$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1375/VF1HNjXn8rRBPrqRvcoiMdFDyQ0.roa File: VF1HNjXn8rRBPrqRvcoiMdFDyQ0.roa (raw, json) Hash identifier: HBjMB9aQvQdCkQlD8eVlEFwJpz/H7S9+mAlqlZbs4+s= Subject key identifier: 54:5D:47:36:35:E7:F2:B4:41:3E:BA:91:BD:CA:22:31:D1:43:C9:0D Certificate issuer: /CN=3ABA8B425232BE58968396DE32A8EB5A05EEA658 Certificate serial: 204B Authority key identifier: 3A:BA:8B:42:52:32:BE:58:96:83:96:DE:32:A8:EB:5A:05:EE:A6:58 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OrqLQlIyvliWg5beMqjrWgXuplg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/VF1HNjXn8rRBPrqRvcoiMdFDyQ0.roa Signing time: Sat 06 Sep 2025 08:03:28 +0000 ROA not before: Sat 06 Sep 2025 08:03:28 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 132369 IP address blocks: 45.115.228.0/22 maxlen: 24 45.127.216.0/22 maxlen: 24 103.56.8.0/22 maxlen: 24 103.196.204.0/22 maxlen: 24 103.207.48.0/22 maxlen: 24 210.16.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/OrqLQlIyvliWg5beMqjrWgXuplg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/OrqLQlIyvliWg5beMqjrWgXuplg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OrqLQlIyvliWg5beMqjrWgXuplg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 06:34:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8267 (0x204b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ABA8B425232BE58968396DE32A8EB5A05EEA658 Validity Not Before: Sep 6 08:03:28 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=545D473635E7F2B4413EBA91BDCA2231D143C90D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a3:ea:d5:3d:9d:2c:a6:87:77:7c:61:18:69: 32:f6:d8:35:82:3d:74:91:bc:29:07:ba:20:ce:1c: 0c:f6:c1:cf:6b:b4:7c:8b:03:76:28:10:ab:d3:18: 5c:39:19:c5:b3:ae:be:58:da:1e:dd:e0:19:de:f6: e9:43:d7:e4:da:26:32:cd:94:65:78:c0:30:d0:fe: 8c:4a:90:21:2d:e2:1a:cd:e9:e7:83:03:56:e6:fe: fb:82:47:12:75:21:c5:d3:55:98:00:89:71:92:0f: b3:64:18:64:19:1c:6a:ae:41:dd:85:19:0b:56:f9: 94:de:48:94:61:d4:d1:33:a7:ad:c5:ba:e0:9a:d2: 43:83:e2:22:09:e5:e8:db:e0:52:5d:f9:de:9e:50: ee:ef:b0:17:c6:dc:00:76:0f:51:32:cf:85:cd:b0: fb:f7:3d:cb:ed:01:f4:62:a4:32:ff:ea:86:60:34: 89:b0:e7:43:ca:02:f9:ea:e0:5f:f9:02:93:a6:82: 99:bd:ac:a7:ff:e0:82:93:c9:ff:70:f4:1e:3f:ea: 95:e7:58:2b:06:e8:87:4e:77:f5:62:5b:81:d3:d8: 91:cd:44:91:47:d1:26:42:cd:58:c9:3d:04:7f:c2: e4:12:96:66:ac:8c:f2:fd:a0:b6:81:ab:c0:e7:44: 99:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:5D:47:36:35:E7:F2:B4:41:3E:BA:91:BD:CA:22:31:D1:43:C9:0D X509v3 Authority Key Identifier: keyid:3A:BA:8B:42:52:32:BE:58:96:83:96:DE:32:A8:EB:5A:05:EE:A6:58 