$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/PFjRCQceIbnAClVvXFXejEIuBDM.roa File: PFjRCQceIbnAClVvXFXejEIuBDM.roa (raw, json) Hash identifier: Zgy1oP4CkA4UHeh7ihxsyg1gePWoyfaIP/jvg6fJ/lc= Subject key identifier: 3C:58:D1:09:07:1E:21:B9:C0:0A:55:6F:5C:55:DE:8C:42:2E:04:33 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1EA1 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/PFjRCQceIbnAClVvXFXejEIuBDM.roa Signing time: Sat 13 Sep 2025 03:05:19 +0000 ROA not before: Sat 13 Sep 2025 03:05:19 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 4812 IP address blocks: 103.24.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 18:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7841 (0x1ea1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:05:19 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=3C58D109071E21B9C00A556F5C55DE8C422E0433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fa:eb:bd:c6:1c:6b:35:a5:6b:ac:cc:c6:11: 7b:1d:ee:a3:b3:7c:71:f6:a6:37:7b:0d:50:e4:77: 00:2d:09:3d:da:3d:a7:c8:99:c2:d4:14:41:43:9f: a3:23:04:f4:b0:b4:d3:66:00:d6:53:0a:03:24:93: f2:e6:88:8b:f5:69:05:77:e2:71:de:dd:7b:fd:67: 4b:b1:72:f9:e4:34:e1:f5:4d:01:74:48:26:ab:1b: 48:b6:1a:35:c5:d9:18:21:58:99:24:10:b5:a8:87: 70:53:ef:56:50:ff:b8:ad:67:70:30:49:95:3a:d2: 74:cd:b3:28:75:15:9b:3f:a7:b3:a3:cb:13:e8:49: fc:64:05:d5:82:17:29:33:a8:e7:e1:21:84:4a:4d: 44:c0:e9:c6:49:1d:cb:57:19:ca:0d:ab:f6:f6:c8: 34:cc:d9:e7:23:c5:bd:f0:f9:95:07:70:f7:1b:e4: 1f:f3:12:11:44:21:59:b2:38:ee:30:62:b8:5f:1a: 11:77:30:db:f2:df:a1:44:9f:5b:13:bf:3a:93:1d: 69:08:2a:4e:05:2e:a1:2e:cf:dd:0b:4e:fc:6d:f1: ad:0c:49:06:89:65:09:4b:9d:d2:df:52:f5:ab:e7: 7b:a7:b0:aa:e6:8a:3d:4c:7b:3e:fb:96:e6:88:62: bb:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:58:D1:09:07:1E:21:B9:C0:0A:55:6F:5C:55:DE:8C:42:2E:04:33 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/PFjRCQceIbnAClVvXFXejEIuBDM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.24.116.0/24 Signature Algorithm: sha256WithRSAEncryption a7:c9:ed:79:26:7e:29:19:59:31:36:4f:f2:9d:9b:da:70:b0: 9e:af:2b:e7:06:3e:82:98:0b:c4:75:d2:98:c0:ae:ed:41:57: 9a:f2:55:7d:8b:b1:15:1f:b0:89:56:06:c5:e8:1b:d4:08:5b: 0e:75:0b:d1:9d:ea:ae:8e:a0:f2:3d:96:cb:b9:af:c8:9f:4a: 14:0a:e2:c0:d4:6c:39:4e:66:96:c4:27:7d:c6:71:1b:be:45: 40:f0:15:8e:e1:ed:39:fc:79:23:b6:37:14:f9:31:f4:03:87: b6:10:95:0a:5f:7b:ea:91:8e:32:62:f4:eb:01:f2:0c:ac:7d: a5:2e:07:ae:f2:44:fe:06:d3:02:64:14:f5:90:af:fb:82:be: 31:a4:2a:12:a6:64:11:40:93:fa:c5:38:81:aa:3b:f8:6e:5c: 0b:d7:bd:00:bc:6b:f8:3d:cf:39:b5:19:dc:57:57:9d:01:70: 8f:42:5b:70:32:4c:bc:32:39:34:07:c9:c0:0a:58:cc:37:92: 55:79:11:4a:ae:e9:02:6a:4e:8c:9a:47:9c:93:b0:f2:fe:58: db:3c:b8:34:61:ba:e1:05:fc:69:d6:ef:a6:3a:fa:96:23:d1: 9e:14:72:5b:33:a9:8a:8a:fa:fa:c4:0c:cd:3d:0d:1e:62:75: ab:a2:1c:c5 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHqEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA1MTlaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDNDNThEMTA5MDcxRTIx QjlDMDBBNTU2RjVDNTVERThDNDIyRTA0MzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1+uu9xhxrNaVrrMzGEXsd7qOzfHH2pjd7DVDkdwAtCT3aPafI mcLUFEFDn6MjBPSwtNNmANZTCgMkk/LmiIv1aQV34nHe3Xv9Z0uxcvnkNOH1TQF0 SCarG0i2GjXF2RghWJkkELWoh3BT71ZQ/7itZ3AwSZU60nTNsyh1FZs/p7OjyxPo SfxkBdWCFykzqOfhIYRKTUTA6cZJHctXGcoNq/b2yDTM2ecjxb3w+ZUHcPcb5B/z EhFEIVmyOO4wYrhfGhF3MNvy36FEn1sTvzqTHWkIKk4FLqEuz90LTvxt8a0MSQaJ ZQlLndLfUvWr53unsKrmij1Mez77luaIYrtHAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUPFjRCQceIbnAClVvXFXejEIuBDMwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1BGalJDUWNlSWJuQUNs VnZYRlhlakVJdUJETS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnGHQwDQYJKoZIhvcNAQELBQADggEBAKfJ7XkmfikZWTE2T/Kdm9pwsJ6vK+cG PoKYC8R10pjAru1BV5ryVX2LsRUfsIlWBsXoG9QIWw51C9Gd6q6OoPI9lsu5r8if ShQK4sDUbDlOZpbEJ33GcRu+RUDwFY7h7Tn8eSO2NxT5MfQDh7YQlQpfe+qRjjJi 9OsB8gysfaUuB67yRP4G0wJkFPWQr/uCvjGkKhKmZBFAk/rFOIGqO/huXAvXvQC8 a/g9zzm1GdxXV50BcI9CW3AyTLwyOTQHycAKWMw3klV5EUqu6QJqToyaR5yTsPL+ WNs8uDRhuuEF/GnW76Y6+pYj0Z4UclszqYqK+vrEDM09DR5idauiHMU= -----END CERTIFICATE-----Generated at Mon Oct 20 17:51:59 2025 by rpki-client