$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/tv2iVssnaOXAFFSk6oTSXtS71J8.roa File: tv2iVssnaOXAFFSk6oTSXtS71J8.roa (raw, json) Hash identifier: YrpcQ87hJokaCjdgKUFDfmwsFAumwEZKgMbUpr3Xzrs= Subject key identifier: B6:FD:A2:56:CB:27:68:E5:C0:14:54:A4:EA:84:D2:5E:D4:BB:D4:9F Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1E39 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/tv2iVssnaOXAFFSk6oTSXtS71J8.roa Signing time: Sat 13 Sep 2025 03:04:56 +0000 ROA not before: Sat 13 Sep 2025 03:04:56 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 139259 IP address blocks: 103.221.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 00:35:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7737 (0x1e39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:04:56 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=B6FDA256CB2768E5C01454A4EA84D25ED4BBD49F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:3b:97:9d:2d:68:8e:a1:1f:df:04:22:5b:69: 39:33:2c:17:2e:a6:2d:76:72:db:01:cd:05:7d:ef: 64:92:54:a9:01:ab:ce:5a:5e:2a:41:99:da:30:2a: e4:5d:71:c5:a7:86:6a:70:65:a5:9b:81:39:e0:9d: 69:6e:89:16:bb:c5:7d:4b:6a:13:de:fa:98:0b:3b: 96:80:e8:f1:fb:62:0d:68:21:6e:94:94:bc:0f:dd: 1e:93:3c:81:64:05:fa:c7:44:96:7b:b2:05:1d:4e: e4:5b:06:f0:46:ad:0b:85:27:4f:aa:31:d4:cd:ef: fa:64:54:ba:71:b8:f2:c1:13:e9:de:4b:c6:06:79: 09:8d:a1:f3:9a:38:8f:8c:7f:5a:70:59:f1:70:7f: 76:25:24:b4:21:b2:5f:80:37:d7:1d:3d:06:04:ea: 63:a0:ae:f4:9a:db:b8:cd:d3:9b:1b:c0:9e:18:6d: 74:83:04:a4:c7:88:11:5e:97:47:83:e4:5f:e5:96: 90:d3:09:d9:10:62:7d:06:cf:5e:f1:a2:a2:c7:97: e2:59:88:15:3b:42:51:b5:3c:65:40:32:26:9c:35: 0a:9f:61:ae:54:73:e8:40:80:36:a9:8c:ef:5f:30: 7b:03:f3:70:ea:26:fc:66:35:da:c4:bd:15:60:36: 32:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:FD:A2:56:CB:27:68:E5:C0:14:54:A4:EA:84:D2:5E:D4:BB:D4:9F X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/tv2iVssnaOXAFFSk6oTSXtS71J8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.19.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:ec:d0:36:b4:d9:9e:44:15:1d:4a:3d:6a:95:7d:10:ca:c8: c2:0e:84:12:74:8a:83:3b:0f:86:70:7e:b6:59:f8:54:b5:f2: 7a:81:5c:65:54:1b:91:f9:63:60:f0:49:ec:ca:10:2a:4d:76: 59:27:38:27:db:20:bc:10:7d:07:b7:fc:df:c2:7e:d6:44:25: 67:49:a6:30:58:bb:99:41:c3:c4:cb:73:48:7f:fa:1f:7f:29: 55:90:23:c8:da:9d:5a:eb:50:1d:4a:2b:41:46:5d:d8:d1:14: 5f:5a:94:80:75:64:fb:7b:f0:7d:71:94:83:9c:03:77:b0:26: 1c:6f:eb:f0:5b:24:68:ad:99:df:45:4b:74:6f:5e:4b:bc:b3: df:96:bd:38:1a:e5:0b:8d:61:0d:08:85:fb:e3:5c:09:6f:5b: 1b:47:c4:84:9f:e2:e5:6c:05:57:0d:4b:57:b9:b6:d1:dd:df: 99:45:2c:07:ea:b9:35:ad:68:36:d1:57:c0:db:fe:a8:a8:a8: 87:0f:5c:04:b0:1d:f0:d8:5d:42:30:67:cf:e7:f0:0b:39:0a: a5:4f:89:7a:30:77:3c:68:ef:82:44:58:30:c7:5c:db:49:fb: 12:7c:25:d4:d3:22:ad:7a:6d:aa:75:e5:62:d3:56:bb:bb:7f: 0a:59:52:c2 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHjkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA0NTZaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEI2RkRBMjU2Q0IyNzY4 RTVDMDE0NTRBNEVBODREMjVFRDRCQkQ0OUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDqO5edLWiOoR/fBCJbaTkzLBcupi12ctsBzQV972SSVKkBq85a XipBmdowKuRdccWnhmpwZaWbgTngnWluiRa7xX1LahPe+pgLO5aA6PH7Yg1oIW6U lLwP3R6TPIFkBfrHRJZ7sgUdTuRbBvBGrQuFJ0+qMdTN7/pkVLpxuPLBE+neS8YG eQmNofOaOI+Mf1pwWfFwf3YlJLQhsl+AN9cdPQYE6mOgrvSa27jN05sbwJ4YbXSD BKTHiBFel0eD5F/llpDTCdkQYn0Gz17xoqLHl+JZiBU7QlG1PGVAMiacNQqfYa5U c+hAgDapjO9fMHsD83DqJvxmNdrEvRVgNjI1AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUtv2iVssnaOXAFFSk6oTSXtS71J8wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3R2MmlWc3NuYU9YQUZG U2s2b1RTWHRTNzFKOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3RMwDQYJKoZIhvcNAQELBQADggEBAE7s0Da02Z5EFR1KPWqVfRDKyMIOhBJ0 ioM7D4ZwfrZZ+FS18nqBXGVUG5H5Y2DwSezKECpNdlknOCfbILwQfQe3/N/CftZE JWdJpjBYu5lBw8TLc0h/+h9/KVWQI8janVrrUB1KK0FGXdjRFF9alIB1ZPt78H1x lIOcA3ewJhxv6/BbJGitmd9FS3RvXku8s9+WvTga5QuNYQ0IhfvjXAlvWxtHxISf 4uVsBVcNS1e5ttHd35lFLAfquTWtaDbRV8Db/qioqIcPXASwHfDYXUIwZ8/n8As5 CqVPiXowdzxo74JEWDDHXNtJ+xJ8JdTTIq16bap15WLTVru7fwpZUsI= -----END CERTIFICATE-----Generated at Mon Oct 20 23:27:20 2025 by rpki-client