$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/subnOiwKKHR-CBerD09oOqt-uTc.roa File: subnOiwKKHR-CBerD09oOqt-uTc.roa (raw, json) Hash identifier: ASRS4J+jkTqcVCx413fYAR3XMfgt9gdKRFzLdl2n+IA= Subject key identifier: B2:E6:E7:3A:2C:0A:28:74:7E:08:17:AB:0F:4F:68:3A:AB:7E:B9:37 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1E59 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/subnOiwKKHR-CBerD09oOqt-uTc.roa Signing time: Sat 13 Sep 2025 03:05:03 +0000 ROA not before: Sat 13 Sep 2025 03:05:03 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 13444 IP address blocks: 103.221.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 13:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7769 (0x1e59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:05:03 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=B2E6E73A2C0A28747E0817AB0F4F683AAB7EB937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:4b:e3:5e:d4:51:9f:f7:be:ec:a0:a2:0d:f5: 2e:3a:df:e6:3e:41:c8:bb:a6:37:a4:94:b0:d4:62: c8:8f:9f:c8:1a:ba:d2:11:a3:3b:45:a3:0a:6c:c5: c4:43:75:69:79:f7:f8:1d:1a:93:d5:97:b4:53:f2: 83:96:e7:01:18:a2:9b:8d:13:e2:b6:65:18:85:9f: c6:6a:86:bc:7d:5f:82:97:06:3f:49:69:58:16:0c: cc:0c:e2:0e:a8:84:c3:1f:12:ff:80:cf:1a:e1:93: f6:0d:0b:ad:7a:bf:e5:51:f1:03:7a:ef:1d:d8:ab: 43:30:90:e4:d5:62:b6:75:d6:fe:d4:a9:e0:95:93: 8e:76:84:bb:7e:3e:49:c3:e0:6a:28:1f:53:d8:79: eb:a3:e6:ac:5a:52:2c:07:f6:38:77:1e:9c:86:a1: 3a:99:70:6a:0c:83:e6:d9:8c:42:73:06:ea:96:0b: b5:29:97:11:03:7e:60:a4:b5:21:a8:fc:74:1a:cf: cb:d3:d2:ef:21:cc:f7:ad:3f:2a:ed:20:9c:13:77: 54:98:39:77:3e:20:30:a2:2c:2a:ec:ec:e0:67:0f: 1d:7d:af:fd:b5:fb:59:fe:e2:92:78:bd:e6:a7:05: 72:e8:9a:fd:ea:1c:22:0f:aa:8e:79:ab:68:30:64: 0d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E6:E7:3A:2C:0A:28:74:7E:08:17:AB:0F:4F:68:3A:AB:7E:B9:37 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/subnOiwKKHR-CBerD09oOqt-uTc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.19.0/24 Signature Algorithm: sha256WithRSAEncryption 63:21:a1:72:71:24:30:85:34:4e:b2:48:b6:ba:1a:0a:04:f9: 21:e7:b6:77:96:16:ba:ae:82:2d:27:59:ca:d4:94:9c:c8:31: c5:c4:e2:a1:1e:9b:73:45:4e:7d:c3:e4:44:11:ea:66:86:3a: f1:63:8d:c8:46:85:4e:cb:53:2d:1e:9a:29:70:92:b0:9c:06: 99:f2:41:ec:26:9d:4f:92:29:e5:dd:7f:9b:40:ec:0f:3a:7c: 4d:c9:21:09:31:dd:d7:48:82:f5:92:61:db:66:39:f3:07:47: f9:98:8a:c9:40:ab:b9:fe:39:a1:5e:42:0a:cd:b7:33:ae:86: ce:4c:61:e1:82:6c:51:af:ea:5b:98:87:4c:52:5d:9a:e7:8f: cf:3b:ae:b6:56:85:60:be:b9:f3:0e:a6:1d:99:16:70:14:a3: 19:51:b2:c1:d6:35:eb:02:84:54:af:e5:bb:8d:45:5b:94:f9: 03:cf:1d:ba:ae:17:8b:33:27:5d:b4:cc:b5:59:ea:db:6b:ae: e8:4b:00:8f:90:3c:28:9f:23:33:7e:82:e7:46:e0:c4:c5:5e: d8:91:8b:f6:ca:c7:89:af:ac:fd:8f:e8:71:45:d6:28:06:22: d4:4e:94:dd:04:34:d3:8d:36:14:86:7a:9a:53:bd:c8:c1:a1: fa:4c:b6:9f -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHlkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA1MDNaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEIyRTZFNzNBMkMwQTI4 NzQ3RTA4MTdBQjBGNEY2ODNBQUI3RUI5MzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD0S+Ne1FGf977soKIN9S463+Y+Qci7pjeklLDUYsiPn8gautIR oztFowpsxcRDdWl59/gdGpPVl7RT8oOW5wEYopuNE+K2ZRiFn8Zqhrx9X4KXBj9J aVgWDMwM4g6ohMMfEv+Azxrhk/YNC616v+VR8QN67x3Yq0MwkOTVYrZ11v7UqeCV k452hLt+PknD4GooH1PYeeuj5qxaUiwH9jh3HpyGoTqZcGoMg+bZjEJzBuqWC7Up lxEDfmCktSGo/HQaz8vT0u8hzPetPyrtIJwTd1SYOXc+IDCiLCrs7OBnDx19r/21 +1n+4pJ4veanBXLomv3qHCIPqo55q2gwZA07AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUsubnOiwKKHR+CBerD09oOqt+uTcwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3N1Ym5PaXdLS0hSLUNC ZXJEMDlvT3F0LXVUYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3RMwDQYJKoZIhvcNAQELBQADggEBAGMhoXJxJDCFNE6ySLa6GgoE+SHntneW Frqugi0nWcrUlJzIMcXE4qEem3NFTn3D5EQR6maGOvFjjchGhU7LUy0emilwkrCc BpnyQewmnU+SKeXdf5tA7A86fE3JIQkx3ddIgvWSYdtmOfMHR/mYislAq7n+OaFe QgrNtzOuhs5MYeGCbFGv6luYh0xSXZrnj887rrZWhWC+ufMOph2ZFnAUoxlRssHW NesChFSv5buNRVuU+QPPHbquF4szJ120zLVZ6ttrruhLAI+QPCifIzN+gudG4MTF XtiRi/bKx4mvrP2P6HFF1igGItROlN0ENNONNhSGeppTvcjBofpMtp8= -----END CERTIFICATE-----Generated at Mon Oct 20 13:13:37 2025 by rpki-client