$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/EjKCBT-2DRhU0RHZ9jV_-0sHCWQ.roa File: EjKCBT-2DRhU0RHZ9jV_-0sHCWQ.roa (raw, json) Hash identifier: +t57Z7ArZGVO2A/6YMDyR4c3RpqMEYuaS0Bb/TDXgsI= Subject key identifier: 12:32:82:05:3F:B6:0D:18:54:D1:11:D9:F6:35:7F:FB:4B:07:09:64 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1E27 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/EjKCBT-2DRhU0RHZ9jV_-0sHCWQ.roa Signing time: Sat 13 Sep 2025 03:04:53 +0000 ROA not before: Sat 13 Sep 2025 03:04:53 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 59083 IP address blocks: 103.10.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 13:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7719 (0x1e27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:04:53 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=123282053FB60D1854D111D9F6357FFB4B070964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:5e:7b:85:97:12:aa:ef:df:a3:8a:84:78:4a: b3:09:96:61:18:6b:b2:1f:3c:0e:8a:16:75:c9:cc: f8:df:a6:a4:75:8e:f4:2b:fe:a2:c4:52:e6:6d:23: b8:5d:83:e0:f1:36:18:af:1d:00:ce:b1:71:f4:95: ca:81:51:b2:de:6e:46:26:42:b8:7f:6a:ca:40:93: 37:f2:5c:69:2c:bf:b5:9b:9a:0f:a4:d3:91:10:29: 3f:8e:af:39:1e:03:13:29:df:f9:b9:15:3b:59:5f: bc:a2:a7:07:50:48:61:53:06:c7:74:d3:09:de:ff: d6:d3:07:8f:80:41:9c:dd:03:ce:0a:ba:4d:94:ec: 5d:81:0e:ff:9d:fb:d4:31:aa:ae:b7:a8:ba:d8:35: 0a:2e:48:0f:e0:7a:5d:cb:ad:28:d5:e5:6c:03:e6: 28:a5:17:40:b5:c5:bb:93:80:5e:c8:30:7d:fc:f5: d5:40:2a:b7:f1:c0:a7:d1:af:e9:29:e3:06:13:ff: 9c:66:8d:e4:78:8f:d8:c8:85:ff:d5:f9:50:68:c1: b1:5f:0e:c3:16:2b:60:2d:50:dc:2b:25:ca:7e:96: 10:48:03:ce:37:fc:d8:2a:3a:4d:b5:45:3b:50:26: 06:5b:e7:c4:9f:fd:95:95:f2:86:79:38:2f:19:af: 54:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:32:82:05:3F:B6:0D:18:54:D1:11:D9:F6:35:7F:FB:4B:07:09:64 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/EjKCBT-2DRhU0RHZ9jV_-0sHCWQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.10.1.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:d4:60:e3:3e:78:77:db:1d:a5:c6:7a:ce:45:d8:b1:19:60: 86:55:51:71:b3:0a:a7:15:8b:b6:d9:f8:4a:ef:3c:b5:d3:37: b1:05:83:2f:c3:88:27:64:5c:87:b2:4d:ef:6f:31:59:b1:45: 46:44:16:5d:18:a5:42:a5:00:5b:5c:69:b1:c4:9f:92:29:e0: 83:e7:63:c9:b7:08:ad:fb:fa:5d:52:2f:23:cb:1b:10:47:db: f0:38:a8:95:75:a9:7b:60:21:07:96:54:52:60:f1:40:a4:58: af:60:7c:18:ba:7b:dc:10:8a:a9:e3:de:92:24:23:37:61:d4: 5e:72:2a:cd:82:98:ec:1b:6b:07:6b:94:e8:82:cf:46:d3:2b: 10:b4:da:bb:67:94:cb:6b:46:78:08:24:aa:65:37:4a:0d:c5: 17:5d:b5:22:32:59:c1:8b:6c:3a:45:57:36:26:bd:c6:ec:8d: 60:85:b3:05:fa:c1:6d:b4:16:3f:43:c3:31:af:96:6d:cb:9d: e6:c2:d8:a7:7b:06:d1:4e:8a:d7:ed:6c:66:93:65:27:cb:d2: a1:cb:04:e0:7b:8b:b3:9d:64:70:ad:69:3a:74:3d:a4:92:83: 76:92:5c:4c:e2:ae:d8:0b:76:77:4a:f0:4b:0c:1f:4e:15:99: 79:b0:ad:84 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHicwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA0NTNaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDEyMzI4MjA1M0ZCNjBE MTg1NEQxMTFEOUY2MzU3RkZCNEIwNzA5NjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcXnuFlxKq79+jioR4SrMJlmEYa7IfPA6KFnXJzPjfpqR1jvQr /qLEUuZtI7hdg+DxNhivHQDOsXH0lcqBUbLebkYmQrh/aspAkzfyXGksv7Wbmg+k 05EQKT+OrzkeAxMp3/m5FTtZX7yipwdQSGFTBsd00wne/9bTB4+AQZzdA84Kuk2U 7F2BDv+d+9Qxqq63qLrYNQouSA/gel3LrSjV5WwD5iilF0C1xbuTgF7IMH389dVA KrfxwKfRr+kp4wYT/5xmjeR4j9jIhf/V+VBowbFfDsMWK2AtUNwrJcp+lhBIA843 /NgqOk21RTtQJgZb58Sf/ZWV8oZ5OC8Zr1S7AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUEjKCBT+2DRhU0RHZ9jV/+0sHCWQwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L0VqS0NCVC0yRFJoVTBS SFo5alZfLTBzSENXUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnCgEwDQYJKoZIhvcNAQELBQADggEBAG3UYOM+eHfbHaXGes5F2LEZYIZVUXGz CqcVi7bZ+ErvPLXTN7EFgy/DiCdkXIeyTe9vMVmxRUZEFl0YpUKlAFtcabHEn5Ip 4IPnY8m3CK37+l1SLyPLGxBH2/A4qJV1qXtgIQeWVFJg8UCkWK9gfBi6e9wQiqnj 3pIkIzdh1F5yKs2CmOwbawdrlOiCz0bTKxC02rtnlMtrRngIJKplN0oNxRddtSIy WcGLbDpFVzYmvcbsjWCFswX6wW20Fj9DwzGvlm3LnebC2Kd7BtFOitftbGaTZSfL 0qHLBOB7i7OdZHCtaTp0PaSSg3aSXEzirtgLdndK8EsMH04VmXmwrYQ= -----END CERTIFICATE-----Generated at Mon Oct 20 13:30:59 2025 by rpki-client