$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/ibS-Rsf73-9yOETtLQH1a_6NgVc.roa File: ibS-Rsf73-9yOETtLQH1a_6NgVc.roa (raw, json) Hash identifier: lQ22C+7zSpiNAoTTu8bfvS2adbSdZElCUDSFGgQvOGM= Subject key identifier: 89:B4:BE:46:C7:FB:DF:EF:72:38:44:ED:2D:01:F5:6B:FE:8D:81:57 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1E1F Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/ibS-Rsf73-9yOETtLQH1a_6NgVc.roa Signing time: Sat 13 Sep 2025 03:04:52 +0000 ROA not before: Sat 13 Sep 2025 03:04:52 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 139259 IP address blocks: 103.221.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 13:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7711 (0x1e1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:04:52 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=89B4BE46C7FBDFEF723844ED2D01F56BFE8D8157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6d:46:d3:9c:64:9e:8f:a6:cf:e9:5f:16:d6: 22:c3:c1:b8:66:d1:8a:c8:18:ba:56:cc:ea:b2:64: fc:7d:91:a4:1c:69:6f:e8:06:57:b2:9d:05:53:39: 00:7f:0d:ff:b2:0c:5f:b6:38:ef:51:52:52:1d:67: 1f:e9:38:c0:b3:ab:30:b8:0b:e8:95:cc:48:c3:a3: 5c:f7:a1:b5:cd:74:18:a7:a5:5e:2a:83:28:63:f8: d9:6c:a0:5b:2a:32:b7:73:60:fe:f1:2e:cd:49:bf: fb:e3:ef:51:f6:3f:7c:88:08:bb:1f:4c:98:c5:e0: 55:ba:0c:63:ac:9a:6f:1f:e3:e3:75:7c:cc:f4:25: a5:7e:0e:4a:13:c8:db:af:b2:56:01:bb:3b:00:22: 56:ad:ce:db:39:06:7f:5f:49:14:cc:da:80:69:01: 30:ef:97:ae:cf:35:a6:ab:41:84:b1:7f:65:c5:e1: 3d:88:11:66:c0:be:fc:a4:54:6a:0d:25:76:8d:38: c6:9b:42:56:bd:4e:df:51:d8:14:c2:0c:c6:b5:83: ac:3d:2c:38:67:64:66:7b:0f:67:a5:df:f9:71:6d: 9a:8b:3f:04:97:28:dd:73:6c:04:e9:b3:a8:4e:29: 59:b8:7a:3a:62:0f:92:50:a0:c0:10:73:bb:8a:cd: 26:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B4:BE:46:C7:FB:DF:EF:72:38:44:ED:2D:01:F5:6B:FE:8D:81:57 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/ibS-Rsf73-9yOETtLQH1a_6NgVc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.95.0/24 Signature Algorithm: sha256WithRSAEncryption ba:c5:ec:e1:b6:db:ff:9c:0a:3c:12:9e:0d:d0:b5:f2:3f:2f: cc:76:74:54:ec:06:f6:72:67:7a:76:8b:93:73:8b:75:db:c2: 21:df:56:4c:e1:75:ef:5a:ae:c8:01:0b:96:f6:50:a2:de:0b: 6f:88:32:bf:f2:31:ce:2f:e6:3c:78:2d:06:09:55:cc:7b:ee: 2f:9c:f8:7f:1e:76:49:26:e2:a0:87:87:ab:65:b5:95:60:86: e6:be:5c:63:be:46:1c:ce:21:99:f6:b6:3a:46:6e:74:be:9d: c5:ec:e9:90:e1:bf:d7:f3:dd:f4:42:33:d8:fb:de:73:0e:f7: 39:7f:56:ca:9f:e2:03:8a:28:7c:72:ad:33:f2:62:0c:e9:b4: 88:83:07:ab:a3:50:c0:36:51:99:b7:f4:11:a0:59:e6:69:d0: 3b:92:5b:6f:09:78:32:6f:4c:3d:e9:a9:ce:ef:e6:0f:34:be: ab:87:00:16:7d:62:b1:52:88:4d:8a:73:34:55:e2:72:72:b5: 9d:c5:7d:5f:4d:40:4f:5d:f2:2d:b2:03:1f:55:8c:9e:51:53: 5d:6a:b8:97:3b:48:10:48:53:d9:ae:dd:e9:43:aa:be:28:b2: 2d:13:e6:68:b4:67:e4:e1:a8:dc:34:81:54:9b:85:ae:19:e6: 5c:7d:76:7a -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHh8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA0NTJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDg5QjRCRTQ2QzdGQkRG RUY3MjM4NDRFRDJEMDFGNTZCRkU4RDgxNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCybUbTnGSej6bP6V8W1iLDwbhm0YrIGLpWzOqyZPx9kaQcaW/o BleynQVTOQB/Df+yDF+2OO9RUlIdZx/pOMCzqzC4C+iVzEjDo1z3obXNdBinpV4q gyhj+NlsoFsqMrdzYP7xLs1Jv/vj71H2P3yICLsfTJjF4FW6DGOsmm8f4+N1fMz0 JaV+DkoTyNuvslYBuzsAIlatzts5Bn9fSRTM2oBpATDvl67PNaarQYSxf2XF4T2I EWbAvvykVGoNJXaNOMabQla9Tt9R2BTCDMa1g6w9LDhnZGZ7D2el3/lxbZqLPwSX KN1zbATps6hOKVm4ejpiD5JQoMAQc7uKzSYTAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUibS+Rsf73+9yOETtLQH1a/6NgVcwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2liUy1Sc2Y3My05eU9F VHRMUUgxYV82TmdWYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3V8wDQYJKoZIhvcNAQELBQADggEBALrF7OG22/+cCjwSng3QtfI/L8x2dFTs BvZyZ3p2i5Nzi3XbwiHfVkzhde9arsgBC5b2UKLeC2+IMr/yMc4v5jx4LQYJVcx7 7i+c+H8edkkm4qCHh6tltZVghua+XGO+RhzOIZn2tjpGbnS+ncXs6ZDhv9fz3fRC M9j73nMO9zl/Vsqf4gOKKHxyrTPyYgzptIiDB6ujUMA2UZm39BGgWeZp0DuSW28J eDJvTD3pqc7v5g80vquHABZ9YrFSiE2KczRV4nJytZ3FfV9NQE9d8i2yAx9VjJ5R U11quJc7SBBIU9mu3elDqr4osi0T5mi0Z+ThqNw0gVSbha4Z5lx9dno= -----END CERTIFICATE-----Generated at Mon Oct 20 13:30:51 2025 by rpki-client