$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/SIm_z0kcI-LEhP7_XbLl5bHpzsI.roa File: SIm_z0kcI-LEhP7_XbLl5bHpzsI.roa (raw, json) Hash identifier: Ouj3saULoXoHrGVFdOH7m/jI+oOtyb3qCPA4VA6Zs1s= Subject key identifier: 48:89:BF:CF:49:1C:23:E2:C4:84:FE:FF:5D:B2:E5:E5:B1:E9:CE:C2 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1DF7 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/SIm_z0kcI-LEhP7_XbLl5bHpzsI.roa Signing time: Sat 13 Sep 2025 03:04:44 +0000 ROA not before: Sat 13 Sep 2025 03:04:44 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 139259 IP address blocks: 103.221.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 13:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7671 (0x1df7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:04:44 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=4889BFCF491C23E2C484FEFF5DB2E5E5B1E9CEC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:45:33:5c:8e:f1:08:1c:ce:78:0a:e5:29:4a: 77:1b:ec:33:f0:4c:b5:f1:5e:71:ba:38:b0:7d:dd: 49:59:c3:b6:1f:ed:c6:bd:66:f4:b7:52:60:18:d0: ff:e9:d1:9a:14:bf:29:8b:62:35:0c:87:b3:38:06: 18:a9:c2:69:72:7e:40:82:bd:08:4d:d4:da:52:54: 46:40:eb:ab:a5:97:1f:b8:2d:08:fa:01:08:5e:00: b3:56:8b:7a:57:b3:f2:63:b9:0e:fd:23:4d:78:5d: ec:20:3c:30:61:c5:73:b5:97:3d:61:f2:b6:96:da: 73:53:e0:77:6b:04:c9:39:ba:17:be:50:b9:28:c5: ab:aa:8f:da:d9:15:db:31:32:0e:b6:6a:a8:14:89: 1e:b4:10:07:9d:d5:44:36:ce:b7:42:8b:6c:5b:a1: 24:65:27:e0:b6:25:be:5c:c8:5f:83:c1:8b:2c:cb: 13:9e:45:7a:82:3e:de:c2:c5:56:4e:33:e3:f0:d7: 1a:b2:58:c8:c1:42:d5:ae:17:cb:a9:d4:17:5b:04: 7c:60:0b:68:bd:ce:14:17:62:d3:4c:99:46:f6:cd: 65:44:8f:37:e1:1f:7e:a1:a0:e9:b2:ae:27:cf:18: 24:ab:31:f8:2a:2c:72:c1:71:31:49:62:dd:18:db: ff:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:89:BF:CF:49:1C:23:E2:C4:84:FE:FF:5D:B2:E5:E5:B1:E9:CE:C2 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/SIm_z0kcI-LEhP7_XbLl5bHpzsI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.22.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:45:93:54:5b:71:45:99:8c:24:8b:9b:60:64:4f:72:6a:7b: a0:ac:d4:29:07:66:49:dc:ab:79:fb:ea:fa:1e:23:7e:3c:b2: 24:21:a1:73:01:02:55:e9:ed:bd:2b:b9:89:42:06:22:1e:28: 6a:d4:30:d7:fb:4d:6a:0f:e1:e5:ad:b3:d2:36:56:ce:97:0b: 55:73:fc:41:f0:14:38:92:9e:a5:77:f9:ac:b8:1f:6f:43:a5: eb:cb:d7:12:0a:e8:c1:c8:6b:03:61:9a:2d:67:97:a0:03:72: 19:bc:c2:f0:61:18:6e:20:62:f5:78:d9:a7:a3:be:2a:da:26: f8:fc:10:ba:85:9d:b0:03:59:99:f9:63:38:49:0c:6d:c4:ee: 8f:af:29:03:79:06:e1:ec:d0:43:e3:8d:e6:06:d3:fe:d5:f5: 15:50:06:5c:39:7b:e6:34:d6:61:00:1f:6c:ea:ee:9b:d0:70: 6a:1d:bb:23:8e:cd:ed:c4:0f:ab:e8:ff:79:3a:b6:82:28:ac: 47:c4:83:f6:91:e3:07:19:c9:a5:02:92:39:c8:25:5e:49:cd: dd:81:7b:68:77:af:6c:be:12:6f:de:76:47:bc:11:7c:1a:7d: 40:fd:9d:8c:61:90:c0:96:d3:75:77:f4:14:66:64:d4:53:b4: 28:8d:fc:94 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHfcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA0NDRaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDQ4ODlCRkNGNDkxQzIz RTJDNDg0RkVGRjVEQjJFNUU1QjFFOUNFQzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNRTNcjvEIHM54CuUpSncb7DPwTLXxXnG6OLB93UlZw7Yf7ca9 ZvS3UmAY0P/p0ZoUvymLYjUMh7M4BhipwmlyfkCCvQhN1NpSVEZA66ullx+4LQj6 AQheALNWi3pXs/JjuQ79I014XewgPDBhxXO1lz1h8raW2nNT4HdrBMk5uhe+ULko xauqj9rZFdsxMg62aqgUiR60EAed1UQ2zrdCi2xboSRlJ+C2Jb5cyF+DwYssyxOe RXqCPt7CxVZOM+Pw1xqyWMjBQtWuF8up1BdbBHxgC2i9zhQXYtNMmUb2zWVEjzfh H36hoOmyrifPGCSrMfgqLHLBcTFJYt0Y2/9HAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUSIm/z0kcI+LEhP7/XbLl5bHpzsIwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1NJbV96MGtjSS1MRWhQ N19YYkxsNWJIcHpzSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3RYwDQYJKoZIhvcNAQELBQADggEBAGpFk1RbcUWZjCSLm2BkT3Jqe6Cs1CkH Zkncq3n76voeI348siQhoXMBAlXp7b0ruYlCBiIeKGrUMNf7TWoP4eWts9I2Vs6X C1Vz/EHwFDiSnqV3+ay4H29DpevL1xIK6MHIawNhmi1nl6ADchm8wvBhGG4gYvV4 2aejviraJvj8ELqFnbADWZn5YzhJDG3E7o+vKQN5BuHs0EPjjeYG0/7V9RVQBlw5 e+Y01mEAH2zq7pvQcGoduyOOze3ED6vo/3k6toIorEfEg/aR4wcZyaUCkjnIJV5J zd2Be2h3r2y+Em/edke8EXwafUD9nYxhkMCW03V39BRmZNRTtCiN/JQ= -----END CERTIFICATE-----Generated at Mon Oct 20 13:13:46 2025 by rpki-client