$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/VHLNyELDt0uhtn7uNpQhNAQeqC0.roa File: VHLNyELDt0uhtn7uNpQhNAQeqC0.roa (raw, json) Hash identifier: MAReEUgECw9Zlyo5MU7iOg20MXArtQZxlwvujIi9E7o= Subject key identifier: 54:72:CD:C8:42:C3:B7:4B:A1:B6:7E:EE:36:94:21:34:04:1E:A8:2D Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1DE4 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/VHLNyELDt0uhtn7uNpQhNAQeqC0.roa Signing time: Sat 13 Sep 2025 03:04:40 +0000 ROA not before: Sat 13 Sep 2025 03:04:40 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 13444 IP address blocks: 45.252.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 13:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7652 (0x1de4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:04:40 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=5472CDC842C3B74BA1B67EEE36942134041EA82D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:78:9f:4f:d1:3d:5d:cf:10:fc:ba:aa:7b:85: a7:97:3f:6e:20:b4:fc:45:fc:3c:88:3e:c0:71:b1: 48:99:be:23:20:ad:03:65:c6:07:fb:72:7f:5c:e9: 03:17:bd:5e:0d:b3:a9:61:f4:de:28:54:5b:b5:59: 60:b7:0e:fb:ce:a4:4b:9e:64:c7:f8:39:a7:05:be: ff:d3:1b:5c:c0:0e:4a:5c:19:24:ad:a6:32:ba:6e: 09:fb:eb:63:d5:ac:f5:ee:2e:d8:1b:89:80:dd:67: a7:b7:a4:40:e1:86:cb:c2:70:23:5d:e9:34:57:15: da:74:19:8e:dc:c5:5a:c7:43:e4:cb:48:4e:e2:b7: 60:1f:ff:a6:4c:ff:14:e2:08:a9:ea:9e:ff:31:ed: bd:31:77:19:5e:05:37:e6:c5:62:31:73:90:ac:3b: 3f:95:e4:6a:c1:8d:08:d6:c0:d0:fd:22:05:26:be: 25:c2:69:99:63:8b:dd:ea:c0:1e:a0:ed:f1:17:78: 9a:79:b3:64:fb:8c:94:00:33:00:65:a2:5f:90:37: 28:eb:cd:02:d3:34:86:64:16:97:b5:eb:73:e6:39: ab:c0:a1:1f:df:b3:1e:32:25:95:8f:94:d6:10:22: 65:80:f4:e8:15:ea:a9:5d:62:be:aa:4c:c0:34:44: 34:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:72:CD:C8:42:C3:B7:4B:A1:B6:7E:EE:36:94:21:34:04:1E:A8:2D X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/VHLNyELDt0uhtn7uNpQhNAQeqC0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.102.0/24 Signature Algorithm: sha256WithRSAEncryption c8:81:68:a3:59:bd:37:41:e5:94:84:ce:11:c3:42:9b:35:ed: dd:f0:51:ea:5b:ea:84:a3:01:e8:09:be:ba:4f:1c:41:ef:04: dc:f5:a1:1e:6a:09:5f:75:27:2d:e9:de:85:af:e1:3e:16:ab: 47:f1:e0:fb:d0:f8:3a:21:f2:48:02:7e:54:ef:e1:cc:fb:e1: 12:19:bc:0d:53:94:0f:e5:0a:48:0b:b9:45:ea:e9:91:40:89: 59:35:dc:21:f4:7e:34:95:a4:0d:c6:e2:87:aa:c6:d8:09:fc: 76:cb:05:dc:f7:04:1c:21:52:75:3b:00:26:e7:21:c9:df:85: 5a:7d:0a:4a:9b:47:e0:8d:61:58:26:1d:d0:7a:a9:5e:37:80: 09:62:de:cc:6c:40:e4:d2:26:c9:a0:57:f9:f3:5f:91:2b:51: 37:e1:e4:5c:c2:ab:9d:7c:ac:e1:d9:1d:ad:29:2c:a6:dd:66: b2:fc:c2:c0:d2:b7:58:54:f1:c3:a0:a9:ef:0b:e4:4f:58:7d: 86:ce:f4:5a:f8:44:fe:4b:44:df:1d:c5:2e:4b:e9:e4:4c:3d: b6:e9:6e:10:00:a3:03:f6:40:01:c9:3a:2e:04:f7:26:44:bc: fa:d1:3b:06:65:80:3a:86:98:35:b6:5b:5f:eb:50:81:62:7c: a2:cd:55:bd -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHeQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA0NDBaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDU0NzJDREM4NDJDM0I3 NEJBMUI2N0VFRTM2OTQyMTM0MDQxRUE4MkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDueJ9P0T1dzxD8uqp7haeXP24gtPxF/DyIPsBxsUiZviMgrQNl xgf7cn9c6QMXvV4Ns6lh9N4oVFu1WWC3DvvOpEueZMf4OacFvv/TG1zADkpcGSSt pjK6bgn762PVrPXuLtgbiYDdZ6e3pEDhhsvCcCNd6TRXFdp0GY7cxVrHQ+TLSE7i t2Af/6ZM/xTiCKnqnv8x7b0xdxleBTfmxWIxc5CsOz+V5GrBjQjWwND9IgUmviXC aZlji93qwB6g7fEXeJp5s2T7jJQAMwBlol+QNyjrzQLTNIZkFpe163PmOavAoR/f sx4yJZWPlNYQImWA9OgV6qldYr6qTMA0RDTzAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUVHLNyELDt0uhtn7uNpQhNAQeqC0wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1ZITE55RUxEdDB1aHRu N3VOcFFoTkFRZXFDMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAt/GYwDQYJKoZIhvcNAQELBQADggEBAMiBaKNZvTdB5ZSEzhHDQps17d3wUepb 6oSjAegJvrpPHEHvBNz1oR5qCV91Jy3p3oWv4T4Wq0fx4PvQ+Doh8kgCflTv4cz7 4RIZvA1TlA/lCkgLuUXq6ZFAiVk13CH0fjSVpA3G4oeqxtgJ/HbLBdz3BBwhUnU7 ACbnIcnfhVp9CkqbR+CNYVgmHdB6qV43gAli3sxsQOTSJsmgV/nzX5ErUTfh5FzC q518rOHZHa0pLKbdZrL8wsDSt1hU8cOgqe8L5E9YfYbO9Fr4RP5LRN8dxS5L6eRM PbbpbhAAowP2QAHJOi4E9yZEvPrROwZlgDqGmDW2W1/rUIFifKLNVb0= -----END CERTIFICATE-----Generated at Mon Oct 20 13:13:43 2025 by rpki-client