$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/CSytGcHHPLIlCQ_lnpUXLnyq7ss.roa File: CSytGcHHPLIlCQ_lnpUXLnyq7ss.roa (raw, json) Hash identifier: BEQDUFMllAygosy2epmXPnrxqMgJBkK4KRQ1JB3F520= Subject key identifier: 09:2C:AD:19:C1:C7:3C:B2:25:09:0F:E5:9E:95:17:2E:7C:AA:EE:CB Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1E0B Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/CSytGcHHPLIlCQ_lnpUXLnyq7ss.roa Signing time: Sat 13 Sep 2025 03:04:49 +0000 ROA not before: Sat 13 Sep 2025 03:04:49 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 139259 IP address blocks: 103.221.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 18:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7691 (0x1e0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:04:49 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=092CAD19C1C73CB225090FE59E95172E7CAAEECB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b2:37:4c:24:6c:65:81:66:0f:20:c5:da:b1: 43:72:6a:48:4a:e4:42:e9:7f:af:1a:6b:fb:f3:f4: 1d:16:f9:ca:c8:c6:d5:2b:d1:6e:ed:42:c8:a2:cc: 35:d4:d3:4a:6f:57:a7:8b:9f:8b:8e:6e:6b:87:e1: 65:dd:a0:74:31:d4:c7:9b:98:a3:03:3a:9f:ed:0d: 66:54:6e:91:2a:79:d5:6d:ef:a2:71:e8:ee:69:41: d6:0c:b1:c4:d7:93:32:69:ea:d2:0d:26:2b:ae:e7: 8a:e6:2e:12:54:02:61:77:68:6d:9c:7e:4c:81:30: 7b:4b:5d:6f:69:92:75:bf:13:d7:41:5f:7d:22:a8: a4:4a:87:49:69:36:cc:ff:b7:e9:11:8b:49:e6:4a: 2f:22:60:e4:67:ca:9d:08:94:ab:dc:83:e9:35:ab: 70:1f:46:24:52:c1:77:0e:7a:bd:53:bd:b8:aa:40: ed:a2:d4:22:27:7d:b7:28:28:c5:d8:58:c8:6e:01: c2:64:67:4e:78:36:bb:a5:d9:ea:a5:69:6f:2b:97: 6a:7a:ad:c2:91:f6:d7:e3:10:e2:35:13:62:0f:9e: 5f:32:a8:8c:3e:e4:c0:c0:1f:e7:a7:23:ef:40:ad: 3b:ff:2b:70:38:74:7b:a0:06:81:89:1e:a6:44:d5: 1b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:2C:AD:19:C1:C7:3C:B2:25:09:0F:E5:9E:95:17:2E:7C:AA:EE:CB X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/CSytGcHHPLIlCQ_lnpUXLnyq7ss.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.38.0/24 Signature Algorithm: sha256WithRSAEncryption c4:d1:4b:ee:93:18:4c:00:2b:02:57:79:95:c7:7e:fb:84:92: 21:a7:8e:8e:57:d5:59:cf:5d:f3:73:dc:58:b4:b0:31:4b:96: 33:ef:48:3b:75:49:b3:eb:85:e9:ba:1c:6a:d7:ef:73:29:73: c2:e7:dc:3f:3d:7c:87:3b:ed:27:4a:24:d8:65:ef:a4:d1:1a: 5f:d4:cf:97:3b:b7:e4:a5:9d:53:9a:54:3c:d9:59:43:b0:92: 80:23:54:e0:ec:fc:d9:15:9c:fe:a6:c1:af:f3:95:5f:48:01: 13:77:3a:46:97:77:17:62:a2:78:80:27:7b:8f:ea:e6:5b:0e: 1d:e4:e3:41:00:52:6a:95:97:65:b3:6c:86:e9:71:f8:34:2f: 77:15:3a:bd:6f:4a:01:67:b6:37:48:b6:57:a5:88:98:92:a3: 34:f9:36:29:48:c1:37:3b:6c:b7:10:7c:e7:57:e4:f1:7d:b8: 75:4a:93:b9:52:a6:aa:e0:4c:91:48:c0:c3:59:02:d9:58:d7: bb:16:8b:26:d0:c1:a6:95:28:0a:ae:7e:6b:af:2f:52:56:08: 20:38:a5:12:8f:79:51:06:22:a3:27:09:4a:26:c4:e7:40:b0: d2:46:c5:01:89:c0:2d:a0:8c:08:ae:f0:d4:70:f7:0c:d0:20: 92:90:12:6d -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHgswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA0NDlaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDA5MkNBRDE5QzFDNzND QjIyNTA5MEZFNTlFOTUxNzJFN0NBQUVFQ0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBsjdMJGxlgWYPIMXasUNyakhK5ELpf68aa/vz9B0W+crIxtUr 0W7tQsiizDXU00pvV6eLn4uObmuH4WXdoHQx1MebmKMDOp/tDWZUbpEqedVt76Jx 6O5pQdYMscTXkzJp6tINJiuu54rmLhJUAmF3aG2cfkyBMHtLXW9pknW/E9dBX30i qKRKh0lpNsz/t+kRi0nmSi8iYORnyp0IlKvcg+k1q3AfRiRSwXcOer1TvbiqQO2i 1CInfbcoKMXYWMhuAcJkZ054Nrul2eqlaW8rl2p6rcKR9tfjEOI1E2IPnl8yqIw+ 5MDAH+enI+9ArTv/K3A4dHugBoGJHqZE1RuxAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUCSytGcHHPLIlCQ/lnpUXLnyq7sswHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L0NTeXRHY0hIUExJbENR X2xucFVYTG55cTdzcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3SYwDQYJKoZIhvcNAQELBQADggEBAMTRS+6TGEwAKwJXeZXHfvuEkiGnjo5X 1VnPXfNz3Fi0sDFLljPvSDt1SbPrhem6HGrX73Mpc8Ln3D89fIc77SdKJNhl76TR Gl/Uz5c7t+SlnVOaVDzZWUOwkoAjVODs/NkVnP6mwa/zlV9IARN3OkaXdxdioniA J3uP6uZbDh3k40EAUmqVl2WzbIbpcfg0L3cVOr1vSgFntjdItleliJiSozT5NilI wTc7bLcQfOdX5PF9uHVKk7lSpqrgTJFIwMNZAtlY17sWiybQwaaVKAqufmuvL1JW CCA4pRKPeVEGIqMnCUomxOdAsNJGxQGJwC2gjAiu8NRw9wzQIJKQEm0= -----END CERTIFICATE-----Generated at Mon Oct 20 17:58:38 2025 by rpki-client