$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/hJavIhwYRWcWT9o7giskyDn0zgU.roa File: hJavIhwYRWcWT9o7giskyDn0zgU.roa (raw, json) Hash identifier: ydm0aQvJGxEPvDY8/FYRBbb6VO5cKjRz5As4OC8rHy0= Subject key identifier: 84:96:AF:22:1C:18:45:67:16:4F:DA:3B:82:2B:24:C8:39:F4:CE:05 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1F30 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/hJavIhwYRWcWT9o7giskyDn0zgU.roa Signing time: Tue 16 Sep 2025 05:50:58 +0000 ROA not before: Tue 16 Sep 2025 05:50:58 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 25743 IP address blocks: 103.221.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 13:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7984 (0x1f30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 16 05:50:58 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=8496AF221C184567164FDA3B822B24C839F4CE05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:dd:99:4b:59:81:ba:b6:bb:8d:c3:bc:95:4e: 01:ae:77:39:8a:f8:05:f2:88:d5:fe:86:8e:ea:b7: 2c:10:cf:eb:71:fa:0a:5b:15:0c:9a:8c:13:90:ba: aa:b4:ec:03:68:fe:92:5d:55:54:8f:d4:5f:75:a0: 39:aa:fc:17:71:91:6e:d2:db:a5:b5:14:a3:bf:09: 44:9b:c8:4f:0c:80:cb:af:af:bd:ef:6a:c5:ce:0a: 60:b6:ca:54:22:0f:13:01:ef:f7:28:bb:54:c4:21: d0:62:55:8c:c2:85:7b:74:d3:d9:a5:67:9d:ad:96: c7:15:a1:d4:d2:b3:7a:ba:75:e3:f1:08:9e:55:06: 45:56:7b:f7:6a:5f:66:90:f3:e3:57:71:38:c4:ff: 02:2f:7a:30:a0:35:9c:ba:e7:ee:54:17:49:d6:fd: ea:b1:ec:ab:f7:77:b5:76:68:a8:d0:7b:94:0b:d3: 25:9d:ed:50:07:8a:90:fb:08:09:83:3d:80:42:8e: 0c:7d:44:d1:44:21:e7:5c:da:57:0c:cb:12:0a:52: 90:cd:84:0a:a8:02:db:c3:38:2a:37:0d:53:d4:e9: 62:d1:68:6f:75:15:00:2e:a3:af:67:3d:45:df:19: d5:03:8b:a4:ec:df:27:26:bf:df:75:05:e1:2a:ee: 3d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:96:AF:22:1C:18:45:67:16:4F:DA:3B:82:2B:24:C8:39:F4:CE:05 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/hJavIhwYRWcWT9o7giskyDn0zgU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.44.0/22 Signature Algorithm: sha256WithRSAEncryption 6e:c5:c8:73:12:71:d6:fb:dd:33:1f:bc:94:1d:05:13:17:3a: 9a:a0:d4:f1:c6:49:50:20:8b:d0:d6:58:76:32:02:69:27:20: f7:9e:f2:cf:15:44:50:4e:83:eb:5f:32:03:ef:aa:4e:30:c9: c4:c5:0e:89:df:e2:93:65:86:24:23:45:73:a4:5c:13:f3:d4: 83:ea:ef:19:4a:53:37:16:fb:06:5f:0b:d2:f1:c3:8c:f7:a2: fc:d3:9c:ab:38:ae:51:7f:a4:cc:da:48:0e:ad:5e:4b:e8:55: ad:b1:24:f1:98:70:f0:c2:52:82:c1:86:4d:52:fe:06:59:b2: 48:82:78:37:87:00:3c:09:67:ca:23:14:fe:cf:25:b3:09:4b: bf:9f:46:8c:91:25:a3:48:fc:90:46:1f:53:9f:79:00:30:59: 9b:b0:d2:df:08:39:0a:62:91:5f:31:2e:cf:bf:a9:e2:81:b0: 60:2f:07:35:7f:1e:c7:6f:cc:b3:0b:ff:be:c6:e2:06:6c:73: 39:ea:1b:35:a6:a9:e9:e3:7a:d9:c2:0e:f0:f3:a8:32:5a:eb: 5e:6f:1c:5d:d6:bd:24:a7:c0:0c:2c:0d:dd:52:c1:07:86:6d: 33:af:80:c0:0b:2d:fc:14:8d:68:f6:a5:4c:be:49:21:c1:76: aa:35:70:98 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHzAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTYw NTUwNThaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDg0OTZBRjIyMUMxODQ1 NjcxNjRGREEzQjgyMkIyNEM4MzlGNENFMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCc3ZlLWYG6truNw7yVTgGudzmK+AXyiNX+ho7qtywQz+tx+gpb FQyajBOQuqq07ANo/pJdVVSP1F91oDmq/BdxkW7S26W1FKO/CUSbyE8MgMuvr73v asXOCmC2ylQiDxMB7/cou1TEIdBiVYzChXt009mlZ52tlscVodTSs3q6dePxCJ5V BkVWe/dqX2aQ8+NXcTjE/wIvejCgNZy65+5UF0nW/eqx7Kv3d7V2aKjQe5QL0yWd 7VAHipD7CAmDPYBCjgx9RNFEIedc2lcMyxIKUpDNhAqoAtvDOCo3DVPU6WLRaG91 FQAuo69nPUXfGdUDi6Ts3ycmv991BeEq7j3RAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUhJavIhwYRWcWT9o7giskyDn0zgUwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2hKYXZJaHdZUldjV1Q5 bzdnaXNreURuMHpnVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn3SwwDQYJKoZIhvcNAQELBQADggEBAG7FyHMScdb73TMfvJQdBRMXOpqg1PHG SVAgi9DWWHYyAmknIPee8s8VRFBOg+tfMgPvqk4wycTFDonf4pNlhiQjRXOkXBPz 1IPq7xlKUzcW+wZfC9Lxw4z3ovzTnKs4rlF/pMzaSA6tXkvoVa2xJPGYcPDCUoLB hk1S/gZZskiCeDeHADwJZ8ojFP7PJbMJS7+fRoyRJaNI/JBGH1OfeQAwWZuw0t8I OQpikV8xLs+/qeKBsGAvBzV/HsdvzLML/77G4gZscznqGzWmqenjetnCDvDzqDJa 615vHF3WvSSnwAwsDd1SwQeGbTOvgMALLfwUjWj2pUy+SSHBdqo1cJg= -----END CERTIFICATE-----Generated at Mon Oct 20 13:13:46 2025 by rpki-client