$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/nS1VB3hOWOQKm_mgPWsaeve9RnY.roa File: nS1VB3hOWOQKm_mgPWsaeve9RnY.roa (raw, json) Hash identifier: Osq+FO7TEf7VZdQyN0BakJfbvkm2M0dX30xG6RNV2SM= Subject key identifier: 9D:2D:55:07:78:4E:58:E4:0A:9B:F9:A0:3D:6B:1A:7A:F7:BD:46:76 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1E84 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/nS1VB3hOWOQKm_mgPWsaeve9RnY.roa Signing time: Sat 13 Sep 2025 03:05:13 +0000 ROA not before: Sat 13 Sep 2025 03:05:13 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 13444 IP address blocks: 103.220.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 13:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7812 (0x1e84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:05:13 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=9D2D5507784E58E40A9BF9A03D6B1A7AF7BD4676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:72:2b:df:14:7d:c0:c7:66:ae:45:7f:77:e9: 1f:6e:a7:fc:57:36:fd:20:6a:70:11:26:4c:0b:64: fc:95:51:93:b3:26:ca:1b:f3:e2:20:70:33:67:cd: 13:f2:82:23:a1:1d:7b:f9:f7:e3:b9:00:66:8e:8c: 1e:73:88:3d:7c:87:23:60:75:cf:78:6e:68:6e:e9: fd:33:cf:2a:22:00:59:7a:44:87:1b:25:ae:5f:b6: b1:17:83:9c:85:8c:fe:d4:59:1e:49:92:fb:54:df: c0:b4:1d:c5:4c:c4:80:a3:68:bc:50:40:c5:bb:52: 81:a5:e4:97:bd:a4:5e:56:42:ae:18:3a:68:78:46: b8:c2:45:5a:df:ad:6c:3a:7a:b8:9b:74:e8:f0:ab: 85:d0:c3:14:d3:f7:42:ff:3a:ee:ec:df:d3:8c:59: 2d:85:97:9a:7e:7d:39:a0:05:df:df:d2:d3:18:74: b1:e8:1a:6e:02:cd:f6:bd:a2:e3:8d:12:66:fa:43: 51:3d:91:32:8c:63:15:e0:37:0e:d5:86:d6:e9:aa: e2:e9:e6:56:c7:e6:c8:7b:f9:b6:fe:a7:97:67:e2: c9:60:f3:e2:8d:40:60:b3:c8:f1:62:f1:fd:39:a0: 94:47:36:ec:26:cd:ce:ad:e9:ae:3a:3a:0f:87:ea: 85:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:2D:55:07:78:4E:58:E4:0A:9B:F9:A0:3D:6B:1A:7A:F7:BD:46:76 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/nS1VB3hOWOQKm_mgPWsaeve9RnY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.220.252.0/24 Signature Algorithm: sha256WithRSAEncryption 29:d0:1d:84:85:2c:8e:65:3c:05:9d:88:2e:ad:31:06:ee:c6: e0:d4:59:94:8d:bb:c8:62:8f:4e:60:f0:c7:06:2c:2d:10:5b: 1e:88:80:4d:1f:34:ac:b5:06:e2:9f:c1:30:82:ea:b3:0a:77: 01:fc:f1:23:dc:ae:7c:cf:0d:62:47:04:4a:91:b9:a2:26:ea: 83:94:9f:b7:e0:c4:b5:1e:19:d2:e0:2e:47:ed:b7:35:3b:e6: ce:97:60:93:c2:42:9f:e5:8c:29:da:af:1c:72:ad:69:c3:b4: a6:0a:9b:26:9f:20:4c:1a:e0:61:24:71:62:fc:66:c1:ff:60: d3:de:f7:32:5a:23:3f:5a:2d:17:76:d2:24:55:f3:7f:9f:e7: 4f:1d:69:9b:be:b2:5a:fc:27:55:b8:16:1e:7b:ac:b2:f4:58: c5:e4:17:47:00:69:b6:73:1b:da:a8:77:ef:e3:08:73:e1:39: f5:14:0c:de:60:fc:e2:1e:c4:6d:ca:2d:87:19:82:47:77:17: 2c:30:e3:f5:df:df:31:5b:e0:af:0c:b3:bb:cb:c5:c6:36:b3: 17:a8:3f:57:a4:9d:06:2f:01:c1:50:d3:6c:fd:28:81:71:eb: 1e:1d:70:ea:c3:f7:eb:67:d4:2d:bf:1a:39:5a:c2:f0:d8:f3: 3c:b4:2d:de -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHoQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA1MTNaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDlEMkQ1NTA3Nzg0RTU4 RTQwQTlCRjlBMDNENkIxQTdBRjdCRDQ2NzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCicivfFH3Ax2auRX936R9up/xXNv0ganARJkwLZPyVUZOzJsob 8+IgcDNnzRPygiOhHXv59+O5AGaOjB5ziD18hyNgdc94bmhu6f0zzyoiAFl6RIcb Ja5ftrEXg5yFjP7UWR5JkvtU38C0HcVMxICjaLxQQMW7UoGl5Je9pF5WQq4YOmh4 RrjCRVrfrWw6eribdOjwq4XQwxTT90L/Ou7s39OMWS2Fl5p+fTmgBd/f0tMYdLHo Gm4Czfa9ouONEmb6Q1E9kTKMYxXgNw7VhtbpquLp5lbH5sh7+bb+p5dn4slg8+KN QGCzyPFi8f05oJRHNuwmzc6t6a46Og+H6oVtAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUnS1VB3hOWOQKm/mgPWsaeve9RnYwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L25TMVZCM2hPV09RS21f bWdQV3NhZXZlOVJuWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3PwwDQYJKoZIhvcNAQELBQADggEBACnQHYSFLI5lPAWdiC6tMQbuxuDUWZSN u8hij05g8McGLC0QWx6IgE0fNKy1BuKfwTCC6rMKdwH88SPcrnzPDWJHBEqRuaIm 6oOUn7fgxLUeGdLgLkfttzU75s6XYJPCQp/ljCnarxxyrWnDtKYKmyafIEwa4GEk cWL8ZsH/YNPe9zJaIz9aLRd20iRV83+f508daZu+slr8J1W4Fh57rLL0WMXkF0cA abZzG9qod+/jCHPhOfUUDN5g/OIexG3KLYcZgkd3Fyww4/Xf3zFb4K8Ms7vLxcY2 sxeoP1eknQYvAcFQ02z9KIFx6x4dcOrD9+tn1C2/GjlawvDY8zy0Ld4= -----END CERTIFICATE-----Generated at Mon Oct 20 13:31:03 2025 by rpki-client