$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/Ds8m9rb8Zufj-EdEkOOTUdDvp5s.roa File: Ds8m9rb8Zufj-EdEkOOTUdDvp5s.roa (raw, json) Hash identifier: +z1MU6qmr+g7n01FdZD+IZvbkMuKgHwKyXR0NVpvaXw= Subject key identifier: 0E:CF:26:F6:B6:FC:66:E7:E3:F8:47:44:90:E3:93:51:D0:EF:A7:9B Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1F24 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/Ds8m9rb8Zufj-EdEkOOTUdDvp5s.roa Signing time: Tue 16 Sep 2025 05:50:56 +0000 ROA not before: Tue 16 Sep 2025 05:50:56 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 25743 IP address blocks: 45.252.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 00:35:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7972 (0x1f24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 16 05:50:56 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=0ECF26F6B6FC66E7E3F8474490E39351D0EFA79B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:99:69:ab:80:a6:9d:2c:fe:78:9c:03:6f:97: 1d:4c:6f:61:63:ce:c0:27:dd:b5:48:15:8f:00:72: 3f:ac:76:34:94:56:28:96:c1:1b:e7:10:fe:62:92: 91:ee:cb:5a:20:b0:7a:e0:e8:8a:0c:77:be:b1:5b: cf:84:24:67:b5:a8:2e:02:81:7a:81:a3:73:8e:5b: 26:3c:c5:47:01:36:54:66:c2:c5:80:8e:02:99:89: 43:6a:77:91:62:46:7e:77:3e:f5:76:25:ef:20:76: c2:a6:72:b4:d0:12:c7:ff:df:c6:12:84:cd:92:35: 23:5d:47:6a:60:5b:d2:a9:b7:8d:8e:06:88:d1:9f: a9:a2:65:84:d3:88:b0:52:33:fd:2d:1c:25:c6:c5: a5:81:df:bd:16:e8:f1:ce:9b:07:3f:e7:17:8a:64: 36:f9:46:0d:5d:ec:75:2d:8f:ad:8d:00:f6:0a:84: 94:52:85:e4:20:d4:66:a2:62:8d:35:fe:db:29:ab: 86:3c:6f:d4:47:8c:1e:6b:02:9b:d6:10:fa:eb:84: fa:79:ae:de:3f:a5:b6:aa:1c:78:a8:e5:98:1d:43: ed:53:db:82:da:79:d9:c3:f7:8f:38:76:d4:58:f2: 47:a2:55:d5:3a:20:6e:ed:fa:ed:84:3b:15:48:3f: bf:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:CF:26:F6:B6:FC:66:E7:E3:F8:47:44:90:E3:93:51:D0:EF:A7:9B X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/Ds8m9rb8Zufj-EdEkOOTUdDvp5s.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.102.0/24 Signature Algorithm: sha256WithRSAEncryption 88:44:3d:54:bd:62:91:4c:2d:a6:e4:ae:c3:12:17:e0:40:f1: 43:81:aa:3d:2a:45:e6:40:ad:de:d7:8a:0a:22:8d:a2:9e:e6: 14:bb:b3:3a:d4:5c:6f:0e:83:92:2c:0a:d5:55:fa:6c:c1:e2: 2d:bc:fa:3c:72:4b:a9:0e:3f:8d:fc:49:3a:24:56:37:d6:52: d5:7c:f1:49:42:68:fc:7e:3f:2a:5a:8f:b3:c9:98:97:14:a1: d5:46:07:af:3b:f9:a7:48:68:e8:cb:5c:0a:7c:aa:29:48:27: ab:c3:3b:1d:97:b1:19:1a:cf:e3:49:55:5a:4a:1b:a4:8b:0f: a0:9f:bc:8a:6e:79:42:18:c2:d5:b0:80:b9:44:5f:90:eb:23: 4e:10:73:b5:92:25:52:3d:05:61:11:9f:bc:8d:d8:b8:d2:20: c4:e8:4e:3a:f1:02:6b:59:8a:c1:84:05:78:4a:65:14:11:2f: 0d:09:1c:2d:d0:58:19:70:30:81:8c:ae:5c:37:e0:88:9b:a7: 1d:ef:fb:8c:6b:60:16:ee:e6:e8:0a:b2:02:4c:87:ff:5d:75: e7:ff:6b:fb:8c:c0:6f:62:8c:53:4e:e1:07:09:d9:8e:ed:93: 05:a6:79:d3:73:2c:fa:b6:8f:71:de:e1:f4:be:22:d4:4d:af: 2b:08:98:3d -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHyQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTYw NTUwNTZaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDBFQ0YyNkY2QjZGQzY2 RTdFM0Y4NDc0NDkwRTM5MzUxRDBFRkE3OUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6mWmrgKadLP54nANvlx1Mb2FjzsAn3bVIFY8Acj+sdjSUViiW wRvnEP5ikpHuy1ogsHrg6IoMd76xW8+EJGe1qC4CgXqBo3OOWyY8xUcBNlRmwsWA jgKZiUNqd5FiRn53PvV2Je8gdsKmcrTQEsf/38YShM2SNSNdR2pgW9Kpt42OBojR n6miZYTTiLBSM/0tHCXGxaWB370W6PHOmwc/5xeKZDb5Rg1d7HUtj62NAPYKhJRS heQg1GaiYo01/tspq4Y8b9RHjB5rApvWEPrrhPp5rt4/pbaqHHio5ZgdQ+1T24La ednD9484dtRY8keiVdU6IG7t+u2EOxVIP7+rAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUDs8m9rb8Zufj+EdEkOOTUdDvp5swHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L0RzOG05cmI4WnVmai1F ZEVrT09UVWREdnA1cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAt/GYwDQYJKoZIhvcNAQELBQADggEBAIhEPVS9YpFMLabkrsMSF+BA8UOBqj0q ReZArd7XigoijaKe5hS7szrUXG8Og5IsCtVV+mzB4i28+jxyS6kOP438STokVjfW UtV88UlCaPx+Pypaj7PJmJcUodVGB687+adIaOjLXAp8qilIJ6vDOx2XsRkaz+NJ VVpKG6SLD6CfvIpueUIYwtWwgLlEX5DrI04Qc7WSJVI9BWERn7yN2LjSIMToTjrx AmtZisGEBXhKZRQRLw0JHC3QWBlwMIGMrlw34Iibpx3v+4xrYBbu5ugKsgJMh/9d def/a/uMwG9ijFNO4QcJ2Y7tkwWmedNzLPq2j3He4fS+ItRNrysImD0= -----END CERTIFICATE-----Generated at Mon Oct 20 23:27:22 2025 by rpki-client