$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/yv9ny4weJmBShvtZnE23DGsR2M0.roa File: yv9ny4weJmBShvtZnE23DGsR2M0.roa (raw, json) Hash identifier: zkyX1+u6Y46CKwVzheDIhxEZvypplkfKvDSmZRlCLyA= Subject key identifier: CA:FF:67:CB:8C:1E:26:60:52:86:FB:59:9C:4D:B7:0C:6B:11:D8:CD Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1DFE Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/yv9ny4weJmBShvtZnE23DGsR2M0.roa Signing time: Sat 13 Sep 2025 03:04:45 +0000 ROA not before: Sat 13 Sep 2025 03:04:45 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 13444 IP address blocks: 103.221.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 13:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7678 (0x1dfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:04:45 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=CAFF67CB8C1E26605286FB599C4DB70C6B11D8CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ce:3e:4e:a7:eb:bf:ef:3b:92:9e:8f:ef:e0: 38:9a:21:dc:59:92:e6:16:77:67:b2:63:2d:5d:15: a5:4e:aa:5d:6d:0b:39:7a:65:d7:c8:46:87:0d:e8: be:7e:9e:f5:66:1f:16:6c:41:54:ab:1d:d4:b7:b0: aa:4d:ba:21:4b:fe:f3:f6:8d:46:8a:76:9f:09:68: cb:62:78:9e:9c:b1:2b:f4:db:3a:61:2f:f7:a0:3f: f2:cd:73:c2:b2:80:cd:4f:7e:d1:f1:e7:87:4d:9c: 64:7a:a1:54:d2:eb:3f:8d:4b:3d:78:5a:9c:26:a8: ee:13:97:4c:18:37:68:72:69:14:cb:0a:0d:61:92: b9:b6:b5:50:74:6f:e7:4a:77:47:95:7e:17:d2:0a: 11:3f:5c:68:9b:d6:7e:34:8b:bc:6e:3a:89:d3:95: 3d:5d:5e:40:fb:0a:0b:64:0a:a6:6e:ea:24:67:67: 4a:cc:54:92:00:0d:41:f5:78:30:5e:8d:84:d0:86: cd:5b:65:d8:c4:42:7f:08:21:44:ee:b1:62:49:6b: f1:d8:4b:6f:be:8d:4e:1c:5a:a8:2a:2c:df:05:cc: 23:9c:a1:55:3f:16:d7:d5:3a:de:a0:70:ce:c2:80: 3f:22:1e:ec:59:54:7e:bf:18:41:34:5e:43:13:60: 54:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:FF:67:CB:8C:1E:26:60:52:86:FB:59:9C:4D:B7:0C:6B:11:D8:CD X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/yv9ny4weJmBShvtZnE23DGsR2M0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.40.0/24 Signature Algorithm: sha256WithRSAEncryption 79:9b:a1:0d:fa:b0:de:0e:4c:25:41:ae:8d:af:41:ff:66:1a: da:e5:54:50:61:fc:5f:41:ff:63:67:a2:d9:7d:79:b2:c2:f3: e2:66:fe:2e:9c:fb:ba:64:a4:aa:d0:f0:b4:f9:28:cb:2d:08: a5:27:18:7e:6c:6b:3c:d8:09:64:00:ad:4e:3d:15:43:19:7c: 5b:ba:c1:55:21:38:7a:9f:0c:f7:76:3d:11:c1:67:d4:fc:f3: a7:f7:3a:09:eb:da:c7:b7:80:8a:13:d2:c0:b4:1f:47:e6:b6: 7c:f1:01:83:4c:7c:79:7c:99:d1:b9:39:ee:73:fc:d2:b2:10: d8:a4:0f:a9:35:14:e0:b8:09:87:e7:55:34:74:83:84:c2:30: 1b:2f:f2:d7:b4:b7:aa:60:82:96:a2:ce:de:58:55:9f:a9:34: 30:de:c2:e3:4b:01:83:d3:d6:45:b0:0c:1b:62:c6:9e:e2:fb: 30:f5:da:8f:17:f2:dc:e3:74:a0:e8:31:a6:ba:25:3c:a8:aa: db:70:f4:a5:d9:1f:50:7b:2d:f7:32:62:c9:46:ff:16:8c:70: 13:f7:41:45:b4:a6:a9:92:8b:a7:9a:3c:ab:4e:21:02:f3:ee: d3:f8:36:8a:c4:9d:42:c5:d1:78:3d:c7:af:12:a4:63:26:82: 94:10:fa:a0 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHf4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA0NDVaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKENBRkY2N0NCOEMxRTI2 NjA1Mjg2RkI1OTlDNERCNzBDNkIxMUQ4Q0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+zj5Op+u/7zuSno/v4DiaIdxZkuYWd2eyYy1dFaVOql1tCzl6 ZdfIRocN6L5+nvVmHxZsQVSrHdS3sKpNuiFL/vP2jUaKdp8JaMtieJ6csSv02zph L/egP/LNc8KygM1PftHx54dNnGR6oVTS6z+NSz14WpwmqO4Tl0wYN2hyaRTLCg1h krm2tVB0b+dKd0eVfhfSChE/XGib1n40i7xuOonTlT1dXkD7CgtkCqZu6iRnZ0rM VJIADUH1eDBejYTQhs1bZdjEQn8IIUTusWJJa/HYS2++jU4cWqgqLN8FzCOcoVU/ FtfVOt6gcM7CgD8iHuxZVH6/GEE0XkMTYFQTAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUyv9ny4weJmBShvtZnE23DGsR2M0wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3l2OW55NHdlSm1CU2h2 dFpuRTIzREdzUjJNMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3SgwDQYJKoZIhvcNAQELBQADggEBAHmboQ36sN4OTCVBro2vQf9mGtrlVFBh /F9B/2Nnotl9ebLC8+Jm/i6c+7pkpKrQ8LT5KMstCKUnGH5sazzYCWQArU49FUMZ fFu6wVUhOHqfDPd2PRHBZ9T886f3Ognr2se3gIoT0sC0H0fmtnzxAYNMfHl8mdG5 Oe5z/NKyENikD6k1FOC4CYfnVTR0g4TCMBsv8te0t6pggpaizt5YVZ+pNDDewuNL AYPT1kWwDBtixp7i+zD12o8X8tzjdKDoMaa6JTyoqttw9KXZH1B7LfcyYslG/xaM cBP3QUW0pqmSi6eaPKtOIQLz7tP4NorEnULF0Xg9x68SpGMmgpQQ+qA= -----END CERTIFICATE-----Generated at Mon Oct 20 13:31:03 2025 by rpki-client