$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/p-H-EhsLtuyEbSAF9E8zIEVczvM.roa File: p-H-EhsLtuyEbSAF9E8zIEVczvM.roa (raw, json) Hash identifier: LybKCPXY0PX2gXPDmPOkpsNcDbHK9uZb0mjbHwHO09A= Subject key identifier: A7:E1:FE:12:1B:0B:B6:EC:84:6D:20:05:F4:4F:33:20:45:5C:CE:F3 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1F22 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/p-H-EhsLtuyEbSAF9E8zIEVczvM.roa Signing time: Tue 16 Sep 2025 05:50:55 +0000 ROA not before: Tue 16 Sep 2025 05:50:55 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 25743 IP address blocks: 103.221.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 13:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7970 (0x1f22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 16 05:50:55 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=A7E1FE121B0BB6EC846D2005F44F3320455CCEF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:f5:0c:33:6c:28:d3:c5:66:92:af:ab:e5:ce: c0:38:2f:ad:d3:65:25:dd:bc:ef:c9:a7:7a:ab:76: 38:a2:13:40:3d:b3:08:50:5f:65:6a:76:51:58:14: 91:08:d9:e0:a3:88:44:11:60:ff:84:4b:80:2b:04: 1b:76:5e:0c:4c:ef:77:fe:fb:4f:ff:4a:e9:2d:0c: 11:26:10:00:70:18:65:47:9f:3f:a8:e1:6c:34:19: ee:48:83:72:b1:24:13:69:7c:68:11:74:56:78:01: 80:38:14:d4:6b:84:b9:d8:37:aa:04:81:5c:50:76: cb:56:bc:7b:2a:b6:17:7c:30:f4:74:61:62:23:d4: 01:6d:c5:e5:2f:6d:c4:81:f1:36:2e:16:a4:82:5c: 38:1b:23:ea:af:a5:60:1c:09:9a:f3:44:c0:7e:5e: 02:e3:6b:93:32:87:18:83:27:63:5c:fc:09:93:43: 01:95:5b:71:b9:d3:c0:3c:36:3d:c1:f3:77:8a:0e: 8e:93:88:15:10:b0:8b:0b:1c:04:d0:71:1b:90:45: db:03:8c:0e:34:04:7d:2a:f9:f6:90:4a:97:ed:e2: 99:cf:a4:46:de:24:3d:79:bd:1e:37:95:f8:16:c5: 2a:f6:08:cd:83:9e:2e:6d:98:dd:0c:63:b7:49:78: a5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:E1:FE:12:1B:0B:B6:EC:84:6D:20:05:F4:4F:33:20:45:5C:CE:F3 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/p-H-EhsLtuyEbSAF9E8zIEVczvM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.20.0/22 Signature Algorithm: sha256WithRSAEncryption c3:3b:9a:54:49:11:09:eb:4d:d4:8a:72:72:9e:b9:1a:ec:f4: 54:9f:c8:5e:00:ab:a6:48:ab:f4:33:c1:9d:f2:90:56:ae:72: 0c:6f:b1:13:66:ef:da:0a:91:6d:cb:5e:60:f9:58:90:a4:24: 65:37:a6:33:ee:18:2a:2a:f6:e2:08:09:00:dd:56:72:fe:df: 51:ee:51:bd:06:4e:64:78:85:9d:f7:7a:97:18:7a:d9:0e:89: c3:d0:fc:64:45:63:82:b5:2e:62:00:69:a5:8d:78:67:cf:1b: 18:81:d8:df:ff:66:95:f2:b2:a2:9c:c2:6d:e4:42:14:4c:b7: d2:3f:88:95:ac:7d:8b:70:6e:92:e8:47:e6:f1:27:8a:bc:fb: cd:ef:e6:a9:c4:2e:47:d0:d3:89:17:98:7d:9a:b1:62:b4:74: 2e:52:c6:1f:69:96:fa:c8:89:50:cc:39:b9:71:c3:0d:da:18: 28:67:6b:84:5b:03:4a:18:25:97:8b:e3:2a:48:7c:74:02:79: 8a:2d:85:02:8b:e9:f1:c6:76:d0:b1:06:cc:21:d9:39:6d:98: 6e:6b:83:be:1b:97:7a:54:64:71:4c:6b:a1:16:2f:43:d1:cd: d6:16:2a:fc:15:7e:7f:4b:73:c7:9c:f7:23:b7:11:27:b5:0f: c6:99:71:7b -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHyIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTYw NTUwNTVaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEE3RTFGRTEyMUIwQkI2 RUM4NDZEMjAwNUY0NEYzMzIwNDU1Q0NFRjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDv9QwzbCjTxWaSr6vlzsA4L63TZSXdvO/Jp3qrdjiiE0A9swhQ X2VqdlFYFJEI2eCjiEQRYP+ES4ArBBt2XgxM73f++0//SuktDBEmEABwGGVHnz+o 4Ww0Ge5Ig3KxJBNpfGgRdFZ4AYA4FNRrhLnYN6oEgVxQdstWvHsqthd8MPR0YWIj 1AFtxeUvbcSB8TYuFqSCXDgbI+qvpWAcCZrzRMB+XgLja5MyhxiDJ2Nc/AmTQwGV W3G508A8Nj3B83eKDo6TiBUQsIsLHATQcRuQRdsDjA40BH0q+faQSpft4pnPpEbe JD15vR43lfgWxSr2CM2Dni5tmN0MY7dJeKWrAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUp+H+EhsLtuyEbSAF9E8zIEVczvMwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3AtSC1FaHNMdHV5RWJT QUY5RTh6SUVWY3p2TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn3RQwDQYJKoZIhvcNAQELBQADggEBAMM7mlRJEQnrTdSKcnKeuRrs9FSfyF4A q6ZIq/QzwZ3ykFaucgxvsRNm79oKkW3LXmD5WJCkJGU3pjPuGCoq9uIICQDdVnL+ 31HuUb0GTmR4hZ33epcYetkOicPQ/GRFY4K1LmIAaaWNeGfPGxiB2N//ZpXysqKc wm3kQhRMt9I/iJWsfYtwbpLoR+bxJ4q8+83v5qnELkfQ04kXmH2asWK0dC5Sxh9p lvrIiVDMOblxww3aGChna4RbA0oYJZeL4ypIfHQCeYothQKL6fHGdtCxBswh2Tlt mG5rg74bl3pUZHFMa6EWL0PRzdYWKvwVfn9Lc8ec9yO3ESe1D8aZcXs= -----END CERTIFICATE-----Generated at Mon Oct 20 13:30:51 2025 by rpki-client