$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/3-Ig70oFTmfFNvq2P6HqSPSsUbU.roa File: 3-Ig70oFTmfFNvq2P6HqSPSsUbU.roa (raw, json) Hash identifier: LV22t4PLkZCF59i9HcvTKJdYl3LrRI98uTij4HqjQF4= Subject key identifier: DF:E2:20:EF:4A:05:4E:67:C5:36:FA:B6:3F:A1:EA:48:F4:AC:51:B5 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1DF1 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/3-Ig70oFTmfFNvq2P6HqSPSsUbU.roa Signing time: Sat 13 Sep 2025 03:04:42 +0000 ROA not before: Sat 13 Sep 2025 03:04:42 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 24373 IP address blocks: 45.252.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 13:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7665 (0x1df1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:04:42 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=DFE220EF4A054E67C536FAB63FA1EA48F4AC51B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e8:44:d1:2f:e9:ea:8e:38:3e:72:37:05:b1: 16:69:ce:67:7b:fa:21:26:37:6e:57:67:cf:69:a6: 38:bf:a7:49:7f:25:aa:49:a7:0d:60:0c:31:48:bb: bd:d8:14:72:e0:e1:54:a3:97:95:e6:cd:42:97:66: 89:28:93:96:00:22:44:f2:89:26:a6:32:b0:fe:b1: f1:38:a5:77:8f:cb:26:5f:2a:73:98:28:6d:6b:b6: 7d:09:f8:d3:4a:84:0c:ae:e2:bd:8e:33:8e:20:64: 59:d4:5c:7e:0d:7b:37:4f:e3:62:eb:cb:90:75:7e: 61:a0:19:24:61:e3:87:f0:b8:94:5b:2b:d6:33:48: da:cb:a0:90:47:b6:c4:00:20:2c:1b:88:ed:11:0b: 11:bd:f8:8b:db:36:59:aa:b2:01:be:01:2f:7f:ed: c9:01:a5:19:77:f2:10:5f:89:8f:d9:b4:9c:9f:a2: 0d:cd:09:23:13:39:95:80:e1:29:98:52:6c:c5:d7: 1c:f6:56:8c:b8:29:18:67:ee:56:32:2e:b8:63:b6: c8:86:a3:46:1d:97:27:37:5e:06:b6:05:ec:06:65: d5:d8:70:63:0a:f6:0a:00:3d:3a:d7:68:38:68:da: bf:bb:3f:08:88:24:0a:cf:cf:51:88:e0:5f:7d:21: bb:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E2:20:EF:4A:05:4E:67:C5:36:FA:B6:3F:A1:EA:48:F4:AC:51:B5 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/3-Ig70oFTmfFNvq2P6HqSPSsUbU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.8.0/22 Signature Algorithm: sha256WithRSAEncryption 04:e8:c1:23:bd:38:a1:0c:d3:28:09:d2:f2:a4:bd:fd:34:1a: f9:d0:2e:d7:0b:e5:fe:cc:e9:e7:73:a8:60:9c:d3:9e:b6:4d: ec:77:92:19:00:ff:70:a9:26:6e:ee:e5:c0:11:28:54:9c:66: 65:c8:fe:42:c3:57:33:de:93:4b:ed:7c:b5:79:2f:69:5d:c5: 79:c3:bb:c9:fa:22:b1:32:0f:4c:18:16:f1:c3:b8:0f:69:b2: 42:0e:6d:22:9c:5e:19:b5:3c:51:63:8c:f0:73:25:01:1f:7e: 59:c8:0a:56:fc:4d:c8:fc:a9:51:1a:f9:5f:d1:36:9b:90:fe: f8:d5:b1:96:d9:bc:93:a6:65:76:16:f6:60:68:67:e2:a5:43: 93:3c:c3:a6:7c:43:50:90:6d:7b:b9:78:53:a6:14:0c:1a:5b: 72:89:50:ad:06:24:d8:84:7b:ae:a6:d5:64:73:07:a6:7e:c4: 35:ba:cf:d4:5e:23:c9:33:1b:c7:da:88:64:f4:c7:1b:be:b9: 7b:ef:2b:73:37:4f:fd:45:49:47:98:a4:d7:d2:58:27:f8:a9: e3:ea:ac:7c:24:92:c9:f2:d9:6b:9e:e5:4b:87:57:36:2b:c4: 4f:76:c5:36:1d:a6:ff:b4:dd:d1:c1:95:0a:3d:f1:75:83:2f: 59:94:a8:41 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHfEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA0NDJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKERGRTIyMEVGNEEwNTRF NjdDNTM2RkFCNjNGQTFFQTQ4RjRBQzUxQjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+6ETRL+nqjjg+cjcFsRZpzmd7+iEmN25XZ89ppji/p0l/JapJ pw1gDDFIu73YFHLg4VSjl5XmzUKXZokok5YAIkTyiSamMrD+sfE4pXePyyZfKnOY KG1rtn0J+NNKhAyu4r2OM44gZFnUXH4NezdP42Lry5B1fmGgGSRh44fwuJRbK9Yz SNrLoJBHtsQAICwbiO0RCxG9+IvbNlmqsgG+AS9/7ckBpRl38hBfiY/ZtJyfog3N CSMTOZWA4SmYUmzF1xz2Voy4KRhn7lYyLrhjtsiGo0Ydlyc3Xga2BewGZdXYcGMK 9goAPTrXaDho2r+7PwiIJArPz1GI4F99Ibv/AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU3+Ig70oFTmfFNvq2P6HqSPSsUbUwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3LzMtSWc3MG9GVG1mRk52 cTJQNkhxU1BTc1ViVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIt/AgwDQYJKoZIhvcNAQELBQADggEBAATowSO9OKEM0ygJ0vKkvf00GvnQLtcL 5f7M6edzqGCc0562Tex3khkA/3CpJm7u5cARKFScZmXI/kLDVzPek0vtfLV5L2ld xXnDu8n6IrEyD0wYFvHDuA9pskIObSKcXhm1PFFjjPBzJQEfflnIClb8Tcj8qVEa +V/RNpuQ/vjVsZbZvJOmZXYW9mBoZ+KlQ5M8w6Z8Q1CQbXu5eFOmFAwaW3KJUK0G JNiEe66m1WRzB6Z+xDW6z9ReI8kzG8faiGT0xxu+uXvvK3M3T/1FSUeYpNfSWCf4 qePqrHwkksny2Wue5UuHVzYrxE92xTYdpv+03dHBlQo98XWDL1mUqEE= -----END CERTIFICATE-----Generated at Mon Oct 20 11:58:30 2025 by rpki-client