:9c:83:1b:95:62:5e:0e:68:5b:02: 88:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:6E:CD:CC:A0:90:5E:14:FE:18:20:AC:42:07:A9:C1:97:6A:09:32 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/2G7NzKCQXhT-GCCsQgepwZdqCTI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.92.0/24 Signature Algorithm: sha256WithRSAEncryption d2:c8:8e:ce:80:fe:41:8c:ce:d4:ba:44:7a:9e:3c:00:77:3c: e5:96:4a:9e:69:7f:af:35:56:9c:8d:b1:10:aa:d7:cb:94:a6: 40:0a:01:79:7e:43:f8:89:5a:c7:80:74:99:d7:f7:22:3a:eb: 88:9b:7f:e9:2c:8b:5f:c8:a2:db:bc:ae:d2:5c:ab:03:f7:36: 78:37:49:2d:1e:26:5f:bb:6d:44:c4:4b:0a:4f:07:e8:0a:3b: b3:fb:df:58:41:4d:33:34:eb:43:d6:b6:d1:92:55:18:2f:0e: 55:05:bb:d2:32:4e:03:74:71:65:5d:58:3b:cc:93:7f:bb:24: 68:d5:94:79:2e:18:ba:22:ae:9e:0c:41:fb:12:a0:20:44:41: 76:b9:02:e7:38:2e:9d:8a:d9:f5:c5:84:ab:7e:2a:9e:41:58: dc:2a:eb:45:67:74:90:c9:1b:68:dd:f6:42:64:ea:29:29:67: 8f:42:8b:cd:ff:c9:12:d1:66:c4:a0:16:6b:2b:bd:58:91:c6: 8a:0f:ab:45:fb:c0:62:97:65:f7:f1:11:72:09:33:4e:da:52: c2:e5:d0:2c:85:42:15:20:eb:42:9f:df:20:6c:58:2f:08:42: 4f:8d:8b:f6:e0:cf:fc:50:47:fd:f9:a2:f4:de:80:7e:f4:31: d2:27:bb:ee -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHl4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA1MDVaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEQ4NkVDRENDQTA5MDVF MTRGRTE4MjBBQzQyMDdBOUMxOTc2QTA5MzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQClf0Igfc070srX1I1iflXndtLxN6CIzUdokemvagcex4BVr2Hg tf4QKaUkzukyvjBP4h6XisPxHGxFqnDX7KpF+4LZxX5JGoLjKQpw+VbZza754M6n NdGboB6BBtHBndhrpte01sUzDChePsWhf3J8zZu5OGeLapF0SZ3dx4Vff/JR4QmT nlzk6Rtr8nBMT5gJTweMYS2CkEr96WqO5tEV5mG5o17ahOjoG4dV8QLaQdTUhAMS vRBtub5k3rNT1oOx88lGQlPUPP6nCMwn5akNEnIF+5NtBk+DGKabZMhCRR1tYrLE ZU0J0JWdD8MX6LMqZzwGnIMblWJeDmhbAoibAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU2G7NzKCQXhT+GCCsQgepwZdqCTIwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3LzJHN056S0NRWGhULUdD Q3NRZ2Vwd1pkcUNUSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3VwwDQYJKoZIhvcNAQELBQADggEBANLIjs6A/kGMztS6RHqePAB3POWWSp5p f681VpyNsRCq18uUpkAKAXl+Q/iJWseAdJnX9yI664ibf+ksi1/Iotu8rtJcqwP3 Nng3SS0eJl+7bUTESwpPB+gKO7P731hBTTM060PWttGSVRgvDlUFu9IyTgN0cWVd WDvMk3+7JGjVlHkuGLoirp4MQfsSoCBEQXa5Auc4Lp2K2fXFhKt+Kp5BWNwq60Vn dJDJG2jd9kJk6ikpZ49Ci83/yRLRZsSgFmsrvViRxooPq0X7wGKXZffxEXIJM07a UsLl0CyFQhUg60Kf3yBsWC8IQk+Ni/bgz/xQR/35ovTegH70MdInu+4= -----END CERTIFICATE-----Generated at Mon Oct 20 13:31:01 2025 by rpki-client