$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/9cKvE5nEYyKWVdCxq3FBjiZdPfg.roa File: 9cKvE5nEYyKWVdCxq3FBjiZdPfg.roa (raw, json) Hash identifier: Fw1m00vmNqWSaZAI1HcL5udeHfbeAmnxZmM4dqBNUXA= Subject key identifier: F5:C2:AF:13:99:C4:63:22:96:55:D0:B1:AB:71:41:8E:26:5D:3D:F8 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1E60 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/9cKvE5nEYyKWVdCxq3FBjiZdPfg.roa Signing time: Sat 13 Sep 2025 03:05:05 +0000 ROA not before: Sat 13 Sep 2025 03:05:05 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 13444 IP address blocks: 103.221.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 13:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7776 (0x1e60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:05:05 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=F5C2AF1399C463229655D0B1AB71418E265D3DF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3f:af:ee:64:75:b8:49:13:89:4e:e5:83:78: da:02:a2:6d:38:1a:1e:a2:e4:da:9d:a5:62:39:57: a3:52:c3:7b:13:98:83:04:9c:17:6e:27:24:46:3e: da:4c:41:cc:49:58:16:d5:bb:ee:b3:3e:0e:f3:85: 7c:94:50:f5:e2:69:3e:ab:22:72:8f:0d:c9:00:a5: ff:7a:47:4a:2b:fe:89:f1:fe:46:86:50:36:43:aa: 46:63:aa:3c:54:e9:ee:a3:32:9d:50:4d:27:65:8c: a6:a0:40:6f:12:ee:40:e0:87:fe:6e:b1:22:75:7a: e4:fa:fb:7c:05:99:2d:a7:93:0e:58:83:1e:20:07: 1c:42:0f:72:fe:dd:aa:6a:30:74:02:bf:e4:ce:01: 1c:23:50:4b:9c:7b:06:42:d4:f7:fc:e5:e4:8c:97: e2:8b:21:6c:7c:54:66:19:8c:a1:fc:4a:da:dd:e5: 11:1a:4c:39:58:f6:9d:27:b4:73:02:54:de:94:23: 9a:24:1f:b0:d6:73:13:5a:3d:9f:36:3a:2c:4d:9f: 17:6c:c8:3e:94:eb:2a:c4:ee:3f:e2:af:77:3a:83: a6:6c:9e:af:a2:ae:ea:c2:5c:ec:fc:7e:c8:36:e9: 18:79:f7:fd:e8:10:62:1e:f0:83:07:f8:f7:f1:5f: 7a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:C2:AF:13:99:C4:63:22:96:55:D0:B1:AB:71:41:8E:26:5D:3D:F8 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/9cKvE5nEYyKWVdCxq3FBjiZdPfg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.9.0/24 Signature Algorithm: sha256WithRSAEncryption 05:26:19:4a:7e:85:e7:5a:a5:8c:45:a1:9a:62:16:9f:92:25: a6:c4:e1:4e:9a:13:a0:44:31:06:3c:4e:ab:14:7a:27:6e:b5: 30:65:2b:b3:63:f6:d5:40:84:8a:e5:1a:b5:c0:f4:43:9c:a3: aa:a3:ec:f9:62:29:6e:a7:59:98:e9:89:d4:99:66:79:88:9b: 01:cd:c1:3a:63:da:da:d8:92:03:c2:09:a2:25:fa:33:c3:7c: 4d:0e:c6:20:89:5a:93:06:8d:04:46:a2:58:c0:af:12:ac:7f: 4f:30:08:bf:20:e7:65:fb:9a:25:8f:cd:05:d4:5e:6c:a2:3a: 15:f3:cd:99:ce:8c:67:76:0f:5c:5f:cf:eb:af:22:c8:79:6f: 8a:2b:d0:38:9b:b0:73:fa:4c:56:1a:f9:6e:5c:ac:b3:df:db: 94:99:46:63:92:df:92:af:69:35:6e:fe:2e:74:8c:ae:32:a6: 30:3a:58:d4:17:33:da:e1:d1:c1:ef:52:2c:4c:16:60:5b:42: 0d:d5:c0:5e:db:5f:cd:f4:d6:e6:9b:d2:5d:9e:7e:35:fa:45: 33:84:5d:15:2d:3b:3c:ef:d3:28:2c:5c:e3:04:d4:35:f8:f5: de:6c:97:f6:07:0f:d5:35:15:1f:ea:42:35:8d:91:b1:1c:43: 70:e0:9a:59 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHmAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA1MDVaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEY1QzJBRjEzOTlDNDYz MjI5NjU1RDBCMUFCNzE0MThFMjY1RDNERjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDP6/uZHW4SROJTuWDeNoCom04Gh6i5NqdpWI5V6NSw3sTmIME nBduJyRGPtpMQcxJWBbVu+6zPg7zhXyUUPXiaT6rInKPDckApf96R0or/onx/kaG UDZDqkZjqjxU6e6jMp1QTSdljKagQG8S7kDgh/5usSJ1euT6+3wFmS2nkw5Ygx4g BxxCD3L+3apqMHQCv+TOARwjUEucewZC1Pf85eSMl+KLIWx8VGYZjKH8Strd5REa TDlY9p0ntHMCVN6UI5okH7DWcxNaPZ82OixNnxdsyD6U6yrE7j/ir3c6g6Zsnq+i rurCXOz8fsg26Rh59/3oEGIe8IMH+PfxX3qrAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU9cKvE5nEYyKWVdCxq3FBjiZdPfgwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3LzljS3ZFNW5FWXlLV1Zk Q3hxM0ZCamlaZFBmZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3QkwDQYJKoZIhvcNAQELBQADggEBAAUmGUp+hedapYxFoZpiFp+SJabE4U6a E6BEMQY8TqsUeidutTBlK7Nj9tVAhIrlGrXA9EOco6qj7PliKW6nWZjpidSZZnmI mwHNwTpj2trYkgPCCaIl+jPDfE0OxiCJWpMGjQRGoljArxKsf08wCL8g52X7miWP zQXUXmyiOhXzzZnOjGd2D1xfz+uvIsh5b4or0DibsHP6TFYa+W5crLPf25SZRmOS 35KvaTVu/i50jK4ypjA6WNQXM9rh0cHvUixMFmBbQg3VwF7bX8301uab0l2efjX6 RTOEXRUtOzzv0ygsXOME1DX49d5sl/YHD9U1FR/qQjWNkbEcQ3Dgmlk= -----END CERTIFICATE-----Generated at Mon Oct 20 13:30:54 2025 by rpki-client