$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/Bsy6VhI5ZIFVP1T57yS1MOgeJuY.roa File: Bsy6VhI5ZIFVP1T57yS1MOgeJuY.roa (raw, json) Hash identifier: CnFJAchKT1brH46eF5ERGOhrbFTAttqvZQ4WeVvho6g= Subject key identifier: 06:CC:BA:56:12:39:64:81:55:3F:54:F9:EF:24:B5:30:E8:1E:26:E6 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1EE9 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/Bsy6VhI5ZIFVP1T57yS1MOgeJuY.roa Signing time: Sat 13 Sep 2025 03:05:36 +0000 ROA not before: Sat 13 Sep 2025 03:05:36 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 24373 IP address blocks: 45.252.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 15:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7913 (0x1ee9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:05:36 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=06CCBA5612396481553F54F9EF24B530E81E26E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:52:57:cb:03:13:a4:0c:ff:4c:c1:ae:3a:e9: 5e:21:dd:9a:a9:8e:46:9b:bd:5d:8f:b7:f6:17:35: 5e:a4:36:55:69:9a:b8:8d:e7:65:9d:c2:41:fc:5f: 30:1b:bb:5e:c2:cc:ed:13:6e:9d:85:04:52:58:49: ca:0a:b4:fb:f5:89:e5:20:27:7c:fd:ff:f1:17:9d: 47:12:42:d3:32:92:e7:b3:27:d8:1f:16:57:b1:2b: 45:8b:ce:2a:08:8a:56:b1:17:14:63:e7:14:76:b8: fd:bd:1f:cd:70:62:5c:a7:69:b5:29:9b:52:65:c1: f8:21:6b:f1:b4:f1:1f:d1:39:f5:73:f9:88:d3:0c: 2f:e1:6a:c0:fc:9a:32:75:69:f3:1b:7e:85:7b:f0: 6b:a4:ab:ba:16:c3:0f:bb:08:8b:50:11:70:06:99: c5:05:9e:76:d5:38:bf:05:30:bc:10:ec:61:44:e4: 3d:cf:7c:b7:3a:79:5a:2f:47:6b:3c:ad:25:aa:57: 89:ab:4c:19:f2:93:75:0d:dd:18:52:58:cf:9f:93: 7d:9b:99:a1:99:df:30:1c:6f:44:2c:5d:bb:1c:11: 35:ae:6e:e4:56:d7:67:e6:7f:a9:a0:b9:2d:76:da: 71:e5:30:87:07:4a:0b:f6:f7:56:db:19:3c:e7:5e: 7a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:CC:BA:56:12:39:64:81:55:3F:54:F9:EF:24:B5:30:E8:1E:26:E6 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/Bsy6VhI5ZIFVP1T57yS1MOgeJuY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.36.0/22 Signature Algorithm: sha256WithRSAEncryption 84:b0:6b:6d:1d:ca:3c:7b:ed:d4:8b:be:83:43:31:3f:45:d5: 47:24:64:66:0b:db:67:9a:f3:84:75:17:00:41:a2:d2:28:26: 53:77:39:10:e3:51:b0:e1:86:23:ba:a3:98:57:ba:a4:89:ea: 0a:44:98:f7:7a:02:09:76:c7:44:2b:61:b2:3a:b7:56:d3:d7: df:f6:ef:47:9d:d2:cf:64:f2:eb:77:00:81:48:5c:5f:8f:46: 8a:a8:46:05:bf:28:e9:d6:16:6f:59:3c:82:09:66:77:6f:11: 0c:ef:e4:b6:0f:59:b8:6d:09:0e:5d:62:f0:a8:57:1c:11:b1: 00:a8:2f:87:11:e8:5f:d7:9b:78:dc:61:1d:ab:7d:93:d2:87: 6f:7c:4b:3b:ff:29:ce:97:f9:eb:e1:0c:f3:ff:4a:b8:44:88: 04:44:aa:23:b6:71:3c:a1:ef:13:24:7f:3e:14:29:1b:a5:2c: 02:21:61:48:99:ed:6d:07:d3:ee:21:ba:d9:93:0e:b3:9d:a1: 5f:b6:5a:cf:1c:a5:9c:ba:77:ef:ba:5a:95:59:c5:3b:f6:e0: 4d:06:23:93:38:be:8e:d9:1f:73:ce:29:da:ec:b5:f8:33:66: fe:e7:0a:8b:31:fc:e0:42:11:20:92:e4:76:f5:3c:56:3f:e5: 99:48:f4:3d -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHukwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA1MzZaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDA2Q0NCQTU2MTIzOTY0 ODE1NTNGNTRGOUVGMjRCNTMwRTgxRTI2RTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTUlfLAxOkDP9Mwa466V4h3ZqpjkabvV2Pt/YXNV6kNlVpmriN 52WdwkH8XzAbu17CzO0Tbp2FBFJYScoKtPv1ieUgJ3z9//EXnUcSQtMykuezJ9gf FlexK0WLzioIilaxFxRj5xR2uP29H81wYlynabUpm1Jlwfgha/G08R/ROfVz+YjT DC/hasD8mjJ1afMbfoV78Gukq7oWww+7CItQEXAGmcUFnnbVOL8FMLwQ7GFE5D3P fLc6eVovR2s8rSWqV4mrTBnyk3UN3RhSWM+fk32bmaGZ3zAcb0QsXbscETWubuRW 12fmf6mguS122nHlMIcHSgv291bbGTznXnqHAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUBsy6VhI5ZIFVP1T57yS1MOgeJuYwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L0JzeTZWaEk1WklGVlAx VDU3eVMxTU9nZUp1WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIt/CQwDQYJKoZIhvcNAQELBQADggEBAISwa20dyjx77dSLvoNDMT9F1UckZGYL 22ea84R1FwBBotIoJlN3ORDjUbDhhiO6o5hXuqSJ6gpEmPd6Agl2x0QrYbI6t1bT 19/270ed0s9k8ut3AIFIXF+PRoqoRgW/KOnWFm9ZPIIJZndvEQzv5LYPWbhtCQ5d YvCoVxwRsQCoL4cR6F/Xm3jcYR2rfZPSh298Szv/Kc6X+evhDPP/SrhEiAREqiO2 cTyh7xMkfz4UKRulLAIhYUiZ7W0H0+4hutmTDrOdoV+2Ws8cpZy6d++6WpVZxTv2 4E0GI5M4vo7ZH3POKdrstfgzZv7nCosx/OBCESCS5Hb1PFY/5ZlI9D0= -----END CERTIFICATE-----Generated at Mon Oct 20 14:31:13 2025 by rpki-client