$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/LqBcgrVclysQa863V31EOQPBzQs.roa File: LqBcgrVclysQa863V31EOQPBzQs.roa (raw, json) Hash identifier: hmVapKlkbC9tiVdEvvYTlGKMCMhNSMx/iV4iu5XqOWw= Subject key identifier: 2E:A0:5C:82:B5:5C:97:2B:10:6B:CE:B7:57:7D:44:39:03:C1:CD:0B Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1E9A Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/LqBcgrVclysQa863V31EOQPBzQs.roa Signing time: Sat 13 Sep 2025 03:05:17 +0000 ROA not before: Sat 13 Sep 2025 03:05:17 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 138527 IP address blocks: 103.221.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 13:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7834 (0x1e9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:05:17 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=2EA05C82B55C972B106BCEB7577D443903C1CD0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8b:db:90:a1:77:af:1c:7b:7a:86:01:fa:39: 02:36:7e:f6:c5:9a:a9:c5:24:df:f4:2c:9f:db:44: 3e:dd:bf:93:8f:2e:f6:4c:b8:49:4c:51:00:49:ba: 00:ca:3a:5f:e4:a6:7d:cb:7e:18:b8:4a:bc:2a:53: e2:77:3d:62:42:16:89:2f:74:a4:08:9d:fc:61:5a: f1:1d:70:54:5c:4e:9d:17:2e:ff:94:f9:fe:6b:31: eb:5f:e4:e2:49:87:7c:8b:cc:a8:4b:2f:fb:62:fe: a3:a7:ea:c6:4a:ea:23:02:5c:01:69:a9:a9:c2:1f: 1f:78:ab:32:c7:a8:0b:7f:87:a3:38:92:db:f0:d1: a8:e9:fb:f3:f6:ea:52:93:84:8e:41:dd:b8:9a:c5: 17:1f:86:cf:cf:85:9c:04:48:93:88:fa:71:4c:b5: f2:83:3b:b4:0f:46:7e:c6:80:e3:6e:2e:ef:56:54: a2:d0:1c:f2:67:23:41:cd:eb:fb:46:d8:af:3b:d0: 25:f9:1d:45:54:b6:be:9a:2d:6f:f7:96:64:1b:49: 99:e4:76:99:f6:b4:d3:ed:30:13:51:6d:ad:65:eb: 00:1e:2e:fb:75:b4:b1:9a:e3:35:96:a2:14:be:fa: 71:3b:c2:36:1a:0d:0c:43:df:55:5f:b3:09:f4:62: c0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:A0:5C:82:B5:5C:97:2B:10:6B:CE:B7:57:7D:44:39:03:C1:CD:0B X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/LqBcgrVclysQa863V31EOQPBzQs.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.92.0/22 Signature Algorithm: sha256WithRSAEncryption 5d:7d:e6:c6:6d:ad:00:bc:2d:ec:ba:8a:37:51:a9:e3:4c:ec: 7c:85:43:0a:86:33:9b:f4:1a:cb:fc:72:5f:62:c7:55:9b:2f: ef:44:e7:78:86:f9:ba:93:59:68:e7:66:f0:08:ab:fc:3a:8a: 84:2c:f2:16:48:c6:4e:07:ef:08:01:44:79:5b:94:b5:c9:4e: 81:a1:59:db:a2:99:0c:f9:9f:2d:19:6f:a3:39:78:39:48:eb: 81:cc:27:3a:2d:c7:c6:bd:34:93:3a:b6:3b:1b:ab:93:30:5b: 93:ee:ad:16:a9:2c:1f:29:c7:0b:f0:82:e2:55:89:d1:5d:97: 09:a5:f4:f1:fa:73:12:bb:89:ca:ed:3c:56:47:47:b6:10:e6: 87:51:00:1a:0a:34:5a:9f:b0:1c:bc:d3:8a:cd:ec:d3:1f:41: d2:09:cb:7d:9c:39:29:3d:d4:03:db:ea:c4:f9:7f:f5:00:65: c0:26:f1:21:2f:fd:c0:2e:ef:d9:31:fa:66:df:47:ce:a5:f7: 4d:42:0e:b4:df:ee:5d:1d:6a:b7:80:a3:47:f4:2d:de:85:2b: ce:51:d2:58:a3:5c:a6:f9:b3:7a:5b:c7:b7:67:6d:6b:64:75: 79:4b:04:b5:ef:93:2d:73:31:59:d7:05:5b:b2:2b:dd:fb:bc: 60:35:cf:8d -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHpowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA1MTdaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDJFQTA1QzgyQjU1Qzk3 MkIxMDZCQ0VCNzU3N0Q0NDM5MDNDMUNEMEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5i9uQoXevHHt6hgH6OQI2fvbFmqnFJN/0LJ/bRD7dv5OPLvZM uElMUQBJugDKOl/kpn3Lfhi4SrwqU+J3PWJCFokvdKQInfxhWvEdcFRcTp0XLv+U +f5rMetf5OJJh3yLzKhLL/ti/qOn6sZK6iMCXAFpqanCHx94qzLHqAt/h6M4ktvw 0ajp+/P26lKThI5B3biaxRcfhs/PhZwESJOI+nFMtfKDO7QPRn7GgONuLu9WVKLQ HPJnI0HN6/tG2K870CX5HUVUtr6aLW/3lmQbSZnkdpn2tNPtMBNRba1l6wAeLvt1 tLGa4zWWohS++nE7wjYaDQxD31Vfswn0YsDVAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQULqBcgrVclysQa863V31EOQPBzQswHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L0xxQmNnclZjbHlzUWE4 NjNWMzFFT1FQQnpRcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn3VwwDQYJKoZIhvcNAQELBQADggEBAF195sZtrQC8Ley6ijdRqeNM7HyFQwqG M5v0Gsv8cl9ix1WbL+9E53iG+bqTWWjnZvAIq/w6ioQs8hZIxk4H7wgBRHlblLXJ ToGhWduimQz5ny0Zb6M5eDlI64HMJzotx8a9NJM6tjsbq5MwW5PurRapLB8pxwvw guJVidFdlwml9PH6cxK7icrtPFZHR7YQ5odRABoKNFqfsBy804rN7NMfQdIJy32c OSk91APb6sT5f/UAZcAm8SEv/cAu79kx+mbfR86l901CDrTf7l0dareAo0f0Ld6F K85R0lijXKb5s3pbx7dnbWtkdXlLBLXvky1zMVnXBVuyK937vGA1z40= -----END CERTIFICATE-----Generated at Mon Oct 20 13:13:36 2025 by rpki-client