$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/sRD_AZ26kQuXqD-D0imiqxzCgGU.roa File: sRD_AZ26kQuXqD-D0imiqxzCgGU.roa (raw, json) Hash identifier: faqjxzhUXSTk6FDTA1tKabXDnh+fQV0daSAdY7rsrHc= Subject key identifier: B1:10:FF:01:9D:BA:91:0B:97:A8:3F:83:D2:29:A2:AB:1C:C2:80:65 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1DF9 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/sRD_AZ26kQuXqD-D0imiqxzCgGU.roa Signing time: Sat 13 Sep 2025 03:04:44 +0000 ROA not before: Sat 13 Sep 2025 03:04:44 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 139259 IP address blocks: 45.252.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 00:35:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7673 (0x1df9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:04:44 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=B110FF019DBA910B97A83F83D229A2AB1CC28065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e0:f7:c9:bb:41:10:47:33:9a:fd:58:01:75: 63:10:57:41:93:67:72:c7:75:2c:9d:17:82:20:4e: 06:f2:91:25:b7:89:4f:62:73:b4:e2:2c:85:7f:63: 32:fa:7f:49:a1:8b:63:c8:c5:c1:ac:95:36:38:e5: 12:2b:53:71:55:e7:c7:ef:73:c1:3f:12:48:d7:90: de:04:d8:31:ab:91:25:62:c0:cd:21:41:2b:2f:97: fc:9a:a1:e3:0b:9e:f9:74:b7:22:4b:4b:f4:5c:aa: 20:a2:50:8e:b1:39:35:97:1c:b0:b8:e8:87:c7:ba: b7:0b:fb:53:ff:5e:86:83:2c:a3:bc:42:9a:53:c5: d4:ac:b1:fe:95:40:76:1d:e1:af:71:ae:0c:42:c1: 1c:f7:a6:5d:02:ea:1d:06:4b:ec:d6:0d:d6:46:b0: 8d:33:ba:98:ad:d1:62:e6:95:c1:b0:27:01:78:5e: fc:95:22:1c:60:b4:68:74:5c:40:0b:2b:c8:bd:23: 5c:6e:0f:6c:5c:4d:da:6e:fb:8c:95:7a:7c:61:c1: 14:4f:16:4f:89:bd:18:4a:30:37:44:78:9a:b5:9a: 81:57:d8:f5:44:ed:c4:d9:a0:ec:60:1c:05:6e:d2: 82:dd:f9:3f:28:61:e4:49:05:dd:36:66:11:f1:e6: 45:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:10:FF:01:9D:BA:91:0B:97:A8:3F:83:D2:29:A2:AB:1C:C2:80:65 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/sRD_AZ26kQuXqD-D0imiqxzCgGU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.12.0/22 Signature Algorithm: sha256WithRSAEncryption cc:3d:7a:4c:de:bb:bd:e7:0f:01:2a:b2:56:69:99:6e:4a:9b: 5d:5e:e3:59:d4:d2:e8:96:df:a8:2a:79:f5:a6:89:32:bc:21: bf:05:e8:fe:7e:1b:db:ac:37:f1:13:04:b8:cc:f3:e3:18:ea: 43:de:47:4c:1b:39:09:ae:23:2c:2c:2f:82:97:0d:98:77:2d: ce:32:30:22:3e:5d:2d:ed:77:2f:85:74:ba:2b:e8:ad:a1:c4: 1d:7c:6b:17:3d:94:e0:f7:40:3d:0d:36:14:fe:ec:fa:af:53: 98:5e:ce:21:65:e7:0a:54:91:48:55:1a:2c:a2:6b:f5:28:1d: b5:84:7f:66:92:57:26:cd:98:cf:9c:7f:b9:21:0d:86:f8:6f: 85:39:9b:70:39:cd:f9:1d:76:4c:dd:3d:c2:25:01:cb:17:6e: 7b:28:20:cd:28:52:9c:86:cd:c7:43:d9:d4:ff:df:26:fe:9e: 68:50:b0:d1:02:c0:e4:6d:ba:3e:e6:17:16:78:a6:c7:9c:6b: 6b:4e:ac:c0:3b:bf:e6:28:8d:d2:64:29:ed:83:ce:d2:87:9c: a7:ea:d2:83:54:e8:a3:ae:dc:34:2e:2e:42:f9:97:2f:43:97: 9b:7f:d8:84:eb:37:74:be:b5:b6:59:c4:76:37:77:e9:43:93: 94:d3:13:3b -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHfkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA0NDRaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEIxMTBGRjAxOURCQTkx MEI5N0E4M0Y4M0QyMjlBMkFCMUNDMjgwNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCl4PfJu0EQRzOa/VgBdWMQV0GTZ3LHdSydF4IgTgbykSW3iU9i c7TiLIV/YzL6f0mhi2PIxcGslTY45RIrU3FV58fvc8E/EkjXkN4E2DGrkSViwM0h QSsvl/yaoeMLnvl0tyJLS/RcqiCiUI6xOTWXHLC46IfHurcL+1P/XoaDLKO8QppT xdSssf6VQHYd4a9xrgxCwRz3pl0C6h0GS+zWDdZGsI0zupit0WLmlcGwJwF4XvyV IhxgtGh0XEALK8i9I1xuD2xcTdpu+4yVenxhwRRPFk+JvRhKMDdEeJq1moFX2PVE 7cTZoOxgHAVu0oLd+T8oYeRJBd02ZhHx5kU9AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUsRD/AZ26kQuXqD+D0imiqxzCgGUwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3NSRF9BWjI2a1F1WHFE LUQwaW1pcXh6Q2dHVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIt/AwwDQYJKoZIhvcNAQELBQADggEBAMw9ekzeu73nDwEqslZpmW5Km11e41nU 0uiW36gqefWmiTK8Ib8F6P5+G9usN/ETBLjM8+MY6kPeR0wbOQmuIywsL4KXDZh3 Lc4yMCI+XS3tdy+FdLor6K2hxB18axc9lOD3QD0NNhT+7PqvU5heziFl5wpUkUhV Giyia/UoHbWEf2aSVybNmM+cf7khDYb4b4U5m3A5zfkddkzdPcIlAcsXbnsoIM0o UpyGzcdD2dT/3yb+nmhQsNECwORtuj7mFxZ4pseca2tOrMA7v+YojdJkKe2DztKH nKfq0oNU6KOu3DQuLkL5ly9Dl5t/2ITrN3S+tbZZxHY3d+lDk5TTEzs= -----END CERTIFICATE-----Generated at Mon Oct 20 23:27:39 2025 by rpki-client