$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/4VxDLplA4DZFhFU1PgXA90rj3Ak.roa File: 4VxDLplA4DZFhFU1PgXA90rj3Ak.roa (raw, json) Hash identifier: XJEIB6Hsa/kheoyIWcEDO1GbDizAvPRM38LPCo8hL5Q= Subject key identifier: E1:5C:43:2E:99:40:E0:36:45:84:55:35:3E:05:C0:F7:4A:E3:DC:09 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1CA2 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/4VxDLplA4DZFhFU1PgXA90rj3Ak.roa Signing time: Thu 17 Jul 2025 03:51:33 +0000 ROA not before: Thu 17 Jul 2025 03:51:33 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 25734 IP address blocks: 103.221.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Jul 2025 13:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7330 (0x1ca2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jul 17 03:51:33 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=E15C432E9940E036458455353E05C0F74AE3DC09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7b:63:5a:ba:31:ea:b9:73:cc:cd:4f:b9:3a: 4e:62:4c:3d:ed:e6:74:7f:46:6b:36:6a:e8:d7:2b: e8:3b:24:77:0e:b0:82:69:50:29:12:bd:9e:c1:3a: de:50:28:ea:41:45:00:d3:14:c4:e4:5f:ba:af:ea: 3e:39:63:9a:ce:1c:c8:9b:26:be:54:16:28:61:d0: 4c:79:5d:c3:47:c3:fa:91:69:e2:58:d1:5e:32:ce: be:8c:f0:5b:0d:c9:84:9b:77:85:30:bb:cf:28:0b: 29:b8:2b:bf:4a:d6:8f:b7:3b:be:47:fb:b2:d1:8d: 6e:fc:0d:b8:da:dd:f4:91:12:5c:37:27:fb:2c:71: d2:db:da:aa:ec:5c:f6:37:d0:25:3a:b4:a2:25:0b: 0b:bb:b3:71:5c:91:60:20:f2:02:17:59:73:bd:cd: 54:8b:41:a9:9c:16:3f:d2:67:a7:b9:d9:69:a1:5e: d6:9b:66:cc:b5:58:33:40:14:4b:0a:5b:95:9e:08: b4:8c:5f:d5:37:e7:84:6c:f7:85:f2:49:38:68:63: 1d:29:b0:b2:c1:04:d8:c8:65:63:03:a0:31:94:d4: b9:00:f0:5d:b4:7a:30:a7:98:81:ab:d1:f1:d3:80: fa:10:54:0e:7f:62:6d:58:cc:0d:29:8f:22:f6:e4: 10:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:5C:43:2E:99:40:E0:36:45:84:55:35:3E:05:C0:F7:4A:E3:DC:09 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/4VxDLplA4DZFhFU1PgXA90rj3Ak.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.28.0/22 Signature Algorithm: sha256WithRSAEncryption ab:84:87:36:54:57:1d:be:00:bf:31:b4:26:e6:a2:06:a7:be: 28:96:05:0f:64:fe:4d:c3:70:13:38:8e:e9:42:11:5a:67:5c: 3f:ef:c0:36:d4:be:bd:15:5b:7c:36:69:8b:b9:44:25:6e:ec: 24:4f:98:03:d4:9c:e8:b0:d9:2b:f2:93:a9:32:30:9b:f5:a5: 80:d0:c2:c8:ba:81:55:f9:80:4b:53:6e:84:d3:44:ad:be:d8: 1d:23:50:64:76:f8:97:07:b1:f8:34:1b:b8:30:e5:68:db:69: c7:40:e2:72:8a:8c:42:36:b1:33:81:10:9e:24:45:76:88:53: 09:59:2f:8e:0a:9e:74:7b:89:b5:fc:2d:b5:05:91:0d:47:d1: b7:f4:52:4b:39:db:9e:98:38:bf:e5:cd:a1:3d:e3:1d:24:fe: bb:ea:df:8f:99:a7:73:61:cf:7d:4e:b0:36:59:c9:87:2c:0e: 19:83:90:bd:d8:c2:46:17:20:1f:26:cc:b2:0b:84:31:de:a6: 50:a0:df:b3:55:fe:3f:fd:98:be:61:8e:c3:78:d8:bc:a3:70: b8:1b:ef:af:0f:e9:71:b8:f9:7f:1b:65:43:78:0d:d1:e7:07: be:28:64:66:5d:2f:15:c1:7c:47:f1:2b:7c:f1:ec:24:2b:8e: ad:88:d4:0a -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHKIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA3MTcw MzUxMzNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEUxNUM0MzJFOTk0MEUw MzY0NTg0NTUzNTNFMDVDMEY3NEFFM0RDMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6e2NaujHquXPMzU+5Ok5iTD3t5nR/Rms2aujXK+g7JHcOsIJp UCkSvZ7BOt5QKOpBRQDTFMTkX7qv6j45Y5rOHMibJr5UFihh0Ex5XcNHw/qRaeJY 0V4yzr6M8FsNyYSbd4Uwu88oCym4K79K1o+3O75H+7LRjW78Dbja3fSRElw3J/ss cdLb2qrsXPY30CU6tKIlCwu7s3FckWAg8gIXWXO9zVSLQamcFj/SZ6e52WmhXtab Zsy1WDNAFEsKW5WeCLSMX9U354Rs94XySThoYx0psLLBBNjIZWMDoDGU1LkA8F20 ejCnmIGr0fHTgPoQVA5/Ym1YzA0pjyL25BAPAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU4VxDLplA4DZFhFU1PgXA90rj3AkwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3LzRWeERMcGxBNERaRmhG VTFQZ1hBOTByajNBay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn3RwwDQYJKoZIhvcNAQELBQADggEBAKuEhzZUVx2+AL8xtCbmoganviiWBQ9k /k3DcBM4julCEVpnXD/vwDbUvr0VW3w2aYu5RCVu7CRPmAPUnOiw2Svyk6kyMJv1 pYDQwsi6gVX5gEtTboTTRK2+2B0jUGR2+JcHsfg0G7gw5WjbacdA4nKKjEI2sTOB EJ4kRXaIUwlZL44KnnR7ibX8LbUFkQ1H0bf0Uks5256YOL/lzaE94x0k/rvq34+Z p3Nhz31OsDZZyYcsDhmDkL3YwkYXIB8mzLILhDHeplCg37NV/j/9mL5hjsN42Lyj cLgb768P6XG4+X8bZUN4DdHnB74oZGZdLxXBfEfxK3zx7CQrjq2I1Ao= -----END CERTIFICATE-----Generated at Mon Jul 21 13:23:25 2025 by rpki-client