$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/_dwvSYvdDCS0zb1XgmuLY1yzv-4.roa File: _dwvSYvdDCS0zb1XgmuLY1yzv-4.roa (raw, json) Hash identifier: es8CRrEY+ln7CezCRyVu6xVOTnly9t8ZebVHU5WsXmo= Subject key identifier: FD:DC:2F:49:8B:DD:0C:24:B4:CD:BD:57:82:6B:8B:63:5C:B3:BF:EE Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1E78 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/_dwvSYvdDCS0zb1XgmuLY1yzv-4.roa Signing time: Sat 13 Sep 2025 03:05:11 +0000 ROA not before: Sat 13 Sep 2025 03:05:11 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 139259 IP address blocks: 45.252.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 00:35:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7800 (0x1e78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:05:11 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=FDDC2F498BDD0C24B4CDBD57826B8B635CB3BFEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d6:43:02:cc:43:42:ec:cc:9a:37:b5:eb:e9: 47:47:dc:11:ca:08:59:05:ea:30:aa:03:cd:6e:86: 9a:83:63:e1:34:9b:6b:2d:8e:93:4c:8c:41:11:e6: cf:c3:82:27:a0:a6:c1:d8:2d:d4:c5:68:3d:5c:77: 0a:23:b9:c8:bb:f1:18:d8:64:a3:34:05:b9:f9:de: 49:8e:60:13:67:cb:e1:76:ad:14:7f:9c:5b:b8:d9: fb:2a:e8:cf:33:c0:88:b9:a6:a9:36:19:6b:05:18: 18:5b:42:36:5b:01:1f:ac:d8:b7:31:67:db:01:0e: 04:33:00:f7:e8:4c:db:4d:8b:d7:1f:df:f3:11:8a: 52:1f:65:c0:40:23:30:b0:35:97:1a:25:b9:97:67: ce:e3:95:f1:10:9f:6e:5c:7a:f5:97:18:cf:db:30: 8a:91:45:8b:35:02:db:66:77:89:a8:84:75:f3:53: 37:c6:70:0b:88:e2:fa:71:31:a0:12:4d:48:b1:d2: 4d:02:dc:0d:41:dc:cf:ee:a0:0d:d6:67:11:dd:52: db:c5:4b:b9:ac:d9:f0:7a:c9:e6:ab:8a:09:5d:fd: 89:d3:79:a8:fa:5f:0d:49:09:2e:f8:a9:ff:9c:8a: 77:7f:97:c0:3c:1f:13:42:51:d6:26:b8:fa:5f:46: 8a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:DC:2F:49:8B:DD:0C:24:B4:CD:BD:57:82:6B:8B:63:5C:B3:BF:EE X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/_dwvSYvdDCS0zb1XgmuLY1yzv-4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.84.0/22 Signature Algorithm: sha256WithRSAEncryption ab:0c:99:56:92:ee:01:79:53:38:46:c7:c9:1d:05:47:ed:f8: cc:e2:f2:a2:ee:5c:9b:80:ef:1b:9d:ae:d8:d2:2c:bf:05:fc: 64:c0:66:29:92:55:f0:ba:6c:88:36:c5:a3:02:7c:e4:e6:4e: 27:34:7f:40:75:75:7b:75:c6:12:98:86:15:1f:e0:96:84:c0: dd:56:73:a3:b9:a4:31:9e:e6:4a:9b:72:b2:76:ca:e6:7c:3d: c3:bf:31:67:1b:ae:ac:e5:75:00:c9:d0:43:13:7f:85:b8:72: ab:cb:aa:c3:1c:76:52:17:36:14:a8:72:42:d4:51:5e:e7:15: f4:ba:91:84:1f:26:cb:0a:13:4b:29:ef:c1:60:b1:4e:ed:8f: 9d:a4:66:d1:92:3c:d5:44:bc:79:b8:5f:c7:3e:34:0c:98:f5: bc:5f:a3:d1:8e:e0:74:66:7a:ef:d9:25:72:30:65:47:57:2a: fe:ad:80:d3:ba:d2:71:cb:24:13:9c:6b:7c:6f:b4:52:fa:81: 38:4b:06:bf:87:f6:6b:16:49:9a:62:eb:dd:55:a6:77:2c:51: 21:eb:c1:c7:5f:e7:1f:07:2a:07:94:60:5e:fc:12:ea:1c:ad: 05:64:f0:57:d8:66:1a:c1:61:44:0d:b3:ef:38:75:cf:db:f9: 9f:f7:e6:32 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHngwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA1MTFaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEZEREMyRjQ5OEJERDBD MjRCNENEQkQ1NzgyNkI4QjYzNUNCM0JGRUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDI1kMCzENC7MyaN7Xr6UdH3BHKCFkF6jCqA81uhpqDY+E0m2st jpNMjEER5s/DgiegpsHYLdTFaD1cdwojuci78RjYZKM0Bbn53kmOYBNny+F2rRR/ nFu42fsq6M8zwIi5pqk2GWsFGBhbQjZbAR+s2LcxZ9sBDgQzAPfoTNtNi9cf3/MR ilIfZcBAIzCwNZcaJbmXZ87jlfEQn25cevWXGM/bMIqRRYs1Attmd4mohHXzUzfG cAuI4vpxMaASTUix0k0C3A1B3M/uoA3WZxHdUtvFS7ms2fB6yearigld/YnTeaj6 Xw1JCS74qf+cind/l8A8HxNCUdYmuPpfRoqzAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU/dwvSYvdDCS0zb1XgmuLY1yzv+4wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L19kd3ZTWXZkRENTMHpi MVhnbXVMWTF5enYtNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIt/FQwDQYJKoZIhvcNAQELBQADggEBAKsMmVaS7gF5UzhGx8kdBUft+Mzi8qLu XJuA7xudrtjSLL8F/GTAZimSVfC6bIg2xaMCfOTmTic0f0B1dXt1xhKYhhUf4JaE wN1Wc6O5pDGe5kqbcrJ2yuZ8PcO/MWcbrqzldQDJ0EMTf4W4cqvLqsMcdlIXNhSo ckLUUV7nFfS6kYQfJssKE0sp78FgsU7tj52kZtGSPNVEvHm4X8c+NAyY9bxfo9GO 4HRmeu/ZJXIwZUdXKv6tgNO60nHLJBOca3xvtFL6gThLBr+H9msWSZpi691Vpncs USHrwcdf5x8HKgeUYF78EuocrQVk8FfYZhrBYUQNs+84dc/b+Z/35jI= -----END CERTIFICATE-----Generated at Mon Oct 20 23:27:26 2025 by rpki-client