$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/DXDXr89B6_ZwHZRATYXZFU1nTvk.roa File: DXDXr89B6_ZwHZRATYXZFU1nTvk.roa (raw, json) Hash identifier: oOumb6MQ+MUby80DIPiD6+7UUHTXGUL+B8iihzF/v48= Subject key identifier: 0D:70:D7:AF:CF:41:EB:F6:70:1D:94:40:4D:85:D9:15:4D:67:4E:F9 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1F27 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/DXDXr89B6_ZwHZRATYXZFU1nTvk.roa Signing time: Tue 16 Sep 2025 05:50:56 +0000 ROA not before: Tue 16 Sep 2025 05:50:56 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 25743 IP address blocks: 103.221.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 12:36:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7975 (0x1f27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 16 05:50:56 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=0D70D7AFCF41EBF6701D94404D85D9154D674EF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3c:ef:1b:af:1d:72:13:c6:6e:3b:9d:75:a1: 15:15:8a:b1:3c:00:05:10:04:97:ff:e7:0b:4e:58: fc:dd:3c:24:e6:fc:56:0c:ed:80:ae:e1:c0:1b:58: dc:03:bd:09:cc:cd:fd:3e:60:0b:71:97:f2:47:c2: 75:a8:b0:de:96:bb:12:33:72:b0:12:57:0e:ae:85: b8:93:13:c5:cf:ef:2f:aa:68:4c:bb:2e:b4:d7:d8: 3a:b6:47:66:d5:49:35:6c:6b:ed:e0:be:31:19:fb: 68:26:34:6d:5b:27:46:84:e4:33:f3:01:12:74:fb: 91:82:21:e7:9e:03:7c:5e:ef:7f:9b:8f:22:50:7d: 86:35:2a:a9:6e:ba:47:26:e4:a1:c3:3f:b3:63:5a: 5c:6f:dc:3a:37:fc:96:b0:3e:50:80:2f:b0:2e:08: 65:9a:74:71:14:07:42:bb:de:cc:8e:c9:f7:9e:9b: 01:47:9f:05:44:6d:72:b0:8e:24:83:f6:9d:58:6e: ef:8f:dd:ac:67:13:bf:81:2e:96:9e:a9:37:a9:1f: c0:37:aa:9c:ff:9f:5e:fd:3d:cb:c9:7f:61:ea:e2: e3:96:fb:2a:5c:58:e6:f7:a1:ab:32:dc:c9:58:64: 8b:ab:7a:b9:14:0a:6d:ba:da:0c:89:22:e9:99:f7: 7b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:70:D7:AF:CF:41:EB:F6:70:1D:94:40:4D:85:D9:15:4D:67:4E:F9 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/DXDXr89B6_ZwHZRATYXZFU1nTvk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.4.0/22 Signature Algorithm: sha256WithRSAEncryption b7:b8:6a:53:ac:42:d8:d9:1c:35:ce:15:71:49:b7:36:79:40: 62:4e:63:a6:93:c3:37:28:27:7d:68:a0:78:d0:bb:e1:79:e3: e0:7c:d7:c3:29:d9:ff:d9:f9:9a:6a:89:71:04:04:13:02:10: 3b:ac:6a:2b:6c:2c:34:34:8f:2c:96:3c:99:bf:65:40:9f:50: e3:3e:b4:0e:e6:40:c2:89:10:1d:3a:c7:fa:15:31:a9:a4:e6: 79:6d:71:cc:00:8e:23:18:85:40:21:9d:47:87:09:a3:c6:72: ed:71:ff:c0:32:65:79:35:60:43:00:92:9d:a6:aa:32:ca:07: 23:eb:30:f2:9e:97:b1:d5:79:5b:80:be:16:da:ab:0e:d4:45: 8d:ec:55:e2:26:1b:54:e5:99:42:72:6f:a3:81:59:b3:5c:7e: 4a:52:4e:ee:e3:e5:13:4a:fe:c9:82:31:14:9e:f5:e6:f9:8f: ff:40:d5:af:63:29:6b:42:14:93:28:46:d0:92:dc:80:cb:48: 87:57:0f:93:08:44:a3:7b:62:e8:b0:fe:d3:ad:c6:bb:53:67: bc:a0:46:be:86:96:ca:e7:44:8a:63:ef:5f:68:f0:81:a5:b4: 4e:25:7c:1b:fc:76:b7:fb:a1:15:67:3f:b5:6d:44:b0:d4:71: d1:14:7f:ad -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHycwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTYw NTUwNTZaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDBENzBEN0FGQ0Y0MUVC RjY3MDFEOTQ0MDREODVEOTE1NEQ2NzRFRjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKPO8brx1yE8ZuO511oRUVirE8AAUQBJf/5wtOWPzdPCTm/FYM 7YCu4cAbWNwDvQnMzf0+YAtxl/JHwnWosN6WuxIzcrASVw6uhbiTE8XP7y+qaEy7 LrTX2Dq2R2bVSTVsa+3gvjEZ+2gmNG1bJ0aE5DPzARJ0+5GCIeeeA3xe73+bjyJQ fYY1Kqluukcm5KHDP7NjWlxv3Do3/JawPlCAL7AuCGWadHEUB0K73syOyfeemwFH nwVEbXKwjiSD9p1Ybu+P3axnE7+BLpaeqTepH8A3qpz/n179PcvJf2Hq4uOW+ypc WOb3oasy3MlYZIurerkUCm262gyJIumZ93ttAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUDXDXr89B6/ZwHZRATYXZFU1nTvkwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L0RYRFhyODlCNl9ad0ha UkFUWVhaRlUxblR2ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn3QQwDQYJKoZIhvcNAQELBQADggEBALe4alOsQtjZHDXOFXFJtzZ5QGJOY6aT wzcoJ31ooHjQu+F54+B818Mp2f/Z+ZpqiXEEBBMCEDusaitsLDQ0jyyWPJm/ZUCf UOM+tA7mQMKJEB06x/oVMamk5nltccwAjiMYhUAhnUeHCaPGcu1x/8AyZXk1YEMA kp2mqjLKByPrMPKel7HVeVuAvhbaqw7URY3sVeImG1TlmUJyb6OBWbNcfkpSTu7j 5RNK/smCMRSe9eb5j/9A1a9jKWtCFJMoRtCS3IDLSIdXD5MIRKN7Yuiw/tOtxrtT Z7ygRr6GlsrnRIpj719o8IGltE4lfBv8drf7oRVnP7VtRLDUcdEUf60= -----END CERTIFICATE-----Generated at Sun Oct 26 11:51:00 2025 by rpki-client