$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/_m4ZhQ9ndOjUVu3uFiAF75rOEIA.roa File: _m4ZhQ9ndOjUVu3uFiAF75rOEIA.roa (raw, json) Hash identifier: 9ov6DEzrASgnszenBc8P1grK0TRxaukiuadiOx0BU0k= Subject key identifier: FE:6E:19:85:0F:67:74:E8:D4:56:ED:EE:16:20:05:EF:9A:CE:10:80 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1E8E Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/_m4ZhQ9ndOjUVu3uFiAF75rOEIA.roa Signing time: Sat 13 Sep 2025 03:05:15 +0000 ROA not before: Sat 13 Sep 2025 03:05:15 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 24373 IP address blocks: 45.252.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 18:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7822 (0x1e8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:05:15 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=FE6E19850F6774E8D456EDEE162005EF9ACE1080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d0:a7:10:a3:82:e8:29:24:8e:f5:49:f9:9d: 4d:61:32:2b:9f:5e:ff:27:25:a1:80:58:93:84:59: 40:1a:7f:03:ef:5d:cd:a9:52:70:18:a3:e7:ca:6d: db:0f:63:09:24:aa:19:c5:b7:96:fd:ba:1a:22:a2: 1a:43:33:2f:37:6e:83:a2:2a:d8:f7:9b:b4:18:a7: c7:68:ce:49:38:2d:a2:06:a1:ac:8a:c0:15:c4:25: 58:0a:c8:c9:28:a5:d9:ca:d2:67:19:d3:0d:2e:5b: b5:fb:36:84:c8:c9:e8:e3:58:5b:dd:c0:48:c2:9b: 12:6f:3c:33:23:99:6b:33:bd:d4:30:e2:89:9a:f8: 6e:74:55:8b:16:94:46:a9:a2:7d:76:f0:9f:ba:0e: 77:f0:30:af:42:d5:c2:57:a0:45:2c:48:bd:b5:ca: dd:71:c6:fb:bf:49:c9:f6:9e:a1:db:9a:be:b6:4c: 4b:28:71:09:cd:6d:d0:69:4c:f6:72:a5:ef:69:32: 79:2c:06:19:6a:b7:96:1b:32:35:96:4c:50:47:55: 9f:e3:32:00:86:b8:cd:0f:e2:5c:48:6a:b6:e9:e8: 54:c1:56:16:56:7d:38:a2:a2:b8:b5:b0:22:8b:03: 37:42:8b:ed:83:a4:83:c3:13:f6:55:dc:94:91:86: 4c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:6E:19:85:0F:67:74:E8:D4:56:ED:EE:16:20:05:EF:9A:CE:10:80 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/_m4ZhQ9ndOjUVu3uFiAF75rOEIA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.100.0/22 Signature Algorithm: sha256WithRSAEncryption 25:e2:e0:b7:96:cf:51:97:e0:c0:eb:74:7a:eb:79:e5:aa:7d: d6:8e:62:6a:f2:b6:25:65:7f:d7:eb:34:61:e8:38:15:5d:21: 35:77:63:b1:53:c1:35:04:12:8e:82:7d:56:e5:0f:77:56:3d: e5:b6:33:ef:05:5a:9a:53:6a:71:b6:de:b0:66:e4:c5:6e:a8: b3:d2:1d:a0:77:f5:a1:00:b1:ac:56:73:a4:b2:1e:87:11:04: a3:cf:47:03:44:09:ae:c9:90:6c:d8:ba:3b:e6:b6:c5:df:b2: 43:d8:42:39:42:76:a6:63:35:80:04:ef:5a:5e:51:30:c3:c6: 82:7f:7c:5d:df:b1:4d:92:1d:ca:6a:9a:86:0a:51:6f:93:8c: 67:d0:d6:a0:02:84:69:de:9c:34:30:88:03:96:8e:10:84:3c: 9a:4a:c2:a6:98:b4:92:7e:b2:2a:f8:d7:27:a7:e0:6f:69:c2: 32:ae:db:57:cd:d5:48:75:62:30:dd:eb:de:3b:56:7e:a6:c5: 60:7a:9b:a4:c7:3f:b9:70:86:d9:36:62:a0:c5:c2:97:b6:de: 3c:17:88:61:4c:58:b8:31:9f:8a:06:3b:ec:1c:5b:f0:6e:f2: ed:0f:38:e9:6c:9c:c0:9f:2d:65:75:68:19:9d:4f:e3:89:f9: f6:a1:a7:0f -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHo4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA1MTVaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEZFNkUxOTg1MEY2Nzc0 RThENDU2RURFRTE2MjAwNUVGOUFDRTEwODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDa0KcQo4LoKSSO9Un5nU1hMiufXv8nJaGAWJOEWUAafwPvXc2p UnAYo+fKbdsPYwkkqhnFt5b9uhoiohpDMy83boOiKtj3m7QYp8dozkk4LaIGoayK wBXEJVgKyMkopdnK0mcZ0w0uW7X7NoTIyejjWFvdwEjCmxJvPDMjmWszvdQw4oma +G50VYsWlEapon128J+6DnfwMK9C1cJXoEUsSL21yt1xxvu/Scn2nqHbmr62TEso cQnNbdBpTPZype9pMnksBhlqt5YbMjWWTFBHVZ/jMgCGuM0P4lxIarbp6FTBVhZW fTiiori1sCKLAzdCi+2DpIPDE/ZV3JSRhky1AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU/m4ZhQ9ndOjUVu3uFiAF75rOEIAwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L19tNFpoUTluZE9qVVZ1 M3VGaUFGNzVyT0VJQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIt/GQwDQYJKoZIhvcNAQELBQADggEBACXi4LeWz1GX4MDrdHrreeWqfdaOYmry tiVlf9frNGHoOBVdITV3Y7FTwTUEEo6CfVblD3dWPeW2M+8FWppTanG23rBm5MVu qLPSHaB39aEAsaxWc6SyHocRBKPPRwNECa7JkGzYujvmtsXfskPYQjlCdqZjNYAE 71peUTDDxoJ/fF3fsU2SHcpqmoYKUW+TjGfQ1qAChGnenDQwiAOWjhCEPJpKwqaY tJJ+sir41yen4G9pwjKu21fN1Uh1YjDd6947Vn6mxWB6m6THP7lwhtk2YqDFwpe2 3jwXiGFMWLgxn4oGO+wcW/Bu8u0POOlsnMCfLWV1aBmdT+OJ+fahpw8= -----END CERTIFICATE-----Generated at Mon Oct 20 16:57:15 2025 by rpki-client