$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/JaOgF3pepfT30USmPom7NPr4acM.roa File: JaOgF3pepfT30USmPom7NPr4acM.roa (raw, json) Hash identifier: kiHSvnt35vFRJ59eFXtJjwn8kv9y7vKAuNqF4y2DkFA= Subject key identifier: 25:A3:A0:17:7A:5E:A5:F4:F7:D1:44:A6:3E:89:BB:34:FA:F8:69:C3 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1ED9 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/JaOgF3pepfT30USmPom7NPr4acM.roa Signing time: Sat 13 Sep 2025 03:05:33 +0000 ROA not before: Sat 13 Sep 2025 03:05:33 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 139259 IP address blocks: 45.252.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 13:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7897 (0x1ed9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:05:33 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=25A3A0177A5EA5F4F7D144A63E89BB34FAF869C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5a:c5:99:4e:87:25:6c:9c:89:24:0b:93:0a: fb:15:d6:b4:68:c8:2c:b9:47:8d:4c:c3:11:54:1f: af:93:11:24:ef:a3:a5:60:e3:b4:d9:7b:7a:22:50: 95:07:fb:f4:cd:6f:7a:f1:d3:cb:c9:f5:3d:24:d6: f1:66:2b:c7:9e:9b:37:69:68:24:09:0b:c6:2b:e8: a5:21:95:5c:56:73:fe:16:57:ca:48:34:88:bf:da: bc:1a:f7:5e:dd:c5:50:3f:47:b8:e2:1a:c4:38:8a: c5:53:2a:c0:56:c6:43:48:f1:8b:37:19:d7:0f:a5: 91:dd:01:5e:43:d5:be:7a:5a:7d:c6:77:27:de:63: 71:a5:34:73:07:78:27:c1:98:fc:dc:a2:0c:af:55: b7:2a:33:77:53:3d:08:09:b7:81:16:34:8e:7f:18: b6:dd:cf:60:d7:3b:19:60:a1:ce:96:8b:17:0b:17: 81:94:bd:c2:dd:1a:87:cb:96:fa:1c:9d:f1:19:df: 38:b7:b7:e7:49:30:fd:7a:bc:26:94:86:6a:ef:0e: 6a:55:ae:03:db:1a:af:20:78:31:d4:f8:1b:2f:75: 7a:43:46:1f:60:d2:68:59:e4:ae:5a:db:fe:fd:b4: e9:11:89:20:14:ae:66:c7:29:fb:b8:2a:be:fd:cf: 14:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:A3:A0:17:7A:5E:A5:F4:F7:D1:44:A6:3E:89:BB:34:FA:F8:69:C3 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/JaOgF3pepfT30USmPom7NPr4acM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.144.0/24 Signature Algorithm: sha256WithRSAEncryption ce:69:f7:41:e9:30:6f:20:9a:b3:2d:20:43:18:b5:a4:c0:78: 99:0b:11:95:33:42:a3:dd:f2:96:00:47:bf:f8:ad:a1:cf:10: a7:4d:26:d9:fa:34:0e:58:a2:41:43:29:7d:dc:af:d5:61:a7: 9d:12:e6:89:62:f0:9e:69:89:7e:be:fd:97:a2:ad:0e:34:05: 07:ad:d2:3d:8f:cc:37:b4:e6:b6:af:6d:61:4c:11:81:6e:e6: 47:2d:0a:85:2b:86:87:66:40:e7:0e:79:1e:a7:b4:d0:90:ed: b7:cd:e4:ff:00:16:61:30:f2:5e:02:4e:ed:68:11:fb:72:e5: dd:15:01:8a:bb:5a:a2:cf:79:45:24:ed:6a:82:3c:81:ed:3e: 80:70:b9:02:7f:11:c6:b4:2a:12:a7:4b:b2:4b:c3:81:2f:e6: 70:c4:4c:3c:40:cc:62:55:94:42:83:0d:d3:38:7a:fe:98:1a: d8:5f:22:39:4d:fa:24:5e:32:36:14:22:95:1e:9f:8f:15:0b: 33:30:a5:60:fe:50:08:3f:22:d1:0b:24:ec:69:35:2d:b2:67: 20:a0:88:1d:ee:46:2c:4c:5f:09:43:a4:be:c5:46:a3:0f:cf: 88:d0:0e:81:75:34:46:4a:6b:34:e6:2f:fa:96:d4:87:f1:da: 64:0d:9c:d2 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHtkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA1MzNaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDI1QTNBMDE3N0E1RUE1 RjRGN0QxNDRBNjNFODlCQjM0RkFGODY5QzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNWsWZToclbJyJJAuTCvsV1rRoyCy5R41MwxFUH6+TESTvo6Vg 47TZe3oiUJUH+/TNb3rx08vJ9T0k1vFmK8eemzdpaCQJC8Yr6KUhlVxWc/4WV8pI NIi/2rwa917dxVA/R7jiGsQ4isVTKsBWxkNI8Ys3GdcPpZHdAV5D1b56Wn3Gdyfe Y3GlNHMHeCfBmPzcogyvVbcqM3dTPQgJt4EWNI5/GLbdz2DXOxlgoc6WixcLF4GU vcLdGofLlvocnfEZ3zi3t+dJMP16vCaUhmrvDmpVrgPbGq8geDHU+BsvdXpDRh9g 0mhZ5K5a2/79tOkRiSAUrmbHKfu4Kr79zxRXAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUJaOgF3pepfT30USmPom7NPr4acMwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L0phT2dGM3BlcGZUMzBV U21Qb203TlByNGFjTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAt/JAwDQYJKoZIhvcNAQELBQADggEBAM5p90HpMG8gmrMtIEMYtaTAeJkLEZUz QqPd8pYAR7/4raHPEKdNJtn6NA5YokFDKX3cr9Vhp50S5oli8J5piX6+/ZeirQ40 BQet0j2PzDe05ravbWFMEYFu5kctCoUrhodmQOcOeR6ntNCQ7bfN5P8AFmEw8l4C Tu1oEfty5d0VAYq7WqLPeUUk7WqCPIHtPoBwuQJ/Eca0KhKnS7JLw4Ev5nDETDxA zGJVlEKDDdM4ev6YGthfIjlN+iReMjYUIpUen48VCzMwpWD+UAg/ItELJOxpNS2y ZyCgiB3uRixMXwlDpL7FRqMPz4jQDoF1NEZKazTmL/qW1Ifx2mQNnNI= -----END CERTIFICATE-----Generated at Mon Oct 20 13:30:59 2025 by rpki-client