$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/bLp3HCVni2vmREHQGa5F0OezrTA.roa File: bLp3HCVni2vmREHQGa5F0OezrTA.roa (raw, json) Hash identifier: QDyi1x/hrcHoMREsydjCN7ryxE4ErHgCEHSPxQyfJ18= Subject key identifier: 6C:BA:77:1C:25:67:8B:6B:E6:44:41:D0:19:AE:45:D0:E7:B3:AD:30 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1EB8 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/bLp3HCVni2vmREHQGa5F0OezrTA.roa Signing time: Sat 13 Sep 2025 03:05:24 +0000 ROA not before: Sat 13 Sep 2025 03:05:24 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 138527 IP address blocks: 45.252.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 13:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7864 (0x1eb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:05:24 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=6CBA771C25678B6BE64441D019AE45D0E7B3AD30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3b:53:48:83:a9:ac:08:c5:7c:41:c5:ac:bb: bd:46:14:29:23:fe:24:1f:c7:32:52:77:d1:a3:a1: de:84:3d:85:e9:40:6b:a6:3c:b1:9f:33:41:11:9a: 20:a1:7c:b9:9c:31:03:5b:30:9e:b1:ce:b8:b3:4f: e2:c4:14:b5:3e:47:59:38:57:13:23:11:78:19:47: dc:02:b5:38:88:bb:be:ec:02:8b:c3:11:87:3e:41: 50:50:cf:4c:30:7a:1c:f3:70:47:03:a4:d2:95:8c: 23:e3:25:29:93:76:1e:40:c3:3e:67:4f:f2:6c:55: 99:db:36:26:17:2a:ab:d6:dc:10:91:64:37:c1:c0: 9f:0e:1c:b9:6e:13:98:b0:32:41:82:0d:c7:0f:e0: 54:be:dd:0a:e4:52:7f:0e:6a:9f:61:9c:cf:c5:16: 36:f4:39:b6:e1:37:01:37:58:e1:f1:66:a2:84:86: e7:36:11:bc:e2:17:11:16:dd:25:25:b3:2f:3b:3d: 9a:4d:ca:a2:0e:08:d0:d7:c6:58:93:29:4c:45:3e: c9:79:1f:ee:77:bc:d0:7b:92:17:49:78:f8:86:74: a9:0e:99:81:79:25:c8:86:3b:7e:5d:09:28:46:ab: 2a:f2:bc:25:2e:a0:06:e2:b0:60:68:fb:af:90:f5: 74:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:BA:77:1C:25:67:8B:6B:E6:44:41:D0:19:AE:45:D0:E7:B3:AD:30 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/bLp3HCVni2vmREHQGa5F0OezrTA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.8.0/22 Signature Algorithm: sha256WithRSAEncryption 06:36:ff:5f:0d:6d:d7:16:1b:cb:27:85:01:3b:9d:8d:e1:19: a2:9f:82:70:2c:06:da:83:bd:2b:ab:12:7e:12:8b:36:63:2b: c8:09:7a:26:5c:86:c1:10:74:67:26:d6:52:27:40:9e:61:cc: 63:f8:17:f3:e7:80:2f:d8:82:68:35:59:ff:cf:54:24:22:ab: ff:66:90:05:7d:db:e9:fb:92:dd:ad:36:5e:5d:cd:fd:2d:83: 12:cf:4a:da:9e:a7:eb:c2:03:9e:63:de:60:ed:f4:95:5c:ca: 7d:9c:aa:43:87:52:b8:22:ec:60:da:2c:ef:1f:ba:2c:ac:39: 3a:2b:02:86:29:51:b0:1c:88:59:a1:53:b9:8e:e2:f3:e5:d6: e4:b4:6e:72:ef:6f:ae:68:f5:ff:8c:4f:e7:bf:b6:7c:4c:78: f4:a9:81:1a:d9:e8:d9:1e:bb:1e:cf:0a:c0:75:d3:84:4b:a6: 86:bf:73:ad:18:65:ce:4e:85:44:3a:9a:86:f8:b2:04:2e:c2: b4:ce:db:01:45:3b:af:1e:a1:1c:b8:46:31:43:17:f9:36:7e: fa:6a:10:a6:53:63:f0:b8:dd:12:c3:9b:58:7a:9e:c0:3f:0e: b8:54:9b:31:77:96:66:7f:a4:ab:6e:cd:13:34:1a:7c:48:4a: 14:e9:71:66 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHrgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA1MjRaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDZDQkE3NzFDMjU2NzhC NkJFNjQ0NDFEMDE5QUU0NUQwRTdCM0FEMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzO1NIg6msCMV8QcWsu71GFCkj/iQfxzJSd9Gjod6EPYXpQGum PLGfM0ERmiChfLmcMQNbMJ6xzrizT+LEFLU+R1k4VxMjEXgZR9wCtTiIu77sAovD EYc+QVBQz0wwehzzcEcDpNKVjCPjJSmTdh5Awz5nT/JsVZnbNiYXKqvW3BCRZDfB wJ8OHLluE5iwMkGCDccP4FS+3QrkUn8Oap9hnM/FFjb0ObbhNwE3WOHxZqKEhuc2 EbziFxEW3SUlsy87PZpNyqIOCNDXxliTKUxFPsl5H+53vNB7khdJePiGdKkOmYF5 JciGO35dCShGqyryvCUuoAbisGBo+6+Q9XSDAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUbLp3HCVni2vmREHQGa5F0OezrTAwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2JMcDNIQ1ZuaTJ2bVJF SFFHYTVGME9lenJUQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIt/AgwDQYJKoZIhvcNAQELBQADggEBAAY2/18NbdcWG8snhQE7nY3hGaKfgnAs BtqDvSurEn4SizZjK8gJeiZchsEQdGcm1lInQJ5hzGP4F/PngC/Ygmg1Wf/PVCQi q/9mkAV92+n7kt2tNl5dzf0tgxLPStqep+vCA55j3mDt9JVcyn2cqkOHUrgi7GDa LO8fuiysOTorAoYpUbAciFmhU7mO4vPl1uS0bnLvb65o9f+MT+e/tnxMePSpgRrZ 6Nkeux7PCsB104RLpoa/c60YZc5OhUQ6mob4sgQuwrTO2wFFO68eoRy4RjFDF/k2 fvpqEKZTY/C43RLDm1h6nsA/DrhUmzF3lmZ/pKtuzRM0GnxIShTpcWY= -----END CERTIFICATE-----Generated at Mon Oct 20 13:30:52 2025 by rpki-client