$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/i9ADRFpBScfSEMIYBvBDe-hd6B0.roa File: i9ADRFpBScfSEMIYBvBDe-hd6B0.roa (raw, json) Hash identifier: qILHP6y1zBvlxvC5Vk2KBaZhDRMH/TTi9DX74mTSOho= Subject key identifier: 8B:D0:03:44:5A:41:49:C7:D2:10:C2:18:06:F0:43:7B:E8:5D:E8:1D Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1EB6 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/i9ADRFpBScfSEMIYBvBDe-hd6B0.roa Signing time: Sat 13 Sep 2025 03:05:24 +0000 ROA not before: Sat 13 Sep 2025 03:05:24 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 139259 IP address blocks: 103.220.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 13:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7862 (0x1eb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:05:24 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=8BD003445A4149C7D210C21806F0437BE85DE81D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4a:06:86:0d:44:e4:54:17:ac:39:68:27:0f: 7e:ff:b5:75:ea:38:25:28:bb:96:2e:c0:81:b9:97: 36:1d:50:25:e3:77:36:8b:32:99:11:aa:90:07:a1: 8b:91:ab:71:53:1d:4a:08:d6:b0:4f:e5:8d:49:d0: dd:d6:65:cb:27:d2:b0:83:ed:45:2d:b3:26:64:c6: 96:61:5d:14:55:d3:34:38:9f:5c:66:27:b8:b5:e6: 5d:e9:18:ef:7d:bc:49:63:44:cc:5d:07:6a:bf:65: 3d:11:48:da:a9:9d:c0:e5:11:9d:d3:da:e8:81:97: 83:41:55:05:ba:54:ed:79:e6:c2:4f:26:0c:5c:18: 82:5a:11:af:49:ea:c5:03:f0:78:79:78:f3:91:3e: e8:e3:21:db:6b:ba:21:10:0e:32:54:16:8c:65:2a: 86:1b:83:d4:42:b5:f0:6a:da:05:3e:30:29:58:4b: ac:f7:18:39:ea:1c:ed:50:10:c9:b1:67:85:24:26: a6:16:34:a5:90:bf:13:a4:8a:c2:bd:bb:6f:48:8e: f6:5d:4d:42:d4:75:18:9b:3f:e3:32:97:67:98:23: 10:26:60:ba:97:4d:27:2e:16:d1:35:73:94:80:18: e2:da:8f:57:70:77:e0:e1:21:3d:ed:e0:73:c6:08: 6f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:D0:03:44:5A:41:49:C7:D2:10:C2:18:06:F0:43:7B:E8:5D:E8:1D X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/i9ADRFpBScfSEMIYBvBDe-hd6B0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.220.248.0/24 Signature Algorithm: sha256WithRSAEncryption b5:0e:2a:4b:30:76:1b:5c:eb:19:87:ff:d5:be:ca:49:1c:67: b5:f7:ae:7e:63:f7:0b:52:9e:c3:e4:d9:0e:96:e7:bc:dd:63: 73:13:e3:80:96:f7:6e:bd:b8:23:88:5f:d4:4f:fa:4d:0f:f6: 3d:c7:74:ba:bb:29:17:2a:1b:ab:15:89:db:31:2e:0e:10:c9: d6:f0:b2:11:08:c6:f6:53:b2:35:55:7a:69:63:3b:56:3a:1e: 47:19:20:73:a7:71:9e:0b:04:78:6a:0f:4b:3c:ec:db:64:e6: 62:61:94:97:bd:45:74:00:dd:f3:6b:95:ff:9c:c1:aa:74:74: 06:83:0b:c7:b5:69:68:bd:57:28:34:de:4a:0b:c8:57:41:f2: 4a:22:ee:57:91:7a:da:fb:69:6b:39:1a:f1:fd:42:61:0a:48: 81:b1:96:78:4b:8a:93:3e:47:39:9d:96:08:04:39:82:e8:9f: fd:b5:aa:d7:5c:92:43:fc:13:e6:92:9a:41:9b:04:13:4b:b9: 6a:64:df:53:13:98:d4:c6:21:d9:4c:f9:06:7f:c7:60:bb:eb: 63:78:66:13:d7:3a:da:71:7d:85:09:8c:f7:95:16:11:a0:e5: e8:ba:6e:72:8c:26:1d:b8:7a:36:2f:5b:4c:4b:5b:e8:d2:83: 2b:41:30:90 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHrYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA1MjRaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDhCRDAwMzQ0NUE0MTQ5 QzdEMjEwQzIxODA2RjA0MzdCRTg1REU4MUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6SgaGDUTkVBesOWgnD37/tXXqOCUou5YuwIG5lzYdUCXjdzaL MpkRqpAHoYuRq3FTHUoI1rBP5Y1J0N3WZcsn0rCD7UUtsyZkxpZhXRRV0zQ4n1xm J7i15l3pGO99vEljRMxdB2q/ZT0RSNqpncDlEZ3T2uiBl4NBVQW6VO155sJPJgxc GIJaEa9J6sUD8Hh5ePORPujjIdtruiEQDjJUFoxlKoYbg9RCtfBq2gU+MClYS6z3 GDnqHO1QEMmxZ4UkJqYWNKWQvxOkisK9u29IjvZdTULUdRibP+Myl2eYIxAmYLqX TScuFtE1c5SAGOLaj1dwd+DhIT3t4HPGCG9FAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUi9ADRFpBScfSEMIYBvBDe+hd6B0wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2k5QURSRnBCU2NmU0VN SVlCdkJEZS1oZDZCMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3PgwDQYJKoZIhvcNAQELBQADggEBALUOKkswdhtc6xmH/9W+ykkcZ7X3rn5j 9wtSnsPk2Q6W57zdY3MT44CW9269uCOIX9RP+k0P9j3HdLq7KRcqG6sVidsxLg4Q ydbwshEIxvZTsjVVemljO1Y6HkcZIHOncZ4LBHhqD0s87Ntk5mJhlJe9RXQA3fNr lf+cwap0dAaDC8e1aWi9Vyg03koLyFdB8koi7leRetr7aWs5GvH9QmEKSIGxlnhL ipM+RzmdlggEOYLon/21qtdckkP8E+aSmkGbBBNLuWpk31MTmNTGIdlM+QZ/x2C7 62N4ZhPXOtpxfYUJjPeVFhGg5ei6bnKMJh24ejYvW0xLW+jSgytBMJA= -----END CERTIFICATE-----Generated at Mon Oct 20 13:13:38 2025 by rpki-client