$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/I7zlgGVWXRUolkIWttp6Ih4hQi8.roa File: I7zlgGVWXRUolkIWttp6Ih4hQi8.roa (raw, json) Hash identifier: iGxt0RCD9q7KEdpEowf+LNzrUyMyEDiZQBfxxgqCPCE= Subject key identifier: 23:BC:E5:80:65:56:5D:15:28:96:42:16:B6:DA:7A:22:1E:21:42:2F Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1CB6 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/I7zlgGVWXRUolkIWttp6Ih4hQi8.roa Signing time: Thu 17 Jul 2025 03:55:30 +0000 ROA not before: Thu 17 Jul 2025 03:55:30 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 394881 IP address blocks: 103.221.50.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 12:36:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7350 (0x1cb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jul 17 03:55:30 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=23BCE58065565D1528964216B6DA7A221E21422F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:77:a3:e4:bf:7e:ab:76:b6:51:8a:22:7d:12: bd:1a:31:74:22:54:00:10:83:bc:9b:78:8a:df:56: 66:6e:c0:bc:e9:be:87:6a:96:55:91:5f:95:74:fe: 19:9c:d4:29:d8:0e:c4:ee:05:fd:b5:72:56:65:f2: 26:45:f5:24:61:9a:11:cd:74:7b:31:71:1d:9f:11: 48:ad:a6:01:12:8d:86:e4:a8:d6:18:7e:52:16:64: e1:25:22:dd:63:7b:45:09:65:52:e9:99:7d:f6:12: 3f:6e:cb:6c:5a:6d:6d:88:7e:d2:78:af:d7:0e:33: 8b:3d:99:a9:67:33:9d:40:c2:cb:8e:a8:0c:15:f9: 9b:40:9a:d3:50:41:68:8f:9b:16:1e:52:74:03:63: da:7b:34:d2:df:c6:2b:a5:69:ed:86:18:a6:d0:e2: 3b:0a:2f:ea:9c:5f:ac:d5:1f:38:31:5a:31:12:25: 7a:e9:7a:08:6a:74:2f:42:af:16:ed:aa:1b:85:1c: 4b:c9:49:1d:fe:17:af:6a:5e:18:3d:09:8f:19:0f: 47:4a:eb:77:60:e4:c7:bf:f8:7f:e2:da:9b:8b:f3: b6:51:2d:cb:fb:d2:a1:a9:4a:c4:8d:d2:20:9f:8b: 8a:76:ae:b2:0b:5c:b6:63:be:cd:ff:69:d2:cc:96: 2f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:BC:E5:80:65:56:5D:15:28:96:42:16:B6:DA:7A:22:1E:21:42:2F X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/I7zlgGVWXRUolkIWttp6Ih4hQi8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.50.0/23 Signature Algorithm: sha256WithRSAEncryption 75:7a:ed:e7:b0:f5:67:1c:f8:f1:f3:5b:e9:a9:8f:1c:fb:f3: 6f:6e:03:05:42:92:2a:be:ce:81:0e:01:12:f8:d7:ac:90:4a: c2:bc:b3:fb:af:50:6d:48:9d:1c:e3:c0:77:cd:90:76:a3:d5: a1:72:71:75:69:ff:7a:81:95:71:7b:76:c8:cc:dc:4b:da:33: 72:b2:f6:a3:d2:65:73:d7:95:5b:3b:dd:0e:62:af:d5:19:40: 69:fd:c9:2d:72:f0:5c:ca:83:0f:8f:e8:e6:e6:d1:fd:28:12: 01:73:cf:0a:04:9d:16:aa:b7:01:58:c9:60:09:5a:00:ea:d6: f0:e0:76:34:a0:f0:6f:9a:6b:dc:7f:76:15:75:be:31:f1:79: 05:da:11:c9:f2:32:96:8e:64:09:ba:44:0b:e4:8b:20:25:5f: 53:74:5e:44:1d:57:82:ca:c0:07:4a:83:16:ca:08:ca:7b:04: 2f:2d:62:b1:78:75:9f:45:48:d0:3e:71:a3:da:ee:c7:87:2a: 3f:6c:42:32:40:d1:12:30:32:b6:30:ce:e4:75:1b:85:34:00: 83:ad:13:0c:23:f2:ac:0a:75:98:37:08:ba:6f:6f:19:d4:20: 87:d4:e7:96:1c:cc:b3:f2:96:b7:aa:e3:a6:31:f9:55:c7:9a: 38:73:16:7e -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHLYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA3MTcw MzU1MzBaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDIzQkNFNTgwNjU1NjVE MTUyODk2NDIxNkI2REE3QTIyMUUyMTQyMkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDmd6Pkv36rdrZRiiJ9Er0aMXQiVAAQg7ybeIrfVmZuwLzpvodq llWRX5V0/hmc1CnYDsTuBf21clZl8iZF9SRhmhHNdHsxcR2fEUitpgESjYbkqNYY flIWZOElIt1je0UJZVLpmX32Ej9uy2xabW2IftJ4r9cOM4s9malnM51AwsuOqAwV +ZtAmtNQQWiPmxYeUnQDY9p7NNLfxiulae2GGKbQ4jsKL+qcX6zVHzgxWjESJXrp eghqdC9CrxbtqhuFHEvJSR3+F69qXhg9CY8ZD0dK63dg5Me/+H/i2puL87ZRLcv7 0qGpSsSN0iCfi4p2rrILXLZjvs3/adLMli9jAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUI7zlgGVWXRUolkIWttp6Ih4hQi8wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L0k3emxnR1ZXWFJVb2xr SVd0dHA2SWg0aFFpOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFn3TIwDQYJKoZIhvcNAQELBQADggEBAHV67eew9Wcc+PHzW+mpjxz7829uAwVC kiq+zoEOARL416yQSsK8s/uvUG1InRzjwHfNkHaj1aFycXVp/3qBlXF7dsjM3Eva M3Ky9qPSZXPXlVs73Q5ir9UZQGn9yS1y8FzKgw+P6Obm0f0oEgFzzwoEnRaqtwFY yWAJWgDq1vDgdjSg8G+aa9x/dhV1vjHxeQXaEcnyMpaOZAm6RAvkiyAlX1N0XkQd V4LKwAdKgxbKCMp7BC8tYrF4dZ9FSNA+caPa7seHKj9sQjJA0RIwMrYwzuR1G4U0 AIOtEwwj8qwKdZg3CLpvbxnUIIfU55YczLPylreq46Yx+VXHmjhzFn4= -----END CERTIFICATE-----Generated at Sun Oct 26 11:47:26 2025 by rpki-client