$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/Bqu0_wppRKOBkkh5AxehmuSr9dw.roa File: Bqu0_wppRKOBkkh5AxehmuSr9dw.roa (raw, json) Hash identifier: wsiwiRnSM1zJZMHpA1dOwabR+pS+vJXK/vSkbZ/OcnU= Subject key identifier: 06:AB:B4:FF:0A:69:44:A3:81:92:48:79:03:17:A1:9A:E4:AB:F5:DC Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1EF6 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/Bqu0_wppRKOBkkh5AxehmuSr9dw.roa Signing time: Sat 13 Sep 2025 03:05:39 +0000 ROA not before: Sat 13 Sep 2025 03:05:39 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 139259 IP address blocks: 103.6.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 12:36:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7926 (0x1ef6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:05:39 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=06ABB4FF0A6944A3819248790317A19AE4ABF5DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:af:19:cc:23:2b:85:b2:88:ae:cd:3b:6b:2f: 2f:a5:a0:11:58:13:b1:b3:c9:75:3c:c1:d1:23:d7: 4a:e8:c4:49:5e:e8:88:cb:dd:e1:dd:87:71:24:6e: 22:2b:85:86:e2:88:21:bb:19:7a:5f:09:16:e9:db: b5:d2:9d:c6:23:18:be:ca:2b:4e:01:62:7f:82:0f: a1:d7:84:8a:5f:d5:c0:f6:1a:7d:73:14:87:3b:21: 16:84:57:7d:0d:98:be:c2:d2:8b:2c:79:0e:f9:ff: 66:0f:9f:09:bc:f7:93:e7:b1:bb:ac:b6:61:f3:23: 19:5a:5d:c9:38:58:db:f9:8b:63:b6:be:0a:c6:1f: 71:81:2d:49:c5:9c:36:48:4d:1a:2c:7e:d9:8e:1a: 5a:8c:91:8f:f7:e7:69:80:be:b9:ea:25:47:45:de: bf:6c:8f:da:8d:dd:96:7c:82:0c:a4:3d:ce:39:fe: 83:61:d9:2b:21:bf:51:77:f4:05:2d:b2:db:41:2f: 01:c6:37:a3:c0:ce:50:e8:36:6f:b8:3f:b9:21:fd: 5c:b0:84:9f:21:d0:d2:f3:00:43:5b:ca:43:c3:6e: 36:94:66:30:62:2b:ec:ee:13:c1:a5:fa:16:d2:22: d2:58:67:48:54:f6:a2:27:b2:8c:60:eb:b4:80:7d: b7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:AB:B4:FF:0A:69:44:A3:81:92:48:79:03:17:A1:9A:E4:AB:F5:DC X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/Bqu0_wppRKOBkkh5AxehmuSr9dw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.6.111.0/24 Signature Algorithm: sha256WithRSAEncryption 30:b0:8b:45:bf:6d:d0:d7:48:c8:6c:18:d1:0a:df:19:ed:ef: 29:43:fd:67:3d:66:05:80:7a:b3:f3:61:0e:d6:6e:68:74:1f: 85:2d:6f:84:42:d6:58:2f:20:fc:9c:70:91:1e:3b:d1:f6:5b: cf:8f:f0:2a:d1:ce:f6:ed:f1:7b:46:71:0e:c1:49:9c:76:bc: 40:55:93:ae:03:a0:c9:b4:90:2f:75:16:6d:c4:7b:eb:85:3a: 1f:34:7c:9c:7e:fd:1e:87:38:7e:2f:3c:51:77:f3:70:ce:03: 94:85:68:b8:bc:ac:e7:6c:0c:32:8d:a9:67:82:83:b4:8b:9c: 88:07:ef:99:11:59:11:81:75:f1:5e:6c:21:c1:26:0a:63:a6: cf:e1:70:87:1d:7f:79:06:f5:6a:3c:5a:7a:e3:26:9a:6d:29: 14:7f:8c:1b:d4:a9:ab:b4:ad:02:0b:70:79:a4:87:6d:42:22: 0f:a3:05:31:79:94:d1:48:1b:00:80:49:51:ad:6c:ca:81:ef: 4d:a5:b4:a2:9b:42:f6:17:6e:a0:74:12:80:42:73:19:b5:5d: ee:c3:e9:dc:4a:c5:eb:31:3b:f7:3e:ae:3c:ce:f3:d1:33:f6: d9:5a:1f:32:94:97:b9:43:02:14:05:cc:83:bf:6f:f2:b2:e6: 69:2e:1b:6f -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHvYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA1MzlaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDA2QUJCNEZGMEE2OTQ0 QTM4MTkyNDg3OTAzMTdBMTlBRTRBQkY1REMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8rxnMIyuFsoiuzTtrLy+loBFYE7GzyXU8wdEj10roxEle6IjL 3eHdh3EkbiIrhYbiiCG7GXpfCRbp27XSncYjGL7KK04BYn+CD6HXhIpf1cD2Gn1z FIc7IRaEV30NmL7C0osseQ75/2YPnwm895PnsbustmHzIxlaXck4WNv5i2O2vgrG H3GBLUnFnDZITRosftmOGlqMkY/352mAvrnqJUdF3r9sj9qN3ZZ8ggykPc45/oNh 2Sshv1F39AUtsttBLwHGN6PAzlDoNm+4P7kh/VywhJ8h0NLzAENbykPDbjaUZjBi K+zuE8Gl+hbSItJYZ0hU9qInsoxg67SAfbflAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUBqu0/wppRKOBkkh5AxehmuSr9dwwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L0JxdTBfd3BwUktPQmtr aDVBeGVobXVTcjlkdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnBm8wDQYJKoZIhvcNAQELBQADggEBADCwi0W/bdDXSMhsGNEK3xnt7ylD/Wc9 ZgWAerPzYQ7Wbmh0H4Utb4RC1lgvIPyccJEeO9H2W8+P8CrRzvbt8XtGcQ7BSZx2 vEBVk64DoMm0kC91Fm3Ee+uFOh80fJx+/R6HOH4vPFF383DOA5SFaLi8rOdsDDKN qWeCg7SLnIgH75kRWRGBdfFebCHBJgpjps/hcIcdf3kG9Wo8WnrjJpptKRR/jBvU qau0rQILcHmkh21CIg+jBTF5lNFIGwCASVGtbMqB702ltKKbQvYXbqB0EoBCcxm1 Xe7D6dxKxesxO/c+rjzO89Ez9tlaHzKUl7lDAhQFzIO/b/Ky5mkuG28= -----END CERTIFICATE-----Generated at Sun Oct 26 11:50:24 2025 by rpki-client