$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/r8McJGNhAd2LyVYVobe6bkdhxm4.roa File: r8McJGNhAd2LyVYVobe6bkdhxm4.roa (raw, json) Hash identifier: r61emUbr9WNTc3tORo5qvLqiGWsGCkcmnQwaCzuZgOY= Subject key identifier: AF:C3:1C:24:63:61:01:DD:8B:C9:56:15:A1:B7:BA:6E:47:61:C6:6E Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1CB2 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/r8McJGNhAd2LyVYVobe6bkdhxm4.roa Signing time: Thu 17 Jul 2025 03:51:38 +0000 ROA not before: Thu 17 Jul 2025 03:51:38 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 394881 IP address blocks: 103.221.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Jul 2025 18:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7346 (0x1cb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jul 17 03:51:38 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=AFC31C24636101DD8BC95615A1B7BA6E4761C66E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:cb:dc:2c:53:eb:12:a7:6e:ec:c3:e6:b0:75: 20:93:a6:c0:b8:2c:44:0c:ee:d2:19:2d:9d:e1:72: 9a:e8:3c:fe:3a:d6:22:18:e1:72:2f:d2:39:71:90: 2e:0c:78:e8:45:fc:5a:92:c4:ae:e7:6c:06:c5:19: c3:6e:a7:b2:d7:18:6a:05:95:b6:3a:53:d3:15:cc: 61:83:91:17:41:65:a0:d5:2d:42:6d:0e:f8:46:aa: 65:98:57:64:aa:72:1b:24:08:de:b3:36:3d:29:a5: 1a:61:81:eb:74:57:43:85:5a:5b:66:e8:0e:c4:b9: c8:60:76:01:b0:7e:27:99:26:d0:4c:4c:c6:03:b3: d6:a6:f7:82:d0:40:8f:18:58:ce:b1:a9:3d:b8:9f: 22:c9:9a:93:1d:65:d8:c8:89:37:ec:f8:03:c3:a3: 4c:4b:7c:30:49:66:1c:71:39:99:0c:c1:8f:c4:e4: 2e:1f:bb:5b:61:b3:69:d8:74:17:65:ca:67:43:e7: a7:e3:34:c2:d5:6f:f1:34:cf:cd:22:58:af:34:2a: 05:ce:03:48:d3:b9:a0:b1:e0:ac:3c:b5:df:cd:d0: ab:b7:21:9b:c5:45:dd:7e:40:e2:ab:b5:88:5e:90: ec:88:51:a0:d0:50:ee:57:74:45:73:2f:9f:f8:c2: 5f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:C3:1C:24:63:61:01:DD:8B:C9:56:15:A1:B7:BA:6E:47:61:C6:6E X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/r8McJGNhAd2LyVYVobe6bkdhxm4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.32.0/22 Signature Algorithm: sha256WithRSAEncryption bb:37:64:73:b8:aa:47:15:84:60:9a:de:bf:bc:f0:c6:f7:cc: bf:a8:57:92:31:23:70:cc:00:dd:80:d3:ed:0e:4f:85:5c:ca: 5b:e1:e9:fd:4d:0c:a3:3d:e3:42:ef:8d:d0:2c:93:51:1b:60: a6:fb:a1:04:3e:ab:ad:28:a6:a9:39:d8:1e:78:c4:b8:17:87: 71:93:c1:69:0a:46:27:52:bc:d7:0a:fb:85:bd:a4:1f:8a:f6: 8f:cf:4d:46:79:e7:95:03:3c:d2:8e:2d:29:23:ec:b5:ce:23: 3e:0a:4f:1f:82:3b:8a:4a:11:ed:d7:ea:16:44:38:1f:a0:9d: ed:c4:e2:cf:35:3c:42:6b:52:79:d8:9d:eb:19:0e:12:a1:10: 31:cb:75:f1:d3:fa:cc:ec:de:92:51:d6:ce:73:c3:cb:81:9c: 81:48:96:6d:6d:f0:03:07:89:1d:30:38:45:b1:0f:56:65:09: 0f:5f:e2:32:cc:25:31:fd:09:60:78:50:a4:0f:2f:24:36:f6: 0b:e9:25:20:d2:2f:76:56:65:8d:a3:bd:93:e5:42:e8:6b:3f: 80:5a:98:fc:60:c7:a3:2e:cb:04:b8:39:98:91:46:66:1d:90: c0:bc:56:96:bd:ea:2f:ae:72:13:b9:b8:3b:c5:71:eb:30:16: cb:45:eb:67 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHLIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA3MTcw MzUxMzhaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEFGQzMxQzI0NjM2MTAx REQ4QkM5NTYxNUExQjdCQTZFNDc2MUM2NkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDly9wsU+sSp27sw+awdSCTpsC4LEQM7tIZLZ3hcproPP461iIY 4XIv0jlxkC4MeOhF/FqSxK7nbAbFGcNup7LXGGoFlbY6U9MVzGGDkRdBZaDVLUJt DvhGqmWYV2SqchskCN6zNj0ppRphget0V0OFWltm6A7EuchgdgGwfieZJtBMTMYD s9am94LQQI8YWM6xqT24nyLJmpMdZdjIiTfs+APDo0xLfDBJZhxxOZkMwY/E5C4f u1ths2nYdBdlymdD56fjNMLVb/E0z80iWK80KgXOA0jTuaCx4Kw8td/N0Ku3IZvF Rd1+QOKrtYhekOyIUaDQUO5XdEVzL5/4wl+XAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUr8McJGNhAd2LyVYVobe6bkdhxm4wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3I4TWNKR05oQWQyTHlW WVZvYmU2YmtkaHhtNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn3SAwDQYJKoZIhvcNAQELBQADggEBALs3ZHO4qkcVhGCa3r+88Mb3zL+oV5Ix I3DMAN2A0+0OT4Vcylvh6f1NDKM940LvjdAsk1EbYKb7oQQ+q60opqk52B54xLgX h3GTwWkKRidSvNcK+4W9pB+K9o/PTUZ555UDPNKOLSkj7LXOIz4KTx+CO4pKEe3X 6hZEOB+gne3E4s81PEJrUnnYnesZDhKhEDHLdfHT+szs3pJR1s5zw8uBnIFIlm1t 8AMHiR0wOEWxD1ZlCQ9f4jLMJTH9CWB4UKQPLyQ29gvpJSDSL3ZWZY2jvZPlQuhr P4BamPxgx6MuywS4OZiRRmYdkMC8Vpa96i+uchO5uDvFceswFstF62c= -----END CERTIFICATE-----Generated at Sun Jul 20 14:38:25 2025 by rpki-client