$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/nT3e4gqaKxHcEUme3GX9x-YlB08.roa File: nT3e4gqaKxHcEUme3GX9x-YlB08.roa (raw, json) Hash identifier: SVNct8466JGhNkEAwGsXYLizrSiN/KDdsMyklkCtR04= Subject key identifier: 9D:3D:DE:E2:0A:9A:2B:11:DC:11:49:9E:DC:65:FD:C7:E6:25:07:4F Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1E40 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/nT3e4gqaKxHcEUme3GX9x-YlB08.roa Signing time: Sat 13 Sep 2025 03:04:57 +0000 ROA not before: Sat 13 Sep 2025 03:04:57 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 139259 IP address blocks: 45.252.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 00:35:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7744 (0x1e40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:04:57 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=9D3DDEE20A9A2B11DC11499EDC65FDC7E625074F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8e:29:c2:4a:52:f1:8b:5d:23:3b:dd:b1:ef: e1:f1:ad:a4:b4:33:8b:37:dd:33:e9:7d:f8:ac:34: 77:c1:a3:c4:03:1d:ac:13:74:08:2d:17:ee:f3:b5: 27:95:2a:10:b3:5b:4c:0d:38:ae:52:82:84:cd:19: b9:f4:61:93:22:09:e0:a9:90:34:30:f9:55:b7:60: 0a:cd:85:f3:8a:9b:49:2f:ec:10:17:f2:c1:86:1f: 1f:94:60:de:0c:34:ef:fd:f3:1b:8a:39:d0:0c:74: 84:9c:63:62:dc:71:45:4f:e0:f8:67:6d:36:47:58: cf:20:6d:da:c2:0d:ff:33:ff:d6:9f:8a:94:6d:47: 24:ec:30:bc:6e:7d:10:7a:86:0a:b2:eb:84:97:6f: a8:b8:b7:03:69:68:0c:c1:e1:fd:46:60:9d:ee:8e: d7:1d:c7:0c:da:ef:3e:32:5e:9f:e3:3c:e3:2d:58: 89:04:29:92:ca:e6:03:9d:7a:2a:91:eb:7a:47:d9: 09:ef:b6:eb:61:1b:43:46:13:4a:02:93:0b:e8:74: 0a:d0:e3:e7:8c:a5:e5:1e:db:12:12:6e:65:4e:23: 52:20:4f:ba:90:09:fb:c1:3a:73:85:fb:0c:bd:39: 61:c4:46:1e:4a:93:be:38:bd:d3:fc:60:5c:a2:3e: 37:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:3D:DE:E2:0A:9A:2B:11:DC:11:49:9E:DC:65:FD:C7:E6:25:07:4F X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/nT3e4gqaKxHcEUme3GX9x-YlB08.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.40.0/22 Signature Algorithm: sha256WithRSAEncryption 44:64:2b:86:cf:61:d3:04:b0:76:b9:e3:03:d0:2b:2d:ae:62: e0:9e:19:43:19:bc:4b:6a:b2:6e:48:18:82:79:13:0e:11:81: c2:1a:45:5e:76:5c:40:46:ef:ba:0e:a4:14:02:2e:1b:76:81: c6:07:10:ee:d4:5a:c7:5b:2c:b8:70:ac:48:30:10:08:c0:24: a8:1a:65:fd:3a:37:43:72:fe:0e:c3:88:55:2b:14:37:22:bb: 04:12:c2:fe:ff:c0:10:2a:d7:ee:b3:55:e5:83:85:df:81:65: b8:3a:70:ec:8c:cf:ae:ae:c3:f1:9a:93:5f:e5:0c:b4:db:9b: 07:29:9b:fb:93:d7:c5:a6:45:b0:da:f9:73:8b:26:3c:89:a3: 0d:3d:27:c1:94:9d:af:8a:f0:b4:36:58:89:3f:b6:3f:f1:f7: 60:fe:43:9d:d9:c0:ac:b2:ed:ee:1d:ab:2f:db:c1:85:c6:ef: 2a:4f:0b:52:09:a1:9b:12:22:03:d5:7b:5a:c3:17:3d:ed:3e: fc:b1:90:66:4b:2e:68:97:3e:e0:1a:12:e4:35:c5:57:03:aa: 16:2b:c3:ab:aa:a3:15:62:66:cc:9a:e4:a3:70:1a:5a:71:01: b8:d5:d0:bb:37:cd:1e:6d:9f:0c:fd:c3:80:26:fd:fa:51:62: 17:b0:aa:9e -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHkAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA0NTdaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDlEM0RERUUyMEE5QTJC MTFEQzExNDk5RURDNjVGREM3RTYyNTA3NEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEjinCSlLxi10jO92x7+HxraS0M4s33TPpffisNHfBo8QDHawT dAgtF+7ztSeVKhCzW0wNOK5SgoTNGbn0YZMiCeCpkDQw+VW3YArNhfOKm0kv7BAX 8sGGHx+UYN4MNO/98xuKOdAMdIScY2LccUVP4PhnbTZHWM8gbdrCDf8z/9afipRt RyTsMLxufRB6hgqy64SXb6i4twNpaAzB4f1GYJ3ujtcdxwza7z4yXp/jPOMtWIkE KZLK5gOdeiqR63pH2QnvtuthG0NGE0oCkwvodArQ4+eMpeUe2xISbmVOI1IgT7qQ CfvBOnOF+wy9OWHERh5Kk744vdP8YFyiPjcrAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUnT3e4gqaKxHcEUme3GX9x+YlB08wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L25UM2U0Z3FhS3hIY0VV bWUzR1g5eC1ZbEIwOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIt/CgwDQYJKoZIhvcNAQELBQADggEBAERkK4bPYdMEsHa54wPQKy2uYuCeGUMZ vEtqsm5IGIJ5Ew4RgcIaRV52XEBG77oOpBQCLht2gcYHEO7UWsdbLLhwrEgwEAjA JKgaZf06N0Ny/g7DiFUrFDciuwQSwv7/wBAq1+6zVeWDhd+BZbg6cOyMz66uw/Ga k1/lDLTbmwcpm/uT18WmRbDa+XOLJjyJow09J8GUna+K8LQ2WIk/tj/x92D+Q53Z wKyy7e4dqy/bwYXG7ypPC1IJoZsSIgPVe1rDFz3tPvyxkGZLLmiXPuAaEuQ1xVcD qhYrw6uqoxViZsya5KNwGlpxAbjV0Ls3zR5tnwz9w4Am/fpRYhewqp4= -----END CERTIFICATE-----Generated at Mon Oct 20 23:27:29 2025 by rpki-client