$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/smPKcGRTnoigi597f_1Ibt6mwn8.roa File: smPKcGRTnoigi597f_1Ibt6mwn8.roa (raw, json) Hash identifier: x2UCTphnB/HoqK6yNy0Whje5Raf3XhDGOR6vA8H4CTo= Subject key identifier: B2:63:CA:70:64:53:9E:88:A0:8B:9F:7B:7F:FD:48:6E:DE:A6:C2:7F Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1DDD Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/smPKcGRTnoigi597f_1Ibt6mwn8.roa Signing time: Sat 13 Sep 2025 03:04:39 +0000 ROA not before: Sat 13 Sep 2025 03:04:39 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 24373 IP address blocks: 45.252.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 15:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7645 (0x1ddd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:04:39 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=B263CA7064539E88A08B9F7B7FFD486EDEA6C27F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c6:54:75:d6:ba:99:ff:2e:4d:00:b7:fe:69: 59:e1:cb:c7:03:68:8d:63:6b:fd:03:b2:96:05:71: 85:aa:2e:05:d2:73:2a:6c:2f:6c:d6:c9:60:51:9c: e3:cc:2a:1b:07:58:8c:9a:1b:45:9d:22:bb:6d:7f: d3:8e:5d:b3:e8:b2:db:9c:b7:09:6b:20:4f:eb:d1: 5d:9a:00:af:9b:4d:f7:99:b8:71:e5:03:40:28:54: a1:a0:f9:c3:32:a5:e7:a0:35:b4:14:0c:d1:76:27: f1:01:19:8c:b7:f9:63:59:07:8b:8a:05:0b:73:c7: 42:5a:76:13:68:9b:8e:78:cb:70:9a:7f:86:0e:3b: 2d:e4:1a:49:e2:50:fd:a7:53:ee:14:b5:e6:87:2d: 1d:39:e6:86:8b:98:06:95:e5:d3:35:23:fa:42:50: 9f:70:dd:cf:4c:9c:bb:25:b3:50:3c:ec:5f:7d:db: c8:01:aa:cb:84:72:c8:c5:e7:13:ef:bd:ad:44:36: 81:45:a9:97:84:24:81:5d:5a:a2:39:a4:5b:82:a8: ac:74:3b:e3:a5:83:a1:ec:40:96:55:16:42:64:82: b6:92:8b:9a:e6:78:a9:2c:52:19:cf:b7:3d:98:39: 8a:fb:3b:c3:2b:0d:80:db:0d:92:ec:4d:c7:42:50: 4f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:63:CA:70:64:53:9E:88:A0:8B:9F:7B:7F:FD:48:6E:DE:A6:C2:7F X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/smPKcGRTnoigi597f_1Ibt6mwn8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.144.0/22 Signature Algorithm: sha256WithRSAEncryption b9:58:45:c8:dc:d1:1b:d6:c4:1b:eb:79:78:7e:66:24:73:08: cc:7a:0f:91:ce:cb:ee:a4:0f:89:39:69:e3:3f:78:fb:d9:1a: db:00:66:72:79:e6:65:9c:d9:6e:77:54:83:0f:4b:7a:d5:66: 3d:1f:a4:38:c8:9b:18:66:48:28:64:b1:5f:37:d9:8c:ac:1d: 32:ff:69:e5:9a:4f:f5:6d:85:b6:e5:36:45:65:8a:c4:94:50: 82:7c:2e:fc:1d:33:37:48:de:cc:40:ae:1c:19:ba:08:e4:4e: bb:ff:c1:15:b2:f6:3d:c5:bd:6c:5c:e3:0f:11:cc:49:c9:23: 4b:95:06:8f:0a:6f:b4:81:8d:7f:a4:dd:91:b1:6d:d7:b6:bf: 88:8d:41:5b:c0:bc:e1:1f:52:e0:7d:a1:30:02:15:10:64:53: 07:2c:69:21:11:e1:7f:7f:b9:c3:b1:4a:bb:8f:73:c6:31:28: 5b:3c:d7:fe:3f:57:6c:43:2e:b3:7f:d2:40:04:c3:f9:4f:b6: 95:3a:5f:ac:9e:87:29:14:75:58:f1:77:fc:9a:b8:b1:00:c5: 35:8a:cc:71:4b:e8:af:8d:af:f5:01:75:08:02:d4:16:12:93: f9:b4:df:6d:cf:ce:ae:f1:a2:75:9b:fb:10:2b:cd:db:14:da: 72:82:66:97 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHd0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA0MzlaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEIyNjNDQTcwNjQ1MzlF ODhBMDhCOUY3QjdGRkQ0ODZFREVBNkMyN0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdxlR11rqZ/y5NALf+aVnhy8cDaI1ja/0DspYFcYWqLgXScyps L2zWyWBRnOPMKhsHWIyaG0WdIrttf9OOXbPostuctwlrIE/r0V2aAK+bTfeZuHHl A0AoVKGg+cMypeegNbQUDNF2J/EBGYy3+WNZB4uKBQtzx0JadhNom454y3Caf4YO Oy3kGkniUP2nU+4UteaHLR055oaLmAaV5dM1I/pCUJ9w3c9MnLsls1A87F9928gB qsuEcsjF5xPvva1ENoFFqZeEJIFdWqI5pFuCqKx0O+Olg6HsQJZVFkJkgraSi5rm eKksUhnPtz2YOYr7O8MrDYDbDZLsTcdCUE/XAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUsmPKcGRTnoigi597f/1Ibt6mwn8wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3NtUEtjR1JUbm9pZ2k1 OTdmXzFJYnQ2bXduOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIt/JAwDQYJKoZIhvcNAQELBQADggEBALlYRcjc0RvWxBvreXh+ZiRzCMx6D5HO y+6kD4k5aeM/ePvZGtsAZnJ55mWc2W53VIMPS3rVZj0fpDjImxhmSChksV832Yys HTL/aeWaT/VthbblNkVlisSUUIJ8LvwdMzdI3sxArhwZugjkTrv/wRWy9j3FvWxc 4w8RzEnJI0uVBo8Kb7SBjX+k3ZGxbde2v4iNQVvAvOEfUuB9oTACFRBkUwcsaSER 4X9/ucOxSruPc8YxKFs81/4/V2xDLrN/0kAEw/lPtpU6X6yehykUdVjxd/yauLEA xTWKzHFL6K+Nr/UBdQgC1BYSk/m0323Pzq7xonWb+xArzdsU2nKCZpc= -----END CERTIFICATE-----Generated at Mon Oct 20 14:31:30 2025 by rpki-client