$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/Eo9OJP6fJgYUQf-b7Le9xsQ6uEE.roa File: Eo9OJP6fJgYUQf-b7Le9xsQ6uEE.roa (raw, json) Hash identifier: QlbDtNM2uoWNJGsP116Syn3sfk3sLzUfmm1IjmPEyzc= Subject key identifier: 12:8F:4E:24:FE:9F:26:06:14:41:FF:9B:EC:B7:BD:C6:C4:3A:B8:41 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1E5B Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/Eo9OJP6fJgYUQf-b7Le9xsQ6uEE.roa Signing time: Sat 13 Sep 2025 03:05:04 +0000 ROA not before: Sat 13 Sep 2025 03:05:04 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 24373 IP address blocks: 103.221.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 12:36:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7771 (0x1e5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:05:04 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=128F4E24FE9F26061441FF9BECB7BDC6C43AB841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:96:56:d9:30:c3:a1:29:c4:81:22:60:ff:67: d2:b4:39:b8:35:ba:74:09:7c:fa:74:31:55:d5:0d: 66:63:f9:2e:1e:63:5e:86:a1:42:44:88:01:85:76: 41:d1:92:e3:05:c7:f0:46:8b:f8:e9:80:9f:14:5f: cb:d7:a3:89:17:2b:8e:99:1d:1b:0e:71:86:1f:0b: 78:72:d4:43:7f:24:e0:30:7c:69:5b:83:68:89:72: 16:75:5b:95:43:e0:99:21:c2:4b:2f:4a:5d:d3:72: cb:c5:c7:5b:17:92:a8:37:b8:24:9f:7a:47:1f:0c: 87:a4:b7:61:2c:d0:6b:3a:55:85:fc:28:51:ce:64: 88:e6:34:6f:63:2b:e1:fa:4e:1b:40:17:13:80:de: 04:b8:d3:e4:ac:f2:50:78:bb:dc:7b:36:b1:29:24: d0:ac:40:63:73:9e:7f:54:89:cf:09:de:46:0b:17: 5d:09:7d:0c:43:01:93:fe:d8:21:54:5d:27:f6:73: 23:3d:7d:5d:a2:20:79:eb:1c:a0:00:cd:50:e2:b9: 2c:6f:82:02:68:f7:3f:92:20:63:76:d9:99:b5:cc: 09:59:8d:38:e9:9a:43:98:bb:a4:13:1c:11:1e:1b: fa:e6:76:88:7d:14:80:87:d8:7c:11:5c:10:4c:e1: ed:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:8F:4E:24:FE:9F:26:06:14:41:FF:9B:EC:B7:BD:C6:C4:3A:B8:41 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/Eo9OJP6fJgYUQf-b7Le9xsQ6uEE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.44.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:04:cc:fc:32:28:01:21:3c:a9:8d:7c:19:f7:96:df:49:f8: 64:7c:49:42:86:53:e4:d5:68:f6:a6:1b:55:7e:c8:bf:8d:c4: 80:51:d8:05:17:c7:02:c5:79:a7:2a:1a:f9:67:7b:0d:09:bd: 99:12:61:17:98:c1:14:0d:e4:c2:74:96:21:a3:87:76:b3:65: af:43:ec:02:1e:c7:89:01:77:ac:bb:8e:7d:bd:c8:06:20:5d: 09:49:16:bd:f0:dd:fb:7f:dc:f4:e4:fe:bd:30:19:60:6b:4c: 66:0c:46:0d:60:5b:62:fa:81:85:16:6f:05:95:5d:17:aa:89: 5a:5c:f7:23:44:5c:44:e9:23:82:ad:8d:13:73:f5:24:fa:03: e6:09:13:f6:94:62:94:3b:7c:83:de:12:2d:d8:70:0e:1c:76: 43:c9:64:d0:83:14:4f:a7:1e:13:2c:d7:ac:1e:e1:16:85:31: 53:f0:32:c2:eb:02:6a:7f:1f:6d:a5:a1:fb:5f:94:39:0c:dc: 85:1a:01:8a:ac:3f:ee:ab:54:99:31:99:f5:a3:d6:7f:df:14: d5:a4:93:b9:79:75:84:21:07:3a:32:1c:9c:cf:57:c9:48:64: 37:4a:b3:f1:1e:36:b3:4c:e8:e8:8c:1c:f7:84:bf:a4:19:2a: 82:58:06:fb -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHlswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA1MDRaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDEyOEY0RTI0RkU5RjI2 MDYxNDQxRkY5QkVDQjdCREM2QzQzQUI4NDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2llbZMMOhKcSBImD/Z9K0Obg1unQJfPp0MVXVDWZj+S4eY16G oUJEiAGFdkHRkuMFx/BGi/jpgJ8UX8vXo4kXK46ZHRsOcYYfC3hy1EN/JOAwfGlb g2iJchZ1W5VD4JkhwksvSl3TcsvFx1sXkqg3uCSfekcfDIekt2Es0Gs6VYX8KFHO ZIjmNG9jK+H6ThtAFxOA3gS40+Ss8lB4u9x7NrEpJNCsQGNznn9Uic8J3kYLF10J fQxDAZP+2CFUXSf2cyM9fV2iIHnrHKAAzVDiuSxvggJo9z+SIGN22Zm1zAlZjTjp mkOYu6QTHBEeG/rmdoh9FICH2HwRXBBM4e2xAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUEo9OJP6fJgYUQf+b7Le9xsQ6uEEwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L0VvOU9KUDZmSmdZVVFm LWI3TGU5eHNRNnVFRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn3SwwDQYJKoZIhvcNAQELBQADggEBAJoEzPwyKAEhPKmNfBn3lt9J+GR8SUKG U+TVaPamG1V+yL+NxIBR2AUXxwLFeacqGvlnew0JvZkSYReYwRQN5MJ0liGjh3az Za9D7AIex4kBd6y7jn29yAYgXQlJFr3w3ft/3PTk/r0wGWBrTGYMRg1gW2L6gYUW bwWVXReqiVpc9yNEXETpI4KtjRNz9ST6A+YJE/aUYpQ7fIPeEi3YcA4cdkPJZNCD FE+nHhMs16we4RaFMVPwMsLrAmp/H22loftflDkM3IUaAYqsP+6rVJkxmfWj1n/f FNWkk7l5dYQhBzoyHJzPV8lIZDdKs/EeNrNM6OiMHPeEv6QZKoJYBvs= -----END CERTIFICATE-----Generated at Sun Oct 26 11:45:04 2025 by rpki-client