$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/6XFlgOazjVPix0kUAkCah-IUFSg.roa File: 6XFlgOazjVPix0kUAkCah-IUFSg.roa (raw, json) Hash identifier: xaPkfL+mX5O4fASXM3QbHrzLilNrgoVdvzbPL7rIBAs= Subject key identifier: E9:71:65:80:E6:B3:8D:53:E2:C7:49:14:02:40:9A:87:E2:14:15:28 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1EC1 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/6XFlgOazjVPix0kUAkCah-IUFSg.roa Signing time: Sat 13 Sep 2025 03:05:27 +0000 ROA not before: Sat 13 Sep 2025 03:05:27 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 13444 IP address blocks: 45.252.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 13:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7873 (0x1ec1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:05:27 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=E9716580E6B38D53E2C7491402409A87E2141528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c1:88:b1:08:ca:95:e7:c8:08:a1:37:50:aa: 21:9c:98:db:67:02:c0:93:01:7a:ab:2b:ac:53:e3: 8b:8c:3d:36:dc:3c:4b:1a:e7:b2:09:3b:f7:f1:7d: 07:d4:18:75:f0:62:c6:ca:7c:f6:11:70:56:9a:eb: 6d:9c:d0:10:41:c7:7a:75:2f:5f:20:dd:69:cd:e9: a4:a0:2f:9a:e0:ec:85:18:a3:eb:48:48:1c:2e:e6: de:56:49:30:99:e1:50:b0:83:0d:31:1f:fe:3a:de: 73:bb:98:1a:fa:73:e5:26:d3:4b:93:1c:df:09:c0: ab:cf:14:d5:21:91:3a:b1:ae:09:82:90:33:7e:a0: ab:74:f7:68:fd:9b:1c:8a:1e:d0:7c:85:1f:84:df: 2c:06:60:6a:37:7d:2e:33:bd:a7:f4:59:c8:10:b3: 52:4b:85:ef:cb:3a:44:33:a8:52:c2:72:0f:83:d7: 15:38:32:44:a1:a0:d9:94:d3:fc:99:16:87:be:a0: 9b:e6:a9:12:e5:c4:cc:30:d9:9c:ee:8d:ad:bb:96: d9:68:a5:f6:3b:44:78:5e:96:1a:72:64:77:dd:75: 7b:37:c0:95:55:be:41:01:fb:33:70:65:24:e6:bf: 54:29:05:ad:ca:6d:31:b3:74:48:a1:77:b1:93:24: 6e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:71:65:80:E6:B3:8D:53:E2:C7:49:14:02:40:9A:87:E2:14:15:28 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/6XFlgOazjVPix0kUAkCah-IUFSg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.103.0/24 Signature Algorithm: sha256WithRSAEncryption 65:64:1a:5d:b3:da:43:97:0a:6d:fd:cf:2d:c7:2c:a3:62:27: ac:e9:e1:5a:b2:78:98:7c:19:dd:f8:16:3c:e4:f9:6d:74:60: e0:2a:2f:62:35:38:89:2e:14:4d:f5:74:4d:f3:cb:07:7e:fc: ac:9d:47:4b:46:1a:8d:52:5a:7a:09:fc:a0:38:21:d3:18:67: 73:58:f5:7a:99:49:8e:91:5f:fb:0f:96:e9:72:39:34:77:ea: 90:b7:d0:95:15:0d:7d:7b:07:8f:d1:13:c6:d9:fa:0d:41:74: ce:f2:8a:bd:37:4c:0c:ff:31:97:f7:a0:09:45:14:9f:d2:e6: fe:04:82:72:a9:c5:36:12:74:51:81:dc:b2:34:1f:b9:50:54: f1:25:e8:33:1a:50:71:ea:33:93:8e:f6:f5:4f:30:25:78:c5: 59:c9:86:bc:b7:10:86:d1:22:68:0e:53:4b:96:48:ac:22:63: b9:42:1b:c0:46:50:b9:f2:39:1b:d6:e1:b0:0a:dd:80:37:d3: 7e:da:c1:70:4a:62:ec:5a:cc:6e:1e:5d:02:75:6d:99:9c:a0: 87:4a:43:c4:39:f7:76:e1:e7:f5:6e:27:cb:e0:09:ff:4e:ad: 17:a3:ec:5b:25:a9:3f:f5:eb:6a:83:2d:51:33:50:fe:56:ab: 22:52:10:af -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHsEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA1MjdaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEU5NzE2NTgwRTZCMzhE NTNFMkM3NDkxNDAyNDA5QTg3RTIxNDE1MjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1wYixCMqV58gIoTdQqiGcmNtnAsCTAXqrK6xT44uMPTbcPEsa 57IJO/fxfQfUGHXwYsbKfPYRcFaa622c0BBBx3p1L18g3WnN6aSgL5rg7IUYo+tI SBwu5t5WSTCZ4VCwgw0xH/463nO7mBr6c+Um00uTHN8JwKvPFNUhkTqxrgmCkDN+ oKt092j9mxyKHtB8hR+E3ywGYGo3fS4zvaf0WcgQs1JLhe/LOkQzqFLCcg+D1xU4 MkShoNmU0/yZFoe+oJvmqRLlxMww2Zzuja27ltlopfY7RHhelhpyZHfddXs3wJVV vkEB+zNwZSTmv1QpBa3KbTGzdEihd7GTJG6JAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU6XFlgOazjVPix0kUAkCah+IUFSgwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3LzZYRmxnT2F6alZQaXgw a1VBa0NhaC1JVUZTZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAt/GcwDQYJKoZIhvcNAQELBQADggEBAGVkGl2z2kOXCm39zy3HLKNiJ6zp4Vqy eJh8Gd34Fjzk+W10YOAqL2I1OIkuFE31dE3zywd+/KydR0tGGo1SWnoJ/KA4IdMY Z3NY9XqZSY6RX/sPlulyOTR36pC30JUVDX17B4/RE8bZ+g1BdM7yir03TAz/MZf3 oAlFFJ/S5v4EgnKpxTYSdFGB3LI0H7lQVPEl6DMaUHHqM5OO9vVPMCV4xVnJhry3 EIbRImgOU0uWSKwiY7lCG8BGULnyORvW4bAK3YA3037awXBKYuxazG4eXQJ1bZmc oIdKQ8Q593bh5/VuJ8vgCf9OrRej7FslqT/162qDLVEzUP5WqyJSEK8= -----END CERTIFICATE-----Generated at Mon Oct 20 13:30:52 2025 by rpki-client