$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/j1KeB9KdpSl8ds7RyMKqhHYTV7g.roa File: j1KeB9KdpSl8ds7RyMKqhHYTV7g.roa (raw, json) Hash identifier: vpmDS/F3K/dA+ztA7K700+f6FeVZ3MyMk1egoPIkkgM= Subject key identifier: 8F:52:9E:07:D2:9D:A5:29:7C:76:CE:D1:C8:C2:AA:84:76:13:57:B8 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1E33 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/j1KeB9KdpSl8ds7RyMKqhHYTV7g.roa Signing time: Sat 13 Sep 2025 03:04:55 +0000 ROA not before: Sat 13 Sep 2025 03:04:55 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 13444 IP address blocks: 103.221.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 13:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7731 (0x1e33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:04:55 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=8F529E07D29DA5297C76CED1C8C2AA84761357B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b4:c4:fa:8c:69:fd:4b:b4:3a:b1:30:b9:8d: 9c:c3:54:08:78:c1:e3:cc:c2:5f:a6:9d:a9:5c:55: 99:88:ef:21:05:b3:8e:e0:b2:46:29:74:08:38:a6: 98:c9:f3:22:3d:99:f5:87:25:db:1f:50:0b:f8:2b: b9:51:5a:87:a2:f6:0d:23:21:b8:ae:29:e4:30:9a: b9:ab:9e:7a:bc:0e:d1:36:83:ce:9c:e0:73:68:04: bf:65:ff:72:63:7a:70:7e:06:27:74:a7:73:c5:ba: f8:f7:25:1d:c9:7b:d1:25:1d:c5:3d:57:9a:2c:bc: 73:c0:99:3f:2f:68:58:c0:8a:9b:b8:22:7a:0f:fc: 65:26:ff:62:e8:6b:fa:9d:a3:a0:6f:60:37:c1:db: c4:af:b9:75:ea:69:c1:e7:ce:dc:b3:80:53:09:71: e8:ee:69:e3:2d:42:5f:c0:e9:5e:a0:9e:dd:9a:9b: a4:d6:1d:51:9e:54:f6:6d:b1:d3:d7:7f:09:41:ad: a9:85:ed:a0:c0:fa:fc:20:d1:5a:91:e7:fc:af:e2: d1:f4:dc:4f:82:12:64:8a:85:59:68:27:4f:90:14: a5:15:57:36:78:58:54:d0:3a:8c:67:73:66:bd:7a: 0b:23:a8:4c:0b:71:34:e1:64:04:f2:11:34:f1:4f: 07:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:52:9E:07:D2:9D:A5:29:7C:76:CE:D1:C8:C2:AA:84:76:13:57:B8 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/j1KeB9KdpSl8ds7RyMKqhHYTV7g.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.35.0/24 Signature Algorithm: sha256WithRSAEncryption ba:df:26:44:e2:ad:45:23:a4:79:68:21:e3:9d:f4:24:d9:e2: 16:2b:fc:3a:b2:48:1c:40:d6:c5:00:ee:c3:5f:42:94:14:37: ec:ed:10:bf:fc:a0:9a:59:69:1b:5f:f8:a2:56:11:b6:73:7b: cc:d4:14:00:34:b5:e8:8d:04:1a:88:93:6d:0c:4f:e4:39:d0: 60:44:35:fa:0c:f9:b6:ab:7d:40:38:a2:03:cc:0b:29:dc:5d: 51:8e:10:bc:d2:d3:b9:a9:fc:1a:dd:de:14:14:2f:1a:23:0a: be:b0:4b:7f:f7:19:8a:8f:d1:4d:6a:e3:86:2f:c3:3e:4d:e5: d9:7a:21:49:48:87:24:23:fc:78:af:f3:67:69:86:64:d0:f1: c6:96:39:62:0a:1a:f0:e3:6d:8d:21:ea:15:77:fa:9a:1b:bd: 6d:49:cf:81:b7:e7:2a:3b:d5:d1:75:e0:a7:95:24:eb:d2:d5: ac:68:e2:21:92:d7:ed:a0:2a:6d:bf:3d:95:ce:86:32:e4:ee: 8b:d8:97:f1:51:da:44:0a:d2:81:d7:c8:13:3c:49:78:12:71: b2:a5:10:7c:65:15:63:53:0e:aa:2e:45:c2:8d:f9:90:92:c8: c5:fe:2d:b9:ba:c1:74:be:a9:ae:83:c7:b4:20:73:0d:f2:cf: 4b:cc:6f:cf -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHjMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA0NTVaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDhGNTI5RTA3RDI5REE1 Mjk3Qzc2Q0VEMUM4QzJBQTg0NzYxMzU3QjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmtMT6jGn9S7Q6sTC5jZzDVAh4wePMwl+mnalcVZmI7yEFs47g skYpdAg4ppjJ8yI9mfWHJdsfUAv4K7lRWoei9g0jIbiuKeQwmrmrnnq8DtE2g86c 4HNoBL9l/3JjenB+Bid0p3PFuvj3JR3Je9ElHcU9V5osvHPAmT8vaFjAipu4InoP /GUm/2Loa/qdo6BvYDfB28SvuXXqacHnztyzgFMJcejuaeMtQl/A6V6gnt2am6TW HVGeVPZtsdPXfwlBramF7aDA+vwg0VqR5/yv4tH03E+CEmSKhVloJ0+QFKUVVzZ4 WFTQOoxnc2a9egsjqEwLcTThZATyETTxTweXAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUj1KeB9KdpSl8ds7RyMKqhHYTV7gwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2oxS2VCOUtkcFNsOGRz N1J5TUtxaEhZVFY3Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3SMwDQYJKoZIhvcNAQELBQADggEBALrfJkTirUUjpHloIeOd9CTZ4hYr/Dqy SBxA1sUA7sNfQpQUN+ztEL/8oJpZaRtf+KJWEbZze8zUFAA0teiNBBqIk20MT+Q5 0GBENfoM+barfUA4ogPMCyncXVGOELzS07mp/Brd3hQULxojCr6wS3/3GYqP0U1q 44Yvwz5N5dl6IUlIhyQj/Hiv82dphmTQ8caWOWIKGvDjbY0h6hV3+pobvW1Jz4G3 5yo71dF14KeVJOvS1axo4iGS1+2gKm2/PZXOhjLk7ovYl/FR2kQK0oHXyBM8SXgS cbKlEHxlFWNTDqouRcKN+ZCSyMX+Lbm6wXS+qa6Dx7Qgcw3yz0vMb88= -----END CERTIFICATE-----Generated at Mon Oct 20 13:30:57 2025 by rpki-client