$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/YMaVIdWk5Aodb_bJmuJm0Do0G_8.roa File: YMaVIdWk5Aodb_bJmuJm0Do0G_8.roa (raw, json) Hash identifier: jdIKfbMh4UiICPLSgNXvDisQRjR0iMb5Zk3c8pyTYYo= Subject key identifier: 60:C6:95:21:D5:A4:E4:0A:1D:6F:F6:C9:9A:E2:66:D0:3A:34:1B:FF Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1CA0 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/YMaVIdWk5Aodb_bJmuJm0Do0G_8.roa Signing time: Thu 17 Jul 2025 03:51:33 +0000 ROA not before: Thu 17 Jul 2025 03:51:33 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 394881 IP address blocks: 103.221.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Jul 2025 18:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7328 (0x1ca0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jul 17 03:51:33 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=60C69521D5A4E40A1D6FF6C99AE266D03A341BFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:41:de:53:bc:7f:f3:94:f1:b0:4e:bc:68:1f: cf:2e:c5:0a:3e:c8:f5:bd:f0:75:b9:49:17:fc:7b: 55:1d:82:5d:44:8d:ef:64:a9:ab:b5:b8:ce:5a:a9: 7b:4f:85:44:56:f0:ef:3b:9a:38:88:49:49:b8:bd: 5d:a6:70:fb:16:4e:81:69:7b:00:d8:58:ec:f2:90: cd:fb:0a:bd:a1:99:f6:e6:c9:83:1d:1f:c9:1e:28: 4c:9a:aa:fb:0b:16:92:02:92:de:a8:2d:6a:68:6f: b4:6e:53:45:86:4d:09:cf:1c:08:ac:59:6d:08:14: eb:64:fd:d1:13:85:ff:76:fc:25:46:85:02:32:40: cf:2d:de:82:c1:cd:f1:28:4d:94:a9:5f:27:38:44: 6f:7e:da:52:2e:1e:4b:45:1b:d3:3b:a7:d9:74:f3: 33:5d:c6:1a:db:22:6b:10:42:b1:d0:65:ea:bb:60: 93:3e:e3:4b:50:25:4d:5f:f9:e9:84:ba:12:1e:50: 25:f5:f2:a3:20:13:b1:63:84:00:b5:c4:b7:9e:3b: 32:0f:e9:19:d1:88:5a:90:02:3a:95:0b:f7:05:18: b6:bd:3b:02:11:19:b4:05:28:7e:d8:16:f4:3d:3a: 67:b9:06:81:fb:5d:95:2d:d3:b9:1a:cb:04:81:92: 07:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:C6:95:21:D5:A4:E4:0A:1D:6F:F6:C9:9A:E2:66:D0:3A:34:1B:FF X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/YMaVIdWk5Aodb_bJmuJm0Do0G_8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.0.0/22 Signature Algorithm: sha256WithRSAEncryption 88:bf:b5:19:5f:c9:9e:4f:f3:fe:81:ef:8c:9c:95:7c:70:a8: be:2f:82:6f:53:56:31:b1:49:37:16:ef:90:eb:09:e4:43:9b: 21:b6:28:8e:7b:db:0f:94:94:e9:b2:22:81:5e:c7:e5:32:6b: c8:cd:df:db:89:77:bd:05:84:e3:70:7c:44:2d:71:dd:7e:70: 91:fb:e1:30:71:e7:8a:9d:3c:fa:a9:a1:99:3b:29:c7:0f:cd: 3e:b3:bf:8a:1d:79:80:7f:5b:da:94:ae:55:ec:74:c8:10:12: 3d:af:09:8e:bd:df:75:e8:07:43:93:63:15:d7:e1:de:68:34: 8d:ee:c0:48:c5:a9:68:5b:0e:81:2f:da:0f:b5:07:dd:d5:7e: 3a:2c:dc:e8:30:d6:fb:5c:d4:77:79:33:5f:b1:f0:a9:e3:aa: ec:e4:00:a1:4c:d9:1a:59:36:03:8a:33:c9:31:01:98:61:3e: a8:15:72:52:30:11:2e:5d:15:a5:4d:e9:70:7e:3e:0f:79:95: 4e:87:72:0c:2e:0b:3d:5b:b4:7b:db:d5:f0:a3:a2:c5:cf:df: fd:55:7d:20:dc:0d:f2:07:bd:1b:a0:aa:26:83:4d:74:78:4e: 41:fc:fb:53:d0:3d:b9:af:e3:76:df:7c:56:17:9b:19:9b:e4: 94:a1:69:3f -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHKAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA3MTcw MzUxMzNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDYwQzY5NTIxRDVBNEU0 MEExRDZGRjZDOTlBRTI2NkQwM0EzNDFCRkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmQd5TvH/zlPGwTrxoH88uxQo+yPW98HW5SRf8e1Udgl1Eje9k qau1uM5aqXtPhURW8O87mjiISUm4vV2mcPsWToFpewDYWOzykM37Cr2hmfbmyYMd H8keKEyaqvsLFpICkt6oLWpob7RuU0WGTQnPHAisWW0IFOtk/dEThf92/CVGhQIy QM8t3oLBzfEoTZSpXyc4RG9+2lIuHktFG9M7p9l08zNdxhrbImsQQrHQZeq7YJM+ 40tQJU1f+emEuhIeUCX18qMgE7FjhAC1xLeeOzIP6RnRiFqQAjqVC/cFGLa9OwIR GbQFKH7YFvQ9Ome5BoH7XZUt07kaywSBkge5AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUYMaVIdWk5Aodb/bJmuJm0Do0G/8wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1lNYVZJZFdrNUFvZGJf YkptdUptMERvMEdfOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn3QAwDQYJKoZIhvcNAQELBQADggEBAIi/tRlfyZ5P8/6B74yclXxwqL4vgm9T VjGxSTcW75DrCeRDmyG2KI572w+UlOmyIoFex+Uya8jN39uJd70FhONwfEQtcd1+ cJH74TBx54qdPPqpoZk7KccPzT6zv4odeYB/W9qUrlXsdMgQEj2vCY6933XoB0OT YxXX4d5oNI3uwEjFqWhbDoEv2g+1B93Vfjos3Ogw1vtc1Hd5M1+x8KnjquzkAKFM 2RpZNgOKM8kxAZhhPqgVclIwES5dFaVN6XB+Pg95lU6HcgwuCz1btHvb1fCjosXP 3/1VfSDcDfIHvRugqiaDTXR4TkH8+1PQPbmv43bffFYXmxmb5JShaT8= -----END CERTIFICATE-----Generated at Sun Jul 20 14:27:07 2025 by rpki-client