$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/t10J_6iaKPz2Fn6p8gJJHmDszMQ.roa File: t10J_6iaKPz2Fn6p8gJJHmDszMQ.roa (raw, json) Hash identifier: zykGEtiR3mnCjF0FX4tTv48YTfVTwL6VGf//VEAsAMM= Subject key identifier: B7:5D:09:FF:A8:9A:28:FC:F6:16:7E:A9:F2:02:49:1E:60:EC:CC:C4 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1EE8 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/t10J_6iaKPz2Fn6p8gJJHmDszMQ.roa Signing time: Sat 13 Sep 2025 03:05:36 +0000 ROA not before: Sat 13 Sep 2025 03:05:36 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 139259 IP address blocks: 45.252.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 13:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7912 (0x1ee8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:05:36 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=B75D09FFA89A28FCF6167EA9F202491E60ECCCC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ad:06:93:1e:5c:f8:ee:67:fe:fd:dc:c0:2c: 23:16:9a:f7:3e:7d:73:44:2b:44:de:27:e7:4d:c2: 85:03:a4:64:ca:22:80:d3:d0:5a:97:b7:d9:99:77: dc:a0:76:2a:1b:5c:73:ab:67:35:6c:ae:6d:c9:46: 4c:fa:73:e8:f3:79:71:47:7d:12:ff:27:65:c1:fa: cd:fc:41:8e:73:6d:28:9e:3c:8c:15:4a:4a:be:05: e7:8b:2d:09:2d:5f:82:23:a2:47:77:e1:64:2e:e8: d7:21:50:71:e6:95:c1:a4:d5:74:6a:cd:bf:37:1d: 4e:8b:89:a4:bf:65:d8:6c:e0:cc:b8:ea:85:4d:77: 56:88:37:1f:3f:04:58:aa:c9:6e:47:19:24:7a:27: 15:2c:a9:07:ae:68:5f:59:bc:27:3b:9f:22:38:e6: 40:fa:af:a7:92:68:20:14:30:76:a8:db:d0:bf:66: 93:11:6b:04:38:eb:10:cc:34:02:34:73:25:43:a0: 20:50:62:1e:29:93:18:d6:f3:c2:ab:6b:ab:25:7f: ea:b3:5a:fd:6f:d7:08:7b:06:c1:12:ef:47:2a:aa: 59:7c:17:7e:d2:09:df:d4:42:21:78:3e:b0:8c:42: 3c:cc:ef:e2:ef:b8:f4:03:09:1c:d0:4b:0f:56:ce: 36:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:5D:09:FF:A8:9A:28:FC:F6:16:7E:A9:F2:02:49:1E:60:EC:CC:C4 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/t10J_6iaKPz2Fn6p8gJJHmDszMQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.44.0/22 Signature Algorithm: sha256WithRSAEncryption 52:5d:72:de:d4:05:95:1e:5d:13:ee:be:da:41:90:8c:97:0e: 5a:38:03:01:c6:a6:58:0b:3f:95:44:b2:2c:88:e6:97:59:ce: 74:8c:75:d9:75:0c:00:73:d2:af:0a:ad:df:0e:dd:19:39:26: 20:1f:c1:b8:c1:90:a0:e0:fa:30:22:cf:aa:1c:82:69:7c:e2: 56:cd:02:70:b8:9e:c9:fc:25:90:6a:fb:94:73:a5:cd:c5:d4: 1f:ca:2c:06:12:48:f8:0d:f6:8e:ad:5c:27:f5:03:35:1e:b2: 6a:58:53:57:e4:a3:15:9c:6c:8c:8b:14:21:64:45:74:a5:f1: 8e:32:85:34:de:9a:d9:f1:50:24:30:5b:16:04:3c:16:f1:4d: 2b:a1:06:09:83:8d:0d:01:6c:9d:33:6c:b0:07:06:9c:51:b1: 91:4d:24:cd:8a:44:53:d9:2b:c2:90:5e:ea:e3:fd:ed:7c:51: 96:aa:5d:dc:b5:4a:70:f8:92:81:bb:c4:c5:a0:c4:21:fb:a1: 67:83:75:55:38:02:f6:bd:cc:98:79:9a:27:55:71:88:52:98: 34:0e:c8:14:ba:eb:43:e1:1a:e0:c9:80:5e:d7:6a:e4:37:62: 24:8c:1e:c9:ee:41:5d:5a:bf:fd:de:32:26:c1:d6:f0:a0:ff: 87:12:1e:89 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHugwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA1MzZaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEI3NUQwOUZGQTg5QTI4 RkNGNjE2N0VBOUYyMDI0OTFFNjBFQ0NDQzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/rQaTHlz47mf+/dzALCMWmvc+fXNEK0TeJ+dNwoUDpGTKIoDT 0FqXt9mZd9ygdiobXHOrZzVsrm3JRkz6c+jzeXFHfRL/J2XB+s38QY5zbSiePIwV Skq+BeeLLQktX4Ijokd34WQu6NchUHHmlcGk1XRqzb83HU6LiaS/Zdhs4My46oVN d1aINx8/BFiqyW5HGSR6JxUsqQeuaF9ZvCc7nyI45kD6r6eSaCAUMHao29C/ZpMR awQ46xDMNAI0cyVDoCBQYh4pkxjW88Kra6slf+qzWv1v1wh7BsES70cqqll8F37S Cd/UQiF4PrCMQjzM7+LvuPQDCRzQSw9Wzjb3AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUt10J/6iaKPz2Fn6p8gJJHmDszMQwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3QxMEpfNmlhS1B6MkZu NnA4Z0pKSG1Ec3pNUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIt/CwwDQYJKoZIhvcNAQELBQADggEBAFJdct7UBZUeXRPuvtpBkIyXDlo4AwHG plgLP5VEsiyI5pdZznSMddl1DABz0q8Krd8O3Rk5JiAfwbjBkKDg+jAiz6ocgml8 4lbNAnC4nsn8JZBq+5Rzpc3F1B/KLAYSSPgN9o6tXCf1AzUesmpYU1fkoxWcbIyL FCFkRXSl8Y4yhTTemtnxUCQwWxYEPBbxTSuhBgmDjQ0BbJ0zbLAHBpxRsZFNJM2K RFPZK8KQXurj/e18UZaqXdy1SnD4koG7xMWgxCH7oWeDdVU4Ava9zJh5midVcYhS mDQOyBS660PhGuDJgF7XauQ3YiSMHsnuQV1av/3eMibB1vCg/4cSHok= -----END CERTIFICATE-----Generated at Mon Oct 20 13:30:47 2025 by rpki-client