$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/MomDzK5yWzEd5akUCZbDQeD_RJw.roa File: MomDzK5yWzEd5akUCZbDQeD_RJw.roa (raw, json) Hash identifier: kaqdJ6oZ1unxtW4HE9x6jvBv2+sZEGPPHYXQ8V9pJ8M= Subject key identifier: 32:89:83:CC:AE:72:5B:31:1D:E5:A9:14:09:96:C3:41:E0:FF:44:9C Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1ED6 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/MomDzK5yWzEd5akUCZbDQeD_RJw.roa Signing time: Sat 13 Sep 2025 03:05:32 +0000 ROA not before: Sat 13 Sep 2025 03:05:32 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 138527 IP address blocks: 103.221.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 13:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7894 (0x1ed6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:05:32 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=328983CCAE725B311DE5A9140996C341E0FF449C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ef:9f:e5:b0:07:7c:8a:2e:e7:48:62:d4:51: c2:60:06:46:37:f0:ec:00:49:c9:e1:11:f7:a2:72: 9c:5d:e2:e8:37:85:44:b1:9a:46:4c:19:ea:98:32: 0a:c5:1e:97:dc:2d:3b:0c:39:cc:a9:3e:09:ea:5e: 4b:fd:35:c9:2a:6f:ab:1d:66:73:04:f7:7a:ae:18: 43:68:0b:76:0b:17:00:72:58:25:28:5b:0a:f1:20: 0e:4a:85:95:7a:dc:5d:c6:5b:89:95:84:5b:b3:77: c8:42:0d:99:5a:a0:35:49:dc:d0:37:47:c4:f0:d3: bc:b6:07:e1:0e:56:b0:80:fb:a0:2e:51:cc:2a:70: ae:e1:ed:96:fb:01:0f:b7:47:04:89:6f:b8:3e:f7: 66:a7:17:d6:2c:f8:95:81:9c:32:2a:5f:ff:60:4e: b8:f7:da:6e:cb:c6:4d:99:2c:df:a8:af:1c:1f:cc: eb:91:92:2d:9e:89:90:56:7f:91:3b:ac:83:a8:66: 0d:b2:3f:07:5b:51:6d:0b:52:5b:ea:b2:4a:ba:5b: 66:a9:3a:cf:1a:f7:ee:2c:f9:89:09:60:58:0a:14: 80:8e:dd:b1:96:57:1e:e0:74:49:43:88:db:62:d5: be:47:43:a9:ad:64:ca:e9:9c:31:7b:a7:5a:4d:87: f9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:89:83:CC:AE:72:5B:31:1D:E5:A9:14:09:96:C3:41:E0:FF:44:9C X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/MomDzK5yWzEd5akUCZbDQeD_RJw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.8.0/22 Signature Algorithm: sha256WithRSAEncryption dc:db:2d:81:ea:a1:4d:0a:ee:72:b0:d3:f7:8c:5a:5f:cd:f7: 68:40:c6:bd:72:69:1c:95:8c:18:6a:88:a9:cd:1a:f5:29:eb: d8:a9:93:b8:b7:c6:10:ea:83:03:2d:f7:96:bb:55:7f:76:96: a4:ea:94:dc:83:34:3e:71:33:3a:d0:71:eb:50:f3:5c:6b:08: 5f:d1:7f:42:e5:5b:31:01:bf:c9:0e:40:3e:37:00:9c:2c:88: 50:af:f6:3c:bc:d7:bc:c4:ea:2b:79:3a:7e:f2:47:90:07:74: 33:a2:7c:36:dc:2c:9b:55:5a:ce:da:b7:18:e0:4e:8a:f7:b1: 1b:a2:47:92:02:19:86:2c:90:33:63:9b:fb:ae:cd:39:9b:2f: 47:fc:c0:5c:c5:95:5c:97:be:8f:53:6a:07:02:2a:51:07:7f: 89:1d:b1:f8:4f:0e:10:1b:20:3a:7c:4e:f4:75:df:96:25:91: 12:af:c4:12:54:c5:bf:1a:20:35:a8:44:d7:be:dd:07:51:bf: 58:b5:37:51:fe:9e:90:ae:81:51:bc:0a:3a:24:6c:f8:90:39: b2:25:6d:bf:79:ad:41:95:83:e1:3e:28:cf:6b:e3:15:0e:5d: 83:7e:e1:9f:e1:45:2a:cc:17:30:7f:19:5c:d1:d5:a7:f6:f5: 7f:07:42:8f -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHtYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA1MzJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDMyODk4M0NDQUU3MjVC MzExREU1QTkxNDA5OTZDMzQxRTBGRjQ0OUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCb75/lsAd8ii7nSGLUUcJgBkY38OwAScnhEfeicpxd4ug3hUSx mkZMGeqYMgrFHpfcLTsMOcypPgnqXkv9Nckqb6sdZnME93quGENoC3YLFwByWCUo WwrxIA5KhZV63F3GW4mVhFuzd8hCDZlaoDVJ3NA3R8Tw07y2B+EOVrCA+6AuUcwq cK7h7Zb7AQ+3RwSJb7g+92anF9Ys+JWBnDIqX/9gTrj32m7Lxk2ZLN+orxwfzOuR ki2eiZBWf5E7rIOoZg2yPwdbUW0LUlvqskq6W2apOs8a9+4s+YkJYFgKFICO3bGW Vx7gdElDiNti1b5HQ6mtZMrpnDF7p1pNh/lJAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUMomDzK5yWzEd5akUCZbDQeD/RJwwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L01vbUR6SzV5V3pFZDVh a1VDWmJEUWVEX1JKdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn3QgwDQYJKoZIhvcNAQELBQADggEBANzbLYHqoU0K7nKw0/eMWl/N92hAxr1y aRyVjBhqiKnNGvUp69ipk7i3xhDqgwMt95a7VX92lqTqlNyDND5xMzrQcetQ81xr CF/Rf0LlWzEBv8kOQD43AJwsiFCv9jy817zE6it5On7yR5AHdDOifDbcLJtVWs7a txjgTor3sRuiR5ICGYYskDNjm/uuzTmbL0f8wFzFlVyXvo9TagcCKlEHf4kdsfhP DhAbIDp8TvR135YlkRKvxBJUxb8aIDWoRNe+3QdRv1i1N1H+npCugVG8CjokbPiQ ObIlbb95rUGVg+E+KM9r4xUOXYN+4Z/hRSrMFzB/GVzR1af29X8HQo8= -----END CERTIFICATE-----Generated at Mon Oct 20 13:17:59 2025 by rpki-client