$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2578/xB_JUhaUTOLRuggWEFRDEbGKbdA.roa File: xB_JUhaUTOLRuggWEFRDEbGKbdA.roa (raw, json) Hash identifier: MUeQ6SBwA1FY7z2svn5ifPBc7LhDADwZ7QfDARqfH+4= Subject key identifier: C4:1F:C9:52:16:94:4C:E2:D1:BA:08:16:10:54:43:11:B1:8A:6D:D0 Certificate issuer: /CN=7CF44C06D5EA7DF0CBD4F68508F14E84DA08B752 Certificate serial: 17D2 Authority key identifier: 7C:F4:4C:06:D5:EA:7D:F0:CB:D4:F6:85:08:F1:4E:84:DA:08:B7:52 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fPRMBtXqffDL1PaFCPFOhNoIt1I.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2578/xB_JUhaUTOLRuggWEFRDEbGKbdA.roa Signing time: Tue 05 Aug 2025 13:46:32 +0000 ROA not before: Tue 05 Aug 2025 13:46:32 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 140224 IP address blocks: 103.99.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2578/fPRMBtXqffDL1PaFCPFOhNoIt1I.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2578/fPRMBtXqffDL1PaFCPFOhNoIt1I.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fPRMBtXqffDL1PaFCPFOhNoIt1I.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Sep 2025 12:05:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6098 (0x17d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CF44C06D5EA7DF0CBD4F68508F14E84DA08B752 Validity Not Before: Aug 5 13:46:32 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=C41FC95216944CE2D1BA081610544311B18A6DD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fd:47:60:7d:c6:4d:30:9a:e3:55:bb:11:06: a8:46:9f:31:6a:e3:e0:ac:5e:21:c1:6f:d1:c0:a1: f5:db:6f:a7:0c:5a:13:fd:59:a2:8d:44:e0:a5:bc: 57:89:fa:69:fa:18:7c:ce:0e:c3:e9:f3:9d:64:6e: d6:21:e0:27:89:51:27:ec:fd:96:5b:96:79:9c:4e: 27:2d:9a:0b:ac:ec:00:92:83:a7:bc:3c:aa:77:42: 6c:6d:a9:3e:6c:e0:f1:55:ff:f2:a5:7d:ac:36:48: fb:a3:52:61:24:6b:87:1e:47:50:d3:e0:66:c8:98: 94:52:44:58:c7:4a:00:f9:76:e9:86:36:b3:e5:9f: 51:19:18:4d:6b:c0:96:55:ff:d2:9a:8a:cf:99:31: 89:15:79:61:ca:87:9d:15:f9:e5:c0:59:a8:86:3e: 9c:88:b4:a8:70:91:34:11:ea:2a:c1:9d:66:2b:0e: b6:7e:ff:55:d5:d3:f4:89:85:22:7d:6a:fd:fb:c2: a1:8d:01:8a:6f:cb:40:45:5c:fb:76:66:88:98:d9: 0c:a4:40:59:a0:a8:2d:39:49:54:32:5b:3d:28:85: e5:b3:8f:5a:c5:10:ef:b4:04:5a:af:9d:c2:4a:16: 64:e5:00:fe:65:4c:27:37:cf:71:24:4d:66:97:37: d1:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:1F:C9:52:16:94:4C:E2:D1:BA:08:16:10:54:43:11:B1:8A:6D:D0 X509v3 Authority Key Identifier: keyid:7C:F4:4C:06:D5:EA:7D:F0:CB:D4:F6:85:08:F1:4E:84:DA:08:B7:52 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2578/fPRMBtXqffDL1PaFCPFOhNoIt1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fPRMBtXqffDL1PaFCPFOhNoIt1I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2578/xB_JUhaUTOLRuggWEFRDEbGKbdA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.99.77.