$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/xH4U-Z1I5ebjjQmGL8bXm_lqaVg.roa File: xH4U-Z1I5ebjjQmGL8bXm_lqaVg.roa (raw, json) Hash identifier: imDiW1/h9hQaiIX/dJAEN+Mu61vEsfwEAxjeP6NZs7c= Subject key identifier: C4:7E:14:F9:9D:48:E5:E6:E3:8D:09:86:2F:C6:D7:9B:F9:6A:69:58 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1FC8 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/xH4U-Z1I5ebjjQmGL8bXm_lqaVg.roa Signing time: Thu 16 Oct 2025 03:30:08 +0000 ROA not before: Thu 16 Oct 2025 03:30:08 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 13444 IP address blocks: 103.6.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 13:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8136 (0x1fc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Oct 16 03:30:08 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=C47E14F99D48E5E6E38D09862FC6D79BF96A6958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:72:3c:c0:01:5a:6e:bf:37:d8:64:48:7e:74: e8:87:83:70:d3:11:f5:a1:e9:b0:c3:72:68:ab:50: 1b:e2:c3:bd:4e:bc:52:54:80:0a:3b:c4:f9:d7:e4: 29:58:dc:35:47:e5:06:61:e6:90:a6:3a:15:10:b5: 22:9d:fd:3a:54:2c:f8:bf:48:69:e9:fd:f0:b0:06: 5f:c2:f6:df:a5:4a:e7:3f:9f:67:f4:a5:1b:db:82: 75:b7:16:b3:53:f4:54:cc:ff:2c:93:d3:ee:10:6d: 46:62:71:fd:a2:50:3b:37:55:92:fe:94:a8:d6:d7: 80:a9:28:26:db:5b:ea:ed:94:4d:06:69:e1:4d:10: 15:0b:0b:61:38:d6:1a:b5:f6:c3:3a:5c:9f:ad:8e: ec:54:99:a4:a1:90:b6:18:19:d7:56:61:cf:f1:48: 3b:21:d6:5b:33:d2:ba:ac:d2:9e:56:bd:9b:4b:8b: e5:22:c5:65:49:53:54:ca:48:51:6b:36:80:bb:df: dd:b1:cc:46:65:97:0e:81:87:1e:84:c3:26:3e:f2: 65:3f:f6:fa:cd:cb:5a:f9:ef:3c:68:80:4d:1b:2d: fa:ed:9b:dc:3f:cb:91:d7:61:29:53:18:0c:5a:82: 96:57:da:7e:5d:f5:86:a2:3f:d5:79:34:b3:6b:49: 3e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:7E:14:F9:9D:48:E5:E6:E3:8D:09:86:2F:C6:D7:9B:F9:6A:69:58 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/xH4U-Z1I5ebjjQmGL8bXm_lqaVg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.6.228.0/24 Signature Algorithm: sha256WithRSAEncryption 50:35:36:30:7d:5a:3b:e9:6a:95:9e:19:02:e8:d7:04:1c:0b: 64:9e:2b:34:6b:e3:66:cc:3d:e2:6a:4d:17:c6:db:9c:33:18: 2d:ff:af:ec:ce:13:1d:4e:b2:3e:d0:6c:5d:76:7f:ee:fb:98: 6d:ec:46:19:1e:a4:c1:d0:67:77:46:86:6c:60:bb:38:13:7c: e6:c9:d4:b5:1e:92:9c:61:ec:1e:db:c8:be:61:0b:5d:41:2b: dc:75:6c:da:0e:5e:b1:6b:54:ac:63:a7:bc:e0:75:c8:d3:1f: ac:b7:52:ef:eb:16:4c:d5:6d:47:7a:4f:ec:af:1f:fc:09:3c: 66:e1:c6:f2:2e:f5:ed:ee:54:36:88:ea:50:0a:56:fa:d3:8a: 47:c5:e2:58:41:f1:67:99:cf:1c:11:76:42:f1:30:5f:5a:b1: b4:d2:bf:b4:17:a6:b8:af:f3:e6:0f:4a:d8:53:46:64:0d:75: b9:7d:f9:08:92:48:c5:cf:59:f7:d3:d3:1f:23:fb:ff:a5:42: 41:52:da:50:0e:7e:4d:ac:0e:30:c8:2d:7d:a1:46:ae:8c:52: 91:02:d4:32:f8:68:40:1f:cf:f5:2c:a4:a1:b4:e1:c1:05:91: b9:50:88:05:13:70:27:ba:60:f4:c4:52:6f:0d:67:13:c8:bc: 59:55:46:b1 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICH8gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTEwMTYw MzMwMDhaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEM0N0UxNEY5OUQ0OEU1 RTZFMzhEMDk4NjJGQzZENzlCRjk2QTY5NTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDacjzAAVpuvzfYZEh+dOiHg3DTEfWh6bDDcmirUBviw71OvFJU gAo7xPnX5ClY3DVH5QZh5pCmOhUQtSKd/TpULPi/SGnp/fCwBl/C9t+lSuc/n2f0 pRvbgnW3FrNT9FTM/yyT0+4QbUZicf2iUDs3VZL+lKjW14CpKCbbW+rtlE0GaeFN EBULC2E41hq19sM6XJ+tjuxUmaShkLYYGddWYc/xSDsh1lsz0rqs0p5WvZtLi+Ui xWVJU1TKSFFrNoC7392xzEZllw6Bhx6EwyY+8mU/9vrNy1r57zxogE0bLfrtm9w/ y5HXYSlTGAxagpZX2n5d9YaiP9V5NLNrST7BAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUxH4U+Z1I5ebjjQmGL8bXm/lqaVgwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3hINFUtWjFJNWViampR bUdMOGJYbV9scWFWZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnBuQwDQYJKoZIhvcNAQELBQADggEBAFA1NjB9WjvpapWeGQLo1wQcC2SeKzRr 42bMPeJqTRfG25wzGC3/r+zOEx1Osj7QbF12f+77mG3sRhkepMHQZ3dGhmxguzgT fObJ1LUekpxh7B7byL5hC11BK9x1bNoOXrFrVKxjp7zgdcjTH6y3Uu/rFkzVbUd6 T+yvH/wJPGbhxvIu9e3uVDaI6lAKVvrTikfF4lhB8WeZzxwRdkLxMF9asbTSv7QX priv8+YPSthTRmQNdbl9+QiSSMXPWffT0x8j+/+lQkFS2lAOfk2sDjDILX2hRq6M UpEC1DL4aEAfz/UspKG04cEFkblQiAUTcCe6YPTEUm8NZxPIvFlVRrE= -----END CERTIFICATE-----Generated at Mon Oct 20 13:13:38 2025 by rpki-client