$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/K8lKog99GbuNhG16uyqgjwiRa7M.roa File: K8lKog99GbuNhG16uyqgjwiRa7M.roa (raw, json) Hash identifier: TkNwDlJjoxA5d9RIyS/328hT4f0fthFHXXuN8fsV/SI= Subject key identifier: 2B:C9:4A:A2:0F:7D:19:BB:8D:84:6D:7A:BB:2A:A0:8F:08:91:6B:B3 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1ED7 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/K8lKog99GbuNhG16uyqgjwiRa7M.roa Signing time: Sat 13 Sep 2025 03:05:32 +0000 ROA not before: Sat 13 Sep 2025 03:05:32 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 139259 IP address blocks: 103.221.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 12:36:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7895 (0x1ed7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:05:32 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=2BC94AA20F7D19BB8D846D7ABB2AA08F08916BB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f5:cd:02:ea:1e:e9:fc:d0:7b:59:3e:65:f7: d2:07:d5:75:dc:51:da:79:0e:11:4e:0a:eb:ac:a1: 7a:b5:b9:02:8e:26:01:fd:1d:2a:56:7e:82:62:6f: 22:3f:85:15:da:35:f2:ef:dc:27:9d:da:87:a2:4e: 06:1c:44:e9:f9:eb:13:0d:60:fe:15:f4:b4:8d:9b: 9a:8c:27:bb:f3:2c:c7:f0:0e:ba:e9:be:22:9c:9b: 96:81:7a:fd:fb:bd:09:0e:b6:01:60:7d:df:da:6d: 62:23:33:da:cc:3a:f7:6f:87:ad:70:63:f4:dc:c9: 00:dc:69:08:54:c8:8e:c0:b9:9c:50:c2:80:53:64: 8d:34:b1:db:46:da:c3:df:21:e3:bb:58:f8:cc:34: a4:e0:c2:1e:0b:4d:ec:6d:f9:27:a2:85:6f:64:67: 40:65:8e:a1:d3:98:16:87:64:b5:a0:b6:ad:7e:7b: 5d:4a:d5:d5:90:90:ad:06:73:fb:ae:7b:84:71:bd: 8c:6a:e2:aa:46:cc:4a:17:cc:8f:56:2f:12:3a:23: 50:68:8c:2c:6f:a3:20:96:bc:10:bb:da:f4:6a:5f: 30:24:26:db:82:6d:cd:02:c5:e9:4d:ff:0c:35:16: 04:84:c1:8b:28:37:3c:be:af:60:da:01:92:0f:73: 02:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:C9:4A:A2:0F:7D:19:BB:8D:84:6D:7A:BB:2A:A0:8F:08:91:6B:B3 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/K8lKog99GbuNhG16uyqgjwiRa7M.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.31.0/24 Signature Algorithm: sha256WithRSAEncryption 43:7a:2a:8f:44:ef:82:3c:46:45:b0:d4:c9:fe:07:78:24:4b: 8e:f0:f5:89:05:70:07:f7:5d:f1:4a:50:59:e2:41:0f:5e:87: 6f:dd:ac:6b:1e:3b:0f:a4:88:9d:ac:16:cd:1e:a8:20:6c:1a: e3:2c:74:f2:f9:97:7e:86:d1:ee:d9:29:9c:95:9b:c2:b5:5d: 83:be:db:68:25:18:f5:29:78:ba:34:3d:10:2b:f2:92:58:67: ec:60:52:6a:a2:2c:df:25:a6:6b:3d:c3:10:92:fb:cd:0f:b8: fd:b4:1b:1a:37:8f:b0:d0:cc:43:d1:f4:4f:5b:4d:79:1b:b5: f9:0c:e9:f9:06:c3:0b:e1:0c:bd:ba:b1:04:87:0e:2b:97:a3: 77:c3:31:ad:95:c1:ef:b6:c3:f1:31:89:92:bb:be:07:f6:9a: 4e:24:ab:70:29:e3:48:2f:0f:62:9b:b1:cc:d6:0f:a1:73:9b: 2f:40:ac:84:e6:d5:b3:e4:f0:21:30:0f:d5:37:75:74:3c:c1: b8:fa:8e:39:25:36:96:05:15:36:ee:14:5b:7e:1e:c3:fd:b1: 29:3f:b9:68:6e:57:97:90:5d:c4:93:91:68:e9:96:7b:22:88: 96:f8:c7:fc:1c:22:8d:3e:91:48:4a:1a:ae:b4:9a:2b:f4:d2: 71:b1:d4:2e -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHtcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA1MzJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDJCQzk0QUEyMEY3RDE5 QkI4RDg0NkQ3QUJCMkFBMDhGMDg5MTZCQjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC99c0C6h7p/NB7WT5l99IH1XXcUdp5DhFOCuusoXq1uQKOJgH9 HSpWfoJibyI/hRXaNfLv3Ced2oeiTgYcROn56xMNYP4V9LSNm5qMJ7vzLMfwDrrp viKcm5aBev37vQkOtgFgfd/abWIjM9rMOvdvh61wY/TcyQDcaQhUyI7AuZxQwoBT ZI00sdtG2sPfIeO7WPjMNKTgwh4LText+SeihW9kZ0BljqHTmBaHZLWgtq1+e11K 1dWQkK0Gc/uue4RxvYxq4qpGzEoXzI9WLxI6I1BojCxvoyCWvBC72vRqXzAkJtuC bc0CxelN/ww1FgSEwYsoNzy+r2DaAZIPcwL/AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUK8lKog99GbuNhG16uyqgjwiRa7MwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L0s4bEtvZzk5R2J1TmhH MTZ1eXFnandpUmE3TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3R8wDQYJKoZIhvcNAQELBQADggEBAEN6Ko9E74I8RkWw1Mn+B3gkS47w9YkF cAf3XfFKUFniQQ9eh2/drGseOw+kiJ2sFs0eqCBsGuMsdPL5l36G0e7ZKZyVm8K1 XYO+22glGPUpeLo0PRAr8pJYZ+xgUmqiLN8lpms9wxCS+80PuP20Gxo3j7DQzEPR 9E9bTXkbtfkM6fkGwwvhDL26sQSHDiuXo3fDMa2Vwe+2w/ExiZK7vgf2mk4kq3Ap 40gvD2KbsczWD6Fzmy9ArITm1bPk8CEwD9U3dXQ8wbj6jjklNpYFFTbuFFt+HsP9 sSk/uWhuV5eQXcSTkWjplnsiiJb4x/wcIo0+kUhKGq60miv00nGx1C4= -----END CERTIFICATE-----Generated at Sun Oct 26 11:45:01 2025 by rpki-client