$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/lYN0A5gXyPcLKzrLos4xAqTWbZ4.roa File: lYN0A5gXyPcLKzrLos4xAqTWbZ4.roa (raw, json) Hash identifier: BddK2ew5DpGt5zGGASjS74LYCW6ELc9uYLVlCeQYjxA= Subject key identifier: 95:83:74:03:98:17:C8:F7:0B:2B:3A:CB:A2:CE:31:02:A4:D6:6D:9E Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1EE5 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/lYN0A5gXyPcLKzrLos4xAqTWbZ4.roa Signing time: Sat 13 Sep 2025 03:05:35 +0000 ROA not before: Sat 13 Sep 2025 03:05:35 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 139259 IP address blocks: 103.220.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 13:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7909 (0x1ee5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:05:35 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=958374039817C8F70B2B3ACBA2CE3102A4D66D9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3b:19:2e:09:44:05:87:aa:9f:f4:a4:8e:14: 57:36:09:16:56:58:70:db:0c:84:a4:81:d3:42:d8: 9b:d1:59:18:63:85:cb:05:4b:f2:1c:3d:3f:7b:a6: 85:e5:10:4d:ee:f0:28:83:3c:16:17:00:bb:89:cb: e6:75:74:c1:b5:9c:0d:28:a8:ee:bd:fe:83:22:f2: 36:92:9f:6d:17:7e:b1:f0:da:f9:0c:1d:f6:ab:b6: fe:40:87:b8:78:d0:48:2e:79:4b:0e:af:d7:24:ac: 3d:92:67:09:7a:e4:33:82:c5:39:af:b4:4f:50:a6: 07:68:9a:21:fe:8c:37:38:88:69:0a:99:88:b0:b3: 23:25:9d:94:8e:7f:74:3b:c2:78:87:68:c0:bc:b3: 66:f9:88:f1:66:5a:6d:55:23:e5:df:af:dd:b1:c0: b0:62:88:7f:b3:ac:5a:56:5a:f0:38:fa:54:4f:a4: d1:2d:83:6a:dd:58:e0:be:80:fa:0b:df:71:5d:ee: f7:99:e4:eb:a2:a5:04:5a:fa:37:0d:95:11:ac:b0: 1b:07:9f:dc:64:0d:b5:97:c3:f3:56:60:0e:f9:52: 9f:ad:5d:70:53:37:a4:ce:1b:63:dc:27:44:d2:af: 4e:4a:3f:9a:1a:70:26:da:fe:c1:65:cf:21:20:35: 76:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:83:74:03:98:17:C8:F7:0B:2B:3A:CB:A2:CE:31:02:A4:D6:6D:9E X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/lYN0A5gXyPcLKzrLos4xAqTWbZ4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.220.250.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:8c:e9:f1:fb:26:23:6d:f2:79:73:b2:3f:c1:ac:82:5e:32: 01:53:a8:65:6e:dc:47:eb:13:be:99:bc:e9:2e:2d:72:56:7c: 51:a3:85:40:9d:a6:26:bd:09:87:bb:87:fb:71:57:e2:54:39: 11:c6:9f:06:01:d6:db:72:03:03:24:00:eb:a3:ef:51:0c:9f: c5:5e:40:34:6a:e6:ef:57:ba:f2:18:a9:e7:85:5e:23:66:73: 9d:e1:ee:1e:ff:1a:57:c4:31:d2:eb:3e:9a:09:83:8f:93:ff: 9f:7d:a8:77:55:12:1c:18:b5:4a:84:db:ff:c4:d2:bf:8b:75: bd:9d:dc:6e:6f:ab:91:9a:45:77:4e:1e:ec:cc:fb:43:ed:56: 00:b6:f8:de:e4:51:00:74:b2:7a:90:b8:1b:9f:95:46:36:ab: fe:dc:ad:6b:01:6b:c4:e0:89:39:f2:f0:64:f9:0b:8f:53:63: e4:b2:09:00:4d:7f:15:b3:8c:8b:51:0f:a8:6a:20:07:20:53: ec:35:51:8a:4e:df:de:eb:e9:19:18:20:fb:c0:ea:e0:7b:17: 27:10:0b:83:88:20:b6:4a:9a:bc:75:4b:00:4a:11:d3:76:c0: 75:9d:2b:2d:c7:f7:13:e6:98:05:3c:da:21:4a:65:29:b3:ae: 30:f7:02:63 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHuUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA1MzVaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDk1ODM3NDAzOTgxN0M4 RjcwQjJCM0FDQkEyQ0UzMTAyQTRENjZEOUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcOxkuCUQFh6qf9KSOFFc2CRZWWHDbDISkgdNC2JvRWRhjhcsF S/IcPT97poXlEE3u8CiDPBYXALuJy+Z1dMG1nA0oqO69/oMi8jaSn20XfrHw2vkM Hfartv5Ah7h40EgueUsOr9ckrD2SZwl65DOCxTmvtE9QpgdomiH+jDc4iGkKmYiw syMlnZSOf3Q7wniHaMC8s2b5iPFmWm1VI+Xfr92xwLBiiH+zrFpWWvA4+lRPpNEt g2rdWOC+gPoL33Fd7veZ5OuipQRa+jcNlRGssBsHn9xkDbWXw/NWYA75Up+tXXBT N6TOG2PcJ0TSr05KP5oacCba/sFlzyEgNXYlAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUlYN0A5gXyPcLKzrLos4xAqTWbZ4wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2xZTjBBNWdYeVBjTEt6 ckxvczR4QXFUV2JaNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3PowDQYJKoZIhvcNAQELBQADggEBAA+M6fH7JiNt8nlzsj/BrIJeMgFTqGVu 3EfrE76ZvOkuLXJWfFGjhUCdpia9CYe7h/txV+JUORHGnwYB1ttyAwMkAOuj71EM n8VeQDRq5u9XuvIYqeeFXiNmc53h7h7/GlfEMdLrPpoJg4+T/599qHdVEhwYtUqE 2//E0r+Ldb2d3G5vq5GaRXdOHuzM+0PtVgC2+N7kUQB0snqQuBuflUY2q/7crWsB a8TgiTny8GT5C49TY+SyCQBNfxWzjItRD6hqIAcgU+w1UYpO397r6RkYIPvA6uB7 FycQC4OIILZKmrx1SwBKEdN2wHWdKy3H9xPmmAU82iFKZSmzrjD3AmM= -----END CERTIFICATE-----Generated at Mon Oct 20 13:31:06 2025 by rpki-client