$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/P69g0OUJGHurjruBbXVjEIVBTo0.roa File: P69g0OUJGHurjruBbXVjEIVBTo0.roa (raw, json) Hash identifier: aRhBc74XUmz+TBYzHYXTpMKHp+kINLSBCrW1Z0xsVGU= Subject key identifier: 3F:AF:60:D0:E5:09:18:7B:AB:8E:BB:81:6D:75:63:10:85:41:4E:8D Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1E41 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/P69g0OUJGHurjruBbXVjEIVBTo0.roa Signing time: Sat 13 Sep 2025 03:04:58 +0000 ROA not before: Sat 13 Sep 2025 03:04:58 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 13444 IP address blocks: 103.221.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 13:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7745 (0x1e41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:04:58 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=3FAF60D0E509187BAB8EBB816D75631085414E8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ef:9b:84:40:d3:bc:d2:5f:44:40:da:08:1e: 4a:1d:d5:2b:0c:e0:e1:b1:4d:0b:d9:0b:be:13:dd: 5b:08:41:ea:d5:5e:1b:01:8b:af:52:c1:5a:ed:e2: 7d:6c:61:e2:ce:a5:09:4f:5c:af:6b:84:7b:00:85: 77:a8:94:cc:2d:dd:3c:33:8e:c6:ac:d7:36:dd:26: 45:c1:2a:fe:ed:50:54:66:f0:ac:ca:92:9a:04:20: 84:8a:d3:5c:50:20:f7:0d:43:c1:ab:58:e0:27:d5: 04:ff:f0:a4:cd:e4:32:c1:c1:14:38:c8:78:b3:bf: b5:be:9a:4f:90:43:35:89:7a:11:92:2a:95:b7:7e: 47:b3:78:63:98:f6:e9:95:ae:11:cd:d7:c3:d3:02: 55:c0:db:71:c6:d3:f3:bb:c1:9a:a4:52:4d:cd:74: ae:17:5d:a0:90:e8:ad:57:53:3d:60:32:c0:b3:9f: 1c:df:f9:6f:dc:97:fb:20:55:40:da:e9:76:28:2f: df:df:d0:e2:2b:ac:b8:01:fb:f8:38:7f:1c:e0:49: 9a:8d:e5:b7:8c:31:c4:6c:b4:66:1b:cb:da:65:9f: 82:5f:7a:2b:e2:e7:54:38:1f:d4:3b:cb:85:e3:07: 1f:0d:be:92:22:41:ec:f9:97:b9:25:96:03:51:d9: 7d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:AF:60:D0:E5:09:18:7B:AB:8E:BB:81:6D:75:63:10:85:41:4E:8D X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/P69g0OUJGHurjruBbXVjEIVBTo0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.10.0/24 Signature Algorithm: sha256WithRSAEncryption d1:74:71:fd:1d:13:87:c6:e8:c2:d0:0e:77:3b:be:83:67:c9: 5d:04:34:c3:8f:7f:a2:51:75:99:c9:05:52:0a:86:3c:71:fd: 01:89:7b:96:da:d2:b8:a4:91:f2:a0:93:09:ec:d8:3b:dc:16: a1:4a:1e:ea:5b:55:04:4c:37:d5:3e:cb:54:62:67:3c:51:fa: e3:f6:8a:1f:eb:2b:9d:4b:2e:6f:9a:dc:eb:7f:f2:b9:01:7a: 45:14:20:86:1e:0f:a3:4d:0f:22:fc:cd:db:af:d9:83:6c:59: 10:5b:ea:47:74:4c:a4:98:72:96:49:1c:02:50:df:9a:7c:cf: 3b:f8:3f:a6:96:7e:0e:4e:40:3d:e0:36:7d:60:17:4c:c8:a4: 42:0e:37:d4:10:ca:30:c4:82:09:d3:e3:0e:9c:a9:ce:26:85: 7d:84:6a:27:d2:f2:8f:08:f8:8f:a2:56:66:de:78:04:f0:53: bc:e5:90:31:13:77:35:2e:9c:ba:df:5c:d7:13:5a:b2:28:27: 99:73:ac:12:16:fb:2f:4f:4a:83:a6:8b:53:41:c3:d4:bc:c6: 22:15:f4:0d:9e:ce:81:30:30:cc:d3:60:7f:7e:ff:7e:99:73: 0b:a4:50:bc:c2:f0:7c:ca:ea:21:39:ef:7b:a8:e1:f3:0e:6d: 41:91:58:52 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHkEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA0NThaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDNGQUY2MEQwRTUwOTE4 N0JBQjhFQkI4MTZENzU2MzEwODU0MTRFOEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCk75uEQNO80l9EQNoIHkod1SsM4OGxTQvZC74T3VsIQerVXhsB i69SwVrt4n1sYeLOpQlPXK9rhHsAhXeolMwt3Twzjsas1zbdJkXBKv7tUFRm8KzK kpoEIISK01xQIPcNQ8GrWOAn1QT/8KTN5DLBwRQ4yHizv7W+mk+QQzWJehGSKpW3 fkezeGOY9umVrhHN18PTAlXA23HG0/O7wZqkUk3NdK4XXaCQ6K1XUz1gMsCznxzf +W/cl/sgVUDa6XYoL9/f0OIrrLgB+/g4fxzgSZqN5beMMcRstGYby9pln4Jfeivi 51Q4H9Q7y4XjBx8NvpIiQez5l7kllgNR2X2PAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUP69g0OUJGHurjruBbXVjEIVBTo0wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1A2OWcwT1VKR0h1cmpy dUJiWFZqRUlWQlRvMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3QowDQYJKoZIhvcNAQELBQADggEBANF0cf0dE4fG6MLQDnc7voNnyV0ENMOP f6JRdZnJBVIKhjxx/QGJe5ba0rikkfKgkwns2DvcFqFKHupbVQRMN9U+y1RiZzxR +uP2ih/rK51LLm+a3Ot/8rkBekUUIIYeD6NNDyL8zduv2YNsWRBb6kd0TKSYcpZJ HAJQ35p8zzv4P6aWfg5OQD3gNn1gF0zIpEION9QQyjDEggnT4w6cqc4mhX2EaifS 8o8I+I+iVmbeeATwU7zlkDETdzUunLrfXNcTWrIoJ5lzrBIW+y9PSoOmi1NBw9S8 xiIV9A2ezoEwMMzTYH9+/36ZcwukULzC8HzK6iE573uo4fMObUGRWFI= -----END CERTIFICATE-----Generated at Mon Oct 20 12:50:41 2025 by rpki-client