$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/V0d82J_LkzccX_D7g0Hfq2ehH8U.roa File: V0d82J_LkzccX_D7g0Hfq2ehH8U.roa (raw, json) Hash identifier: dJEnflYsb85X48UvOA2JN2gDPMF98zb0Cv2BJxHM/7g= Subject key identifier: 57:47:7C:D8:9F:CB:93:37:1C:5F:F0:FB:83:41:DF:AB:67:A1:1F:C5 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1F28 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/V0d82J_LkzccX_D7g0Hfq2ehH8U.roa Signing time: Tue 16 Sep 2025 05:50:57 +0000 ROA not before: Tue 16 Sep 2025 05:50:57 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 25743 IP address blocks: 103.6.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 13:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7976 (0x1f28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 16 05:50:57 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=57477CD89FCB93371C5FF0FB8341DFAB67A11FC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:10:fa:9f:8c:90:18:5b:82:8f:06:a1:2f:4d: c6:f6:ec:73:45:e8:bf:be:ad:97:5b:23:7f:b7:ea: 2d:85:5b:9f:09:58:6a:a8:cd:d3:49:40:98:ee:8a: ae:55:b3:38:b6:37:eb:4a:03:b8:17:a5:c3:cd:04: 1e:c2:ea:f7:c2:4f:ee:86:1f:a5:27:8d:2a:39:28: 61:9b:c7:14:ce:f3:63:e6:6e:ae:ea:ad:3f:9a:d9: 43:5d:4a:83:7d:bb:cc:a1:3c:13:fb:05:4f:7a:ba: 82:c5:bb:ae:eb:35:40:29:7e:65:95:71:d2:e4:c7: 79:e0:42:0f:e9:0c:6c:53:90:9f:46:13:53:27:1a: e8:b6:82:db:b2:34:24:99:dc:0d:7d:a3:81:38:e0: 41:f9:f6:b8:08:b5:9a:70:a4:4c:46:c6:46:6f:8b: 4f:65:82:88:e3:d8:42:20:72:a7:05:b0:6f:60:26: 0b:e4:da:21:46:de:ba:81:e6:d0:b6:51:46:23:99: 46:de:83:26:d5:cf:05:73:6a:68:57:22:e8:0a:39: ae:91:8a:52:8a:34:f9:d6:ae:9e:ea:12:8c:80:f1: cb:02:d9:fb:eb:27:4c:86:1a:48:a4:5c:37:de:82: 4b:d5:62:17:20:02:42:7c:5b:fd:06:87:10:b8:2f: a4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:47:7C:D8:9F:CB:93:37:1C:5F:F0:FB:83:41:DF:AB:67:A1:1F:C5 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/V0d82J_LkzccX_D7g0Hfq2ehH8U.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.6.108.0/22 Signature Algorithm: sha256WithRSAEncryption 5c:c7:5e:05:f1:f3:bf:86:8f:d3:8f:b0:97:10:35:4b:40:2b: de:9a:25:12:70:d5:16:9a:13:77:13:e3:7a:2a:6d:22:dd:1a: 10:ef:53:1d:91:ae:ae:c1:8f:22:01:3e:d3:dd:0b:c1:cf:9a: 32:32:e1:14:b6:5c:ad:40:34:5c:91:07:ca:16:b3:f5:a1:b8: 56:d0:12:fa:2b:9a:79:58:f6:e0:d7:02:ee:28:13:6c:1e:d4: 37:4c:47:ef:e5:bb:32:bb:20:03:e2:77:2a:d7:37:64:57:8f: 54:f6:24:b9:d2:ed:c2:d0:4c:b0:d8:5e:e9:0f:3f:72:ca:7f: 64:9e:73:f2:3b:66:22:fa:a7:75:13:c3:9b:ce:1a:8d:f6:36: cf:f3:66:17:bf:c7:2e:66:ea:77:0a:b5:b6:87:e1:0b:0d:5a: 92:8b:59:1f:dc:d7:5f:08:73:fa:35:40:6b:1c:7a:9e:cc:9f: e5:45:b1:0c:20:6f:2c:2a:58:25:90:26:28:fb:35:76:7c:09: ad:48:c6:19:41:31:c5:fb:63:d3:73:d3:0f:54:2a:43:04:c8: b8:31:be:44:27:66:be:00:d7:c6:38:7b:8b:1f:9b:a0:a0:92: 0e:a4:ee:1d:6b:ac:86:e0:d0:37:e4:ba:03:d0:20:db:68:4a: 89:28:b6:d3 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHygwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTYw NTUwNTdaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDU3NDc3Q0Q4OUZDQjkz MzcxQzVGRjBGQjgzNDFERkFCNjdBMTFGQzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCbEPqfjJAYW4KPBqEvTcb27HNF6L++rZdbI3+36i2FW58JWGqo zdNJQJjuiq5Vszi2N+tKA7gXpcPNBB7C6vfCT+6GH6UnjSo5KGGbxxTO82Pmbq7q rT+a2UNdSoN9u8yhPBP7BU96uoLFu67rNUApfmWVcdLkx3ngQg/pDGxTkJ9GE1Mn Gui2gtuyNCSZ3A19o4E44EH59rgItZpwpExGxkZvi09lgojj2EIgcqcFsG9gJgvk 2iFG3rqB5tC2UUYjmUbegybVzwVzamhXIugKOa6RilKKNPnWrp7qEoyA8csC2fvr J0yGGkikXDfegkvVYhcgAkJ8W/0GhxC4L6RVAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUV0d82J/LkzccX/D7g0Hfq2ehH8UwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1YwZDgySl9Ma3pjY1hf RDdnMEhmcTJlaEg4VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJnBmwwDQYJKoZIhvcNAQELBQADggEBAFzHXgXx87+Gj9OPsJcQNUtAK96aJRJw 1RaaE3cT43oqbSLdGhDvUx2Rrq7BjyIBPtPdC8HPmjIy4RS2XK1ANFyRB8oWs/Wh uFbQEvormnlY9uDXAu4oE2we1DdMR+/luzK7IAPidyrXN2RXj1T2JLnS7cLQTLDY XukPP3LKf2Sec/I7ZiL6p3UTw5vOGo32Ns/zZhe/xy5m6ncKtbaH4QsNWpKLWR/c 118Ic/o1QGscep7Mn+VFsQwgbywqWCWQJij7NXZ8Ca1IxhlBMcX7Y9Nz0w9UKkME yLgxvkQnZr4A18Y4e4sfm6Cgkg6k7h1rrIbg0DfkugPQINtoSokottM= -----END CERTIFICATE-----Generated at Mon Oct 20 13:30:47 2025 by rpki-client