$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/68naQ8ztJJ6tzEBWKjPktItDIq4.roa File: 68naQ8ztJJ6tzEBWKjPktItDIq4.roa (raw, json) Hash identifier: t1jMY5Fvg15RPfo99g28beCL1Q3b7/6t10GzvB/BQYs= Subject key identifier: EB:C9:DA:43:CC:ED:24:9E:AD:CC:40:56:2A:33:E4:B4:8B:43:22:AE Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1F25 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/68naQ8ztJJ6tzEBWKjPktItDIq4.roa Signing time: Tue 16 Sep 2025 05:50:56 +0000 ROA not before: Tue 16 Sep 2025 05:50:56 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 25743 IP address blocks: 103.221.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 13:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7973 (0x1f25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 16 05:50:56 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=EBC9DA43CCED249EADCC40562A33E4B48B4322AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:59:9f:23:bf:b2:ac:6b:e5:e1:25:d9:98:c1: 6f:8e:12:3d:e5:3f:22:a9:69:0e:7f:98:43:6b:98: f5:9c:43:c2:1d:db:85:ec:14:fd:ed:31:f5:14:78: 87:91:2a:27:b0:1e:8e:db:7e:d4:9c:c3:50:a7:09: 26:e0:83:ce:90:ba:eb:87:07:cb:60:38:a6:a2:64: 5b:10:d2:45:f0:7a:00:9e:71:39:23:e2:16:b7:bf: 34:d1:ec:ff:1c:85:cb:30:9b:aa:16:21:94:ab:54: ab:44:4a:8c:c1:26:34:a0:d6:9b:9a:cd:a1:c7:2b: 82:de:61:af:8f:ea:70:93:a1:94:f3:53:ae:af:9e: 1a:b5:ec:67:ec:88:3f:08:80:2f:7f:42:ac:e3:c5: fb:cf:3d:71:9f:04:e4:e7:fd:bd:f9:14:84:d4:3f: 06:81:76:00:14:9b:8f:48:c9:63:df:7a:f0:4c:53: 80:c7:47:a7:d4:5a:ad:10:7c:81:77:22:26:27:49: f9:f2:55:36:4c:f6:12:bf:f5:16:0c:7d:74:b0:41: a6:07:5e:3a:64:d1:ad:17:15:ea:b5:34:4c:01:48: 37:37:be:da:57:c8:f1:70:97:8a:6b:0b:5e:82:f8: cc:e1:b1:2f:2e:84:12:d9:4f:68:f3:cd:6b:49:23: e7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:C9:DA:43:CC:ED:24:9E:AD:CC:40:56:2A:33:E4:B4:8B:43:22:AE X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/68naQ8ztJJ6tzEBWKjPktItDIq4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.0.0/22 Signature Algorithm: sha256WithRSAEncryption 7d:2a:54:b1:46:fa:9b:3f:4b:c9:af:23:6f:4f:be:d4:f4:c6: 0d:65:9c:00:86:08:9e:b8:9a:f1:c8:1b:e3:b2:0c:4a:78:60: 69:97:fc:32:29:59:a9:2d:80:eb:11:f1:e8:3a:b5:32:19:da: 7e:6f:e9:53:1b:33:8e:cb:5c:d2:53:a1:ea:7c:c7:f5:0e:f1: 72:60:4a:69:eb:e5:f7:ec:25:21:90:f1:4d:dd:0a:ec:68:84: 50:3d:fb:e9:e7:14:64:aa:bf:14:0f:c6:ba:1f:56:73:7e:e5: b7:3a:ec:fa:e9:2d:13:0d:10:8d:c3:46:18:e1:de:2b:2a:8d: 72:5f:42:88:91:66:ce:9f:b7:38:19:4b:d1:5e:2e:05:de:cf: 03:95:a0:a7:8d:a3:4a:ed:3b:f3:40:e7:ab:c1:43:f1:47:88: eb:f1:cd:ff:6b:a5:8f:55:2d:7a:b6:98:63:f0:c9:6b:60:21: 79:5c:b0:5d:ef:c3:69:a1:2a:cf:8f:99:13:0b:c3:cc:4d:ec: 3d:fe:9c:e6:6a:11:de:e4:f4:67:be:f5:a1:62:4c:04:0b:3b: 10:d4:84:ff:4d:ff:25:f8:1e:98:70:df:d5:2d:ea:48:22:8e: 7a:b5:00:43:ae:db:9c:ce:4e:0a:df:cb:4d:cf:9c:8a:60:8e: c9:1e:ce:e9 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHyUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTYw NTUwNTZaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEVCQzlEQTQzQ0NFRDI0 OUVBRENDNDA1NjJBMzNFNEI0OEI0MzIyQUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDrWZ8jv7Ksa+XhJdmYwW+OEj3lPyKpaQ5/mENrmPWcQ8Id24Xs FP3tMfUUeIeRKiewHo7bftScw1CnCSbgg86QuuuHB8tgOKaiZFsQ0kXwegCecTkj 4ha3vzTR7P8chcswm6oWIZSrVKtESozBJjSg1puazaHHK4LeYa+P6nCToZTzU66v nhq17GfsiD8IgC9/QqzjxfvPPXGfBOTn/b35FITUPwaBdgAUm49IyWPfevBMU4DH R6fUWq0QfIF3IiYnSfnyVTZM9hK/9RYMfXSwQaYHXjpk0a0XFeq1NEwBSDc3vtpX yPFwl4prC16C+MzhsS8uhBLZT2jzzWtJI+f1AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU68naQ8ztJJ6tzEBWKjPktItDIq4wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3LzY4bmFROHp0Sko2dHpF QldLalBrdEl0RElxNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn3QAwDQYJKoZIhvcNAQELBQADggEBAH0qVLFG+ps/S8mvI29PvtT0xg1lnACG CJ64mvHIG+OyDEp4YGmX/DIpWaktgOsR8eg6tTIZ2n5v6VMbM47LXNJToep8x/UO 8XJgSmnr5ffsJSGQ8U3dCuxohFA9++nnFGSqvxQPxrofVnN+5bc67PrpLRMNEI3D Rhjh3isqjXJfQoiRZs6ftzgZS9FeLgXezwOVoKeNo0rtO/NA56vBQ/FHiOvxzf9r pY9VLXq2mGPwyWtgIXlcsF3vw2mhKs+PmRMLw8xN7D3+nOZqEd7k9Ge+9aFiTAQL OxDUhP9N/yX4Hphw39Ut6kgijnq1AEOu25zOTgrfy03PnIpgjskezuk= -----END CERTIFICATE-----Generated at Mon Oct 20 13:30:52 2025 by rpki-client