$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/PEiipev9MvjMPnOU3-OR2KC2zQM.roa File: PEiipev9MvjMPnOU3-OR2KC2zQM.roa (raw, json) Hash identifier: ZW4fTD7rq/qpdgFOG4mtW+dcChCpkJ7o5OUvdUJTTf8= Subject key identifier: 3C:48:A2:A5:EB:FD:32:F8:CC:3E:73:94:DF:E3:91:D8:A0:B6:CD:03 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1E68 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/PEiipev9MvjMPnOU3-OR2KC2zQM.roa Signing time: Sat 13 Sep 2025 03:05:07 +0000 ROA not before: Sat 13 Sep 2025 03:05:07 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 13444 IP address blocks: 103.221.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 13:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7784 (0x1e68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:05:07 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=3C48A2A5EBFD32F8CC3E7394DFE391D8A0B6CD03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:64:fa:10:25:70:0d:cd:16:48:65:56:fc:05: 8d:6c:db:c0:e4:70:d7:23:0d:ea:7a:8a:47:ab:b0: 14:e1:b9:a3:7f:81:9d:cd:c8:d9:28:48:06:d0:51: 3f:79:83:8f:03:36:33:8a:ea:27:ae:b6:57:46:d8: d7:5a:11:7e:48:18:2c:fd:41:09:4e:fc:2b:7f:2a: d7:0d:d2:97:31:ec:da:59:f3:de:03:dc:11:f1:99: 8e:b7:82:8c:a3:3e:38:80:34:13:17:d9:b2:47:a1: 2c:9a:0d:50:68:2c:5f:d3:c3:a5:12:0e:a4:ee:bd: 11:67:61:17:65:46:32:71:db:7d:92:c3:26:f9:41: ea:bc:f6:0b:95:65:0d:8e:f1:8d:97:1c:3f:74:81: 9e:66:c3:62:fc:a9:26:a6:c4:32:6c:89:78:83:46: ee:29:23:1d:19:62:9c:0d:5b:28:f0:4b:80:61:52: 06:d2:b4:40:24:0a:30:7b:1f:a8:9a:ca:83:1e:6a: 35:1f:cb:86:9c:a2:d6:39:bd:17:ba:25:5d:2a:14: f2:75:75:dd:95:dd:7b:72:a4:22:fb:68:ec:2b:47: 10:c1:f2:ee:dc:9f:22:a0:81:07:4f:dc:be:2c:93: 96:0c:d2:ca:40:61:1e:2f:a6:b1:fa:a6:23:2b:8b: 4a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:48:A2:A5:EB:FD:32:F8:CC:3E:73:94:DF:E3:91:D8:A0:B6:CD:03 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/PEiipev9MvjMPnOU3-OR2KC2zQM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.42.0/24 Signature Algorithm: sha256WithRSAEncryption 86:95:45:98:23:32:8c:36:39:10:cb:1b:68:14:da:2a:e6:b3: be:7b:30:33:4c:f2:3d:05:07:71:fc:e2:1e:c4:94:d9:15:53: 74:d1:18:35:26:17:24:21:e1:ce:08:92:29:d9:0a:42:7f:5b: df:91:a7:4f:26:68:70:25:cd:8b:db:1c:dd:b7:24:54:94:bf: 44:eb:f0:51:94:e4:ca:6b:6f:21:8c:1d:cc:3c:3b:46:fe:58: c9:e1:e8:a8:f8:64:a0:b1:62:65:d6:bf:1d:4e:a0:34:48:b0: 1e:b8:c0:be:23:07:fd:ff:a1:ca:a2:04:2c:59:63:1b:b1:a8: 5c:8c:9e:ed:99:0d:09:db:0f:f8:7f:d6:0d:19:64:4e:cf:31: cc:43:66:e4:bb:b4:86:b6:96:75:f2:7a:41:69:8c:3c:11:4b: 2a:2b:df:1e:21:83:05:53:f2:ad:2c:e3:3f:07:95:18:b4:60: 0d:39:a2:f7:69:43:39:71:fa:26:fe:dd:7e:bf:b6:a8:6c:66: 3a:b4:4b:2a:2a:c6:e2:8d:ef:5d:69:ea:ec:66:b1:80:2c:4a: e4:3d:b9:fc:7a:c0:34:95:70:68:56:6a:e8:c2:d4:8f:01:01: f8:8e:d2:d9:11:5b:10:34:2b:ba:52:f5:ee:66:ba:e6:a7:b6: 31:08:47:7b -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHmgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA1MDdaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDNDNDhBMkE1RUJGRDMy RjhDQzNFNzM5NERGRTM5MUQ4QTBCNkNEMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0ZPoQJXANzRZIZVb8BY1s28DkcNcjDep6ikersBThuaN/gZ3N yNkoSAbQUT95g48DNjOK6ieutldG2NdaEX5IGCz9QQlO/Ct/KtcN0pcx7NpZ894D 3BHxmY63goyjPjiANBMX2bJHoSyaDVBoLF/Tw6USDqTuvRFnYRdlRjJx232Swyb5 Qeq89guVZQ2O8Y2XHD90gZ5mw2L8qSamxDJsiXiDRu4pIx0ZYpwNWyjwS4BhUgbS tEAkCjB7H6iayoMeajUfy4acotY5vRe6JV0qFPJ1dd2V3XtypCL7aOwrRxDB8u7c nyKggQdP3L4sk5YM0spAYR4vprH6piMri0onAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUPEiipev9MvjMPnOU3+OR2KC2zQMwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1BFaWlwZXY5TXZqTVBu T1UzLU9SMktDMnpRTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3SowDQYJKoZIhvcNAQELBQADggEBAIaVRZgjMow2ORDLG2gU2irms757MDNM 8j0FB3H84h7ElNkVU3TRGDUmFyQh4c4IkinZCkJ/W9+Rp08maHAlzYvbHN23JFSU v0Tr8FGU5MprbyGMHcw8O0b+WMnh6Kj4ZKCxYmXWvx1OoDRIsB64wL4jB/3/ocqi BCxZYxuxqFyMnu2ZDQnbD/h/1g0ZZE7PMcxDZuS7tIa2lnXyekFpjDwRSyor3x4h gwVT8q0s4z8HlRi0YA05ovdpQzlx+ib+3X6/tqhsZjq0SyoqxuKN711p6uxmsYAs SuQ9ufx6wDSVcGhWaujC1I8BAfiO0tkRWxA0K7pS9e5muuantjEIR3s= -----END CERTIFICATE-----Generated at Mon Oct 20 13:17:59 2025 by rpki-client