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:ce:24:33:a4:f3:d7:6b:86:e3:24:3a:39:4d:0d:e1:31:5f: 39:80:67:73:d9:a4:9e:38:8a:17:85:d6:a7:29:80:6c:9c:b7: e5:c7:3d:0f:51:b5:64:38:47:ff:76:75:af:d5:c6:0a:12:0f: 40:1a:9e:c3:e6:53:3b:7c:ce:46:a5:f5:ff:71:a3:d2:d7:e5: ae:05:93:fb:5f:60:b7:cb:fb:af:a4:42:a2:c4:31:a5:55:5e: 00:ac:94:f4:43:1a:8a:f4:84:4b:72:04:b7:68:54:0b:42:37: 1d:0d:c6:a0:21:6d:60:0b:45:4f:fd:09:11:d6:59:fe:99:0d: 41:70:0c:db:a2:0e:5e:94:f6:95:8a:4c:8f:d0:20:b3:80:59: b3:fc:a3:0b:98:c8:70:1c:6c:5c:f8:f7:87:8f:6b:fe:35:bd: df:e7:f9:eb:a5:69:71:42:b7:33:1a:c1:2a:91:00:8a:c1:21: c7:b0:3b:ee:86:bb:15:83:07:a8:92:3f:6a:90:6f:60:9e:f9: 47:10:61:0b:9f:bf:a9:32:6c:31:e6:10:d8:5d:6d:40:2a:f3: bd:95:b0:45:62:c6:5d:34:83:61:ea:92:a6:80:4c:10:4d:fe: 3c:ba:2c:2e:2e:b1:5e:00:32:e7:47:bd:ba:0a:9c:e0:cd:d7: 78:69:21:2c -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICF9IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0NG NDRDMDZENUVBN0RGMENCRDRGNjg1MDhGMTRFODREQTA4Qjc1MjAeFw0yNTA4MDUx MzQ2MzJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEM0MUZDOTUyMTY5NDRD RTJEMUJBMDgxNjEwNTQ0MzExQjE4QTZERDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDR/UdgfcZNMJrjVbsRBqhGnzFq4+CsXiHBb9HAofXbb6cMWhP9 WaKNROClvFeJ+mn6GHzODsPp851kbtYh4CeJUSfs/ZZblnmcTictmgus7ACSg6e8 PKp3QmxtqT5s4PFV//Klfaw2SPujUmEka4ceR1DT4GbImJRSRFjHSgD5dumGNrPl n1EZGE1rwJZV/9Kais+ZMYkVeWHKh50V+eXAWaiGPpyItKhwkTQR6irBnWYrDrZ+ /1XV0/SJhSJ9av37wqGNAYpvy0BFXPt2ZoiY2QykQFmgqC05SVQyWz0oheWzj1rF EO+0BFqvncJKFmTlAP5lTCc3z3EkTWaXN9EjAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUxB/JUhaUTOLRuggWEFRDEbGKbdAwHwYDVR0jBBgwFoAUfPRMBtXqffDL1PaF CPFOhNoIt1IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjU3 OC9mUFJNQnRYcWZmREwxUGFGQ1BGT2hOb0l0MUkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2ZQUk1CdFhxZmZETDFQYUZDUEZPaE5vSXQxSS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI1NzgveEJfSlVoYVVUT0xS dWdnV0VGUkRFYkdLYmRBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGdjTTANBgkqhkiG9w0BAQsFAAOCAQEADM4kM6Tz12uG4yQ6OU0N4TFfOYBn c9mknjiKF4XWpymAbJy35cc9D1G1ZDhH/3Z1r9XGChIPQBqew+ZTO3zORqX1/3Gj 0tflrgWT+19gt8v7r6RCosQxpVVeAKyU9EMaivSES3IEt2hUC0I3HQ3GoCFtYAtF T/0JEdZZ/pkNQXAM26IOXpT2lYpMj9Ags4BZs/yjC5jIcBxsXPj3h49r/jW93+f5 66VpcUK3MxrBKpEAisEhx7A77oa7FYMHqJI/apBvYJ75RxBhC5+/qTJsMeYQ2F1t QCrzvZWwRWLGXTSDYeqSpoBMEE3+PLosLi6xXgAy50e9ugqc4M3XeGkhLA== -----END CERTIFICATE-----Generated at Fri Sep 5 08:58:56 2025 by rpki-client