$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/IREJAp-5K5PBpv74obUbVJc3hr8.roa File: IREJAp-5K5PBpv74obUbVJc3hr8.roa (raw, json) Hash identifier: +toeYJ6qr1oLnKs6p1rAlj3hakSUQHHUosqhR+Zg584= Subject key identifier: 21:11:09:02:9F:B9:2B:93:C1:A6:FE:F8:A1:B5:1B:54:97:37:86:BF Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1E53 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/IREJAp-5K5PBpv74obUbVJc3hr8.roa Signing time: Sat 13 Sep 2025 03:05:02 +0000 ROA not before: Sat 13 Sep 2025 03:05:02 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 139259 IP address blocks: 103.6.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 13:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7763 (0x1e53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:05:02 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=211109029FB92B93C1A6FEF8A1B51B54973786BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ed:fb:81:fd:fb:2e:5a:cd:1d:0b:e0:bc:b0: 65:24:cc:ac:b3:02:71:0b:b4:0a:a4:93:5b:9e:ef: 9b:7d:07:7b:bb:e4:ca:4d:08:27:d1:9b:64:6c:29: 9d:40:c0:3b:84:14:4d:44:fe:52:29:40:d7:5b:af: 53:89:36:7c:36:0f:0f:6b:10:d9:54:b0:f7:8f:3d: cd:20:de:78:95:10:f6:b5:06:0f:73:36:1d:2e:f3: f7:f3:ea:37:0c:a2:80:85:a1:3a:db:55:ae:19:87: b2:22:99:5d:bc:d7:1f:50:33:62:2d:f1:f8:f1:2e: a3:c2:88:ad:75:0d:3e:bf:b7:2e:10:55:2c:48:3f: a3:ff:73:ff:52:d5:ba:25:46:39:41:25:1f:4d:4f: 3b:ed:04:0b:e9:cc:99:b2:e7:8e:72:7c:3f:11:1b: 5f:78:7d:7c:37:8d:f4:23:ea:77:a5:14:0d:56:e2: 00:6f:95:09:43:47:e2:59:fd:d8:4f:1e:7e:21:bf: 30:e1:08:eb:32:c9:70:8d:3e:2d:7f:21:d5:bb:6e: 47:d7:39:4e:66:d4:eb:98:8f:18:c7:21:c7:3f:49: 46:df:28:6b:30:87:05:2b:b0:fc:81:02:42:82:a6: 41:70:66:70:d4:1f:f3:9a:68:a1:49:20:dd:6b:32: 40:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:11:09:02:9F:B9:2B:93:C1:A6:FE:F8:A1:B5:1B:54:97:37:86:BF X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/IREJAp-5K5PBpv74obUbVJc3hr8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.6.110.0/24 Signature Algorithm: sha256WithRSAEncryption c5:a5:e4:bb:59:3d:94:e7:a2:b0:14:44:1a:2f:f0:4b:02:45: 1a:f9:b7:4b:0e:fd:37:5b:8f:4f:ed:45:c6:09:d7:b6:0d:d4: 8f:3b:7a:5e:54:3e:ae:95:be:8c:52:cc:26:0a:0e:2e:9d:89: 8c:95:50:b5:6c:8d:3d:9e:1b:3b:05:8d:e5:9c:0a:9b:1c:97: b1:40:e5:d9:7e:53:d0:5a:9e:72:61:36:9b:51:44:51:c0:1b: 20:ae:19:5a:6e:25:ba:74:2b:2a:86:5b:9b:3d:af:95:d7:08: a0:e2:cc:c4:0b:6b:7d:46:01:1f:b3:0e:52:8d:a5:61:9d:79: ba:73:bf:79:a9:f3:79:8c:7d:a6:02:7d:a6:4f:16:53:71:6d: b4:1a:09:10:2d:ee:a2:4f:99:49:f7:ce:9f:cf:47:5d:18:4b: c5:cb:4d:f5:43:0a:2f:89:70:9f:2a:dd:9e:3b:7e:ff:d9:42: 79:20:ba:b8:27:26:2c:d7:dd:f2:cf:5f:ef:d8:39:94:3d:9f: d3:48:f0:a1:e5:47:84:7a:42:f0:6f:70:3e:2b:ee:5b:36:89: e8:38:69:4d:86:ec:98:2d:c7:79:d3:bf:53:4f:16:68:da:b7: 9e:68:6f:7d:eb:46:bf:bd:42:4e:68:1d:a1:9f:26:ee:57:a8: e0:de:67:9a -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHlMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA1MDJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDIxMTEwOTAyOUZCOTJC OTNDMUE2RkVGOEExQjUxQjU0OTczNzg2QkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDL7fuB/fsuWs0dC+C8sGUkzKyzAnELtAqkk1ue75t9B3u75MpN CCfRm2RsKZ1AwDuEFE1E/lIpQNdbr1OJNnw2Dw9rENlUsPePPc0g3niVEPa1Bg9z Nh0u8/fz6jcMooCFoTrbVa4Zh7IimV281x9QM2It8fjxLqPCiK11DT6/ty4QVSxI P6P/c/9S1bolRjlBJR9NTzvtBAvpzJmy545yfD8RG194fXw3jfQj6nelFA1W4gBv lQlDR+JZ/dhPHn4hvzDhCOsyyXCNPi1/IdW7bkfXOU5m1OuYjxjHIcc/SUbfKGsw hwUrsPyBAkKCpkFwZnDUH/OaaKFJIN1rMkD/AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUIREJAp+5K5PBpv74obUbVJc3hr8wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L0lSRUpBcC01SzVQQnB2 NzRvYlViVkpjM2hyOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnBm4wDQYJKoZIhvcNAQELBQADggEBAMWl5LtZPZTnorAURBov8EsCRRr5t0sO /Tdbj0/tRcYJ17YN1I87el5UPq6VvoxSzCYKDi6diYyVULVsjT2eGzsFjeWcCpsc l7FA5dl+U9BannJhNptRRFHAGyCuGVpuJbp0KyqGW5s9r5XXCKDizMQLa31GAR+z DlKNpWGdebpzv3mp83mMfaYCfaZPFlNxbbQaCRAt7qJPmUn3zp/PR10YS8XLTfVD Ci+JcJ8q3Z47fv/ZQnkgurgnJizX3fLPX+/YOZQ9n9NI8KHlR4R6QvBvcD4r7ls2 ieg4aU2G7Jgtx3nTv1NPFmjat55ob33rRr+9Qk5oHaGfJu5XqODeZ5o= -----END CERTIFICATE-----Generated at Mon Oct 20 13:13:51 2025 by rpki-client