$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/fKaBmaFzg8gkX_FkAUhQoXBwp7o.roa File: fKaBmaFzg8gkX_FkAUhQoXBwp7o.roa (raw, json) Hash identifier: dYuUyu8Kt1oXVW1n5D+f1LOcwqL1LOW2N28g4Xo5lcg= Subject key identifier: 7C:A6:81:99:A1:73:83:C8:24:5F:F1:64:01:48:50:A1:70:70:A7:BA Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1CAA Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/fKaBmaFzg8gkX_FkAUhQoXBwp7o.roa Signing time: Thu 17 Jul 2025 03:51:35 +0000 ROA not before: Thu 17 Jul 2025 03:51:35 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 394881 IP address blocks: 103.221.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Jul 2025 18:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7338 (0x1caa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jul 17 03:51:35 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=7CA68199A17383C8245FF164014850A17070A7BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:25:ff:fb:e7:40:19:8f:87:1d:b8:11:e5:fb: b1:83:2f:e9:13:a0:8a:28:21:1a:c5:02:60:08:e6: 08:94:1f:12:25:42:f8:73:57:9e:4b:e8:d0:ab:41: a6:6b:63:08:c4:52:41:d7:79:4d:17:fc:2f:79:70: d0:ea:d7:c6:40:de:93:a3:0a:f1:32:b4:2e:09:44: dc:8a:3d:17:01:33:09:7d:11:8d:46:72:5b:18:78: 76:c3:d8:a8:78:92:d0:05:45:98:40:76:5c:c6:18: 1d:f1:b4:48:81:79:90:7e:40:b2:1a:7e:70:3f:82: 5a:5f:5f:d9:83:a6:ff:99:38:3e:bc:14:dd:44:53: ba:01:50:a0:5d:de:cd:d0:04:f0:55:b0:b1:70:8d: ce:16:d4:f9:07:f1:43:9d:ca:68:d0:1f:c0:d1:4a: ff:cc:8f:a3:49:39:2c:bb:5d:e1:39:f2:a7:4a:3d: f5:8c:3b:e9:c2:0d:17:7a:83:0d:1c:6d:90:bb:6f: b9:78:aa:71:6d:d3:c6:23:a1:c9:8e:0b:4a:5a:0f: 0f:d1:2a:3e:6f:22:7b:58:19:6e:6b:42:4b:5a:35: b1:6d:03:9c:11:16:b7:a6:ba:ca:57:44:cb:61:76: 58:1a:41:a2:fa:ba:86:2a:91:3e:e2:b2:67:e7:24: 72:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:A6:81:99:A1:73:83:C8:24:5F:F1:64:01:48:50:A1:70:70:A7:BA X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/fKaBmaFzg8gkX_FkAUhQoXBwp7o.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.28.0/22 Signature Algorithm: sha256WithRSAEncryption 5f:11:2a:8a:91:b7:20:c1:84:61:41:54:0a:14:4b:22:84:f9: 8f:6b:a2:7f:5a:69:e2:e4:75:f1:6c:12:ad:d2:44:5d:32:18: c3:26:de:75:b4:12:78:5c:74:72:58:33:ad:88:98:12:d0:f2: 3a:c1:f9:93:18:b2:a1:d5:ae:84:2b:b0:d2:29:65:c5:bf:e3: b2:a7:d0:24:0f:d1:bd:32:5a:26:b6:54:3d:cc:48:eb:24:0a: a0:9e:f7:8d:af:67:ac:40:43:81:30:25:a2:59:cd:e8:79:f9: 41:42:b1:a7:9c:c7:6a:e3:26:05:3f:8f:91:d6:c0:3f:b9:35: 2a:52:50:a2:16:ce:f9:03:09:5a:86:df:15:e6:92:89:45:d4: 16:7e:9c:a6:9b:dc:0a:ea:aa:ce:d4:69:5c:9a:d4:21:f2:ea: 1a:b9:87:df:d0:1e:11:3b:1b:1c:ae:42:67:69:7d:54:d5:20: 60:47:ba:8f:21:18:2e:71:95:24:56:d1:ea:e7:24:cb:32:5a: d8:b1:78:ec:84:6a:a5:c8:e1:50:c4:99:f2:ef:6f:9c:e9:6b: 31:fa:83:dd:52:fb:da:99:99:69:8b:94:6d:82:61:60:19:d5: 13:a8:1a:f7:26:41:91:04:44:85:ae:9e:5d:ba:95:3f:43:cb: 05:84:b7:f8 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHKowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA3MTcw MzUxMzVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDdDQTY4MTk5QTE3Mzgz QzgyNDVGRjE2NDAxNDg1MEExNzA3MEE3QkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDJf/750AZj4cduBHl+7GDL+kToIooIRrFAmAI5giUHxIlQvhz V55L6NCrQaZrYwjEUkHXeU0X/C95cNDq18ZA3pOjCvEytC4JRNyKPRcBMwl9EY1G clsYeHbD2Kh4ktAFRZhAdlzGGB3xtEiBeZB+QLIafnA/glpfX9mDpv+ZOD68FN1E U7oBUKBd3s3QBPBVsLFwjc4W1PkH8UOdymjQH8DRSv/Mj6NJOSy7XeE58qdKPfWM O+nCDRd6gw0cbZC7b7l4qnFt08YjocmOC0paDw/RKj5vIntYGW5rQktaNbFtA5wR FremuspXRMthdlgaQaL6uoYqkT7ismfnJHIHAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUfKaBmaFzg8gkX/FkAUhQoXBwp7owHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2ZLYUJtYUZ6Zzhna1hf RmtBVWhRb1hCd3A3by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn3RwwDQYJKoZIhvcNAQELBQADggEBAF8RKoqRtyDBhGFBVAoUSyKE+Y9ron9a aeLkdfFsEq3SRF0yGMMm3nW0EnhcdHJYM62ImBLQ8jrB+ZMYsqHVroQrsNIpZcW/ 47Kn0CQP0b0yWia2VD3MSOskCqCe942vZ6xAQ4EwJaJZzeh5+UFCsaecx2rjJgU/ j5HWwD+5NSpSUKIWzvkDCVqG3xXmkolF1BZ+nKab3Arqqs7UaVya1CHy6hq5h9/Q HhE7GxyuQmdpfVTVIGBHuo8hGC5xlSRW0ernJMsyWtixeOyEaqXI4VDEmfLvb5zp azH6g91S+9qZmWmLlG2CYWAZ1ROoGvcmQZEERIWunl26lT9DywWEt/g= -----END CERTIFICATE-----Generated at Sun Jul 20 14:39:31 2025 by rpki-client