$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/YSjmq0Ztcr23Xm9U013DRWhBwUo.roa File: YSjmq0Ztcr23Xm9U013DRWhBwUo.roa (raw, json) Hash identifier: vbq4a+SZVDdflcf3/6tKm8u/t7Rjvd05Qesn29853Ns= Subject key identifier: 61:28:E6:AB:46:6D:72:BD:B7:5E:6F:54:D3:5D:C3:45:68:41:C1:4A Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1DFC Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/YSjmq0Ztcr23Xm9U013DRWhBwUo.roa Signing time: Sat 13 Sep 2025 03:04:45 +0000 ROA not before: Sat 13 Sep 2025 03:04:45 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 13444 IP address blocks: 103.221.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 13:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7676 (0x1dfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:04:45 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=6128E6AB466D72BDB75E6F54D35DC3456841C14A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:95:1f:53:57:74:2d:64:38:c7:3a:e9:50:8a: 6f:4c:d8:e1:2e:77:85:f6:31:52:ae:1c:1c:93:8a: 2b:74:25:4d:c2:c4:c8:0a:8f:d6:8f:1a:51:92:25: 10:8a:f2:67:2f:84:18:3d:31:2b:c2:fe:9c:1b:1a: 93:68:44:b6:ed:d2:40:65:d5:a3:3c:32:4e:9d:18: 3c:0e:d2:eb:48:70:2f:d8:e9:63:00:12:c2:a6:6c: a9:b0:49:80:e2:09:0d:ae:59:72:e7:a6:48:72:56: a5:17:10:5f:7b:1a:36:69:f8:e2:e3:93:0c:7d:2a: b4:db:a5:55:e2:2a:78:1d:04:9a:cc:06:64:36:cf: e4:0f:ca:be:ab:41:91:1e:2b:ea:7d:cf:c1:f9:71: fd:49:66:4a:5e:06:80:81:0f:b2:88:48:08:34:1a: fb:4e:45:10:7c:ec:14:a2:2b:f0:f1:92:21:12:8e: 90:78:2d:49:b9:92:8f:a9:e2:df:e7:bb:15:6a:18: bb:7d:ef:4a:f3:0c:f7:e7:e5:0c:9b:ad:cd:2b:0c: 50:0b:b3:56:4d:53:c6:90:74:51:48:e0:e8:9b:3e: 8d:79:fe:61:c8:96:35:60:9e:66:23:89:09:51:94: 47:cb:42:05:48:59:a6:fa:d7:57:db:4d:3e:0f:14: 60:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:28:E6:AB:46:6D:72:BD:B7:5E:6F:54:D3:5D:C3:45:68:41:C1:4A X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/YSjmq0Ztcr23Xm9U013DRWhBwUo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.29.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:c0:c6:d7:17:5d:ea:6b:a2:34:e4:cb:a2:79:cf:bc:dd:7d: 92:52:84:f4:3a:5e:b2:e7:df:e3:c2:ca:32:e2:27:65:0e:25: d5:7c:08:ea:a3:9c:1a:f9:06:a7:2b:77:6a:10:25:12:27:bc: 38:e0:d6:05:91:10:a2:2d:48:fe:bb:de:5d:16:b4:45:98:49: 2a:a1:47:77:64:21:3f:45:50:ad:06:a3:85:e0:a6:d6:03:90: 6f:c9:15:1b:d2:11:09:9d:9e:d7:c1:bb:16:41:7c:3b:f5:79: 62:01:41:a1:22:1a:73:68:bc:39:12:8f:70:18:56:92:f8:03: 6c:29:62:20:cf:6a:42:8b:c5:27:a9:52:4d:37:16:83:6b:81: 5b:f3:6e:c6:ce:c9:18:38:93:5e:ce:2d:45:90:56:78:46:00: 2c:68:51:9c:e7:78:82:92:64:e8:04:96:8f:c9:e9:3f:43:21: 96:50:b1:b2:51:a8:23:d6:32:b8:36:32:bf:34:61:db:f9:34: 41:db:fd:a4:12:15:11:b3:f7:45:29:ff:78:12:f9:c5:a1:33: 36:df:0d:1f:a3:ad:00:89:0c:94:2b:1e:30:6e:d2:d5:02:53: 31:28:a8:ab:6b:7c:96:79:f8:95:b2:71:f8:b7:de:61:9f:38: 8f:ab:df:a4 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHfwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA0NDVaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDYxMjhFNkFCNDY2RDcy QkRCNzVFNkY1NEQzNURDMzQ1Njg0MUMxNEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGlR9TV3QtZDjHOulQim9M2OEud4X2MVKuHByTiit0JU3CxMgK j9aPGlGSJRCK8mcvhBg9MSvC/pwbGpNoRLbt0kBl1aM8Mk6dGDwO0utIcC/Y6WMA EsKmbKmwSYDiCQ2uWXLnpkhyVqUXEF97GjZp+OLjkwx9KrTbpVXiKngdBJrMBmQ2 z+QPyr6rQZEeK+p9z8H5cf1JZkpeBoCBD7KISAg0GvtORRB87BSiK/DxkiESjpB4 LUm5ko+p4t/nuxVqGLt970rzDPfn5Qybrc0rDFALs1ZNU8aQdFFI4OibPo15/mHI ljVgnmYjiQlRlEfLQgVIWab611fbTT4PFGD1AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUYSjmq0Ztcr23Xm9U013DRWhBwUowHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1lTam1xMFp0Y3IyM1ht OVUwMTNEUldoQndVby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3R0wDQYJKoZIhvcNAQELBQADggEBAE/AxtcXXeprojTky6J5z7zdfZJShPQ6 XrLn3+PCyjLiJ2UOJdV8COqjnBr5Bqcrd2oQJRInvDjg1gWREKItSP673l0WtEWY SSqhR3dkIT9FUK0Go4XgptYDkG/JFRvSEQmdntfBuxZBfDv1eWIBQaEiGnNovDkS j3AYVpL4A2wpYiDPakKLxSepUk03FoNrgVvzbsbOyRg4k17OLUWQVnhGACxoUZzn eIKSZOgElo/J6T9DIZZQsbJRqCPWMrg2Mr80Ydv5NEHb/aQSFRGz90Up/3gS+cWh MzbfDR+jrQCJDJQrHjBu0tUCUzEoqKtrfJZ5+JWycfi33mGfOI+r36Q= -----END CERTIFICATE-----Generated at Mon Oct 20 13:30:53 2025 by rpki-client