$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/QjJqmtjq0-2kjixbY9KjvrSMXHk.roa File: QjJqmtjq0-2kjixbY9KjvrSMXHk.roa (raw, json) Hash identifier: jhfx43weIM2b7xhZs4mamr7CBAaKxiTcl2hYeXllqgE= Subject key identifier: 42:32:6A:9A:D8:EA:D3:ED:A4:8E:2C:5B:63:D2:A3:BE:B4:8C:5C:79 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1C9E Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/QjJqmtjq0-2kjixbY9KjvrSMXHk.roa Signing time: Thu 17 Jul 2025 03:48:06 +0000 ROA not before: Thu 17 Jul 2025 03:48:06 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 394881 IP address blocks: 45.252.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Jul 2025 23:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7326 (0x1c9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jul 17 03:48:06 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=42326A9AD8EAD3EDA48E2C5B63D2A3BEB48C5C79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ee:2c:b7:b8:e5:94:7d:75:9c:22:3c:4c:78: e1:c6:da:f7:0f:f6:39:0e:29:ae:c9:58:1c:ae:d0: 49:26:c2:9a:57:5d:41:10:e5:82:04:40:8f:78:5b: 4e:f8:9b:8c:b6:7b:c5:ef:18:46:7b:e7:be:ab:3e: 83:08:45:32:11:72:d4:a5:c7:fd:2c:2a:c2:a1:ec: a2:ac:b4:37:ce:16:12:24:58:57:17:e9:04:ac:ed: 5a:56:eb:c3:9f:3a:5d:53:e3:f3:1f:70:04:fc:25: c2:72:86:c6:32:03:00:0a:c9:a4:0b:46:86:f8:3e: 14:f1:db:6a:21:93:cd:57:52:c9:a6:e3:72:04:68: 0f:1d:07:52:c4:34:09:bf:83:34:ff:bd:bb:f3:ba: 29:a1:b6:55:76:34:68:1a:94:d4:22:e8:96:78:82: eb:c9:b0:a6:5a:a8:a1:77:01:f4:62:e6:3c:b7:a9: c7:f0:08:46:05:94:31:71:3a:67:66:fb:38:87:f1: e6:88:03:ea:5f:df:fa:17:9c:98:e9:30:43:c6:46: e7:59:ad:10:4e:ee:43:43:e5:fe:6e:32:07:8e:ca: 56:b7:c0:bc:59:8f:74:82:be:f2:72:c3:e4:d3:96: 5f:17:a4:c1:c5:81:36:07:34:b2:da:2b:03:a7:a2: 97:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:32:6A:9A:D8:EA:D3:ED:A4:8E:2C:5B:63:D2:A3:BE:B4:8C:5C:79 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/QjJqmtjq0-2kjixbY9KjvrSMXHk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.100.0/22 Signature Algorithm: sha256WithRSAEncryption 94:71:0c:a8:e9:0b:90:aa:fe:f4:db:70:77:7e:cf:95:6c:73: 5a:3c:ee:b2:b8:08:54:0e:d4:30:b6:ef:f8:2f:e0:f6:4f:53: 58:8d:5d:b3:63:20:d0:6f:47:18:70:35:45:0a:2a:6f:2a:7e: ed:91:9d:7b:d1:8d:c4:bc:e2:1c:90:08:54:31:d5:2f:fb:c7: 81:b0:99:06:91:ae:34:f6:d7:02:93:19:f2:f6:80:c5:a6:43: b2:4b:23:e2:18:62:e0:e0:e5:68:a3:33:70:1b:22:2c:70:fe: 90:97:df:a9:93:93:fb:74:ea:51:39:62:af:7e:ce:bd:3e:0b: 41:24:4f:2d:01:a0:cb:f5:66:0b:47:26:0a:9e:d2:a5:8a:c9: 1e:aa:aa:8c:cd:e2:6d:39:7d:ba:82:f7:82:f3:66:7f:41:90: fc:d7:86:f3:79:bd:91:b2:a4:b7:02:db:9a:37:12:fc:2c:a1: bf:2f:47:57:b0:13:a3:78:38:7f:c3:36:0d:d4:f1:98:cd:a3: ad:c9:f2:71:36:66:3d:c3:b2:f3:e0:dd:a0:d5:4f:19:d8:c4: dc:90:13:7a:d8:34:59:0a:7d:0e:4d:01:36:59:83:b4:59:d5: 9a:36:e2:b2:a8:a6:cd:df:12:cc:81:9f:d9:fb:5b:40:97:f6: 9b:cf:59:fd -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHJ4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA3MTcw MzQ4MDZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDQyMzI2QTlBRDhFQUQz RURBNDhFMkM1QjYzRDJBM0JFQjQ4QzVDNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDX7iy3uOWUfXWcIjxMeOHG2vcP9jkOKa7JWByu0EkmwppXXUEQ 5YIEQI94W074m4y2e8XvGEZ7576rPoMIRTIRctSlx/0sKsKh7KKstDfOFhIkWFcX 6QSs7VpW68OfOl1T4/MfcAT8JcJyhsYyAwAKyaQLRob4PhTx22ohk81XUsmm43IE aA8dB1LENAm/gzT/vbvzuimhtlV2NGgalNQi6JZ4guvJsKZaqKF3AfRi5jy3qcfw CEYFlDFxOmdm+ziH8eaIA+pf3/oXnJjpMEPGRudZrRBO7kND5f5uMgeOyla3wLxZ j3SCvvJyw+TTll8XpMHFgTYHNLLaKwOnopfXAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUQjJqmtjq0+2kjixbY9KjvrSMXHkwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1FqSnFtdGpxMC0ya2pp eGJZOUtqdnJTTVhIay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIt/GQwDQYJKoZIhvcNAQELBQADggEBAJRxDKjpC5Cq/vTbcHd+z5Vsc1o87rK4 CFQO1DC27/gv4PZPU1iNXbNjINBvRxhwNUUKKm8qfu2RnXvRjcS84hyQCFQx1S/7 x4GwmQaRrjT21wKTGfL2gMWmQ7JLI+IYYuDg5WijM3AbIixw/pCX36mTk/t06lE5 Yq9+zr0+C0EkTy0BoMv1ZgtHJgqe0qWKyR6qqozN4m05fbqC94LzZn9BkPzXhvN5 vZGypLcC25o3Evwsob8vR1ewE6N4OH/DNg3U8ZjNo63J8nE2Zj3DsvPg3aDVTxnY xNyQE3rYNFkKfQ5NATZZg7RZ1Zo24rKops3fEsyBn9n7W0CX9pvPWf0= -----END CERTIFICATE-----Generated at Sun Jul 20 23:19:59 2025 by rpki-client