$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/Am5fQ05TYWB-I6ZNEJAyfU7WKvM.roa File: Am5fQ05TYWB-I6ZNEJAyfU7WKvM.roa (raw, json) Hash identifier: SclCUiW1gztybxHRptJP5pxi/3YDWeqsuYodS5CWhXk= Subject key identifier: 02:6E:5F:43:4E:53:61:60:7E:23:A6:4D:10:90:32:7D:4E:D6:2A:F3 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1EC3 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/Am5fQ05TYWB-I6ZNEJAyfU7WKvM.roa Signing time: Sat 13 Sep 2025 03:05:27 +0000 ROA not before: Sat 13 Sep 2025 03:05:27 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 17621 IP address blocks: 103.24.118.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 12:36:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7875 (0x1ec3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:05:27 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=026E5F434E5361607E23A64D1090327D4ED62AF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7b:4f:df:f3:4e:0e:24:f7:e3:d4:ef:d7:7f: 8d:bf:de:da:3f:71:70:01:62:ab:98:b2:41:6e:69: c3:c9:23:9f:b7:04:ad:bb:33:b5:3e:d5:84:0c:24: 1c:89:57:77:49:87:8a:d9:a5:c1:31:7f:24:c0:ff: 8d:d1:e7:5f:98:54:dd:36:90:10:29:8d:18:65:15: 8c:00:7c:00:4d:80:92:7f:79:66:0c:ec:48:0e:4d: 5d:13:06:92:2e:10:06:83:f8:f6:7f:af:04:a4:79: 79:37:f5:03:fa:63:4f:3d:1c:98:5c:d9:4f:0d:79: b7:9e:85:50:b6:70:5a:18:25:c8:c8:9d:0e:9f:8d: 3f:25:d1:a6:c9:46:e7:26:33:b6:72:10:12:aa:cb: 08:b6:53:5c:15:a5:d4:75:fb:43:d2:68:a7:6b:51: 25:8c:d4:41:e2:db:e6:56:65:01:b2:ac:56:32:37: a7:ea:0e:e4:32:d8:78:c1:70:43:8d:b8:e1:12:cb: 13:75:89:eb:3d:f6:bd:ec:9d:07:8b:98:73:17:ab: 7a:ae:ab:0b:81:b5:a7:5c:77:68:c4:50:07:70:1b: ab:3f:38:49:29:a7:4a:be:4e:3f:ca:16:bf:83:fd: ae:3f:30:fa:e9:ba:c6:69:d0:1d:e5:52:f5:c6:4a: fa:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:6E:5F:43:4E:53:61:60:7E:23:A6:4D:10:90:32:7D:4E:D6:2A:F3 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/Am5fQ05TYWB-I6ZNEJAyfU7WKvM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.24.118.0/23 Signature Algorithm: sha256WithRSAEncryption c3:ca:04:84:2e:90:88:29:b6:77:b1:7e:4e:ac:7f:4f:2d:da: 7e:54:6f:f0:55:cb:e5:a0:2b:95:be:d5:77:4c:a1:2e:85:85: 15:af:04:fb:a8:a6:b0:42:61:68:70:86:ac:8a:24:b1:6e:65: 77:cc:e3:3e:f6:b0:7b:0b:40:4b:18:3e:50:6c:9d:e5:0f:78: 7a:dd:66:17:8e:45:20:86:75:c6:44:03:14:45:43:b3:20:e5: fe:a3:e1:76:84:36:ca:35:8a:75:98:54:3a:e9:95:b4:4c:d7: 04:61:0a:65:5d:9b:14:41:3a:7b:b1:89:52:1d:aa:0c:89:fa: 15:2e:90:d9:3a:38:9c:98:3b:cc:06:b1:db:d5:b6:ac:f2:36: 3f:04:b5:ee:ff:c2:99:63:da:5c:7c:f2:17:88:c1:dc:e3:9c: 58:79:a4:cd:8e:93:13:66:6e:1a:d0:7b:f6:5a:34:5b:27:5e: bb:09:fa:bd:f5:7f:d0:b6:38:59:77:2e:95:03:ac:47:d7:ad: ce:0f:4e:cc:f3:d5:92:6b:ac:89:02:1c:b5:b7:b4:32:9a:74: 36:e0:6c:6b:b4:a4:fd:74:f8:5d:00:11:44:db:a8:5c:d2:9f: 9d:c0:d7:7a:76:7f:a0:ae:ca:c7:12:83:52:fc:bf:03:97:68: e1:bf:a8:79 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHsMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA1MjdaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDAyNkU1RjQzNEU1MzYx NjA3RTIzQTY0RDEwOTAzMjdENEVENjJBRjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGe0/f804OJPfj1O/Xf42/3to/cXABYquYskFuacPJI5+3BK27 M7U+1YQMJByJV3dJh4rZpcExfyTA/43R51+YVN02kBApjRhlFYwAfABNgJJ/eWYM 7EgOTV0TBpIuEAaD+PZ/rwSkeXk39QP6Y089HJhc2U8NebeehVC2cFoYJcjInQ6f jT8l0abJRucmM7ZyEBKqywi2U1wVpdR1+0PSaKdrUSWM1EHi2+ZWZQGyrFYyN6fq DuQy2HjBcEONuOESyxN1ies99r3snQeLmHMXq3quqwuBtadcd2jEUAdwG6s/OEkp p0q+Tj/KFr+D/a4/MPrpusZp0B3lUvXGSvo7AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUAm5fQ05TYWB+I6ZNEJAyfU7WKvMwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L0FtNWZRMDVUWVdCLUk2 Wk5FSkF5ZlU3V0t2TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnGHYwDQYJKoZIhvcNAQELBQADggEBAMPKBIQukIgptnexfk6sf08t2n5Ub/BV y+WgK5W+1XdMoS6FhRWvBPuoprBCYWhwhqyKJLFuZXfM4z72sHsLQEsYPlBsneUP eHrdZheORSCGdcZEAxRFQ7Mg5f6j4XaENso1inWYVDrplbRM1wRhCmVdmxRBOnux iVIdqgyJ+hUukNk6OJyYO8wGsdvVtqzyNj8Ete7/wplj2lx88heIwdzjnFh5pM2O kxNmbhrQe/ZaNFsnXrsJ+r31f9C2OFl3LpUDrEfXrc4PTszz1ZJrrIkCHLW3tDKa dDbgbGu0pP10+F0AEUTbqFzSn53A13p2f6CuyscSg1L8vwOXaOG/qHk= -----END CERTIFICATE-----Generated at Sun Oct 26 11:50:23 2025 by rpki-client