$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/UKVHWBPfwzCJ52ImQQPQY68FjoM.roa File: UKVHWBPfwzCJ52ImQQPQY68FjoM.roa (raw, json) Hash identifier: y5d0sRrq4r3WR+pO3hk/Bdso4L90LmATwAcKr4Q7mhw= Subject key identifier: 50:A5:47:58:13:DF:C3:30:89:E7:62:26:41:03:D0:63:AF:05:8E:83 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1E0F Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/UKVHWBPfwzCJ52ImQQPQY68FjoM.roa Signing time: Sat 13 Sep 2025 03:04:49 +0000 ROA not before: Sat 13 Sep 2025 03:04:49 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 139259 IP address blocks: 103.221.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 13:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7695 (0x1e0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:04:49 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=50A5475813DFC33089E762264103D063AF058E83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:57:36:51:d1:85:61:89:89:dd:80:dc:6d:f2: 9c:bf:71:78:16:73:96:c7:60:b1:80:ff:08:d1:df: be:fb:c8:95:96:2a:f6:ed:fe:b3:a1:54:6e:19:56: c6:f8:63:fa:81:d4:76:bd:8f:df:6f:8a:dc:2e:aa: ba:60:5c:c1:ba:fb:06:4e:95:62:63:e5:5a:21:fe: f6:e7:cd:8c:94:c0:f7:4b:c0:1c:96:61:7b:44:41: 46:87:c2:00:b4:ac:58:25:25:22:a6:35:1a:03:89: 05:03:1e:c4:37:2e:17:dd:2b:aa:52:ce:de:3b:69: f9:31:c6:a2:ac:5c:fd:b4:74:d1:0e:e3:b4:dc:94: 96:45:c2:96:a7:89:b4:f8:fd:ab:1a:9e:9d:49:82: f0:a0:87:d1:ba:86:79:26:35:27:a9:a4:b5:f5:7b: 75:78:7e:44:0c:22:c3:92:8a:fb:10:fc:81:91:6a: a2:d7:42:db:61:de:f0:7d:d1:4d:9c:80:34:68:f5: c1:b0:a4:a6:06:63:b2:46:f3:42:9e:09:a3:eb:b6: b0:0c:b1:48:05:32:b5:97:0c:97:65:b1:7b:da:f4: 5b:2d:ac:07:bc:8f:fb:fb:31:fa:73:88:9c:ea:01: 15:59:b9:a9:93:81:bb:32:a7:0d:f4:39:a7:b0:8f: 9e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:A5:47:58:13:DF:C3:30:89:E7:62:26:41:03:D0:63:AF:05:8E:83 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/UKVHWBPfwzCJ52ImQQPQY68FjoM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.20.0/22 Signature Algorithm: sha256WithRSAEncryption 96:86:43:01:9c:a3:6d:a0:5e:e2:b0:a4:f4:11:c6:72:4c:0a: a1:fc:02:8e:bf:af:2e:6d:bf:d0:5e:67:78:7e:cc:2d:c6:3d: 93:f4:d5:fc:59:61:7a:6c:13:b9:ca:ee:71:b0:d4:ba:1a:11: a6:ab:32:83:27:c4:45:b3:58:a4:0d:0d:b4:e8:e8:14:08:a0: e5:da:d1:b8:ef:23:b8:d4:88:e0:bb:5d:e0:77:15:1c:36:e7: aa:59:93:fb:4b:e4:bd:6e:ba:b5:9e:ea:e5:e9:1f:35:3d:14: d0:1e:8a:f0:5e:34:0e:f8:40:b3:2b:c7:3a:fe:a1:9f:ae:7a: a6:89:4b:34:54:c6:3a:3a:e8:2b:41:aa:f9:0d:b6:62:30:33: 6b:18:40:40:d7:09:84:d0:ad:5d:8b:b1:72:5a:5b:31:2c:ce: 90:92:24:11:76:e6:ea:b6:e1:32:fd:dc:79:2e:a5:65:de:fe: 87:a0:29:2e:0a:59:de:7d:d8:96:a5:90:ee:57:1f:8e:1d:c4: 79:9e:d3:23:ee:c1:d1:f6:70:ee:87:3f:c6:d3:91:e3:47:ec: c5:23:71:e5:d8:ae:71:15:58:67:8e:d2:e4:b5:d0:76:a1:3a: 9f:55:29:1c:98:0c:5d:11:f2:15:d4:34:be:2a:a9:22:f1:86: 4d:86:f3:d3 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHg8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA0NDlaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDUwQTU0NzU4MTNERkMz MzA4OUU3NjIyNjQxMDNEMDYzQUYwNThFODMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+VzZR0YVhiYndgNxt8py/cXgWc5bHYLGA/wjR3777yJWWKvbt /rOhVG4ZVsb4Y/qB1Ha9j99vitwuqrpgXMG6+wZOlWJj5Voh/vbnzYyUwPdLwByW YXtEQUaHwgC0rFglJSKmNRoDiQUDHsQ3LhfdK6pSzt47afkxxqKsXP20dNEO47Tc lJZFwpanibT4/asanp1JgvCgh9G6hnkmNSeppLX1e3V4fkQMIsOSivsQ/IGRaqLX Qtth3vB90U2cgDRo9cGwpKYGY7JG80KeCaPrtrAMsUgFMrWXDJdlsXva9FstrAe8 j/v7MfpziJzqARVZuamTgbsypw30Oaewj55HAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUUKVHWBPfwzCJ52ImQQPQY68FjoMwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1VLVkhXQlBmd3pDSjUy SW1RUVBRWTY4RmpvTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn3RQwDQYJKoZIhvcNAQELBQADggEBAJaGQwGco22gXuKwpPQRxnJMCqH8Ao6/ ry5tv9BeZ3h+zC3GPZP01fxZYXpsE7nK7nGw1LoaEaarMoMnxEWzWKQNDbTo6BQI oOXa0bjvI7jUiOC7XeB3FRw256pZk/tL5L1uurWe6uXpHzU9FNAeivBeNA74QLMr xzr+oZ+ueqaJSzRUxjo66CtBqvkNtmIwM2sYQEDXCYTQrV2LsXJaWzEszpCSJBF2 5uq24TL93HkupWXe/oegKS4KWd592JalkO5XH44dxHme0yPuwdH2cO6HP8bTkeNH 7MUjceXYrnEVWGeO0uS10HahOp9VKRyYDF0R8hXUNL4qqSLxhk2G89M= -----END CERTIFICATE-----Generated at Mon Oct 20 13:13:41 2025 by rpki-client