$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/8SYDNmngXTNKvdISHNcz4nQK-V4.roa File: 8SYDNmngXTNKvdISHNcz4nQK-V4.roa (raw, json) Hash identifier: Sks23/S/fPxV5gj5ByoPONnzgIz0qVfCZc2MFRDeQoc= Subject key identifier: F1:26:03:36:69:E0:5D:33:4A:BD:D2:12:1C:D7:33:E2:74:0A:F9:5E Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1CB3 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/8SYDNmngXTNKvdISHNcz4nQK-V4.roa Signing time: Thu 17 Jul 2025 03:51:38 +0000 ROA not before: Thu 17 Jul 2025 03:51:38 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 25734 IP address blocks: 103.221.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Jul 2025 13:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7347 (0x1cb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jul 17 03:51:38 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=F126033669E05D334ABDD2121CD733E2740AF95E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:25:54:4f:1f:50:a7:d5:2d:37:48:ac:17:d4: 37:e9:35:b9:c6:c7:5a:99:1d:f5:54:da:6a:e0:5c: bb:1a:26:f5:e1:65:6b:ab:68:6e:14:57:25:10:4d: 4a:61:98:18:83:71:65:d3:d1:77:c9:d5:48:ae:d4: ac:51:a1:8a:cf:4c:e6:90:4e:fb:ed:a9:49:b0:d7: b2:da:5a:ed:65:d9:0a:13:8e:d4:49:13:72:a5:74: dd:25:2f:c2:b4:e7:a7:5b:54:b0:71:ba:92:ac:7c: ef:6c:b2:81:d1:f1:d1:90:bd:36:a2:3a:09:16:13: 60:e7:b6:63:05:26:7a:af:9a:c7:6b:ff:23:bb:6b: e8:37:ea:67:de:be:87:42:3f:14:f2:b1:3d:6d:4c: cd:a6:34:cf:b1:b4:a9:37:65:8b:26:e0:fb:e0:a1: 40:a8:29:30:92:2a:56:c5:87:9e:4e:d7:9c:dc:14: 14:aa:76:3a:e2:35:b3:ae:aa:b5:1a:02:49:52:9d: c2:a9:2e:63:1e:81:59:39:b4:93:20:0c:26:b9:bb: 36:21:67:32:25:c4:f2:92:28:dc:02:7c:37:aa:0b: 68:ef:72:19:5e:b9:74:ba:d4:b9:cc:e6:66:e5:15: 82:d7:6d:e5:0e:93:5b:19:61:9c:ef:b4:46:43:f5: c2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:26:03:36:69:E0:5D:33:4A:BD:D2:12:1C:D7:33:E2:74:0A:F9:5E X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/8SYDNmngXTNKvdISHNcz4nQK-V4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.16.0/22 Signature Algorithm: sha256WithRSAEncryption 9d:b0:32:be:91:34:c7:f2:fb:67:3a:d4:14:b0:90:f7:43:59: b3:4e:2f:42:3f:ca:2a:c5:5b:cd:71:b8:7f:d2:b9:5d:2e:9c: 6a:a0:fe:10:2f:d2:60:bc:9a:0a:4d:36:45:ce:b5:91:f7:79: 4d:05:80:a0:87:c5:23:48:73:ba:88:bd:41:45:b0:9a:08:be: e6:67:67:d3:ae:bc:5b:33:76:57:ec:28:de:d4:1d:ca:0c:0e: 59:c1:3b:5b:b8:d5:dc:0d:cb:71:4c:aa:a0:4e:a2:21:d7:e3: 70:72:e6:9e:83:68:2e:e0:7e:ee:bd:42:51:1b:a6:9a:62:98: b9:c0:b4:fb:c0:73:1a:b2:2d:a7:b5:9f:d3:1a:61:f5:ac:97: d9:70:d1:fb:48:0d:5f:e8:17:86:0d:92:6b:ea:ca:d6:d9:a6: 25:43:30:a3:fc:94:b7:7b:6a:0e:26:3b:02:22:8f:d8:ec:a0: 45:16:0d:6f:2b:35:f0:15:ac:41:af:1e:c1:86:52:35:ae:a4: 22:6c:9a:97:f0:4b:1d:05:cd:d2:d7:4b:20:ff:ab:96:33:42: 61:fa:1f:2c:d8:c4:c0:e6:67:01:33:62:6f:59:0a:dd:2b:c6: 73:a4:21:cb:f9:ff:3d:e0:d1:04:32:cd:c6:16:f1:cf:43:07: 30:e5:e8:d6 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHLMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA3MTcw MzUxMzhaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEYxMjYwMzM2NjlFMDVE MzM0QUJERDIxMjFDRDczM0UyNzQwQUY5NUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIJVRPH1Cn1S03SKwX1DfpNbnGx1qZHfVU2mrgXLsaJvXhZWur aG4UVyUQTUphmBiDcWXT0XfJ1Uiu1KxRoYrPTOaQTvvtqUmw17LaWu1l2QoTjtRJ E3KldN0lL8K056dbVLBxupKsfO9ssoHR8dGQvTaiOgkWE2DntmMFJnqvmsdr/yO7 a+g36mfevodCPxTysT1tTM2mNM+xtKk3ZYsm4PvgoUCoKTCSKlbFh55O15zcFBSq djriNbOuqrUaAklSncKpLmMegVk5tJMgDCa5uzYhZzIlxPKSKNwCfDeqC2jvchle uXS61LnM5mblFYLXbeUOk1sZYZzvtEZD9cI3AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU8SYDNmngXTNKvdISHNcz4nQK+V4wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3LzhTWURObW5nWFROS3Zk SVNITmN6NG5RSy1WNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn3RAwDQYJKoZIhvcNAQELBQADggEBAJ2wMr6RNMfy+2c61BSwkPdDWbNOL0I/ yirFW81xuH/SuV0unGqg/hAv0mC8mgpNNkXOtZH3eU0FgKCHxSNIc7qIvUFFsJoI vuZnZ9OuvFszdlfsKN7UHcoMDlnBO1u41dwNy3FMqqBOoiHX43By5p6DaC7gfu69 QlEbpppimLnAtPvAcxqyLae1n9MaYfWsl9lw0ftIDV/oF4YNkmvqytbZpiVDMKP8 lLd7ag4mOwIij9jsoEUWDW8rNfAVrEGvHsGGUjWupCJsmpfwSx0FzdLXSyD/q5Yz QmH6HyzYxMDmZwEzYm9ZCt0rxnOkIcv5/z3g0QQyzcYW8c9DBzDl6NY= -----END CERTIFICATE-----Generated at Mon Jul 21 13:20:45 2025 by rpki-client