$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/pgtDlGKOkn6mdSinChFPcxqO9xk.roa File: pgtDlGKOkn6mdSinChFPcxqO9xk.roa (raw, json) Hash identifier: zj7O1ciTbglCIa4gQOJK5dN/g6vcnEwUB9SGRRTyjIk= Subject key identifier: A6:0B:43:94:62:8E:92:7E:A6:75:28:A7:0A:11:4F:73:1A:8E:F7:19 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1EB7 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/pgtDlGKOkn6mdSinChFPcxqO9xk.roa Signing time: Sat 13 Sep 2025 03:05:24 +0000 ROA not before: Sat 13 Sep 2025 03:05:24 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 13444 IP address blocks: 103.221.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 13:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7863 (0x1eb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:05:24 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=A60B4394628E927EA67528A70A114F731A8EF719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:02:f4:91:c7:84:f1:fe:64:a6:dd:fb:ba:9d: 94:cf:ee:6c:a6:a5:6e:62:dd:57:21:fe:12:66:a0: 3e:8b:1a:04:28:85:89:76:97:44:9c:13:1a:d9:43: 3a:78:38:5d:76:2e:1f:c4:3f:ad:33:62:72:7c:eb: a0:c9:40:dd:c0:34:0e:2e:d0:d3:26:2e:4a:f7:1a: 82:e6:2c:9d:ad:5f:24:09:89:8b:1b:92:b5:06:65: c0:7a:a9:5d:5a:c0:6f:53:f5:0e:96:d9:5b:2c:e4: 57:a8:ef:d1:cc:b6:a7:aa:3e:96:45:67:27:cf:2a: 20:81:52:32:c3:a7:f0:75:81:10:6c:63:de:5c:f9: 22:eb:b8:08:b9:3a:b2:e3:dc:88:9a:0c:e6:c4:74: d6:7f:2f:a5:49:3d:e6:5d:7e:1b:da:0f:32:a8:dc: b0:91:f8:cd:3b:e2:be:25:6a:bc:9e:03:35:11:4b: cb:99:99:73:c8:f4:01:7a:9f:5a:dc:0f:a7:64:d6: 73:cc:d1:5d:41:40:8a:1d:f1:75:a9:55:ea:c0:15: 21:b2:81:45:74:5f:29:62:d8:a8:6c:c5:6d:ab:00: 27:d8:66:2a:c4:87:42:5d:c5:1b:17:4e:c1:5a:ee: 12:5c:b4:4a:70:3e:59:53:9f:7c:79:f1:4b:d6:d8: 05:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:0B:43:94:62:8E:92:7E:A6:75:28:A7:0A:11:4F:73:1A:8E:F7:19 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/pgtDlGKOkn6mdSinChFPcxqO9xk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.18.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:e3:00:ef:a7:ba:c7:a8:90:e8:16:21:f0:f0:73:dc:4f:7c: 43:b7:48:b4:18:5d:c6:3e:22:49:8f:fc:6f:7d:33:fe:9f:c1: 48:b1:29:68:c9:45:16:cd:c3:34:49:f1:1d:fe:fb:b6:eb:64: 7f:8f:f7:53:41:a5:6e:e4:f3:1a:b8:ed:d9:f2:8b:00:09:3c: c9:d3:ab:9c:28:80:67:1e:62:8a:ca:6c:99:58:6f:9b:ca:63: 9a:3e:18:4a:31:1a:be:ef:19:49:82:e7:25:b0:59:dd:6c:24: ea:66:fe:f0:fd:c1:bd:92:06:8e:08:64:5f:5e:0a:d0:38:75: 0c:56:ec:4c:d7:1b:5c:f2:3d:69:5c:32:d2:9a:9f:2e:49:73: 69:f3:cb:0d:0d:23:5d:bb:1d:3d:4c:f0:67:72:a0:68:00:46: fc:d5:e8:5c:45:9b:eb:a0:7a:e4:d5:95:1a:6f:95:96:56:66: 10:c4:f3:be:22:27:c4:74:cf:f2:22:37:4e:78:f4:03:68:64: 05:6c:ea:cf:ed:c5:b6:f6:4a:2f:e0:75:f8:60:d9:2b:84:e9: 6a:e4:d7:57:c9:4d:ba:fa:ec:15:02:dd:0d:b9:c9:7f:71:18: 8e:91:60:26:a3:c0:9b:6d:52:96:46:d9:74:46:ca:ec:ed:7c: 8d:b9:1d:d6 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHrcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA1MjRaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEE2MEI0Mzk0NjI4RTky N0VBNjc1MjhBNzBBMTE0RjczMUE4RUY3MTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKAvSRx4Tx/mSm3fu6nZTP7mympW5i3Vch/hJmoD6LGgQohYl2 l0ScExrZQzp4OF12Lh/EP60zYnJ866DJQN3ANA4u0NMmLkr3GoLmLJ2tXyQJiYsb krUGZcB6qV1awG9T9Q6W2Vss5Feo79HMtqeqPpZFZyfPKiCBUjLDp/B1gRBsY95c +SLruAi5OrLj3IiaDObEdNZ/L6VJPeZdfhvaDzKo3LCR+M074r4laryeAzURS8uZ mXPI9AF6n1rcD6dk1nPM0V1BQIod8XWpVerAFSGygUV0Xyli2KhsxW2rACfYZirE h0JdxRsXTsFa7hJctEpwPllTn3x58UvW2AWnAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUpgtDlGKOkn6mdSinChFPcxqO9xkwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3BndERsR0tPa242bWRT aW5DaEZQY3hxTzl4ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3RIwDQYJKoZIhvcNAQELBQADggEBAB3jAO+nuseokOgWIfDwc9xPfEO3SLQY XcY+IkmP/G99M/6fwUixKWjJRRbNwzRJ8R3++7brZH+P91NBpW7k8xq47dnyiwAJ PMnTq5wogGceYorKbJlYb5vKY5o+GEoxGr7vGUmC5yWwWd1sJOpm/vD9wb2SBo4I ZF9eCtA4dQxW7EzXG1zyPWlcMtKany5Jc2nzyw0NI127HT1M8GdyoGgARvzV6FxF m+ugeuTVlRpvlZZWZhDE874iJ8R0z/IiN0549ANoZAVs6s/txbb2Si/gdfhg2SuE 6Wrk11fJTbr67BUC3Q25yX9xGI6RYCajwJttUpZG2XRGyuztfI25HdY= -----END CERTIFICATE-----Generated at Mon Oct 20 13:13:36 2025 by rpki-client