$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/JrW7vFw7DQovrrqT-ZvR0QDUTsw.roa File: JrW7vFw7DQovrrqT-ZvR0QDUTsw.roa (raw, json) Hash identifier: m9YD+sHLcE9gup6Y8TjyMhFvRhbiqbdMfwvXPf2xEIk= Subject key identifier: 26:B5:BB:BC:5C:3B:0D:0A:2F:AE:BA:93:F9:9B:D1:D1:00:D4:4E:CC Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1C96 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/JrW7vFw7DQovrrqT-ZvR0QDUTsw.roa Signing time: Thu 17 Jul 2025 03:48:03 +0000 ROA not before: Thu 17 Jul 2025 03:48:03 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 394881 IP address blocks: 45.252.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 12:36:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7318 (0x1c96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jul 17 03:48:03 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=26B5BBBC5C3B0D0A2FAEBA93F99BD1D100D44ECC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d2:6e:1d:5c:66:2b:f6:14:3e:0c:26:12:f8: 21:9e:25:bd:cd:3f:45:6b:22:78:4f:8b:1f:4b:5e: f5:94:bf:db:5c:7a:c4:ee:db:5b:fa:b4:64:6e:74: 58:3e:e0:f6:47:3a:a3:87:ec:39:71:38:36:f1:18: f3:42:94:9f:16:f4:b7:90:21:e5:bd:6a:06:a0:67: ce:61:f2:0c:3a:40:66:78:c7:26:10:24:72:0e:c6: d7:a8:aa:45:57:24:d9:e1:2c:f4:48:cb:a7:0b:1c: 35:f0:43:ce:5b:13:6b:fa:5c:26:a8:34:99:8a:a5: 6e:29:ce:98:b2:af:0f:a7:92:63:d3:4c:8c:2e:02: 32:2f:b9:54:05:10:6f:e5:6c:90:98:b8:ae:f3:5f: df:2a:7d:8c:df:ca:3c:2f:a6:24:23:52:69:10:51: 40:eb:48:e6:ac:eb:e6:aa:52:8f:45:7b:d5:f3:c6: 94:99:52:79:5c:ea:f9:2b:e3:c1:8f:9e:16:6a:0a: ed:89:11:97:a7:25:65:a4:0f:25:6c:19:b7:a4:a1: 8f:e9:7c:6e:38:f6:93:b5:d6:d3:50:17:4f:e6:3a: 36:71:3c:34:82:80:a8:a1:11:e1:15:7d:cd:c6:a7: 1f:5f:c7:92:05:31:ce:32:c9:1e:99:d6:31:0b:3c: c1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:B5:BB:BC:5C:3B:0D:0A:2F:AE:BA:93:F9:9B:D1:D1:00:D4:4E:CC X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/JrW7vFw7DQovrrqT-ZvR0QDUTsw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.102.0/24 Signature Algorithm: sha256WithRSAEncryption 95:f6:0f:53:e6:61:05:06:d3:97:74:67:05:97:50:8e:83:2e: 69:19:99:5d:e6:46:da:14:09:5c:38:c5:45:bd:59:43:81:f0: 35:b5:90:7c:bf:23:fc:65:af:e6:1c:fa:eb:39:3b:0b:ab:4e: 0d:52:34:5e:37:fe:a3:0a:8d:6c:d5:81:23:3d:be:e8:26:f1: aa:bc:2d:bd:46:f9:4f:36:27:6c:57:a8:78:62:9b:0a:11:a0: 7a:18:18:54:99:d1:8a:a7:71:03:3b:b0:42:fa:bf:46:18:86: a9:fa:4b:2c:1e:1a:5c:c8:ed:f5:5e:fd:86:fb:64:80:b1:2d: 30:2f:9e:b1:06:e4:78:e6:99:cd:63:6b:30:20:de:08:cc:30: 20:14:f2:ad:2e:fc:1f:fa:ea:d2:50:6b:27:38:92:f4:ec:2c: 0e:4f:4b:4b:b9:a3:ce:24:fd:c1:b5:c8:b1:f3:c0:bd:39:09: f2:49:89:45:4f:40:34:1d:50:94:a7:0f:68:2e:ba:10:63:ee: 2c:1c:cb:02:d6:8e:d0:09:44:60:da:f4:cb:3c:99:3f:60:a4: a4:e3:cf:06:22:5a:25:7c:f0:78:bd:c0:4d:e6:06:95:55:72: 0e:0a:c2:6f:30:c1:58:13:58:cb:ad:45:06:24:00:8c:c1:5a: dd:0a:41:6c -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHJYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA3MTcw MzQ4MDNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDI2QjVCQkJDNUMzQjBE MEEyRkFFQkE5M0Y5OUJEMUQxMDBENDRFQ0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCt0m4dXGYr9hQ+DCYS+CGeJb3NP0VrInhPix9LXvWUv9tcesTu 21v6tGRudFg+4PZHOqOH7DlxODbxGPNClJ8W9LeQIeW9agagZ85h8gw6QGZ4xyYQ JHIOxteoqkVXJNnhLPRIy6cLHDXwQ85bE2v6XCaoNJmKpW4pzpiyrw+nkmPTTIwu AjIvuVQFEG/lbJCYuK7zX98qfYzfyjwvpiQjUmkQUUDrSOas6+aqUo9Fe9XzxpSZ Unlc6vkr48GPnhZqCu2JEZenJWWkDyVsGbekoY/pfG449pO11tNQF0/mOjZxPDSC gKihEeEVfc3Gpx9fx5IFMc4yyR6Z1jELPMFpAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUJrW7vFw7DQovrrqT+ZvR0QDUTswwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L0pyVzd2Rnc3RFFvdnJy cVQtWnZSMFFEVVRzdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAt/GYwDQYJKoZIhvcNAQELBQADggEBAJX2D1PmYQUG05d0ZwWXUI6DLmkZmV3m RtoUCVw4xUW9WUOB8DW1kHy/I/xlr+Yc+us5OwurTg1SNF43/qMKjWzVgSM9vugm 8aq8Lb1G+U82J2xXqHhimwoRoHoYGFSZ0YqncQM7sEL6v0YYhqn6SyweGlzI7fVe /Yb7ZICxLTAvnrEG5Hjmmc1jazAg3gjMMCAU8q0u/B/66tJQayc4kvTsLA5PS0u5 o84k/cG1yLHzwL05CfJJiUVPQDQdUJSnD2guuhBj7iwcywLWjtAJRGDa9Ms8mT9g pKTjzwYiWiV88Hi9wE3mBpVVcg4Kwm8wwVgTWMutRQYkAIzBWt0KQWw= -----END CERTIFICATE-----Generated at Sun Oct 26 11:47:26 2025 by rpki-client