$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/XtzeDx_UNTChxnkXNQk1LVZ14dI.roa File: XtzeDx_UNTChxnkXNQk1LVZ14dI.roa (raw, json) Hash identifier: 5A4YuMZhm42wX0qZ/O9LCR7m28ZmL3d6KOiROAJ+dXc= Subject key identifier: 5E:DC:DE:0F:1F:D4:35:30:A1:C6:79:17:35:09:35:2D:56:75:E1:D2 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1EB4 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/XtzeDx_UNTChxnkXNQk1LVZ14dI.roa Signing time: Sat 13 Sep 2025 03:05:24 +0000 ROA not before: Sat 13 Sep 2025 03:05:24 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 13444 IP address blocks: 45.252.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 13:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7860 (0x1eb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:05:24 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=5EDCDE0F1FD43530A1C679173509352D5675E1D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:40:9f:13:c1:b9:6a:91:a0:7b:db:06:fb:5f: 52:1c:80:3c:d0:2f:22:63:6c:dd:69:44:80:6b:c9: 40:1d:c7:f6:e3:fa:ff:dc:0b:de:a1:9b:7e:88:2b: c1:56:46:ca:c6:0c:97:6c:98:cf:97:f3:8a:07:b6: 12:de:e4:8c:95:c3:2c:d7:75:81:ae:f3:6a:23:c3: 92:94:8c:e4:30:d9:40:16:cd:83:d1:04:c6:88:76: 7a:64:ce:39:8e:6d:bf:dd:b6:9b:6e:26:aa:11:9b: fe:05:a9:79:40:4b:72:74:79:aa:6d:ed:a1:c6:c4: 3d:2b:d8:76:5f:9d:12:73:2a:5c:eb:88:cd:e2:c4: 1a:eb:b1:48:e9:b0:ef:1f:1c:a8:5f:f2:ff:2a:f9: ab:db:43:53:1b:80:e3:7c:6a:29:78:96:5d:ea:d8: a8:94:c3:f0:e7:de:eb:43:96:e5:e5:12:6e:28:1b: a1:f6:0f:da:58:7f:8a:a8:9a:cc:69:a6:9b:c5:ec: 40:f2:a9:e0:d0:2b:8f:32:6b:01:ab:8c:b3:f2:f5: d9:0c:24:6b:c7:81:09:63:98:7b:bf:01:80:89:e4: c1:df:b8:91:95:11:ce:7e:2b:ee:1c:b9:31:7f:d3: c7:b5:a6:d5:4e:5f:4f:6d:3d:31:f4:d7:12:85:8d: e0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:DC:DE:0F:1F:D4:35:30:A1:C6:79:17:35:09:35:2D:56:75:E1:D2 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/XtzeDx_UNTChxnkXNQk1LVZ14dI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.84.0/24 Signature Algorithm: sha256WithRSAEncryption 22:0d:76:ff:5c:e0:02:16:4a:97:d6:48:f8:99:e7:e7:89:34: 8a:2c:3e:90:02:44:82:9d:9c:3b:71:c4:8e:48:69:46:87:77: 6a:cd:ff:d8:70:2c:d2:7f:7c:d7:82:49:3c:a9:46:10:0e:b1: 0d:15:c4:9b:ff:a7:45:59:b2:f8:4f:d0:e0:68:67:02:74:33: 23:73:6e:40:2b:b7:4f:98:2d:15:2b:d8:fc:67:16:10:f4:e1: b4:ea:ee:d6:c8:57:f2:e8:d9:dd:4a:08:9d:b5:13:d4:bb:e4: 61:c5:c7:6d:f4:32:48:3d:42:05:cf:cb:f6:e3:ba:6c:12:4d: ae:f2:d6:2a:a5:df:d6:a9:bc:68:7f:5b:6e:56:74:60:7a:fe: ea:3c:d7:72:44:d6:4d:cd:ef:12:5c:b5:06:98:d4:c8:5b:1c: 12:82:59:bb:3d:12:51:f0:d4:3b:33:ae:a2:c5:66:4b:fe:04: d1:0e:de:2b:13:9a:cb:c8:f1:dc:86:68:4e:37:31:37:6f:a4: 12:4e:c3:46:e4:05:c7:e8:e9:cc:22:6b:56:6a:90:9f:ba:09: 76:28:29:ad:99:c7:5a:ec:06:2e:06:8b:aa:74:fd:24:e1:53: f0:78:1e:42:51:d2:d7:21:70:94:f9:82:3c:bf:28:0e:4b:7a: 15:6b:e3:2a -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHrQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA1MjRaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDVFRENERTBGMUZENDM1 MzBBMUM2NzkxNzM1MDkzNTJENTY3NUUxRDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCbQJ8TwblqkaB72wb7X1IcgDzQLyJjbN1pRIBryUAdx/bj+v/c C96hm36IK8FWRsrGDJdsmM+X84oHthLe5IyVwyzXdYGu82ojw5KUjOQw2UAWzYPR BMaIdnpkzjmObb/dtptuJqoRm/4FqXlAS3J0eapt7aHGxD0r2HZfnRJzKlzriM3i xBrrsUjpsO8fHKhf8v8q+avbQ1MbgON8ail4ll3q2KiUw/Dn3utDluXlEm4oG6H2 D9pYf4qomsxpppvF7EDyqeDQK48yawGrjLPy9dkMJGvHgQljmHu/AYCJ5MHfuJGV Ec5+K+4cuTF/08e1ptVOX09tPTH01xKFjeChAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUXtzeDx/UNTChxnkXNQk1LVZ14dIwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1h0emVEeF9VTlRDaHhu a1hOUWsxTFZaMTRkSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAt/FQwDQYJKoZIhvcNAQELBQADggEBACINdv9c4AIWSpfWSPiZ5+eJNIosPpAC RIKdnDtxxI5IaUaHd2rN/9hwLNJ/fNeCSTypRhAOsQ0VxJv/p0VZsvhP0OBoZwJ0 MyNzbkArt0+YLRUr2PxnFhD04bTq7tbIV/Lo2d1KCJ21E9S75GHFx230Mkg9QgXP y/bjumwSTa7y1iql39apvGh/W25WdGB6/uo813JE1k3N7xJctQaY1MhbHBKCWbs9 ElHw1DszrqLFZkv+BNEO3isTmsvI8dyGaE43MTdvpBJOw0bkBcfo6cwia1ZqkJ+6 CXYoKa2Zx1rsBi4Gi6p0/SThU/B4HkJR0tchcJT5gjy/KA5LehVr4yo= -----END CERTIFICATE-----Generated at Mon Oct 20 13:31:01 2025 by rpki-client