$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/W8_9eoW_NKNWKNt2m-r6FNIudYM.roa File: W8_9eoW_NKNWKNt2m-r6FNIudYM.roa (raw, json) Hash identifier: MQg8sYCgisOya49URB2s3uV0lZ2tflZ7kcnMqGi7JUc= Subject key identifier: 5B:CF:FD:7A:85:BF:34:A3:56:28:DB:76:9B:EA:FA:14:D2:2E:75:83 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1E46 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/W8_9eoW_NKNWKNt2m-r6FNIudYM.roa Signing time: Sat 13 Sep 2025 03:04:59 +0000 ROA not before: Sat 13 Sep 2025 03:04:59 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 139259 IP address blocks: 103.6.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 13:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7750 (0x1e46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:04:59 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=5BCFFD7A85BF34A35628DB769BEAFA14D22E7583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8a:fb:b0:d6:52:5d:1d:17:2e:18:a2:ca:51: 10:66:25:18:77:0e:70:81:d4:a3:26:cb:b6:46:d5: 45:2b:a4:9c:00:00:ba:14:7f:5c:93:45:2e:7f:3e: 7a:99:a0:f1:15:ea:80:36:d2:79:b3:65:e0:b2:b1: 7f:3f:9d:23:22:cb:44:05:da:e4:38:20:c9:d8:e0: 84:58:2d:28:1b:fb:b2:35:25:0b:87:3a:5e:69:4d: bb:9c:f9:86:f1:7d:33:7a:8c:55:fb:46:7f:f8:0e: 4a:00:b1:03:30:3b:df:2e:14:99:2a:c4:84:41:02: 52:c5:37:ae:63:3b:6d:fd:a4:5a:38:53:81:3d:35: b3:e3:25:74:6c:7b:74:91:c3:85:1a:da:fb:84:b7: 65:47:28:14:80:d1:30:ce:c0:86:07:e8:3a:02:d3: cf:e5:97:8c:1b:b0:e3:42:d3:d4:ae:59:fd:c0:78: 9b:89:f8:ec:9c:c2:dc:14:ab:b4:6c:4e:c6:06:cd: cb:2c:3e:8b:35:b1:02:1e:ad:b3:c0:a2:27:b2:83: dc:03:85:0d:f6:dd:d2:d3:3d:23:1e:a3:2f:c9:09: 2d:e3:bf:48:a2:ab:11:f9:04:b1:e7:5b:50:44:8f: 16:ef:b5:31:d0:50:59:78:94:e2:4f:77:98:c9:bc: 13:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:CF:FD:7A:85:BF:34:A3:56:28:DB:76:9B:EA:FA:14:D2:2E:75:83 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/W8_9eoW_NKNWKNt2m-r6FNIudYM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.6.108.0/24 Signature Algorithm: sha256WithRSAEncryption dc:7f:74:97:9f:3c:c5:d1:3e:99:53:84:0a:0d:7a:05:2e:eb: 52:e9:70:c2:a4:8e:30:33:1a:be:ed:8a:69:b3:e5:a9:7e:e2: ad:78:17:3e:18:dc:85:f2:4a:d1:8f:5d:1a:92:a0:e4:70:75: d3:3e:0f:65:76:79:ea:5a:74:59:90:af:fd:bf:3e:9a:b6:31: e9:2d:71:2c:47:46:e3:6b:15:c4:0f:0d:f9:48:2f:d6:de:14: a3:60:37:21:85:99:ba:b4:0e:5b:f2:0d:1b:da:96:55:07:00: 88:57:15:9e:f3:3b:87:ff:03:5a:65:42:1b:de:c4:87:48:16: 99:65:4d:2f:49:d4:28:7a:49:55:05:d9:da:fb:c1:3d:06:75: 11:5f:71:ee:3a:7e:4a:9c:17:e6:4a:c0:05:6d:b6:c8:cb:cc: 29:16:1b:14:70:a0:6e:f2:ab:db:91:f0:fb:fc:e4:09:34:db: cb:ea:2d:01:7a:d3:56:8a:37:8a:1e:98:fa:d9:c6:f8:a3:88: 20:32:00:18:f5:85:5f:2a:13:f4:6b:a7:c4:57:52:62:3b:97: 34:d3:e9:b9:f8:0b:a1:03:97:3d:58:89:61:3a:1b:68:3f:c8: 25:8d:98:ce:6f:40:1f:70:a3:6f:32:45:08:c6:40:38:a1:4a: 32:97:9a:25 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHkYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA0NTlaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDVCQ0ZGRDdBODVCRjM0 QTM1NjI4REI3NjlCRUFGQTE0RDIyRTc1ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuivuw1lJdHRcuGKLKURBmJRh3DnCB1KMmy7ZG1UUrpJwAALoU f1yTRS5/PnqZoPEV6oA20nmzZeCysX8/nSMiy0QF2uQ4IMnY4IRYLSgb+7I1JQuH Ol5pTbuc+YbxfTN6jFX7Rn/4DkoAsQMwO98uFJkqxIRBAlLFN65jO239pFo4U4E9 NbPjJXRse3SRw4Ua2vuEt2VHKBSA0TDOwIYH6DoC08/ll4wbsONC09SuWf3AeJuJ +OycwtwUq7RsTsYGzcssPos1sQIerbPAoieyg9wDhQ323dLTPSMeoy/JCS3jv0ii qxH5BLHnW1BEjxbvtTHQUFl4lOJPd5jJvBPNAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUW8/9eoW/NKNWKNt2m+r6FNIudYMwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1c4Xzllb1dfTktOV0tO dDJtLXI2Rk5JdWRZTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnBmwwDQYJKoZIhvcNAQELBQADggEBANx/dJefPMXRPplThAoNegUu61LpcMKk jjAzGr7timmz5al+4q14Fz4Y3IXyStGPXRqSoORwddM+D2V2eepadFmQr/2/Ppq2 MektcSxHRuNrFcQPDflIL9beFKNgNyGFmbq0DlvyDRvallUHAIhXFZ7zO4f/A1pl QhvexIdIFpllTS9J1Ch6SVUF2dr7wT0GdRFfce46fkqcF+ZKwAVttsjLzCkWGxRw oG7yq9uR8Pv85Ak028vqLQF601aKN4oemPrZxvijiCAyABj1hV8qE/Rrp8RXUmI7 lzTT6bn4C6EDlz1YiWE6G2g/yCWNmM5vQB9wo28yRQjGQDihSjKXmiU= -----END CERTIFICATE-----Generated at Mon Oct 20 13:31:01 2025 by rpki-client