$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/6a2m216yesmvoQeGGwezjXZgRZM.roa File: 6a2m216yesmvoQeGGwezjXZgRZM.roa (raw, json) Hash identifier: WraJoM3dB/Mnbh9GP8KxgqzBc7Iz8yktjKBQHLbt310= Subject key identifier: E9:AD:A6:DB:5E:B2:7A:C9:AF:A1:07:86:1B:07:B3:8D:76:60:45:93 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1DDF Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/6a2m216yesmvoQeGGwezjXZgRZM.roa Signing time: Sat 13 Sep 2025 03:04:39 +0000 ROA not before: Sat 13 Sep 2025 03:04:39 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 59083 IP address blocks: 103.10.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 12:36:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7647 (0x1ddf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:04:39 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=E9ADA6DB5EB27AC9AFA107861B07B38D76604593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a8:54:a0:03:dc:68:c5:53:1e:8c:e1:a9:d3: 1e:d3:9c:c3:56:89:02:b1:72:b4:f6:0d:fb:7b:72: 78:f6:fe:c5:e2:f7:e6:a5:22:6b:25:e2:52:7a:83: 56:33:93:2f:4e:05:0c:c4:04:9f:f7:ef:7f:3d:62: 7b:01:de:a3:c5:74:22:9c:d2:9a:53:5a:fc:63:50: 3f:2a:eb:ee:43:e4:5b:30:e7:62:78:a8:c9:ba:20: 25:62:4a:56:ff:5c:6b:b6:05:6a:88:53:3f:ce:c2: 38:e3:6f:2f:3e:73:53:9d:38:db:49:7c:da:98:d5: b9:b5:4a:89:0b:4c:d1:d5:dc:ef:f1:84:79:58:cf: 9c:51:50:c3:53:40:e1:23:d3:07:df:ec:09:e2:80: ce:c9:dc:f7:00:e6:b8:64:d1:fe:7c:42:96:be:ea: 44:7a:43:7a:02:ea:c0:b0:7c:ed:b6:8c:20:be:9a: 05:0e:eb:b3:d5:65:f0:45:92:14:72:02:87:18:64: 25:2b:32:ae:76:67:26:a1:47:8a:87:c3:5e:d8:25: 72:a1:1c:cd:e1:a3:80:05:df:7c:b5:5a:91:40:93: 99:d8:e3:46:a0:d2:d9:80:13:15:4c:9d:cd:ae:16: 17:e2:cb:0e:6a:c0:3f:e1:48:33:2f:0c:36:29:66: e5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:AD:A6:DB:5E:B2:7A:C9:AF:A1:07:86:1B:07:B3:8D:76:60:45:93 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/6a2m216yesmvoQeGGwezjXZgRZM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.10.2.0/23 Signature Algorithm: sha256WithRSAEncryption ab:8e:e9:68:4b:0b:f5:e2:f8:0f:bc:bd:07:ff:6b:6b:ce:ce: 85:6e:4c:71:17:a0:2c:2f:ac:85:e0:74:35:5e:e3:94:9a:22: e6:56:3b:22:79:6c:e0:4b:40:fc:eb:7e:93:86:02:33:77:0d: af:75:29:da:dc:eb:b3:10:0a:7a:9b:56:5b:39:b0:23:95:c2: 54:b5:8d:c9:87:aa:a4:f5:86:9c:44:b8:e6:8c:3b:99:7e:25: b9:80:5d:c8:af:50:82:b6:e0:b7:bb:c7:35:18:b8:2d:e3:54: 62:eb:6f:82:40:5b:eb:64:e0:47:99:4e:55:f5:03:49:b4:73: e3:7f:5d:5b:64:9a:7e:ac:45:90:fe:ae:d4:40:f1:bf:a1:7f: 22:5f:27:94:b8:8e:46:2d:7c:2b:35:7f:eb:ad:fd:32:bd:6e: 4e:b2:0d:4e:02:55:ab:87:6b:34:f0:b9:6b:88:bb:0d:1d:3d: 85:48:fe:6e:a9:2c:65:73:5f:ff:57:35:78:be:42:b8:b1:51: 50:0f:29:96:21:c6:ae:a9:ef:d7:03:50:1c:67:70:88:a7:fe: f9:43:5f:ef:16:0a:6c:2f:00:0f:c6:7f:50:3f:ee:a9:48:c2: 34:1a:18:de:ad:97:d5:41:39:6b:18:d5:ef:b6:b8:44:3c:b2: 44:58:bd:67 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHd8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA0MzlaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEU5QURBNkRCNUVCMjdB QzlBRkExMDc4NjFCMDdCMzhENzY2MDQ1OTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCgqFSgA9xoxVMejOGp0x7TnMNWiQKxcrT2Dft7cnj2/sXi9+al Imsl4lJ6g1Yzky9OBQzEBJ/37389YnsB3qPFdCKc0ppTWvxjUD8q6+5D5Fsw52J4 qMm6ICViSlb/XGu2BWqIUz/Owjjjby8+c1OdONtJfNqY1bm1SokLTNHV3O/xhHlY z5xRUMNTQOEj0wff7AnigM7J3PcA5rhk0f58Qpa+6kR6Q3oC6sCwfO22jCC+mgUO 67PVZfBFkhRyAocYZCUrMq52ZyahR4qHw17YJXKhHM3ho4AF33y1WpFAk5nY40ag 0tmAExVMnc2uFhfiyw5qwD/hSDMvDDYpZuXlAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU6a2m216yesmvoQeGGwezjXZgRZMwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3LzZhMm0yMTZ5ZXNtdm9R ZUdHd2V6alhaZ1JaTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnCgIwDQYJKoZIhvcNAQELBQADggEBAKuO6WhLC/Xi+A+8vQf/a2vOzoVuTHEX oCwvrIXgdDVe45SaIuZWOyJ5bOBLQPzrfpOGAjN3Da91Kdrc67MQCnqbVls5sCOV wlS1jcmHqqT1hpxEuOaMO5l+JbmAXcivUIK24Le7xzUYuC3jVGLrb4JAW+tk4EeZ TlX1A0m0c+N/XVtkmn6sRZD+rtRA8b+hfyJfJ5S4jkYtfCs1f+ut/TK9bk6yDU4C VauHazTwuWuIuw0dPYVI/m6pLGVzX/9XNXi+QrixUVAPKZYhxq6p79cDUBxncIin /vlDX+8WCmwvAA/Gf1A/7qlIwjQaGN6tl9VBOWsY1e+2uEQ8skRYvWc= -----END CERTIFICATE-----Generated at Sun Oct 26 11:45:04 2025 by rpki-client