$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/3v2yNDrw6NCB-5GPCTGdM62yh54.roa File: 3v2yNDrw6NCB-5GPCTGdM62yh54.roa (raw, json) Hash identifier: wumHrtNNLE2ApD2mvu5SBGeGvLcPh6q5Ea5s37SzosQ= Subject key identifier: DE:FD:B2:34:3A:F0:E8:D0:81:FB:91:8F:09:31:9D:33:AD:B2:87:9E Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1CBF Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/3v2yNDrw6NCB-5GPCTGdM62yh54.roa Signing time: Thu 17 Jul 2025 03:55:33 +0000 ROA not before: Thu 17 Jul 2025 03:55:33 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 25734 IP address blocks: 103.221.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 10:41:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7359 (0x1cbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jul 17 03:55:33 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=DEFDB2343AF0E8D081FB918F09319D33ADB2879E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a1:1e:7d:2e:e4:0c:19:c8:a5:e5:a7:4d:e1: d2:11:a1:6a:db:c6:7b:28:26:41:07:b6:96:9b:e0: 74:46:24:61:f8:23:e6:58:bd:4a:5d:60:0d:47:f7: b5:f8:06:5b:37:8f:8e:33:a4:02:38:24:bc:d0:14: bb:51:70:cc:bd:a5:c4:3f:f1:d8:e1:0a:d7:2b:18: e4:b4:ec:83:2e:df:bb:06:31:d1:b3:d5:e6:50:10: f8:6f:96:54:18:15:8d:ab:5c:0a:32:53:b5:f0:2f: a4:f4:ff:25:05:81:0a:73:79:fe:24:9d:db:48:cb: 93:81:38:7e:f0:d9:de:4b:19:83:bb:6e:02:13:e1: 1e:f1:09:6a:b3:ce:df:32:7e:09:fb:a5:c9:95:33: ad:b5:ec:5e:63:c9:6b:ac:af:98:a9:08:30:a2:33: ce:73:21:fb:ce:96:8a:f6:2b:e7:b3:7b:17:18:15: 95:86:bc:c8:06:92:32:03:9a:83:f2:fd:24:68:10: 95:9f:2d:12:9e:d9:30:40:7e:e4:3e:82:c9:01:3e: 8b:41:e7:98:51:d0:b4:de:6c:6e:7f:e7:5b:81:6d: 08:3c:3d:74:ea:b7:4e:63:fa:a9:7b:85:7b:22:e6: 0d:92:87:2e:75:a6:fc:ec:25:8d:a1:90:c4:f9:db: 0d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:FD:B2:34:3A:F0:E8:D0:81:FB:91:8F:09:31:9D:33:AD:B2:87:9E X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/3v2yNDrw6NCB-5GPCTGdM62yh54.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.44.0/22 Signature Algorithm: sha256WithRSAEncryption 13:18:2f:50:bc:0f:36:5b:20:a7:a8:bf:6d:84:21:b4:53:33: 6a:4e:6f:c5:b1:ff:aa:70:13:e2:36:14:30:e5:9f:b2:1a:f8: 31:a2:6a:bc:12:da:62:ee:ff:4d:17:77:4d:d5:03:6d:12:e9: 89:6d:51:e4:4f:91:c9:78:a1:2d:41:f4:8e:1e:4a:e7:1d:03: 29:6c:0e:92:de:14:6a:86:f0:1c:18:e3:9c:7b:99:18:f7:63: 1a:4d:1c:1f:8f:fe:f1:fb:26:03:84:ee:da:bd:d7:fe:47:c1: b9:f9:0a:b1:22:f4:61:0c:3c:ae:a3:4b:b6:86:37:3d:99:1c: a5:88:fb:6f:63:ef:28:a2:17:03:bd:9e:91:05:8e:cc:de:6c: f4:b5:47:ed:9f:ec:83:37:57:14:6f:d2:4b:4c:da:39:f2:d4: d1:42:18:7d:0d:58:69:f7:16:bd:3d:9d:07:ae:c3:52:25:3b: b8:71:a8:45:04:4d:f8:d5:df:29:86:8e:6d:ff:f0:e3:3b:c3: df:99:68:c5:9a:0a:83:13:c6:bc:29:b3:96:eb:7e:29:a9:08: fa:a4:40:16:ef:07:23:6f:75:f1:95:17:3d:5f:ab:17:0b:08: 1c:43:b6:34:f1:ea:09:3f:df:5e:c2:eb:37:15:27:e6:4b:a2: b5:e3:61:9c -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHL8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA3MTcw MzU1MzNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKERFRkRCMjM0M0FGMEU4 RDA4MUZCOTE4RjA5MzE5RDMzQURCMjg3OUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCloR59LuQMGcil5adN4dIRoWrbxnsoJkEHtpab4HRGJGH4I+ZY vUpdYA1H97X4Bls3j44zpAI4JLzQFLtRcMy9pcQ/8djhCtcrGOS07IMu37sGMdGz 1eZQEPhvllQYFY2rXAoyU7XwL6T0/yUFgQpzef4kndtIy5OBOH7w2d5LGYO7bgIT 4R7xCWqzzt8yfgn7pcmVM6217F5jyWusr5ipCDCiM85zIfvOlor2K+ezexcYFZWG vMgGkjIDmoPy/SRoEJWfLRKe2TBAfuQ+gskBPotB55hR0LTebG5/51uBbQg8PXTq t05j+ql7hXsi5g2Shy51pvzsJY2hkMT52w2nAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU3v2yNDrw6NCB+5GPCTGdM62yh54wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3LzN2MnlORHJ3Nk5DQi01 R1BDVEdkTTYyeWg1NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn3SwwDQYJKoZIhvcNAQELBQADggEBABMYL1C8DzZbIKeov22EIbRTM2pOb8Wx /6pwE+I2FDDln7Ia+DGiarwS2mLu/00Xd03VA20S6YltUeRPkcl4oS1B9I4eSucd AylsDpLeFGqG8BwY45x7mRj3YxpNHB+P/vH7JgOE7tq91/5Hwbn5CrEi9GEMPK6j S7aGNz2ZHKWI+29j7yiiFwO9npEFjszebPS1R+2f7IM3VxRv0ktM2jny1NFCGH0N WGn3Fr09nQeuw1IlO7hxqEUETfjV3ymGjm3/8OM7w9+ZaMWaCoMTxrwps5brfimp CPqkQBbvByNvdfGVFz1fqxcLCBxDtjTx6gk/317C6zcVJ+ZLorXjYZw= -----END CERTIFICATE-----Generated at Thu Jul 24 08:34:10 2025 by rpki-client