$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/4fH0xSWbt1t9NZGAlumgF8pm64s.roa File: 4fH0xSWbt1t9NZGAlumgF8pm64s.roa (raw, json) Hash identifier: Dw2E90x6h799q3RtpR5rBE0HROa0VFgVRjDZxif9trQ= Subject key identifier: E1:F1:F4:C5:25:9B:B7:5B:7D:35:91:80:96:E9:A0:17:CA:66:EB:8B Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1E1A Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/4fH0xSWbt1t9NZGAlumgF8pm64s.roa Signing time: Sat 13 Sep 2025 03:04:51 +0000 ROA not before: Sat 13 Sep 2025 03:04:51 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 13444 IP address blocks: 103.221.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7706 (0x1e1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:04:51 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=E1F1F4C5259BB75B7D35918096E9A017CA66EB8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:59:b4:ad:ae:a7:be:ef:24:bc:9b:85:cb:b0: 9a:30:91:54:1f:7c:04:92:6e:16:4a:61:07:15:e7: 98:d7:b4:2e:ca:68:dd:70:a1:be:7e:ac:f3:33:75: ba:71:14:c0:ed:7d:bc:ab:8d:cf:2e:bb:4a:b2:79: 0a:8f:6f:fe:ed:10:4e:f7:be:d0:11:a5:8b:2e:4d: 7f:e9:ab:db:40:0e:c5:32:4c:7e:07:c7:51:30:38: 2b:24:c7:15:2f:3e:7d:f1:41:22:a5:65:f4:c3:20: 48:28:6a:92:9a:5d:3d:ca:74:b3:44:71:1b:2f:0b: a3:14:0c:b1:f8:cf:88:04:5e:38:e4:7d:a6:ef:7a: b0:38:53:7c:06:ae:a8:06:bc:c6:53:58:3d:d8:5c: e4:42:a1:d8:db:66:05:d1:76:ba:4f:0a:16:7f:1d: 65:38:fb:a8:04:3b:1d:30:13:3a:f5:17:25:13:dc: 43:de:d1:26:17:35:c1:4b:07:cb:63:b1:07:17:16: e0:2b:d3:31:ac:8f:df:15:e1:dd:44:4f:31:e3:49: 4e:b5:21:d8:08:20:f9:90:55:80:e3:0f:5f:af:27: 85:29:b6:a0:f5:fb:38:62:0f:d1:0c:1a:0d:f5:1c: 43:44:1b:81:ee:46:8c:8a:17:4f:1b:2f:1d:29:53: 73:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F1:F4:C5:25:9B:B7:5B:7D:35:91:80:96:E9:A0:17:CA:66:EB:8B X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/4fH0xSWbt1t9NZGAlumgF8pm64s.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.14.0/24 Signature Algorithm: sha256WithRSAEncryption 40:5c:99:d9:40:79:54:fb:5e:27:ed:07:58:25:36:6b:09:16: 63:85:33:2f:4b:5d:49:ef:8d:11:12:a1:45:e9:1e:0a:3b:f7: 66:82:e6:5d:7c:99:2a:60:08:bc:6e:0b:0b:7b:84:8b:1e:1b: 8b:7c:a3:a6:f5:e3:43:cc:e3:67:1b:81:e9:3b:bf:e9:9f:f9: 13:96:65:32:0e:a7:8c:d5:e2:65:be:9c:a9:a9:6e:fa:8f:13: a5:aa:a1:61:b7:c9:9d:a9:4f:34:e0:5f:39:96:e9:8c:76:13: d3:a2:07:ca:7d:c8:0f:56:b5:ab:47:0f:db:ec:2d:e7:18:72: 11:a8:8e:68:e4:d4:36:6f:93:ed:fb:c1:f7:8c:b9:62:b7:2e: 85:ae:cb:47:76:42:6d:f9:4d:96:f4:17:f2:b7:de:e9:4d:57: 4d:26:e3:63:da:c1:ff:99:d9:9f:86:b6:10:cd:53:3a:ef:a6: a9:a0:c2:b4:0c:6f:65:8d:ca:18:e0:9d:a9:d5:c5:4a:07:ff: a9:d5:8e:f7:30:b2:65:03:1a:9e:73:9d:75:e8:41:22:47:e7: 45:44:02:7a:be:4c:47:26:42:67:5d:19:e2:c2:33:b2:7c:12: 24:96:19:e2:25:0e:20:f2:4b:3e:17:a9:55:09:8f:5d:6e:77: 03:d9:a6:0d -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHhowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA0NTFaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEUxRjFGNEM1MjU5QkI3 NUI3RDM1OTE4MDk2RTlBMDE3Q0E2NkVCOEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrWbStrqe+7yS8m4XLsJowkVQffASSbhZKYQcV55jXtC7KaN1w ob5+rPMzdbpxFMDtfbyrjc8uu0qyeQqPb/7tEE73vtARpYsuTX/pq9tADsUyTH4H x1EwOCskxxUvPn3xQSKlZfTDIEgoapKaXT3KdLNEcRsvC6MUDLH4z4gEXjjkfabv erA4U3wGrqgGvMZTWD3YXORCodjbZgXRdrpPChZ/HWU4+6gEOx0wEzr1FyUT3EPe 0SYXNcFLB8tjsQcXFuAr0zGsj98V4d1ETzHjSU61IdgIIPmQVYDjD1+vJ4UptqD1 +zhiD9EMGg31HENEG4HuRoyKF08bLx0pU3PFAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU4fH0xSWbt1t9NZGAlumgF8pm64swHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3LzRmSDB4U1didDF0OU5a R0FsdW1nRjhwbTY0cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3Q4wDQYJKoZIhvcNAQELBQADggEBAEBcmdlAeVT7XiftB1glNmsJFmOFMy9L XUnvjRESoUXpHgo792aC5l18mSpgCLxuCwt7hIseG4t8o6b140PM42cbgek7v+mf +ROWZTIOp4zV4mW+nKmpbvqPE6WqoWG3yZ2pTzTgXzmW6Yx2E9OiB8p9yA9WtatH D9vsLecYchGojmjk1DZvk+37wfeMuWK3LoWuy0d2Qm35TZb0F/K33ulNV00m42Pa wf+Z2Z+GthDNUzrvpqmgwrQMb2WNyhjgnanVxUoH/6nVjvcwsmUDGp5znXXoQSJH 50VEAnq+TEcmQmddGeLCM7J8EiSWGeIlDiDySz4XqVUJj11udwPZpg0= -----END CERTIFICATE-----Generated at Sun Oct 26 07:07:48 2025 by rpki-client