$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/R-PabMPIvf42klfpcjNzkvLm1ig.roa File: R-PabMPIvf42klfpcjNzkvLm1ig.roa (raw, json) Hash identifier: whwTO1KFTj3PQZ21wct+5jZJJd8Oe4b8Hh5/DiejykY= Subject key identifier: 47:E3:DA:6C:C3:C8:BD:FE:36:92:57:E9:72:33:73:92:F2:E6:D6:28 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1E64 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/R-PabMPIvf42klfpcjNzkvLm1ig.roa Signing time: Sat 13 Sep 2025 03:05:06 +0000 ROA not before: Sat 13 Sep 2025 03:05:06 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 136897 IP address blocks: 103.198.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 18:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7780 (0x1e64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:05:06 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=47E3DA6CC3C8BDFE369257E972337392F2E6D628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:83:d3:ce:24:5d:70:54:c3:fc:72:2d:bd:69: 0e:a8:d0:c3:d6:a3:4c:4c:8f:e5:db:7a:34:ad:9a: 4c:12:9f:f3:b0:3b:64:f0:f0:18:00:d1:30:96:1d: fb:0a:fb:61:6c:8c:8d:4a:9c:0b:48:0f:72:e7:ab: 58:d7:3b:a1:0a:ea:51:28:2e:dd:e8:ac:4d:c9:34: f5:81:af:fe:5e:ec:01:4a:c1:30:8e:dc:d5:17:7a: 47:f7:ce:50:6c:a7:2e:5b:ef:3a:20:b5:d4:70:d4: 22:04:17:06:ac:fb:8f:0c:cc:f8:60:69:f6:c4:a1: 9c:36:7f:12:f1:fc:8d:78:7c:ac:55:36:f9:d9:bb: 2b:28:15:f6:a0:f5:0b:02:42:f1:1c:b8:ba:54:a7: 5d:17:fe:cc:1c:8d:a3:5a:46:d7:4b:38:11:72:77: c3:96:3a:26:8a:3b:e9:df:f9:f8:7d:e9:00:95:d2: b1:a3:e5:97:f3:79:93:32:aa:4c:de:1f:e0:db:41: 34:ef:df:b4:8b:db:be:4c:8c:99:ec:17:55:58:5e: b9:68:8b:00:1e:f6:3f:69:89:be:e4:72:39:28:85: e9:b7:71:3b:99:23:e8:ce:35:c0:3d:60:9c:da:6a: 30:96:23:6d:6d:38:2a:4d:0a:7b:e7:3c:50:ce:77: 3d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:E3:DA:6C:C3:C8:BD:FE:36:92:57:E9:72:33:73:92:F2:E6:D6:28 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/R-PabMPIvf42klfpcjNzkvLm1ig.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.198.240.0/22 Signature Algorithm: sha256WithRSAEncryption 5e:f0:e5:35:04:4b:ad:1d:2c:fb:63:ce:a7:0e:e3:27:65:fb: 7b:6a:39:fd:48:5b:5a:1d:13:1f:d8:8c:08:52:77:d1:4d:f9: bb:61:e4:38:1b:d5:d2:3d:ba:31:18:5c:1b:d3:af:29:87:22: b1:a9:6b:1f:48:0e:b2:5e:c9:0a:3d:0c:1b:b0:6c:76:fe:07: e1:58:84:36:bd:54:16:d8:b4:67:d5:da:05:9a:e0:fa:44:9e: 0e:e6:2a:f8:27:ac:55:c5:8d:92:22:90:9d:40:67:d0:4f:44: fe:53:1e:d2:5b:ea:d3:d2:81:63:5a:0a:08:4d:fe:d9:d6:8d: a3:13:3a:ae:77:0c:ac:78:5c:d7:54:5d:5e:2f:b0:9d:c4:d7: bd:40:87:96:f2:b4:52:f4:14:c6:1a:12:6d:c5:dc:35:19:46: ce:c6:e3:cd:f9:b2:59:c9:9c:ca:d8:07:88:ae:b7:f3:56:ca: 84:29:7d:fd:d1:f7:7c:3a:6f:ff:96:ac:91:0c:2f:2b:28:dc: 6d:a7:58:35:38:41:45:54:62:79:4c:4d:46:6f:54:ed:c5:f5: 95:d8:b9:a8:1a:6b:75:5f:ad:0c:a4:30:2f:5e:5e:02:4b:fb: f1:c6:0a:fb:02:65:67:b7:7a:6a:8c:a4:b2:ab:7d:33:35:1a: 85:cb:e9:45 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHmQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA1MDZaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDQ3RTNEQTZDQzNDOEJE RkUzNjkyNTdFOTcyMzM3MzkyRjJFNkQ2MjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEg9POJF1wVMP8ci29aQ6o0MPWo0xMj+XbejStmkwSn/OwO2Tw 8BgA0TCWHfsK+2FsjI1KnAtID3Lnq1jXO6EK6lEoLt3orE3JNPWBr/5e7AFKwTCO 3NUXekf3zlBspy5b7zogtdRw1CIEFwas+48MzPhgafbEoZw2fxLx/I14fKxVNvnZ uysoFfag9QsCQvEcuLpUp10X/swcjaNaRtdLOBFyd8OWOiaKO+nf+fh96QCV0rGj 5ZfzeZMyqkzeH+DbQTTv37SL275MjJnsF1VYXrloiwAe9j9pib7kcjkohem3cTuZ I+jONcA9YJzaajCWI21tOCpNCnvnPFDOdz3bAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUR+PabMPIvf42klfpcjNzkvLm1igwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1ItUGFiTVBJdmY0Mmts ZnBjak56a3ZMbTFpZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJnxvAwDQYJKoZIhvcNAQELBQADggEBAF7w5TUES60dLPtjzqcO4ydl+3tqOf1I W1odEx/YjAhSd9FN+bth5Dgb1dI9ujEYXBvTrymHIrGpax9IDrJeyQo9DBuwbHb+ B+FYhDa9VBbYtGfV2gWa4PpEng7mKvgnrFXFjZIikJ1AZ9BPRP5THtJb6tPSgWNa CghN/tnWjaMTOq53DKx4XNdUXV4vsJ3E171Ah5bytFL0FMYaEm3F3DUZRs7G4835 slnJnMrYB4iut/NWyoQpff3R93w6b/+WrJEMLyso3G2nWDU4QUVUYnlMTUZvVO3F 9ZXYuagaa3VfrQykMC9eXgJL+/HGCvsCZWe3emqMpLKrfTM1GoXL6UU= -----END CERTIFICATE-----Generated at Mon Oct 20 16:09:39 2025 by rpki-client