$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/BLAhGI0W8MoHZXIaP2CN0YoXvBw.roa File: BLAhGI0W8MoHZXIaP2CN0YoXvBw.roa (raw, json) Hash identifier: WQBYk1bU3Jajii4HvWuCY2zDwf9PIYhDxK1u/hZ1Qsk= Subject key identifier: 04:B0:21:18:8D:16:F0:CA:07:65:72:1A:3F:60:8D:D1:8A:17:BC:1C Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1DE2 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/BLAhGI0W8MoHZXIaP2CN0YoXvBw.roa Signing time: Sat 13 Sep 2025 03:04:40 +0000 ROA not before: Sat 13 Sep 2025 03:04:40 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 138527 IP address blocks: 45.252.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 12:36:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7650 (0x1de2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:04:40 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=04B021188D16F0CA0765721A3F608DD18A17BC1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f0:88:b1:fd:f9:fe:47:4c:c9:23:a2:49:0d: af:2c:e7:ad:30:1e:6a:be:75:a8:36:cc:ac:23:12: 49:4e:bf:33:f9:d6:91:3a:db:fb:32:cb:04:b8:a4: 61:66:13:80:44:85:86:de:6f:60:c6:c5:5a:bb:fe: 92:11:99:12:ec:2d:3b:88:cf:3e:8d:8c:00:c4:ab: 16:58:ec:4b:d9:61:1a:1d:98:08:05:88:be:c9:ab: bd:9e:0f:50:56:55:6a:be:f7:9f:2b:02:eb:5b:e2: d7:8d:3d:f3:e3:45:ae:52:7f:cf:68:ff:e3:47:a4: 9f:26:46:01:64:82:15:38:5b:61:dc:c6:ec:32:d0: c6:dd:2f:8b:e0:9a:23:7c:c6:a7:8e:12:78:1f:74: 7d:fa:bd:6d:a0:52:01:22:6b:38:ed:d7:0f:fc:4f: ce:d5:6d:4c:9d:ff:fc:b6:6e:61:97:6f:b9:e4:97: 3a:e4:48:a3:86:95:7a:1d:78:a8:e6:fa:2f:89:72: 32:b7:98:d3:78:a8:99:ee:1f:72:7c:8c:dc:09:5c: 10:b1:35:ee:7c:75:ef:69:8b:c3:a2:2c:f7:88:0e: bf:b4:63:5a:07:2d:bd:0b:53:d4:97:95:70:a0:02: 26:0c:8c:0f:61:a3:8e:ba:91:11:ad:66:c3:82:01: 80:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:B0:21:18:8D:16:F0:CA:07:65:72:1A:3F:60:8D:D1:8A:17:BC:1C X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/BLAhGI0W8MoHZXIaP2CN0YoXvBw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.32.0/22 Signature Algorithm: sha256WithRSAEncryption a6:d4:63:c7:c5:c3:9b:0b:7f:df:0c:27:cb:86:72:81:45:64: c0:0a:35:46:b9:98:c6:a7:72:08:40:98:6f:ed:05:f0:9c:2d: 5e:6a:31:e2:72:2e:d3:d7:46:9c:e6:17:5d:db:eb:ae:91:68: 11:02:68:ef:57:07:69:a4:e4:c6:8b:25:98:ac:f9:86:8d:1c: 45:37:ee:0d:d0:c0:6d:55:29:9b:a5:87:da:be:5b:e6:ab:36: fa:1a:66:b0:16:8e:d3:37:3a:3f:95:d3:05:62:93:75:9e:d3: 7b:51:fe:06:0e:f2:c8:02:81:de:5b:a7:05:89:8a:82:93:1a: 61:02:79:fe:29:b1:05:f3:7e:49:bd:d8:c9:72:01:c8:f9:55: f0:a1:20:41:52:dd:40:d9:6d:2e:a3:c9:89:c8:dc:30:81:a3: f4:07:c0:ef:a0:e7:bb:c6:38:24:e3:18:43:1a:f8:63:a3:5e: 7a:a4:9c:de:ab:b4:97:f2:b5:30:39:f4:bc:24:d1:2d:12:91: d8:ee:f6:a0:17:b0:1d:f9:e8:cd:20:f1:a8:93:df:a2:6c:0c: f9:90:bd:b7:c2:be:6b:c3:66:c1:8d:d9:b7:d0:c3:3f:1f:59: 84:59:97:0b:1c:fe:99:7a:29:18:51:a2:1a:e1:41:e6:03:79: a1:43:75:31 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHeIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA0NDBaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDA0QjAyMTE4OEQxNkYw Q0EwNzY1NzIxQTNGNjA4REQxOEExN0JDMUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC18Iix/fn+R0zJI6JJDa8s560wHmq+dag2zKwjEklOvzP51pE6 2/syywS4pGFmE4BEhYbeb2DGxVq7/pIRmRLsLTuIzz6NjADEqxZY7EvZYRodmAgF iL7Jq72eD1BWVWq+958rAutb4teNPfPjRa5Sf89o/+NHpJ8mRgFkghU4W2Hcxuwy 0MbdL4vgmiN8xqeOEngfdH36vW2gUgEiazjt1w/8T87VbUyd//y2bmGXb7nklzrk SKOGlXodeKjm+i+JcjK3mNN4qJnuH3J8jNwJXBCxNe58de9pi8OiLPeIDr+0Y1oH Lb0LU9SXlXCgAiYMjA9ho466kRGtZsOCAYD5AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUBLAhGI0W8MoHZXIaP2CN0YoXvBwwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L0JMQWhHSTBXOE1vSFpY SWFQMkNOMFlvWHZCdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIt/CAwDQYJKoZIhvcNAQELBQADggEBAKbUY8fFw5sLf98MJ8uGcoFFZMAKNUa5 mMancghAmG/tBfCcLV5qMeJyLtPXRpzmF13b666RaBECaO9XB2mk5MaLJZis+YaN HEU37g3QwG1VKZulh9q+W+arNvoaZrAWjtM3Oj+V0wVik3We03tR/gYO8sgCgd5b pwWJioKTGmECef4psQXzfkm92MlyAcj5VfChIEFS3UDZbS6jyYnI3DCBo/QHwO+g 57vGOCTjGEMa+GOjXnqknN6rtJfytTA59Lwk0S0Skdju9qAXsB356M0g8aiT36Js DPmQvbfCvmvDZsGN2bfQwz8fWYRZlwsc/pl6KRhRohrhQeYDeaFDdTE= -----END CERTIFICATE-----Generated at Sun Oct 26 11:47:59 2025 by rpki-client