$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/Oi3EA3g2I1x1F6Lh_ue377plrtk.roa File: Oi3EA3g2I1x1F6Lh_ue377plrtk.roa (raw, json) Hash identifier: x06K/U+5fXsXTJt0DzffEqiBQ9Lzt2UhzX4r8YvZNhQ= Subject key identifier: 3A:2D:C4:03:78:36:23:5C:75:17:A2:E1:FE:E7:B7:EF:BA:65:AE:D9 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1E7D Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/Oi3EA3g2I1x1F6Lh_ue377plrtk.roa Signing time: Sat 13 Sep 2025 03:05:12 +0000 ROA not before: Sat 13 Sep 2025 03:05:12 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 13444 IP address blocks: 103.221.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 13:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7805 (0x1e7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:05:12 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=3A2DC4037836235C7517A2E1FEE7B7EFBA65AED9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:55:ba:c5:fa:cc:b7:f4:d9:28:f9:a1:93:5c: 5e:00:72:26:22:84:9c:49:ab:d0:be:34:88:0d:cd: 87:68:70:38:08:8f:a0:73:ed:16:c9:3a:af:13:4e: fd:35:7e:17:dd:db:f4:7d:39:13:21:d7:18:46:eb: 51:39:ba:33:df:34:c5:8f:b7:7c:35:eb:55:df:02: e6:28:94:40:1c:03:fc:0a:f7:c3:7f:f4:b5:4f:13: f9:49:68:bb:c6:78:36:a4:8d:21:09:0a:01:fb:88: 0f:30:ac:7e:e5:00:bc:3e:48:a0:83:4a:f1:d9:7e: 6d:8a:89:4f:2d:a6:06:b3:9f:4c:c4:81:5a:98:00: 48:25:90:71:81:6e:1c:be:e7:67:31:04:cc:fc:94: 84:9a:62:4f:86:18:70:a7:e7:ca:fd:db:22:db:21: c9:92:89:e0:1e:b4:76:28:ba:1d:75:c0:cd:95:01: dc:3f:fb:53:84:33:33:9a:17:66:1d:d1:30:28:d3: b3:f7:17:01:ef:cf:9b:17:72:db:52:5a:92:c1:33: 32:b2:e4:1e:73:b2:91:95:6f:22:e2:36:9b:fd:d2: 03:a6:79:3c:89:a8:d8:ae:60:05:b1:5d:5a:2a:3c: 39:95:b4:c4:37:f7:3f:80:95:54:3d:df:f5:6c:d7: 2e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:2D:C4:03:78:36:23:5C:75:17:A2:E1:FE:E7:B7:EF:BA:65:AE:D9 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/Oi3EA3g2I1x1F6Lh_ue377plrtk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.20.0/24 Signature Algorithm: sha256WithRSAEncryption ac:f9:1d:62:58:58:55:34:30:88:d2:2d:c2:2c:6a:34:c7:91: dc:a8:7d:3b:6c:bb:4c:51:ea:0d:f2:81:d4:cc:9e:c1:4c:ad: 59:f2:a3:6e:a6:d3:6a:26:7f:fa:e8:2e:f0:37:f3:ba:af:05: b6:86:62:0b:50:07:83:c1:79:6d:46:5a:3e:fe:89:76:c1:a0: f7:b8:68:de:d8:25:73:ec:a1:0c:1b:9c:ac:99:d8:a5:07:aa: 48:6d:8e:bb:c0:6b:15:39:87:8d:08:9c:9c:11:bb:d5:69:35: 98:c4:af:33:2b:b6:08:6e:bf:bc:02:85:66:07:71:dc:5c:c1: e8:c5:a9:7d:fe:4b:58:a7:78:f6:53:c4:cb:98:bb:b8:3b:a1: 40:57:b8:db:a6:94:9e:d9:0a:55:a6:0c:7f:9a:bb:f0:d1:be: 9c:60:ae:0e:27:3d:fa:7d:1d:b1:6a:ee:f3:37:f7:2a:18:da: 3e:0a:49:ed:10:20:30:2b:bf:82:b9:88:49:1c:bc:67:08:b7: fc:f7:e2:a2:d9:23:88:8c:c7:c4:aa:a9:02:68:d4:82:7a:e2: a9:73:77:b8:13:9f:ce:7a:3f:09:18:ee:ad:5a:cb:a1:ca:dd: b3:2e:48:86:79:bf:27:94:64:f4:8a:db:3a:0c:cc:19:d4:09: e8:dd:1e:3d -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHn0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA1MTJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDNBMkRDNDAzNzgzNjIz NUM3NTE3QTJFMUZFRTdCN0VGQkE2NUFFRDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUVbrF+sy39Nko+aGTXF4AciYihJxJq9C+NIgNzYdocDgIj6Bz 7RbJOq8TTv01fhfd2/R9ORMh1xhG61E5ujPfNMWPt3w161XfAuYolEAcA/wK98N/ 9LVPE/lJaLvGeDakjSEJCgH7iA8wrH7lALw+SKCDSvHZfm2KiU8tpgazn0zEgVqY AEglkHGBbhy+52cxBMz8lISaYk+GGHCn58r92yLbIcmSieAetHYouh11wM2VAdw/ +1OEMzOaF2Yd0TAo07P3FwHvz5sXcttSWpLBMzKy5B5zspGVbyLiNpv90gOmeTyJ qNiuYAWxXVoqPDmVtMQ39z+AlVQ93/Vs1y7dAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUOi3EA3g2I1x1F6Lh/ue377plrtkwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L09pM0VBM2cySTF4MUY2 TGhfdWUzNzdwbHJ0ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3RQwDQYJKoZIhvcNAQELBQADggEBAKz5HWJYWFU0MIjSLcIsajTHkdyofTts u0xR6g3ygdTMnsFMrVnyo26m02omf/roLvA387qvBbaGYgtQB4PBeW1GWj7+iXbB oPe4aN7YJXPsoQwbnKyZ2KUHqkhtjrvAaxU5h40InJwRu9VpNZjErzMrtghuv7wC hWYHcdxcwejFqX3+S1inePZTxMuYu7g7oUBXuNumlJ7ZClWmDH+au/DRvpxgrg4n Pfp9HbFq7vM39yoY2j4KSe0QIDArv4K5iEkcvGcIt/z34qLZI4iMx8SqqQJo1IJ6 4qlzd7gTn856PwkY7q1ay6HK3bMuSIZ5vyeUZPSK2zoMzBnUCejdHj0= -----END CERTIFICATE-----Generated at Mon Oct 20 13:30:53 2025 by rpki-client