$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/j7tM9mv258rC0LcvXFwGiNeRFCs.roa File: j7tM9mv258rC0LcvXFwGiNeRFCs.roa (raw, json) Hash identifier: 0sMpDCRcd/M03800D8Z3OQdSoexxUg4AnXUb/bNnaZo= Subject key identifier: 8F:BB:4C:F6:6B:F6:E7:CA:C2:D0:B7:2F:5C:5C:06:88:D7:91:14:2B Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1EAD Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/j7tM9mv258rC0LcvXFwGiNeRFCs.roa Signing time: Sat 13 Sep 2025 03:05:22 +0000 ROA not before: Sat 13 Sep 2025 03:05:22 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 13444 IP address blocks: 103.221.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 13:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7853 (0x1ead) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:05:22 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=8FBB4CF66BF6E7CAC2D0B72F5C5C0688D791142B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:87:c2:f7:56:a3:d6:88:b0:2a:5c:24:c8:bb: 4d:56:78:02:a1:dd:c2:ee:2c:4c:54:aa:ee:0d:bf: 2a:a1:6d:e9:b7:54:36:42:f6:2b:d8:76:ce:92:27: 83:e4:c9:6f:58:4c:7f:9e:e2:0f:09:29:5d:80:d0: 04:ac:f3:95:06:93:8f:e7:04:7d:1b:f1:f0:94:10: 15:8f:4b:12:1a:fb:f1:24:4d:da:01:84:2a:45:23: f4:82:9f:b4:de:02:ac:fb:8e:18:81:74:87:f0:fa: 3d:1c:00:63:d8:33:ff:23:67:6c:b3:fd:67:66:f5: 8c:e8:1b:8e:1e:58:c6:ee:df:fe:71:8e:b6:71:c1: 85:cb:36:6c:64:ff:ee:5d:05:61:d2:77:ca:33:56: 2c:2f:31:b3:a7:4a:97:62:cd:ca:fa:8c:4d:99:9b: c4:9c:a4:3c:00:75:b6:5f:ba:65:0d:ae:30:94:43: 45:04:a6:7e:28:d3:a5:08:ad:ea:e6:28:5b:93:02: bf:e6:19:8a:bd:ab:b3:43:ca:67:54:64:24:d9:4c: cb:97:5b:e0:e7:6b:09:3a:d5:72:90:42:33:70:99: 75:bf:a7:ba:c6:4e:25:54:2d:1b:34:74:e8:8c:69: 05:ad:52:60:7a:9a:70:e0:41:57:68:b3:e7:1e:37: c3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:BB:4C:F6:6B:F6:E7:CA:C2:D0:B7:2F:5C:5C:06:88:D7:91:14:2B X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/j7tM9mv258rC0LcvXFwGiNeRFCs.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.47.0/24 Signature Algorithm: sha256WithRSAEncryption 54:de:b1:8d:07:d2:6d:57:e6:e6:3b:0a:bf:35:fc:32:2e:54: 89:94:e7:71:b6:40:bc:91:6c:86:a6:76:e4:16:d1:a7:25:93: 9b:dd:9a:11:24:1a:60:0b:40:d2:d6:dc:b9:63:78:a0:1c:f9: 73:f2:10:a9:c2:47:95:66:51:71:7b:3a:97:8d:cf:fd:9f:46: 0f:ab:02:ba:da:2b:87:b5:e6:5f:3f:b6:69:a8:cf:1f:01:5b: c8:cc:bd:52:86:13:36:d9:22:82:69:86:e6:61:d3:6b:9f:15: ef:75:78:cd:cf:6c:39:20:5f:91:c7:86:ca:48:5f:8b:98:a3: 64:1c:80:fa:a4:f6:60:ae:8d:59:7a:6f:71:7b:7f:60:79:fb: 65:42:60:d8:62:89:c5:4f:a7:8c:8a:2b:49:d7:5e:12:1d:cc: 8d:c7:44:be:a3:58:67:e1:b3:03:15:bb:03:07:4e:9e:e7:d7: 0a:7a:96:26:43:14:1c:1f:0f:ad:39:cd:95:df:f0:c6:18:96: 04:4c:67:e3:c7:58:87:96:62:26:07:84:49:de:c7:f1:79:8c: 42:30:e5:0e:14:43:97:9a:d4:3e:ed:6a:d9:51:f2:69:17:62: 06:20:c3:80:6a:13:56:53:05:60:46:03:97:5d:cf:bd:d8:80: 5e:6c:44:e7 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHq0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA1MjJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDhGQkI0Q0Y2NkJGNkU3 Q0FDMkQwQjcyRjVDNUMwNjg4RDc5MTE0MkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDrh8L3VqPWiLAqXCTIu01WeAKh3cLuLExUqu4Nvyqhbem3VDZC 9ivYds6SJ4PkyW9YTH+e4g8JKV2A0ASs85UGk4/nBH0b8fCUEBWPSxIa+/EkTdoB hCpFI/SCn7TeAqz7jhiBdIfw+j0cAGPYM/8jZ2yz/Wdm9YzoG44eWMbu3/5xjrZx wYXLNmxk/+5dBWHSd8ozViwvMbOnSpdizcr6jE2Zm8ScpDwAdbZfumUNrjCUQ0UE pn4o06UIrermKFuTAr/mGYq9q7NDymdUZCTZTMuXW+Dnawk61XKQQjNwmXW/p7rG TiVULRs0dOiMaQWtUmB6mnDgQVdos+ceN8NdAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUj7tM9mv258rC0LcvXFwGiNeRFCswHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2o3dE05bXYyNThyQzBM Y3ZYRndHaU5lUkZDcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3S8wDQYJKoZIhvcNAQELBQADggEBAFTesY0H0m1X5uY7Cr81/DIuVImU53G2 QLyRbIamduQW0aclk5vdmhEkGmALQNLW3LljeKAc+XPyEKnCR5VmUXF7OpeNz/2f Rg+rArraK4e15l8/tmmozx8BW8jMvVKGEzbZIoJphuZh02ufFe91eM3PbDkgX5HH hspIX4uYo2QcgPqk9mCujVl6b3F7f2B5+2VCYNhiicVPp4yKK0nXXhIdzI3HRL6j WGfhswMVuwMHTp7n1wp6liZDFBwfD605zZXf8MYYlgRMZ+PHWIeWYiYHhEnex/F5 jEIw5Q4UQ5ea1D7tatlR8mkXYgYgw4BqE1ZTBWBGA5ddz73YgF5sROc= -----END CERTIFICATE-----Generated at Mon Oct 20 13:13:41 2025 by rpki-client