$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/Cepd0x0UHMj16IGi1HneIKym4tQ.roa File: Cepd0x0UHMj16IGi1HneIKym4tQ.roa (raw, json) Hash identifier: D4dadQDc6lxfGBaePUBREtzYzzRkdmSlYfUjAZyFXk0= Subject key identifier: 09:EA:5D:D3:1D:14:1C:C8:F5:E8:81:A2:D4:79:DE:20:AC:A6:E2:D4 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1EBF Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/Cepd0x0UHMj16IGi1HneIKym4tQ.roa Signing time: Sat 13 Sep 2025 03:05:26 +0000 ROA not before: Sat 13 Sep 2025 03:05:26 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 24373 IP address blocks: 45.252.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 12:36:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7871 (0x1ebf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:05:26 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=09EA5DD31D141CC8F5E881A2D479DE20ACA6E2D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:be:d6:1b:a7:1b:d9:80:95:04:15:50:c5:28: 90:af:0c:22:f9:2d:7b:7b:b8:ca:79:50:5e:26:f8: 68:6a:63:25:79:75:9b:6c:6b:f2:7b:aa:68:78:e4: 13:48:46:90:e9:a2:e4:cc:9b:7d:62:d8:df:b2:49: 5b:6b:cc:a2:f6:44:ea:4a:29:ff:3b:96:11:11:59: ff:11:7a:b0:b7:13:42:67:b4:c6:a1:62:62:70:30: df:59:c2:d4:e4:a3:01:1d:04:3e:e0:5b:e3:ad:65: 53:53:29:9e:9d:6f:fb:2e:fe:c2:8a:a1:ae:32:40: 48:bd:6d:9d:03:8e:93:c6:60:67:17:aa:86:36:a5: aa:b7:c8:57:84:df:82:c9:8f:bb:91:ff:b1:86:18: b3:1d:e7:b2:d0:4f:41:aa:20:18:58:7c:51:85:04: 68:2c:95:77:f7:31:d5:a7:7c:b0:f1:f1:a0:33:3e: 38:66:2e:4e:75:37:8c:44:95:b9:25:51:65:e6:3c: 1e:08:99:78:60:11:a8:2b:7e:a7:b3:50:77:80:64: 2d:c6:c9:9f:e9:e6:8f:ea:f4:50:e0:6b:7c:43:ce: 17:ff:d9:03:d2:fb:d8:e5:a4:7b:88:fc:80:8e:7e: 7d:06:62:c6:89:86:87:e0:a5:15:55:8a:07:96:ed: 04:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:EA:5D:D3:1D:14:1C:C8:F5:E8:81:A2:D4:79:DE:20:AC:A6:E2:D4 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/Cepd0x0UHMj16IGi1HneIKym4tQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.44.0/22 Signature Algorithm: sha256WithRSAEncryption 64:ca:3c:f9:66:be:c9:71:ec:fd:e6:b0:e7:7f:56:82:37:fd: 78:2f:ac:c1:c9:c5:0b:4f:cb:e5:00:de:99:e3:50:94:86:01: 83:fb:9d:38:b8:b7:4d:bc:29:0f:f9:1c:ae:4f:3a:e8:e5:1e: 1c:0c:1c:0f:92:69:c8:40:0b:ae:73:32:64:77:db:49:cc:27: 70:aa:19:10:8c:f4:bd:cc:99:ac:1d:3d:d5:8c:36:ce:d7:5b: 56:fc:f0:33:70:82:5b:52:c3:c4:7c:c1:73:f4:34:e2:b9:7d: 92:ca:85:11:83:bc:03:e7:1a:09:a6:f5:e4:3b:0f:86:e3:5c: 92:3a:ec:ba:d7:db:56:1e:32:3d:ea:55:b4:ed:63:a0:bf:48: 2b:7e:fc:eb:38:9e:f8:a2:29:24:d3:fd:41:6c:ce:0b:b8:db: 2a:d1:b0:20:15:4c:5d:fc:05:49:ff:7d:76:e7:63:65:df:f4: cf:d2:a7:21:8e:0f:2e:bd:21:c3:f7:1a:24:88:fb:77:db:24: 8d:d4:2f:da:a0:ce:3d:b0:4b:12:e1:9e:c2:51:e8:9b:32:7e: d2:d5:b8:aa:3a:a5:29:00:29:0d:be:49:cd:8a:33:f8:3b:78: 20:cc:8b:52:d0:f0:26:ed:7b:54:e1:db:0a:20:d3:84:79:38: 13:12:15:41 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHr8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA1MjZaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDA5RUE1REQzMUQxNDFD QzhGNUU4ODFBMkQ0NzlERTIwQUNBNkUyRDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8vtYbpxvZgJUEFVDFKJCvDCL5LXt7uMp5UF4m+GhqYyV5dZts a/J7qmh45BNIRpDpouTMm31i2N+ySVtrzKL2ROpKKf87lhERWf8RerC3E0JntMah YmJwMN9ZwtTkowEdBD7gW+OtZVNTKZ6db/su/sKKoa4yQEi9bZ0DjpPGYGcXqoY2 paq3yFeE34LJj7uR/7GGGLMd57LQT0GqIBhYfFGFBGgslXf3MdWnfLDx8aAzPjhm Lk51N4xElbklUWXmPB4ImXhgEagrfqezUHeAZC3GyZ/p5o/q9FDga3xDzhf/2QPS +9jlpHuI/ICOfn0GYsaJhofgpRVVigeW7QRJAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUCepd0x0UHMj16IGi1HneIKym4tQwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L0NlcGQweDBVSE1qMTZJ R2kxSG5lSUt5bTR0US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIt/CwwDQYJKoZIhvcNAQELBQADggEBAGTKPPlmvslx7P3msOd/VoI3/XgvrMHJ xQtPy+UA3pnjUJSGAYP7nTi4t028KQ/5HK5POujlHhwMHA+SachAC65zMmR320nM J3CqGRCM9L3MmawdPdWMNs7XW1b88DNwgltSw8R8wXP0NOK5fZLKhRGDvAPnGgmm 9eQ7D4bjXJI67LrX21YeMj3qVbTtY6C/SCt+/Os4nviiKSTT/UFszgu42yrRsCAV TF38BUn/fXbnY2Xf9M/SpyGODy69IcP3GiSI+3fbJI3UL9qgzj2wSxLhnsJR6Jsy ftLVuKo6pSkAKQ2+Sc2KM/g7eCDMi1LQ8Cbte1Th2wog04R5OBMSFUE= -----END CERTIFICATE-----Generated at Sun Oct 26 11:44:17 2025 by rpki-client