$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/SbXPU2x4dkKiXUHB4BhtB_8vs1E.roa File: SbXPU2x4dkKiXUHB4BhtB_8vs1E.roa (raw, json) Hash identifier: uga0fAV3nZU9zI4LtD2npPiSkVYiU6IRDCfIXP3GFmU= Subject key identifier: 49:B5:CF:53:6C:78:76:42:A2:5D:41:C1:E0:18:6D:07:FF:2F:B3:51 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1E73 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/SbXPU2x4dkKiXUHB4BhtB_8vs1E.roa Signing time: Sat 13 Sep 2025 03:05:10 +0000 ROA not before: Sat 13 Sep 2025 03:05:10 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 139259 IP address blocks: 103.221.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 13:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7795 (0x1e73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:05:10 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=49B5CF536C787642A25D41C1E0186D07FF2FB351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f3:39:62:d1:34:c8:73:aa:d6:15:cf:c7:79: 02:c8:b0:aa:43:87:d9:91:b2:d2:4b:f0:aa:4f:83: 52:c7:3f:ff:6a:de:0c:97:c5:c7:ee:7b:5e:a7:2d: 5c:25:0c:c4:aa:72:1d:27:85:70:ec:89:e0:cf:ee: 0a:5b:75:b9:e0:3e:11:24:79:e5:0f:df:02:37:60: 49:ab:b0:13:a9:52:db:48:62:41:17:4e:60:65:68: 4f:3c:50:8e:c1:d3:66:e5:71:03:e2:f2:ba:77:01: 5e:c9:2f:bb:c9:25:1c:c5:d6:be:4a:82:f2:82:96: 31:a0:b6:a2:8d:e6:01:f6:32:01:6a:e7:c5:3b:70: de:8e:5f:25:df:c3:ee:a0:48:42:c2:d9:30:2e:20: 6e:eb:92:45:23:f3:6c:ee:fb:b4:79:17:a0:60:45: b7:76:76:e6:f2:4f:5d:4a:c3:64:9f:ee:ff:41:c1: f5:6f:6d:a8:bb:0b:4e:8e:98:c0:46:54:35:d7:c6: 87:14:0d:8b:5d:69:d2:d0:27:45:40:91:61:39:08: 81:87:ec:b1:c4:0c:2c:e1:7f:46:fc:c2:9c:c9:99: 6a:37:02:6d:12:0e:78:e6:18:d2:e0:91:bf:00:a1: 29:35:b6:0d:d8:10:94:ce:e7:b9:63:99:93:f1:a5: 04:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B5:CF:53:6C:78:76:42:A2:5D:41:C1:E0:18:6D:07:FF:2F:B3:51 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/SbXPU2x4dkKiXUHB4BhtB_8vs1E.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.28.0/24 Signature Algorithm: sha256WithRSAEncryption 90:15:83:a9:4a:85:35:5c:b7:1f:53:a5:fa:b8:05:44:62:af: 70:14:1a:6f:61:d9:0c:cd:e2:17:36:1b:1e:49:22:2c:01:aa: 48:03:a4:7a:ee:e2:a2:a8:f7:d0:3a:ff:54:5d:cb:7b:c8:06: ec:f7:22:d9:f8:8a:f1:c2:7c:57:da:4d:16:6b:42:6e:ab:34: 5d:24:de:83:ad:c9:b8:22:8b:2e:91:e6:f1:31:0a:b7:91:3d: 6c:73:1e:a8:4c:6c:27:c6:b0:e4:1d:e4:c1:31:1c:30:a6:37: 63:74:83:a0:74:b6:c9:df:b1:30:c4:19:b8:de:3d:4f:1c:56: 23:5b:cb:f0:3c:6f:0e:5c:f4:ec:9d:b4:92:d9:ba:b7:15:1f: 95:4e:12:ff:fd:9c:ad:b1:3d:61:f4:ff:8f:fb:56:50:52:85: 72:59:a3:1b:89:08:14:51:62:17:ff:b3:ce:5f:25:d4:3f:27: ff:ac:63:b4:e3:df:b3:cc:31:b6:50:83:6a:24:72:30:3a:e1: b4:d6:3d:03:df:23:95:c9:e2:9a:72:9f:4c:86:ba:72:c1:f1: b7:83:f7:28:b7:45:5c:0c:da:ad:87:10:1e:c9:8a:5c:0d:60: f1:34:d1:b5:e9:46:9d:b3:d7:b5:30:26:40:9f:ef:ee:6c:d8: 8b:f0:02:8d -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHnMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA1MTBaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDQ5QjVDRjUzNkM3ODc2 NDJBMjVENDFDMUUwMTg2RDA3RkYyRkIzNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC98zli0TTIc6rWFc/HeQLIsKpDh9mRstJL8KpPg1LHP/9q3gyX xcfue16nLVwlDMSqch0nhXDsieDP7gpbdbngPhEkeeUP3wI3YEmrsBOpUttIYkEX TmBlaE88UI7B02blcQPi8rp3AV7JL7vJJRzF1r5KgvKCljGgtqKN5gH2MgFq58U7 cN6OXyXfw+6gSELC2TAuIG7rkkUj82zu+7R5F6BgRbd2dubyT11Kw2Sf7v9BwfVv bai7C06OmMBGVDXXxocUDYtdadLQJ0VAkWE5CIGH7LHEDCzhf0b8wpzJmWo3Am0S DnjmGNLgkb8AoSk1tg3YEJTO57ljmZPxpQTFAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUSbXPU2x4dkKiXUHB4BhtB/8vs1EwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1NiWFBVMng0ZGtLaVhV SEI0Qmh0Ql84dnMxRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3RwwDQYJKoZIhvcNAQELBQADggEBAJAVg6lKhTVctx9Tpfq4BURir3AUGm9h 2QzN4hc2Gx5JIiwBqkgDpHru4qKo99A6/1Rdy3vIBuz3Itn4ivHCfFfaTRZrQm6r NF0k3oOtybgiiy6R5vExCreRPWxzHqhMbCfGsOQd5MExHDCmN2N0g6B0tsnfsTDE GbjePU8cViNby/A8bw5c9OydtJLZurcVH5VOEv/9nK2xPWH0/4/7VlBShXJZoxuJ CBRRYhf/s85fJdQ/J/+sY7Tj37PMMbZQg2okcjA64bTWPQPfI5XJ4ppyn0yGunLB 8beD9yi3RVwM2q2HEB7JilwNYPE00bXpRp2z17UwJkCf7+5s2IvwAo0= -----END CERTIFICATE-----Generated at Mon Oct 20 13:18:00 2025 by rpki-client