$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/_UtDVuoIsa-Vz5LG8pCTwbxJJoM.roa File: _UtDVuoIsa-Vz5LG8pCTwbxJJoM.roa (raw, json) Hash identifier: 34VqWYDqWcSBu3AKrhwCWJ+RU5lQEPpB3c6kK8J9DZI= Subject key identifier: FD:4B:43:56:EA:08:B1:AF:95:CF:92:C6:F2:90:93:C1:BC:49:26:83 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1E8B Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/_UtDVuoIsa-Vz5LG8pCTwbxJJoM.roa Signing time: Sat 13 Sep 2025 03:05:14 +0000 ROA not before: Sat 13 Sep 2025 03:05:14 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 4812 IP address blocks: 103.24.118.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 18:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7819 (0x1e8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:05:14 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=FD4B4356EA08B1AF95CF92C6F29093C1BC492683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:84:9e:e9:d1:d0:4d:43:ca:e9:66:9c:21:0c: 03:8a:4b:2d:3f:f9:9e:75:e8:8e:94:03:ce:f8:b2: 6b:7d:17:53:ee:8f:a6:82:e0:aa:b0:e3:0b:d3:35: b6:5b:91:a8:c1:98:e3:a6:41:fa:91:74:02:ac:e6: c7:1b:69:e3:da:d6:d7:50:69:7c:ab:cb:0e:98:60: 66:b2:f6:31:97:ab:79:20:51:5f:ca:86:8a:92:fa: c0:ae:5b:6e:b0:20:9c:bc:1a:60:f7:4b:6c:30:ec: d5:31:2c:bc:c3:9b:22:99:3e:a3:c4:2d:b0:25:b9: 7e:c5:ab:87:18:ee:3d:76:a9:09:1d:d1:33:68:33: a0:91:65:63:fb:15:4c:2b:d9:46:7f:a6:76:ed:32: cc:f5:87:54:d7:c7:fa:52:06:e9:ff:20:c5:a7:be: 2c:e2:81:88:e8:14:d9:9c:60:27:fc:c2:66:ad:09: 52:bc:18:2f:1f:a0:cb:06:d5:c0:db:e2:59:c2:9c: de:78:63:ac:af:d2:ff:ba:b6:34:42:62:af:ce:90: fe:3a:02:db:b7:67:15:c8:6e:68:4f:e1:b5:b3:5a: 1e:ed:b1:1b:fd:31:c7:73:b2:b3:2e:4b:81:52:0e: 91:89:67:92:d6:fa:80:82:b6:77:46:cb:fc:65:6b: c2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:4B:43:56:EA:08:B1:AF:95:CF:92:C6:F2:90:93:C1:BC:49:26:83 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/_UtDVuoIsa-Vz5LG8pCTwbxJJoM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.24.118.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:65:65:a4:1b:64:db:b0:31:e6:74:75:e2:40:41:60:ba:01: e1:36:38:44:8a:d3:3b:4a:38:d2:e5:72:04:70:82:1d:c9:29: 41:04:cd:e9:0f:d7:26:0e:26:5e:7f:e1:2e:cc:5f:eb:81:2d: 7d:00:3f:1b:0f:60:a9:a7:48:56:d4:4d:0f:d7:2d:bd:ba:40: 32:c3:ba:18:e8:61:ce:a9:98:fc:55:bb:07:57:b9:65:cf:15: fb:16:b2:ae:2b:2f:18:8f:ee:ed:0f:66:7a:76:cd:74:36:c6: e6:78:59:2b:e0:10:a3:d4:d8:74:a2:f8:b9:8f:ab:e7:be:5f: 17:5f:0c:04:49:48:b1:bf:a7:4e:13:7d:8b:c4:b4:36:3c:82: 39:74:e7:60:81:31:bb:be:7c:1d:6b:ca:13:de:ce:e5:9b:5c: 5c:b3:53:18:47:15:e9:a7:68:ef:9f:4c:46:6a:c4:f8:f1:14: 85:03:b4:9e:2d:ab:c3:9d:df:24:e7:6b:cc:55:45:b8:be:2f: 14:73:4e:6c:81:fb:a7:97:40:31:e8:f3:8b:45:f1:95:b7:eb: 82:6d:ec:82:18:d3:99:b7:0d:1b:dd:63:7e:0a:8e:5e:e1:a8: 8c:e7:a0:71:43:17:01:b5:c3:a6:bc:2f:83:11:06:4a:22:6a: 96:20:9c:01 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHoswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA1MTRaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEZENEI0MzU2RUEwOEIx QUY5NUNGOTJDNkYyOTA5M0MxQkM0OTI2ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwhJ7p0dBNQ8rpZpwhDAOKSy0/+Z516I6UA874smt9F1Puj6aC 4Kqw4wvTNbZbkajBmOOmQfqRdAKs5scbaePa1tdQaXyryw6YYGay9jGXq3kgUV/K hoqS+sCuW26wIJy8GmD3S2ww7NUxLLzDmyKZPqPELbAluX7Fq4cY7j12qQkd0TNo M6CRZWP7FUwr2UZ/pnbtMsz1h1TXx/pSBun/IMWnvizigYjoFNmcYCf8wmatCVK8 GC8foMsG1cDb4lnCnN54Y6yv0v+6tjRCYq/OkP46Atu3ZxXIbmhP4bWzWh7tsRv9 McdzsrMuS4FSDpGJZ5LW+oCCtndGy/xla8IfAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU/UtDVuoIsa+Vz5LG8pCTwbxJJoMwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L19VdERWdW9Jc2EtVno1 TEc4cENUd2J4SkpvTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnGHYwDQYJKoZIhvcNAQELBQADggEBAAplZaQbZNuwMeZ0deJAQWC6AeE2OESK 0ztKONLlcgRwgh3JKUEEzekP1yYOJl5/4S7MX+uBLX0APxsPYKmnSFbUTQ/XLb26 QDLDuhjoYc6pmPxVuwdXuWXPFfsWsq4rLxiP7u0PZnp2zXQ2xuZ4WSvgEKPU2HSi +LmPq+e+XxdfDARJSLG/p04TfYvEtDY8gjl052CBMbu+fB1ryhPezuWbXFyzUxhH FemnaO+fTEZqxPjxFIUDtJ4tq8Od3yTna8xVRbi+LxRzTmyB+6eXQDHo84tF8ZW3 64Jt7IIY05m3DRvdY34Kjl7hqIznoHFDFwG1w6a8L4MRBkoiapYgnAE= -----END CERTIFICATE-----Generated at Mon Oct 20 17:43:06 2025 by rpki-client