$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/63nAAW-jniDJzJEM3RJnPGZcPq8.roa File: 63nAAW-jniDJzJEM3RJnPGZcPq8.roa (raw, json) Hash identifier: eJh1Q8ZYDfMEl6VeV/XugIgBNN5Z0MCeEu+NhjFus7w= Subject key identifier: EB:79:C0:01:6F:A3:9E:20:C9:CC:91:0C:DD:12:67:3C:66:5C:3E:AF Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1E1C Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/63nAAW-jniDJzJEM3RJnPGZcPq8.roa Signing time: Sat 13 Sep 2025 03:04:51 +0000 ROA not before: Sat 13 Sep 2025 03:04:51 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 50983 IP address blocks: 2403:1b80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 00:35:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7708 (0x1e1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:04:51 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=EB79C0016FA39E20C9CC910CDD12673C665C3EAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0f:53:5d:1b:72:3d:9b:8a:86:99:bc:6f:38: e9:23:96:c9:cc:d8:52:24:ed:c0:f1:71:e7:14:8f: 5a:34:07:78:c0:9f:2f:b3:ab:74:0b:6a:90:77:6c: e5:91:0b:d1:58:86:6d:3c:e8:0d:b8:cc:ae:da:8c: 36:e8:87:8b:10:94:9c:d8:97:7b:16:73:e7:d1:22: bd:ce:f8:d3:62:eb:e8:fc:6a:2a:eb:22:0f:55:55: 06:d3:7c:ba:66:54:74:95:0d:f5:99:ba:28:40:1c: fb:a4:2f:8a:54:b2:1c:f0:96:ee:1b:90:c8:18:b9: 96:56:f4:b5:77:40:ee:1e:a1:ac:63:f9:61:c0:bc: f3:5c:f1:74:e1:a5:f1:1e:5f:a9:5d:25:80:3d:34: 84:60:21:38:36:b0:80:56:77:dd:84:6d:93:9e:3b: 59:80:83:06:0b:92:4f:31:07:69:a4:47:f8:64:60: 58:e3:15:60:38:53:89:bc:61:d7:14:10:12:38:32: 02:0e:ec:31:4c:62:03:02:17:0e:2f:2a:08:f3:46: 1d:b9:6f:9b:ce:ef:78:d6:50:14:7b:32:92:84:01: bb:dc:29:d1:9a:97:39:47:f3:31:23:d0:a2:91:dc: c6:ab:29:09:09:de:ae:d8:bf:ad:df:8b:7d:e1:ba: 78:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:79:C0:01:6F:A3:9E:20:C9:CC:91:0C:DD:12:67:3C:66:5C:3E:AF X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/63nAAW-jniDJzJEM3RJnPGZcPq8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2403:1b80::/32 Signature Algorithm: sha256WithRSAEncryption 84:07:b1:d5:94:84:b9:9b:2a:f2:f6:56:4a:4b:ac:16:82:fa: 71:f0:e0:3d:87:6b:a2:57:66:16:23:71:35:57:a5:cd:49:3b: e9:f2:66:7f:f6:9d:cd:87:f5:f2:20:07:a6:b8:f4:cd:3c:ce: 96:28:cd:3d:ca:09:79:f4:86:4e:cf:4f:7b:9e:ce:b9:5b:52: 36:a2:d2:63:7d:a9:62:17:e7:30:21:b5:7b:db:a9:f6:14:0d: f4:52:82:3f:b9:ad:3c:79:65:78:6c:d8:80:f0:71:cc:2b:3f: 0e:c4:f5:77:64:d3:9b:a9:45:ba:5f:4f:e9:81:93:8f:65:d0: c6:78:8d:b7:4a:1e:d5:66:2d:bc:b0:40:72:f1:24:37:bf:ff: 99:46:2f:93:60:5a:fa:b0:87:e7:95:f0:ea:34:dc:ba:e3:81: 8d:a8:b7:9c:e3:07:f4:1e:26:82:c3:2c:b0:75:84:87:5e:d2: 21:b1:12:ce:36:6a:04:ae:c9:17:e4:df:5b:17:88:58:e0:d6: 69:4c:0b:76:87:e0:40:ce:b2:11:c1:f9:38:e1:fd:6b:f8:d6: 48:5a:86:f5:e3:73:0a:c7:27:c7:ee:31:3b:db:1e:87:1a:a7: 93:3f:ef:c3:d7:7f:f6:66:8f:ab:f0:3e:13:17:4c:27:8f:30: 60:1a:f6:5f -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICHhwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA0NTFaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEVCNzlDMDAxNkZBMzlF MjBDOUNDOTEwQ0REMTI2NzNDNjY1QzNFQUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1D1NdG3I9m4qGmbxvOOkjlsnM2FIk7cDxcecUj1o0B3jAny+z q3QLapB3bOWRC9FYhm086A24zK7ajDboh4sQlJzYl3sWc+fRIr3O+NNi6+j8airr Ig9VVQbTfLpmVHSVDfWZuihAHPukL4pUshzwlu4bkMgYuZZW9LV3QO4eoaxj+WHA vPNc8XThpfEeX6ldJYA9NIRgITg2sIBWd92EbZOeO1mAgwYLkk8xB2mkR/hkYFjj FWA4U4m8YdcUEBI4MgIO7DFMYgMCFw4vKgjzRh25b5vO73jWUBR7MpKEAbvcKdGa lzlH8zEj0KKR3MarKQkJ3q7Yv63fi33hungnAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQU63nAAW+jniDJzJEM3RJnPGZcPq8wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3LzYzbkFBVy1qbmlESnpK RU0zUkpuUEdaY1BxOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcD BQAkAxuAMA0GCSqGSIb3DQEBCwUAA4IBAQCEB7HVlIS5myry9lZKS6wWgvpx8OA9 h2uiV2YWI3E1V6XNSTvp8mZ/9p3Nh/XyIAemuPTNPM6WKM09ygl59IZOz097ns65 W1I2otJjfaliF+cwIbV726n2FA30UoI/ua08eWV4bNiA8HHMKz8OxPV3ZNObqUW6 X0/pgZOPZdDGeI23Sh7VZi28sEBy8SQ3v/+ZRi+TYFr6sIfnlfDqNNy644GNqLec 4wf0HiaCwyywdYSHXtIhsRLONmoErskX5N9bF4hY4NZpTAt2h+BAzrIRwfk44f1r +NZIWob143MKxyfH7jE72x6HGqeTP+/D13/2Zo+r8D4TF0wnjzBgGvZf -----END CERTIFICATE-----Generated at Mon Oct 20 23:27:18 2025 by rpki-client