$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/wHVFCZ2EbKOsQlkv0_3FePf3x34.roa File: wHVFCZ2EbKOsQlkv0_3FePf3x34.roa (raw, json) Hash identifier: /xTywGZZrzL/h4l+vYY/8mZYaL6m/nlPBKjLfI5Q5iA= Subject key identifier: C0:75:45:09:9D:84:6C:A3:AC:42:59:2F:D3:FD:C5:78:F7:F7:C7:7E Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1DF8 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/wHVFCZ2EbKOsQlkv0_3FePf3x34.roa Signing time: Sat 13 Sep 2025 03:04:44 +0000 ROA not before: Sat 13 Sep 2025 03:04:44 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 4812 IP address blocks: 103.5.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 18:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7672 (0x1df8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:04:44 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=C07545099D846CA3AC42592FD3FDC578F7F7C77E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:21:84:75:34:e7:df:65:ff:58:37:4e:c4:ac: 33:56:2d:d7:84:ef:58:d5:4a:8a:a2:d4:84:56:ed: a3:1f:f8:9f:69:e3:53:25:62:73:89:fe:cc:9b:99: 42:c8:18:e7:4c:69:4f:df:c9:cf:d9:4a:2f:8f:1a: a1:29:91:4a:ec:66:9e:22:e2:0b:c4:85:49:43:02: 9a:76:af:bf:fc:a0:08:5d:66:6f:e6:b0:62:7e:43: e8:dd:58:fe:0a:88:3e:3a:d0:1c:82:04:8c:9b:f4: 37:48:e0:0c:8c:02:06:c0:20:c0:10:b1:73:93:e7: dc:c7:d6:88:d0:ec:d6:a5:c5:8d:2b:fe:02:80:02: 4e:60:6f:b0:44:6d:96:49:e6:ca:b2:5c:d1:c7:8e: ce:0a:1d:8e:62:06:ab:66:1d:10:7b:ae:30:bf:ad: e5:7e:16:e6:7e:d8:4f:5a:44:db:6b:20:64:ca:90: 41:42:94:38:c3:03:fa:c4:6b:f7:10:cb:69:22:47: 3a:df:98:2f:0b:b2:fe:b1:2e:2d:7f:5b:ce:3a:03: 41:57:db:78:4e:6c:b4:99:a0:37:2f:a9:36:75:09: 4f:0e:d5:fd:68:ca:dd:f1:86:b4:d2:72:c7:a7:76: 42:9d:e3:ff:48:81:71:de:bf:5a:ef:18:c5:22:bd: 00:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:75:45:09:9D:84:6C:A3:AC:42:59:2F:D3:FD:C5:78:F7:F7:C7:7E X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/wHVFCZ2EbKOsQlkv0_3FePf3x34.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.5.192.0/22 Signature Algorithm: sha256WithRSAEncryption a5:30:5c:a2:85:33:9a:47:25:2d:bf:b1:ea:ef:0f:a4:f5:ab: 70:7c:45:a4:4d:06:31:d7:4f:37:c3:3d:89:46:71:44:6f:f2: 7b:cb:42:a8:d5:c1:db:10:1a:3c:43:3c:b2:c7:2e:6c:09:68: a1:a6:4d:b2:8e:22:73:eb:72:5b:bd:dd:e3:50:df:ae:57:48: bf:80:a6:5f:bc:93:f5:41:38:c4:a4:e5:8e:f9:2e:3c:65:8d: 1c:6f:1e:c4:52:ce:b5:e8:ea:95:c8:5a:50:2b:a0:59:73:0f: 43:d8:5f:ca:84:2e:cb:38:86:b9:a5:9b:0b:58:45:1b:34:bf: 08:11:60:f0:a1:48:5a:3e:5a:27:f9:5c:a5:b7:f5:7f:4e:1c: 88:c6:9a:bc:76:b4:90:b8:10:1d:95:50:4e:6b:3b:9d:9a:db: 5d:c1:9b:bc:2a:81:79:6d:0f:c0:9d:d0:3c:a5:4f:2f:cd:63: 93:f4:74:d2:50:ac:fe:ec:da:93:69:29:1e:61:84:25:ec:e0: bb:f8:c5:93:0c:28:74:28:81:75:a9:6c:ab:21:c0:80:85:de: 0b:5a:ff:9d:9c:7b:30:69:58:ae:91:03:eb:0b:7c:d4:cc:f1: 7e:77:a2:80:48:fb:ea:45:9b:a2:1b:fe:61:22:05:bc:f2:d9: 42:83:29:6b -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHfgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA0NDRaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEMwNzU0NTA5OUQ4NDZD QTNBQzQyNTkyRkQzRkRDNTc4RjdGN0M3N0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSIYR1NOffZf9YN07ErDNWLdeE71jVSoqi1IRW7aMf+J9p41Ml YnOJ/sybmULIGOdMaU/fyc/ZSi+PGqEpkUrsZp4i4gvEhUlDApp2r7/8oAhdZm/m sGJ+Q+jdWP4KiD460ByCBIyb9DdI4AyMAgbAIMAQsXOT59zH1ojQ7NalxY0r/gKA Ak5gb7BEbZZJ5sqyXNHHjs4KHY5iBqtmHRB7rjC/reV+FuZ+2E9aRNtrIGTKkEFC lDjDA/rEa/cQy2kiRzrfmC8Lsv6xLi1/W846A0FX23hObLSZoDcvqTZ1CU8O1f1o yt3xhrTScsendkKd4/9IgXHev1rvGMUivQDvAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUwHVFCZ2EbKOsQlkv0/3FePf3x34wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3dIVkZDWjJFYktPc1Fs a3YwXzNGZVBmM3gzNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJnBcAwDQYJKoZIhvcNAQELBQADggEBAKUwXKKFM5pHJS2/servD6T1q3B8RaRN BjHXTzfDPYlGcURv8nvLQqjVwdsQGjxDPLLHLmwJaKGmTbKOInPrclu93eNQ365X SL+Apl+8k/VBOMSk5Y75LjxljRxvHsRSzrXo6pXIWlAroFlzD0PYX8qELss4hrml mwtYRRs0vwgRYPChSFo+Wif5XKW39X9OHIjGmrx2tJC4EB2VUE5rO52a213Bm7wq gXltD8Cd0DylTy/NY5P0dNJQrP7s2pNpKR5hhCXs4Lv4xZMMKHQogXWpbKshwICF 3gta/52cezBpWK6RA+sLfNTM8X53ooBI++pFm6Ib/mEiBbzy2UKDKWs= -----END CERTIFICATE-----Generated at Mon Oct 20 17:52:10 2025 by rpki-client