$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/0JBPBraqNbX3AChHDGZBbICL_Vc.roa File: 0JBPBraqNbX3AChHDGZBbICL_Vc.roa (raw, json) Hash identifier: Fzn1wos71k5Dmk6muFsDbOKL1K29yGfJia+WEjeNBVQ= Subject key identifier: D0:90:4F:06:B6:AA:35:B5:F7:00:28:47:0C:66:41:6C:80:8B:FD:57 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1E6B Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/0JBPBraqNbX3AChHDGZBbICL_Vc.roa Signing time: Sat 13 Sep 2025 03:05:08 +0000 ROA not before: Sat 13 Sep 2025 03:05:08 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 138527 IP address blocks: 103.221.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 12:36:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7787 (0x1e6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:05:08 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=D0904F06B6AA35B5F70028470C66416C808BFD57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:56:92:47:6c:bf:34:42:fe:b8:e4:d4:f8:bf: 31:07:06:94:ce:20:b6:11:85:1f:fc:1b:c1:27:68: 90:74:aa:20:a7:91:0e:f7:47:54:8e:f9:ed:ad:9c: c9:61:60:ac:79:5b:fd:a4:cd:11:46:67:70:01:4b: 5a:db:f3:e9:75:ef:2e:59:db:30:d2:62:58:cc:fd: 41:c4:5e:cf:b3:dd:09:dd:7c:56:80:6c:c6:87:57: 98:2f:8e:7b:42:6d:80:f7:5d:01:81:34:9f:27:18: ff:9a:56:ca:bb:d2:0c:16:15:70:37:24:99:bc:1c: 0b:b4:f2:2f:92:28:e3:b7:98:7d:05:01:5e:4c:43: 30:f3:3d:9a:af:1b:ef:3c:d0:3c:bb:42:a9:1c:e6: 0d:02:1f:33:82:48:11:5b:15:a8:5d:fa:9d:44:4f: 9c:d6:f5:d1:1a:c9:a0:a9:65:71:ce:d8:7d:b4:9a: 5f:6a:17:33:17:79:0c:97:9c:7f:22:91:f6:84:53: c4:07:4d:d4:57:79:c2:01:dc:c2:26:ee:29:c2:3f: b3:0e:88:37:f9:98:d2:bb:52:98:f8:57:dc:b8:83: 35:bd:4a:9b:9e:c7:4f:ca:97:0f:ab:30:6b:2f:c2: e1:40:4a:6c:d1:f1:53:06:aa:99:e5:ab:ec:1c:e7: 07:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:90:4F:06:B6:AA:35:B5:F7:00:28:47:0C:66:41:6C:80:8B:FD:57 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/0JBPBraqNbX3AChHDGZBbICL_Vc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.12.0/22 Signature Algorithm: sha256WithRSAEncryption d1:57:b3:2e:08:27:57:95:25:91:ac:3f:34:33:0b:81:a4:c5: 7a:c3:bc:ba:a6:31:f2:2d:e2:92:fb:4a:18:89:a0:4f:26:53: 25:29:4b:70:7e:5f:aa:f2:0c:fc:25:64:0b:60:1a:23:69:9d: 2e:bf:92:5c:a7:a0:bd:98:85:de:de:61:27:74:a1:04:78:cd: c2:46:95:ba:71:5f:db:40:9e:04:b5:50:68:7c:f9:aa:39:e4: 00:99:3f:d4:0a:d8:ad:57:a6:4b:94:95:dd:b7:1e:1b:35:8d: 8b:80:84:ed:a1:ac:9e:3e:50:90:4a:86:9d:17:da:ef:82:d6: 08:e7:2d:f2:cf:6d:c8:5f:d3:9f:d9:60:4f:9e:48:4f:78:0c: 90:4d:27:11:9e:e7:ea:bd:bf:be:a6:2a:06:ff:a1:8f:7a:00: c0:3b:89:f1:80:b4:85:a6:09:13:a3:f9:6e:ec:93:5e:d2:f0: 8f:58:7a:26:dd:ee:31:2b:e1:35:e2:d7:50:b4:9a:45:92:56: e5:17:b0:42:9d:1a:53:15:ea:c1:c6:84:71:d7:5d:e2:23:c7: c5:21:dc:43:a6:9b:44:f1:89:61:25:21:8e:3c:8a:05:a4:83: e9:fb:4b:53:84:e6:db:e8:9e:c2:4a:00:5f:20:7c:cb:a4:d3: 87:b8:3d:d8 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHmswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA1MDhaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEQwOTA0RjA2QjZBQTM1 QjVGNzAwMjg0NzBDNjY0MTZDODA4QkZENTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdVpJHbL80Qv645NT4vzEHBpTOILYRhR/8G8EnaJB0qiCnkQ73 R1SO+e2tnMlhYKx5W/2kzRFGZ3ABS1rb8+l17y5Z2zDSYljM/UHEXs+z3QndfFaA bMaHV5gvjntCbYD3XQGBNJ8nGP+aVsq70gwWFXA3JJm8HAu08i+SKOO3mH0FAV5M QzDzPZqvG+880Dy7Qqkc5g0CHzOCSBFbFahd+p1ET5zW9dEayaCpZXHO2H20ml9q FzMXeQyXnH8ikfaEU8QHTdRXecIB3MIm7inCP7MOiDf5mNK7Upj4V9y4gzW9Spue x0/Klw+rMGsvwuFASmzR8VMGqpnlq+wc5wfvAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU0JBPBraqNbX3AChHDGZBbICL/VcwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3LzBKQlBCcmFxTmJYM0FD aEhER1pCYklDTF9WYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn3QwwDQYJKoZIhvcNAQELBQADggEBANFXsy4IJ1eVJZGsPzQzC4GkxXrDvLqm MfIt4pL7ShiJoE8mUyUpS3B+X6ryDPwlZAtgGiNpnS6/klynoL2Yhd7eYSd0oQR4 zcJGlbpxX9tAngS1UGh8+ao55ACZP9QK2K1XpkuUld23Hhs1jYuAhO2hrJ4+UJBK hp0X2u+C1gjnLfLPbchf05/ZYE+eSE94DJBNJxGe5+q9v76mKgb/oY96AMA7ifGA tIWmCROj+W7sk17S8I9Yeibd7jEr4TXi11C0mkWSVuUXsEKdGlMV6sHGhHHXXeIj x8Uh3EOmm0TxiWElIY48igWkg+n7S1OE5tvonsJKAF8gfMuk04e4Pdg= -----END CERTIFICATE-----Generated at Sun Oct 26 11:47:59 2025 by rpki-client