$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/XVy9XqfZoQUvZXcDc1VbRARDLJw.roa File: XVy9XqfZoQUvZXcDc1VbRARDLJw.roa (raw, json) Hash identifier: 4zXKqax7Q6d435PSbDldls1haJHg4XkfcqvNOObTPq0= Subject key identifier: 5D:5C:BD:5E:A7:D9:A1:05:2F:65:77:03:73:55:5B:44:04:43:2C:9C Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1E21 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/XVy9XqfZoQUvZXcDc1VbRARDLJw.roa Signing time: Sat 13 Sep 2025 03:04:52 +0000 ROA not before: Sat 13 Sep 2025 03:04:52 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 139259 IP address blocks: 103.221.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 13:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7713 (0x1e21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:04:52 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=5D5CBD5EA7D9A1052F65770373555B4404432C9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:1b:74:99:c0:a8:8a:e0:a0:7f:1c:ec:a3:87: 74:86:74:70:28:2f:97:67:2e:73:3b:88:5a:ef:e8: 01:27:08:68:ce:9f:6f:3f:0b:a6:3c:b0:e2:09:a3: 36:0b:e4:5c:a7:e4:47:3f:ae:b4:0c:7c:3f:f9:19: 2d:47:2a:27:ce:c3:e3:3f:a7:cf:62:5b:d5:a0:0a: ff:e2:d6:b8:f9:01:43:72:04:b2:6f:f5:22:a2:3c: 1c:89:11:e2:fd:d5:d8:e3:de:80:67:3c:52:1e:e8: fa:6e:a4:b2:16:a2:87:b1:4e:68:96:90:5d:7d:e0: c8:83:d3:0d:a1:2f:f9:aa:4a:f6:87:59:10:a2:a3: 27:d5:bb:a1:6a:12:c8:8d:49:21:95:f3:16:f6:57: 31:e3:a9:0f:64:8a:6a:25:cb:1d:03:7f:c7:e7:b4: ec:45:59:98:ed:61:69:7b:21:c0:84:88:cc:3b:29: dc:fd:03:da:a0:a7:51:6c:7e:41:81:19:0b:e5:5a: 23:4f:b8:83:db:1e:fb:84:86:e9:9d:db:f6:21:58: f4:9a:8e:e8:13:10:c6:5f:16:35:9a:b2:3a:ac:cb: 9d:7f:a5:3f:07:a9:54:76:ac:6f:a0:2d:f5:96:8d: dc:60:26:f8:9b:b0:ae:3e:4f:cf:da:3c:f9:37:4a: 0b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:5C:BD:5E:A7:D9:A1:05:2F:65:77:03:73:55:5B:44:04:43:2C:9C X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/XVy9XqfZoQUvZXcDc1VbRARDLJw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.9.0/24 Signature Algorithm: sha256WithRSAEncryption 46:4c:fe:00:64:f2:78:6c:9f:32:b9:13:a2:6d:0e:b9:1a:2e: 40:3b:ef:1c:87:30:16:7e:af:f4:b1:3b:da:73:1c:0e:01:cb: 6d:aa:6e:39:00:95:bb:6c:5d:e2:a7:e4:ee:dd:73:6f:70:82: b3:87:b3:4a:2d:2e:17:b3:71:2f:45:0a:4c:bb:78:86:1d:54: 6b:85:b1:c2:34:8c:e8:d4:e5:bb:a3:5e:62:77:df:21:08:ed: d0:06:56:1c:a6:0a:b0:3c:8e:c7:6c:4f:8d:49:f7:a3:6d:92: 56:03:6c:7b:79:9e:a3:a2:b2:a4:43:07:75:d1:de:00:63:3b: e8:cd:fa:05:39:b8:23:6a:4c:99:34:39:bc:61:6d:f0:8f:68: 77:24:72:fa:a8:fe:60:0c:db:ab:9e:0f:b1:8f:2e:73:8a:42: e8:95:14:43:5a:af:42:1e:3e:7f:a8:ae:8c:a7:f3:af:6c:4f: d8:10:53:12:03:41:2e:9a:8b:49:1f:52:97:2c:07:05:58:cc: 1b:51:7c:b3:c9:67:82:9e:94:15:ae:fc:47:f5:bb:8e:88:c2: 98:c4:ed:6a:bc:90:30:f4:09:b6:b9:ec:19:32:a0:98:f8:3e: 16:f4:dd:16:56:51:25:cc:fb:7d:ef:0a:4e:86:d2:0f:80:25: 4c:35:ea:42 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHiEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA0NTJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDVENUNCRDVFQTdEOUEx MDUyRjY1NzcwMzczNTU1QjQ0MDQ0MzJDOUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDtG3SZwKiK4KB/HOyjh3SGdHAoL5dnLnM7iFrv6AEnCGjOn28/ C6Y8sOIJozYL5Fyn5Ec/rrQMfD/5GS1HKifOw+M/p89iW9WgCv/i1rj5AUNyBLJv 9SKiPByJEeL91djj3oBnPFIe6PpupLIWooexTmiWkF194MiD0w2hL/mqSvaHWRCi oyfVu6FqEsiNSSGV8xb2VzHjqQ9kimolyx0Df8fntOxFWZjtYWl7IcCEiMw7Kdz9 A9qgp1FsfkGBGQvlWiNPuIPbHvuEhumd2/YhWPSajugTEMZfFjWasjqsy51/pT8H qVR2rG+gLfWWjdxgJvibsK4+T8/aPPk3SgvnAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUXVy9XqfZoQUvZXcDc1VbRARDLJwwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1hWeTlYcWZab1FVdlpY Y0RjMVZiUkFSRExKdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3QkwDQYJKoZIhvcNAQELBQADggEBAEZM/gBk8nhsnzK5E6JtDrkaLkA77xyH MBZ+r/SxO9pzHA4By22qbjkAlbtsXeKn5O7dc29wgrOHs0otLhezcS9FCky7eIYd VGuFscI0jOjU5bujXmJ33yEI7dAGVhymCrA8jsdsT41J96NtklYDbHt5nqOisqRD B3XR3gBjO+jN+gU5uCNqTJk0ObxhbfCPaHckcvqo/mAM26ueD7GPLnOKQuiVFENa r0IePn+oroyn869sT9gQUxIDQS6ai0kfUpcsBwVYzBtRfLPJZ4KelBWu/Ef1u46I wpjE7Wq8kDD0Cba57BkyoJj4Phb03RZWUSXM+33vCk6G0g+AJUw16kI= -----END CERTIFICATE-----Generated at Mon Oct 20 13:13:52 2025 by rpki-client