$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/xQAIiioUA_YFUdJQIZrtvGiqB_o.roa File: xQAIiioUA_YFUdJQIZrtvGiqB_o.roa (raw, json) Hash identifier: rUwavcCDzqssw1fd00ahBgub+wnDz/DPkFRFQh3zEbU= Subject key identifier: C5:00:08:8A:2A:14:03:F6:05:51:D2:50:21:9A:ED:BC:68:AA:07:FA Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1E0C Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/xQAIiioUA_YFUdJQIZrtvGiqB_o.roa Signing time: Sat 13 Sep 2025 03:04:49 +0000 ROA not before: Sat 13 Sep 2025 03:04:49 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 139259 IP address blocks: 45.252.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 13:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7692 (0x1e0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:04:49 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=C500088A2A1403F60551D250219AEDBC68AA07FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:12:b6:95:67:a7:ee:11:ff:35:9b:97:b6:6c: ca:d3:c6:23:02:56:e9:c4:11:ef:7a:6d:42:7c:d5: 6b:cc:fd:40:69:47:29:bb:04:77:9e:a2:ea:f9:df: 7c:91:30:aa:11:04:64:9c:75:8e:c6:48:d0:41:e6: 8f:5e:77:0c:04:f0:58:05:33:c5:60:ce:4e:2c:4a: f6:eb:72:41:ac:ab:64:86:8a:7e:ae:f1:9e:9e:b9: f2:52:92:c4:51:53:8e:d2:d4:43:63:a3:b0:3c:24: 9c:ec:98:1c:1c:db:ab:9d:cf:58:21:45:96:af:76: 8b:f3:5d:97:22:76:a0:e3:b0:ca:ca:c0:24:3d:e0: 7c:c4:77:d8:8a:61:a1:05:51:e0:81:88:2d:ee:b6: bd:bc:7b:69:a9:8f:2a:4b:02:25:98:86:f7:52:7d: be:88:e5:eb:ab:26:8f:83:e2:34:37:d3:69:b3:e4: ea:56:00:4e:df:91:fd:ad:e8:65:f5:d8:e3:83:3c: f8:6e:e7:eb:f0:7c:18:5e:b0:dd:8d:c1:0f:6d:b7: 93:9f:f4:ac:21:7e:ea:44:4a:77:24:2b:fd:70:c4: 70:2c:ff:a9:1b:d7:6d:d3:c1:72:99:4f:9d:08:06: 7e:3c:e3:62:9b:a2:7c:72:74:26:e4:52:fb:1e:1a: 8a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:00:08:8A:2A:14:03:F6:05:51:D2:50:21:9A:ED:BC:68:AA:07:FA X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/xQAIiioUA_YFUdJQIZrtvGiqB_o.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.100.0/24 Signature Algorithm: sha256WithRSAEncryption d4:77:60:b0:73:6e:64:c8:ce:e4:d0:e3:b7:d5:1b:d3:7d:1b: 83:18:2a:d4:db:27:10:07:14:2c:5d:8b:4a:7e:88:d3:35:14: f9:a7:28:46:2a:d6:6d:33:dc:5c:57:ab:b9:c3:eb:98:f6:49: eb:1a:d9:6f:65:02:4a:b7:c5:62:84:c4:49:aa:2d:51:04:f7: 0d:98:f5:1b:b3:2b:3b:83:8e:e6:00:33:f8:53:5b:11:3c:70: 2f:a2:79:ac:b9:af:8a:12:8f:88:d4:c2:e1:b1:2d:92:df:ab: 88:c5:24:95:19:bb:e6:d9:05:d9:57:2c:c1:cd:c7:bd:b5:b4: 5c:2e:9c:73:60:9f:d7:49:52:22:d5:f8:f2:3c:b0:90:7a:8a: f9:21:aa:81:8a:68:1e:28:c3:6a:14:c9:a4:3a:ea:3d:39:49: cd:ef:5c:36:72:7f:12:c0:ad:6d:82:de:f2:4a:ff:58:1e:52: af:5b:02:94:df:9d:2a:57:3f:48:65:f9:c4:09:fc:28:36:66: 4a:8f:1e:20:c4:ee:64:88:f1:b6:47:23:3c:e5:cc:2b:af:ce: 08:37:94:a4:02:6a:2f:34:28:81:da:91:6b:25:24:bb:4f:28: a5:df:9e:59:32:24:e3:13:22:fd:34:08:b7:fe:00:0c:2a:61: 9d:ef:3c:f2 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHgwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA0NDlaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEM1MDAwODhBMkExNDAz RjYwNTUxRDI1MDIxOUFFREJDNjhBQTA3RkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOEraVZ6fuEf81m5e2bMrTxiMCVunEEe96bUJ81WvM/UBpRym7 BHeeour533yRMKoRBGScdY7GSNBB5o9edwwE8FgFM8Vgzk4sSvbrckGsq2SGin6u 8Z6eufJSksRRU47S1ENjo7A8JJzsmBwc26udz1ghRZavdovzXZcidqDjsMrKwCQ9 4HzEd9iKYaEFUeCBiC3utr28e2mpjypLAiWYhvdSfb6I5eurJo+D4jQ302mz5OpW AE7fkf2t6GX12OODPPhu5+vwfBhesN2NwQ9tt5Of9KwhfupESnckK/1wxHAs/6kb 123TwXKZT50IBn4842KbonxydCbkUvseGoojAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUxQAIiioUA/YFUdJQIZrtvGiqB/owHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3hRQUlpaW9VQV9ZRlVk SlFJWnJ0dkdpcUJfby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAt/GQwDQYJKoZIhvcNAQELBQADggEBANR3YLBzbmTIzuTQ47fVG9N9G4MYKtTb JxAHFCxdi0p+iNM1FPmnKEYq1m0z3FxXq7nD65j2Sesa2W9lAkq3xWKExEmqLVEE 9w2Y9RuzKzuDjuYAM/hTWxE8cC+ieay5r4oSj4jUwuGxLZLfq4jFJJUZu+bZBdlX LMHNx721tFwunHNgn9dJUiLV+PI8sJB6ivkhqoGKaB4ow2oUyaQ66j05Sc3vXDZy fxLArW2C3vJK/1geUq9bApTfnSpXP0hl+cQJ/Cg2ZkqPHiDE7mSI8bZHIzzlzCuv zgg3lKQCai80KIHakWslJLtPKKXfnlkyJOMTIv00CLf+AAwqYZ3vPPI= -----END CERTIFICATE-----Generated at Mon Oct 20 13:30:59 2025 by rpki-client