$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/5Ufd2hGzBeh_jkFXQSVtCnVAjsw.roa File: 5Ufd2hGzBeh_jkFXQSVtCnVAjsw.roa (raw, json) Hash identifier: UCGUK5+hHtoIzOdUacXdsjmKOFLIq2nDGISLGnhOGb4= Subject key identifier: E5:47:DD:DA:11:B3:05:E8:7F:8E:41:57:41:25:6D:0A:75:40:8E:CC Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1E13 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/5Ufd2hGzBeh_jkFXQSVtCnVAjsw.roa Signing time: Sat 13 Sep 2025 03:04:50 +0000 ROA not before: Sat 13 Sep 2025 03:04:50 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 139259 IP address blocks: 103.221.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 12:36:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7699 (0x1e13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:04:50 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=E547DDDA11B305E87F8E415741256D0A75408ECC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8f:7f:ca:d2:ba:79:75:8d:43:81:e6:73:9f: e0:26:45:99:35:61:48:c1:0e:85:44:7b:bc:1a:ae: c4:27:9d:ce:98:3d:90:79:b9:eb:44:27:8e:35:ad: 20:46:59:b3:fd:b5:9d:03:15:d5:37:2a:c3:2c:90: e6:07:c5:b3:7a:dc:27:7b:31:2c:23:4e:ac:f1:11: 66:1d:da:21:f2:93:fd:2e:46:3e:9d:d2:9d:e5:f3: 15:99:6e:73:0b:5a:cf:4a:c7:e7:d1:7c:d9:89:d5: cc:65:60:d1:5c:b6:2f:b4:a4:e0:ce:9b:27:d7:f8: d2:7b:3f:a9:d9:de:8a:90:f0:81:80:0c:84:d5:24: 86:c3:3f:ca:26:92:23:83:fd:88:f8:d9:76:9d:ed: 8f:2a:87:61:71:1a:e4:1e:83:1e:ff:a7:1c:99:88: e7:77:b2:dc:84:9e:b1:0e:42:83:c2:c4:9d:92:ab: 82:d5:71:54:22:99:d1:87:8d:9c:bc:df:7a:3d:52: 0c:bd:fe:52:11:c6:26:ee:b3:14:7b:a2:0f:c1:19: 82:84:76:14:65:97:f6:1d:6a:a8:64:97:eb:e7:19: 99:05:f1:2c:80:5e:ef:6a:8a:d6:d1:77:07:de:8a: 7b:72:5b:15:1f:ef:12:09:b2:a5:ac:9e:37:5e:34: 74:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:47:DD:DA:11:B3:05:E8:7F:8E:41:57:41:25:6D:0A:75:40:8E:CC X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/5Ufd2hGzBeh_jkFXQSVtCnVAjsw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.17.0/24 Signature Algorithm: sha256WithRSAEncryption 30:99:bf:5c:0a:e7:61:ae:b0:20:e4:53:43:56:50:cb:d0:79: 1d:82:78:2e:bb:35:6f:0a:3b:67:dd:93:02:af:28:60:bc:e4: 21:11:74:2c:ea:d4:7b:92:e7:5d:27:e7:0e:95:45:03:ed:4b: 69:9f:1c:90:53:e0:9a:64:71:f4:cc:e3:48:40:ca:fa:0e:ae: 00:8b:24:ea:6c:98:0d:c5:57:c9:35:af:8b:cd:b9:1a:47:0f: fa:36:b2:58:a0:6d:f2:89:bc:d4:3d:9c:c1:6a:0b:16:91:c1: 2c:1b:20:e1:59:6d:18:83:68:d4:81:72:33:7f:14:cd:53:a5: d3:f4:e1:f3:a4:79:2a:c0:af:f9:41:6e:cc:22:ec:18:3c:e2: a8:09:94:6a:d0:69:70:d4:33:2b:5f:b6:10:6a:7d:b8:cb:7e: 30:15:8b:6c:4b:a3:a0:7b:0e:03:d3:3c:e7:93:4d:1d:b3:e8: cd:74:73:05:1b:96:d7:69:e2:b0:39:7f:cc:29:3f:18:d8:47: 55:8a:a5:6a:51:91:af:11:99:ce:e2:ea:08:20:38:44:5e:4a: 89:ad:0a:7b:fd:c4:7f:af:b9:fa:18:d6:8d:be:e8:10:e5:fa: 64:da:d2:f4:6c:8f:f7:d8:ac:88:d2:8f:84:14:40:30:31:53: 91:45:68:33 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHhMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA0NTBaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEU1NDdERERBMTFCMzA1 RTg3RjhFNDE1NzQxMjU2RDBBNzU0MDhFQ0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtj3/K0rp5dY1DgeZzn+AmRZk1YUjBDoVEe7warsQnnc6YPZB5 uetEJ441rSBGWbP9tZ0DFdU3KsMskOYHxbN63Cd7MSwjTqzxEWYd2iHyk/0uRj6d 0p3l8xWZbnMLWs9Kx+fRfNmJ1cxlYNFcti+0pODOmyfX+NJ7P6nZ3oqQ8IGADITV JIbDP8omkiOD/Yj42Xad7Y8qh2FxGuQegx7/pxyZiOd3styEnrEOQoPCxJ2Sq4LV cVQimdGHjZy833o9Ugy9/lIRxibusxR7og/BGYKEdhRll/Ydaqhkl+vnGZkF8SyA Xu9qitbRdwfeintyWxUf7xIJsqWsnjdeNHS9AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU5Ufd2hGzBeh/jkFXQSVtCnVAjswwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3LzVVZmQyaEd6QmVoX2pr RlhRU1Z0Q25WQWpzdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3REwDQYJKoZIhvcNAQELBQADggEBADCZv1wK52GusCDkU0NWUMvQeR2CeC67 NW8KO2fdkwKvKGC85CERdCzq1HuS510n5w6VRQPtS2mfHJBT4JpkcfTM40hAyvoO rgCLJOpsmA3FV8k1r4vNuRpHD/o2sligbfKJvNQ9nMFqCxaRwSwbIOFZbRiDaNSB cjN/FM1TpdP04fOkeSrAr/lBbswi7Bg84qgJlGrQaXDUMytfthBqfbjLfjAVi2xL o6B7DgPTPOeTTR2z6M10cwUbltdp4rA5f8wpPxjYR1WKpWpRka8Rmc7i6gggOERe SomtCnv9xH+vufoY1o2+6BDl+mTa0vRsj/fYrIjSj4QUQDAxU5FFaDM= -----END CERTIFICATE-----Generated at Sun Oct 26 11:45:04 2025 by rpki-client