$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/YgKuqJpJYK-zXTcKzWPqlDVQxKY.roa File: YgKuqJpJYK-zXTcKzWPqlDVQxKY.roa (raw, json) Hash identifier: Kk0qYoW3qbiT8UXz/dbTcNR5biYPZHVitzANFzsq/V0= Subject key identifier: 62:02:AE:A8:9A:49:60:AF:B3:5D:37:0A:CD:63:EA:94:35:50:C4:A6 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1DF3 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/YgKuqJpJYK-zXTcKzWPqlDVQxKY.roa Signing time: Sat 13 Sep 2025 03:04:43 +0000 ROA not before: Sat 13 Sep 2025 03:04:43 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 139259 IP address blocks: 103.221.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 13:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7667 (0x1df3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:04:43 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=6202AEA89A4960AFB35D370ACD63EA943550C4A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ba:1a:9a:ed:3d:7f:05:0e:99:62:71:ed:21: 2b:e7:63:bc:5b:81:b8:86:2f:99:5c:2c:0f:25:ff: ab:a7:0f:bf:41:9a:54:58:5d:a8:91:ae:85:e8:ca: b6:d2:c8:45:6b:23:6f:7b:5c:99:19:36:18:e9:fe: 85:43:21:ed:78:7c:5e:61:e2:e2:41:cf:0e:bc:a5: b1:01:0b:f5:1e:ce:d5:49:d9:91:4f:02:a4:28:9e: 76:45:bf:be:8b:f8:c7:b3:77:27:09:0a:68:2a:85: 42:bc:81:f2:1f:42:44:ec:45:ce:61:20:75:15:15: d1:a8:0f:cd:32:31:8d:b0:9e:bd:c6:30:04:c5:38: ac:72:e8:74:0a:82:e8:da:6c:8a:73:6e:77:e0:93: 13:53:cd:e8:bd:88:93:5f:3b:8b:4f:61:ed:b8:29: 16:2c:b9:c2:93:20:b3:bc:fd:f4:97:a0:bc:a9:47: d9:15:9c:8e:a2:60:91:6e:f5:15:5f:d1:2d:b2:6e: cc:60:a8:95:bb:bb:5d:d3:21:c1:d8:f5:58:39:cf: 87:93:65:cd:a8:44:18:94:18:99:5e:c3:fc:e1:f4: 02:f6:c9:c0:5d:06:05:08:be:3c:ed:22:d5:8a:e8: c0:4c:de:66:76:0f:b3:cc:91:7d:8c:f0:87:7e:e9: b9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:02:AE:A8:9A:49:60:AF:B3:5D:37:0A:CD:63:EA:94:35:50:C4:A6 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/YgKuqJpJYK-zXTcKzWPqlDVQxKY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.34.0/24 Signature Algorithm: sha256WithRSAEncryption 04:ac:15:87:4b:5c:2a:36:b1:d5:da:8b:f4:ad:49:6f:77:83: ed:05:1d:4b:49:2e:2c:28:40:66:20:bd:aa:c9:1c:cc:91:c7: c9:df:70:24:dc:7e:27:0a:1e:a3:df:4d:3f:d9:75:a7:a1:9b: 30:63:cd:d3:19:0c:18:a2:fa:25:77:fe:2b:f4:b6:7d:98:9f: c8:59:d1:39:c9:d6:85:c1:9a:c4:8a:86:82:02:c5:6a:fa:34: c4:09:e6:6d:aa:95:c3:c5:e8:03:1f:eb:e3:cc:1b:bc:04:87: 46:d8:28:e4:dc:34:54:98:e1:5f:5f:3f:cc:eb:ef:23:f1:68: 1a:88:11:bc:d1:a0:44:b4:8e:19:ec:67:1c:78:c7:9b:ce:54: 4d:ec:01:b0:19:ce:e1:3c:dc:72:4d:41:4c:b0:39:04:3e:19: 92:1b:24:15:a3:a1:95:99:a5:ee:56:13:6f:89:2f:ac:d7:f9: 98:a4:1d:4a:cf:64:b0:3b:dd:c1:18:07:50:91:e9:5f:33:5f: 9e:32:16:8e:60:aa:a0:e7:6d:4d:bc:ca:62:9b:12:41:1b:cb: 51:0f:35:aa:d6:90:5c:68:aa:fa:6f:f2:11:21:ec:bf:9d:99: db:cc:bf:a8:63:42:95:2a:ab:61:7e:04:a2:ae:82:e5:ff:55: ec:28:6e:75 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHfMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA0NDNaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDYyMDJBRUE4OUE0OTYw QUZCMzVEMzcwQUNENjNFQTk0MzU1MEM0QTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5uhqa7T1/BQ6ZYnHtISvnY7xbgbiGL5lcLA8l/6unD79BmlRY XaiRroXoyrbSyEVrI297XJkZNhjp/oVDIe14fF5h4uJBzw68pbEBC/UeztVJ2ZFP AqQonnZFv76L+MezdycJCmgqhUK8gfIfQkTsRc5hIHUVFdGoD80yMY2wnr3GMATF OKxy6HQKgujabIpzbnfgkxNTzei9iJNfO4tPYe24KRYsucKTILO8/fSXoLypR9kV nI6iYJFu9RVf0S2ybsxgqJW7u13TIcHY9Vg5z4eTZc2oRBiUGJlew/zh9AL2ycBd BgUIvjztItWK6MBM3mZ2D7PMkX2M8Id+6bm/AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUYgKuqJpJYK+zXTcKzWPqlDVQxKYwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1lnS3VxSnBKWUstelhU Y0t6V1BxbERWUXhLWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3SIwDQYJKoZIhvcNAQELBQADggEBAASsFYdLXCo2sdXai/StSW93g+0FHUtJ LiwoQGYgvarJHMyRx8nfcCTcficKHqPfTT/ZdaehmzBjzdMZDBii+iV3/iv0tn2Y n8hZ0TnJ1oXBmsSKhoICxWr6NMQJ5m2qlcPF6AMf6+PMG7wEh0bYKOTcNFSY4V9f P8zr7yPxaBqIEbzRoES0jhnsZxx4x5vOVE3sAbAZzuE83HJNQUywOQQ+GZIbJBWj oZWZpe5WE2+JL6zX+ZikHUrPZLA73cEYB1CR6V8zX54yFo5gqqDnbU28ymKbEkEb y1EPNarWkFxoqvpv8hEh7L+dmdvMv6hjQpUqq2F+BKKuguX/VewobnU= -----END CERTIFICATE-----Generated at Mon Oct 20 13:18:01 2025 by rpki-client