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/OrqLQlIyvliWg5beMqjrWgXuplg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OrqLQlIyvliWg5beMqjrWgXuplg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/VF1HNjXn8rRBPrqRvcoiMdFDyQ0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.115.228.0/22 45.127.216.0/22 103.56.8.0/22 103.196.204.0/22 103.207.48.0/22 210.16.104.0/22 Signature Algorithm: sha256WithRSAEncryption 74:a1:ef:5f:7f:42:2f:fa:76:10:4d:7a:e7:13:19:f0:20:91: 21:5d:b6:23:6c:b6:41:f3:7c:66:3d:03:0a:9f:35:71:55:e8: ed:e6:ea:4c:33:2f:25:dd:af:1b:d7:6b:f4:f6:4a:04:78:fe: 26:04:80:c5:19:0f:1a:83:1f:92:5f:c8:a7:41:48:73:33:bb: ba:0f:e5:8d:dd:3f:d2:c3:97:d4:71:79:42:bb:d5:cb:ad:86: 32:b3:37:0e:f7:6e:93:0d:b9:92:20:6d:06:65:14:69:93:6b: 5f:ac:48:9b:b6:81:ae:52:8a:6a:e2:ad:73:ef:60:16:66:3c: 55:98:d1:b1:be:e7:97:35:56:0b:ab:96:15:40:68:3f:92:3c: 92:3f:35:25:1a:0d:ed:95:3e:24:a5:bf:6d:cf:08:b4:69:dd: 40:af:8f:a1:78:1e:1a:04:b7:d8:15:57:28:09:d8:2b:f1:43: af:6b:5d:69:73:9a:cd:82:c9:dd:f6:93:2a:78:44:43:27:5d: 49:32:17:2c:60:b3:10:4a:32:ed:0a:a4:db:53:93:e7:62:d0: 3c:f2:4a:d1:02:45:2c:88:dc:fe:63:86:d4:72:58:48:3a:da: 97:dc:67:c8:4a:62:b1:e2:08:86:15:b6:a9:04:f7:fb:aa:bc: 6d:1f:11:3d -----BEGIN CERTIFICATE----- MIIE9TCCA92gAwIBAgICIEswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FC QThCNDI1MjMyQkU1ODk2ODM5NkRFMzJBOEVCNUEwNUVFQTY1ODAeFw0yNTA5MDYw ODAzMjhaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDU0NUQ0NzM2MzVFN0Yy QjQ0MTNFQkE5MUJEQ0EyMjMxRDE0M0M5MEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDo+rVPZ0spod3fGEYaTL22DWCPXSRvCkHuiDOHAz2wc9rtHyL A3YoEKvTGFw5GcWzrr5Y2h7d4Bne9ulD1+TaJjLNlGV4wDDQ/oxKkCEt4hrN6eeD A1bm/vuCRxJ1IcXTVZgAiXGSD7NkGGQZHGquQd2FGQtW+ZTeSJRh1NEzp63FuuCa 0kOD4iIJ5ejb4FJd+d6eUO7vsBfG3AB2D1Eyz4XNsPv3PcvtAfRipDL/6oZgNImw 50PKAvnq4F/5ApOmgpm9rKf/4IKTyf9w9B4/6pXnWCsG6IdOd/ViW4HT2JHNRJFH 0SZCzVjJPQR/wuQSlmasjPL9oLaBq8DnRJm7AgMBAAGjggIRMIICDTAdBgNVHQ4E FgQUVF1HNjXn8rRBPrqRvcoiMdFDyQ0wHwYDVR0jBBgwFoAUOrqLQlIyvliWg5be MqjrWgXuplgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 NS9PcnFMUWxJeXZsaVdnNWJlTXFqcldnWHVwbGcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09ycUxRbEl5dmxpV2c1YmVNcWpyV2dYdXBsZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEzNzUvVkYxSE5qWG44clJC UHJxUnZjb2lNZEZEeVEwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDA9BggrBgEFBQcBBwEB/wQuMCwwKgQCAAEw JAMEAi1z5AMEAi1/2AMEAmc4CAMEAmfEzAMEAmfPMAMEAtIQaDANBgkqhkiG9w0B AQsFAAOCAQEAdKHvX39CL/p2EE165xMZ8CCRIV22I2y2QfN8Zj0DCp81cVXo7ebq TDMvJd2vG9dr9PZKBHj+JgSAxRkPGoMfkl/Ip0FIczO7ug/ljd0/0sOX1HF5QrvV y62GMrM3Dvdukw25kiBtBmUUaZNrX6xIm7aBrlKKauKtc+9gFmY8VZjRsb7nlzVW C6uWFUBoP5I8kj81JRoN7ZU+JKW/bc8ItGndQK+PoXgeGgS32BVXKAnYK/FDr2td aXOazYLJ3faTKnhEQyddSTIXLGCzEEoy7Qqk21OT52LQPPJK0QJFLIjc/mOG1HJY SDral9xnyEpiseIIhhW2qQT3+6q8bR8RPQ== -----END CERTIFICATE-----Generated at Tue Sep 9 03:35:13 2025 by rpki-client