$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/2sBbpZsYfJBcl3poQhgo-yfc_d0.roa File: 2sBbpZsYfJBcl3poQhgo-yfc_d0.roa (raw, json) Hash identifier: 7xIM3rnlIWrJvfAhqfo6bzFqrGFfKVjOYEmS803lJlc= Subject key identifier: DA:C0:5B:A5:9B:18:7C:90:5C:97:7A:68:42:18:28:FB:27:DC:FD:DD Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1C9A Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/2sBbpZsYfJBcl3poQhgo-yfc_d0.roa Signing time: Thu 17 Jul 2025 03:48:05 +0000 ROA not before: Thu 17 Jul 2025 03:48:05 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 139259 IP address blocks: 103.6.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 12:36:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7322 (0x1c9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jul 17 03:48:05 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=DAC05BA59B187C905C977A68421828FB27DCFDDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:82:05:a9:24:e5:af:1e:b5:18:77:e2:88:9e: 37:9e:8f:3d:ea:c1:17:9e:af:c8:fc:4f:a0:04:d1: ef:9d:56:ab:12:3d:ec:77:35:3c:e4:c7:11:f0:3b: 07:93:17:12:a0:09:c7:51:73:9f:ae:d8:c3:50:11: 5f:8e:84:d2:6e:1a:1d:9e:9a:2b:7e:bf:8f:43:89: f9:8c:16:50:16:3c:bc:c6:ee:7d:09:29:35:65:08: c5:49:1c:71:92:06:d2:03:92:b1:7f:3b:bd:2d:a4: 0d:e4:c4:c4:ec:61:5a:3d:12:d0:9e:48:ff:d3:99: 7e:13:ba:05:6b:78:bd:48:08:e5:e8:8a:19:ef:61: e9:fc:f6:44:ad:ab:2a:4f:a5:6b:79:a8:0a:31:2f: 50:d6:cd:33:77:d1:92:88:a2:59:aa:bf:43:0b:9a: d4:c7:74:12:ed:63:0d:f6:fc:8d:c5:d0:b4:67:84: 2b:d1:22:32:12:4c:53:1d:1a:b0:f9:ae:91:2a:5a: 7a:a2:03:5b:2e:be:19:7b:67:b5:9b:9d:17:95:90: 45:7a:18:25:94:1c:37:63:ca:f7:52:c7:cc:a8:12: 87:dd:e7:6b:1f:7a:00:5d:7d:0b:6f:c9:91:73:ff: c4:20:a4:4a:ec:d4:7d:80:70:c2:fe:db:48:01:89: db:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:C0:5B:A5:9B:18:7C:90:5C:97:7A:68:42:18:28:FB:27:DC:FD:DD X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/2sBbpZsYfJBcl3poQhgo-yfc_d0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.6.108.0/22 Signature Algorithm: sha256WithRSAEncryption 41:4c:b8:e9:23:5a:31:29:99:86:45:33:60:fe:3d:ce:61:12: 43:61:e7:99:31:c4:57:f6:e9:17:59:cb:7e:60:b5:d6:74:4f: f6:93:11:65:72:1e:ed:fb:36:b9:32:7c:af:a9:4f:21:42:f8: 70:ab:3d:63:3d:94:d8:1a:eb:09:83:a0:77:0d:8a:75:39:6e: 19:6b:1f:36:f2:ca:54:5c:21:ae:c3:8d:60:c1:84:13:a1:62: 9f:d9:31:80:ef:72:08:b2:23:ad:ed:19:71:95:46:2f:26:26: f5:5c:d8:62:65:9d:10:d9:8c:80:0e:e6:35:5c:41:31:f5:00: 85:82:ec:c3:36:2e:62:e6:20:3a:fc:d7:00:63:54:af:ec:34: 16:f6:82:95:a1:5b:d1:0d:d1:3b:d8:79:eb:1c:f1:9a:06:06: 56:43:e6:c4:a2:2f:60:36:46:81:4f:10:57:52:93:b8:05:39: 85:9f:40:8d:b0:55:6d:f3:ab:5b:3a:11:fa:87:49:16:63:49: ab:9a:84:13:f7:40:06:a7:45:48:8a:f5:af:a4:b5:2f:c2:b2: 60:24:72:95:eb:70:ca:52:e6:11:f8:fe:86:67:e2:a2:9f:48: b1:28:d2:1b:ef:6c:f5:3d:5a:46:50:c6:0a:db:8b:97:47:8b: e9:5f:53:0f -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHJowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA3MTcw MzQ4MDVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKERBQzA1QkE1OUIxODdD OTA1Qzk3N0E2ODQyMTgyOEZCMjdEQ0ZEREQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGggWpJOWvHrUYd+KInjeejz3qwReer8j8T6AE0e+dVqsSPex3 NTzkxxHwOweTFxKgCcdRc5+u2MNQEV+OhNJuGh2emit+v49DifmMFlAWPLzG7n0J KTVlCMVJHHGSBtIDkrF/O70tpA3kxMTsYVo9EtCeSP/TmX4TugVreL1ICOXoihnv Yen89kStqypPpWt5qAoxL1DWzTN30ZKIolmqv0MLmtTHdBLtYw32/I3F0LRnhCvR IjISTFMdGrD5rpEqWnqiA1suvhl7Z7WbnReVkEV6GCWUHDdjyvdSx8yoEofd52sf egBdfQtvyZFz/8QgpErs1H2AcML+20gBidu3AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU2sBbpZsYfJBcl3poQhgo+yfc/d0wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3LzJzQmJwWnNZZkpCY2wz cG9RaGdvLXlmY19kMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJnBmwwDQYJKoZIhvcNAQELBQADggEBAEFMuOkjWjEpmYZFM2D+Pc5hEkNh55kx xFf26RdZy35gtdZ0T/aTEWVyHu37NrkyfK+pTyFC+HCrPWM9lNga6wmDoHcNinU5 bhlrHzbyylRcIa7DjWDBhBOhYp/ZMYDvcgiyI63tGXGVRi8mJvVc2GJlnRDZjIAO 5jVcQTH1AIWC7MM2LmLmIDr81wBjVK/sNBb2gpWhW9EN0TvYeesc8ZoGBlZD5sSi L2A2RoFPEFdSk7gFOYWfQI2wVW3zq1s6EfqHSRZjSauahBP3QAanRUiK9a+ktS/C smAkcpXrcMpS5hH4/oZn4qKfSLEo0hvvbPU9WkZQxgrbi5dHi+lfUw8= -----END CERTIFICATE-----Generated at Sun Oct 26 11:47:29 2025 by rpki-client