$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/5dJkZdrgq24oHVOwAqOwWvJfYOI.roa File: 5dJkZdrgq24oHVOwAqOwWvJfYOI.roa (raw, json) Hash identifier: OxnCmYWBJhM2iqpeBasCP6HVKoL6Gm+DjsqYz6kf97E= Subject key identifier: E5:D2:64:65:DA:E0:AB:6E:28:1D:53:B0:02:A3:B0:5A:F2:5F:60:E2 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1EDB Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/5dJkZdrgq24oHVOwAqOwWvJfYOI.roa Signing time: Sat 13 Sep 2025 03:05:33 +0000 ROA not before: Sat 13 Sep 2025 03:05:33 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 13444 IP address blocks: 103.221.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 13:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7899 (0x1edb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:05:33 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=E5D26465DAE0AB6E281D53B002A3B05AF25F60E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5b:d9:3d:a1:c9:9a:61:39:12:25:59:3e:ed: f5:ee:c3:15:0a:fe:f6:cf:07:9e:66:fd:92:8b:2b: b1:de:68:a1:39:5f:6e:4b:b3:a4:06:de:ab:3e:5b: 5a:1e:4c:04:31:6e:51:1a:35:fc:23:70:32:43:04: 80:78:02:52:c8:0e:36:d2:94:97:f4:07:ef:b1:96: 5b:f2:1e:1f:de:30:8d:6e:e9:0a:1d:92:9c:2b:3f: ab:d4:2d:7b:7d:e8:f0:a5:d6:52:4a:04:1c:03:c9: 16:fd:0a:61:e9:9c:dc:d5:c0:26:e1:eb:39:87:2c: 60:11:01:57:2d:a4:fd:28:33:92:03:b5:e8:c7:86: 95:0c:62:9e:fc:d0:cd:4f:f2:5a:6f:1d:14:71:ee: c1:1a:e8:4b:ee:89:3f:7a:a8:ee:25:bd:b6:8c:a7: 7a:ed:2a:5e:52:a3:35:46:72:5a:ba:f1:74:6d:da: c8:6e:1b:8f:d7:59:1b:c2:de:6b:dd:7b:56:5c:92: 6f:f1:1d:42:41:bd:31:2e:a2:2c:21:41:b0:19:95: 49:97:34:e7:ab:62:db:f1:38:de:e5:e9:0b:18:f8: 6e:b6:10:75:d7:e5:73:9a:d4:12:63:38:9f:bb:2c: 93:1d:2e:d3:7b:55:c7:f6:6b:d7:4c:a3:21:23:84: 0c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:D2:64:65:DA:E0:AB:6E:28:1D:53:B0:02:A3:B0:5A:F2:5F:60:E2 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/5dJkZdrgq24oHVOwAqOwWvJfYOI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.33.0/24 Signature Algorithm: sha256WithRSAEncryption 38:21:dd:45:29:2e:e8:55:2a:42:06:95:9e:b6:0e:86:c7:93: 6d:1e:3e:22:24:b2:39:82:0c:21:f5:1a:4f:c0:fb:79:35:59: 67:53:ee:3b:39:84:a6:fe:8b:86:e3:fe:67:4f:19:82:4a:16: 6d:13:dc:0b:09:18:ce:3e:ab:eb:e9:3e:4f:48:8c:97:91:46: 72:20:31:10:c3:d2:c3:53:79:07:0e:ae:e6:3d:f5:ad:ca:15: b0:74:38:da:5d:5d:02:8e:f4:34:06:07:3d:cc:ef:37:15:df: 1b:62:a9:0e:d1:9d:2b:a9:cc:32:6d:15:ec:d8:f0:d8:f8:8c: 87:df:9d:21:ef:71:17:e0:3c:94:58:d9:76:e8:c8:20:ad:c5: 8a:cd:f0:02:79:0d:23:fc:6c:b5:81:4d:b4:b2:bd:1d:92:45: 9f:83:5e:0f:ce:be:58:99:77:62:5b:a4:3f:62:ca:4b:bd:30: f8:03:58:79:a9:20:ee:c4:f8:7d:f4:b9:5b:1a:be:d7:fb:56: 5c:e5:b1:6e:c5:0d:42:98:9a:a4:98:62:f6:ef:60:92:7e:80: 8d:e9:d1:bc:80:90:cd:72:3e:94:40:26:17:d3:52:b2:4d:bd: d7:22:85:98:f4:e4:a0:c7:39:a8:5f:89:21:a9:27:c4:7b:2d: 62:f0:46:c0 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHtswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA1MzNaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEU1RDI2NDY1REFFMEFC NkUyODFENTNCMDAyQTNCMDVBRjI1RjYwRTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkW9k9ocmaYTkSJVk+7fXuwxUK/vbPB55m/ZKLK7HeaKE5X25L s6QG3qs+W1oeTAQxblEaNfwjcDJDBIB4AlLIDjbSlJf0B++xllvyHh/eMI1u6Qod kpwrP6vULXt96PCl1lJKBBwDyRb9CmHpnNzVwCbh6zmHLGARAVctpP0oM5IDtejH hpUMYp780M1P8lpvHRRx7sEa6EvuiT96qO4lvbaMp3rtKl5SozVGclq68XRt2shu G4/XWRvC3mvde1Zckm/xHUJBvTEuoiwhQbAZlUmXNOerYtvxON7l6QsY+G62EHXX 5XOa1BJjOJ+7LJMdLtN7Vcf2a9dMoyEjhAzxAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU5dJkZdrgq24oHVOwAqOwWvJfYOIwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3LzVkSmtaZHJncTI0b0hW T3dBcU93V3ZKZllPSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3SEwDQYJKoZIhvcNAQELBQADggEBADgh3UUpLuhVKkIGlZ62DobHk20ePiIk sjmCDCH1Gk/A+3k1WWdT7js5hKb+i4bj/mdPGYJKFm0T3AsJGM4+q+vpPk9IjJeR RnIgMRDD0sNTeQcOruY99a3KFbB0ONpdXQKO9DQGBz3M7zcV3xtiqQ7RnSupzDJt FezY8Nj4jIffnSHvcRfgPJRY2XboyCCtxYrN8AJ5DSP8bLWBTbSyvR2SRZ+DXg/O vliZd2JbpD9iyku9MPgDWHmpIO7E+H30uVsavtf7VlzlsW7FDUKYmqSYYvbvYJJ+ gI3p0byAkM1yPpRAJhfTUrJNvdcihZj05KDHOahfiSGpJ8R7LWLwRsA= -----END CERTIFICATE-----Generated at Mon Oct 20 13:30:49 2025 by rpki-client