$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/GlgNwCa2B6qO6G-cFICe85E1f1g.roa File: GlgNwCa2B6qO6G-cFICe85E1f1g.roa (raw, json) Hash identifier: fwzLlg8kkS5gEsb4FB7bISFZb313QrT5A+JYRnj2LSo= Subject key identifier: 1A:58:0D:C0:26:B6:07:AA:8E:E8:6F:9C:14:80:9E:F3:91:35:7F:58 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1E56 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/GlgNwCa2B6qO6G-cFICe85E1f1g.roa Signing time: Sat 13 Sep 2025 03:05:03 +0000 ROA not before: Sat 13 Sep 2025 03:05:03 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 13444 IP address blocks: 103.221.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7766 (0x1e56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:05:03 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=1A580DC026B607AA8EE86F9C14809EF391357F58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0c:df:08:b7:1e:6f:43:b6:1b:cc:21:83:b6: db:5a:d5:28:e8:9f:b7:c9:6c:a5:9b:67:36:ba:f8: 3d:13:b4:ba:7e:e8:86:d8:18:ad:46:c8:3c:04:c4: 8c:83:ac:03:28:22:05:02:30:af:35:e4:21:e1:c7: 83:73:39:e5:76:6d:ab:28:95:d2:91:21:70:c2:02: 74:e5:86:69:90:29:07:ae:8e:d9:49:86:33:e3:7e: 18:30:8b:a2:a5:19:9b:fe:0e:77:0b:25:85:07:5c: a9:56:da:6f:4c:a8:25:67:3b:bd:ee:1f:6f:b0:d5: 16:03:76:88:2c:1a:49:3f:a3:a3:e6:66:55:7f:4f: e0:6e:27:e3:b9:39:ed:a9:5b:e6:f1:87:ed:c9:25: 2a:e9:6e:a8:40:ed:60:a2:53:ee:9b:4e:d6:4f:ee: 08:43:25:28:07:7f:9a:41:20:11:c8:0e:58:28:46: 2d:49:cb:06:a9:1a:4d:d1:f4:bc:52:7f:78:9c:85: ee:f3:4f:ef:13:38:61:76:29:73:9f:e2:58:68:51: c0:0f:15:e0:98:e7:fd:09:03:fb:df:ed:69:f9:00: 13:4c:a2:93:06:20:69:68:c8:d8:2f:80:cc:6e:4d: 6d:10:d2:65:58:c0:fa:e8:19:f5:e1:2f:0d:6b:39: 20:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:58:0D:C0:26:B6:07:AA:8E:E8:6F:9C:14:80:9E:F3:91:35:7F:58 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/GlgNwCa2B6qO6G-cFICe85E1f1g.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.23.0/24 Signature Algorithm: sha256WithRSAEncryption d5:4f:96:8c:f9:d2:b3:d8:d1:53:6c:fc:4d:3c:23:e5:d9:1e: 52:ed:b2:44:31:f4:77:25:d0:35:41:4e:2a:9f:36:26:98:91: fa:fa:22:74:fd:12:39:b6:fd:6c:90:a8:76:bb:55:78:a3:08: b2:98:34:d7:32:33:91:6d:a9:96:2a:19:ee:f8:89:00:88:15: a3:70:cf:b2:cc:78:ef:d1:ed:52:96:cb:82:c6:4d:65:2e:5c: e7:f7:84:53:44:e7:88:98:32:c6:a2:70:13:e8:04:2e:92:f9: 2f:ca:df:2d:a1:83:0a:9b:bb:8f:46:0d:54:c4:6f:9f:bf:38: 22:bd:01:aa:22:40:7c:c1:49:35:2a:b0:c6:67:58:85:10:b7: c6:e4:44:05:65:f8:c5:7b:50:ce:b1:db:5a:2e:69:78:7a:03: cf:4e:ac:1d:07:7f:2e:89:c7:b9:4d:8a:70:68:27:fc:d1:92: bc:f0:f5:84:04:a1:ca:b9:ea:6b:0d:f4:87:6c:ca:9c:a1:98: 76:fe:ad:32:d8:ca:f3:9a:19:39:93:4d:62:94:42:0a:26:00: a1:85:22:a2:15:26:fc:3f:1f:9b:bb:3b:3d:55:e9:f7:2c:ed: e6:99:44:cc:2b:06:fa:63:c8:ac:fe:cc:45:93:ee:e3:e4:6f: 21:7e:c6:74 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHlYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA1MDNaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDFBNTgwREMwMjZCNjA3 QUE4RUU4NkY5QzE0ODA5RUYzOTEzNTdGNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQChDN8Itx5vQ7YbzCGDttta1Sjon7fJbKWbZza6+D0TtLp+6IbY GK1GyDwExIyDrAMoIgUCMK815CHhx4NzOeV2basoldKRIXDCAnTlhmmQKQeujtlJ hjPjfhgwi6KlGZv+DncLJYUHXKlW2m9MqCVnO73uH2+w1RYDdogsGkk/o6PmZlV/ T+BuJ+O5Oe2pW+bxh+3JJSrpbqhA7WCiU+6bTtZP7ghDJSgHf5pBIBHIDlgoRi1J ywapGk3R9LxSf3iche7zT+8TOGF2KXOf4lhoUcAPFeCY5/0JA/vf7Wn5ABNMopMG IGloyNgvgMxuTW0Q0mVYwProGfXhLw1rOSCjAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUGlgNwCa2B6qO6G+cFICe85E1f1gwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L0dsZ053Q2EyQjZxTzZH LWNGSUNlODVFMWYxZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3RcwDQYJKoZIhvcNAQELBQADggEBANVPloz50rPY0VNs/E08I+XZHlLtskQx 9Hcl0DVBTiqfNiaYkfr6InT9Ejm2/WyQqHa7VXijCLKYNNcyM5FtqZYqGe74iQCI FaNwz7LMeO/R7VKWy4LGTWUuXOf3hFNE54iYMsaicBPoBC6S+S/K3y2hgwqbu49G DVTEb5+/OCK9AaoiQHzBSTUqsMZnWIUQt8bkRAVl+MV7UM6x21ouaXh6A89OrB0H fy6Jx7lNinBoJ/zRkrzw9YQEocq56msN9IdsypyhmHb+rTLYyvOaGTmTTWKUQgom AKGFIqIVJvw/H5u7Oz1V6fcs7eaZRMwrBvpjyKz+zEWT7uPkbyF+xnQ= -----END CERTIFICATE-----Generated at Sun Oct 26 07:07:49 2025 by rpki-client