$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/MusHWCK7zRujZdt3LPGgFc8_ak4.roa File: MusHWCK7zRujZdt3LPGgFc8_ak4.roa (raw, json) Hash identifier: 3/2lpaIsZNN5nYLaY0f71iX8L6K0G787JRzf+fQsAmw= Subject key identifier: 32:EB:07:58:22:BB:CD:1B:A3:65:DB:77:2C:F1:A0:15:CF:3F:6A:4E Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1EE2 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/MusHWCK7zRujZdt3LPGgFc8_ak4.roa Signing time: Sat 13 Sep 2025 03:05:35 +0000 ROA not before: Sat 13 Sep 2025 03:05:35 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 138527 IP address blocks: 103.221.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 12:36:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7906 (0x1ee2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:05:35 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=32EB075822BBCD1BA365DB772CF1A015CF3F6A4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:03:49:be:09:74:e1:59:22:3c:60:50:b9:0d: 19:ca:b7:12:78:b7:08:af:ca:8a:ee:2c:af:53:9a: e0:9c:0e:55:83:08:1c:6a:66:e5:9e:0a:52:09:9a: c7:c0:e9:23:a5:46:b9:16:6a:68:f6:a0:bf:65:b5: da:10:94:bc:22:d4:81:70:76:f9:d1:2a:a0:69:3d: 48:c9:91:d3:62:cc:30:84:4d:08:ca:6e:fb:c0:69: ad:eb:e4:23:42:09:21:a4:58:81:f6:31:7c:6d:2b: 34:a0:dd:d1:39:02:e1:08:56:99:f6:7b:86:5a:33: 34:90:6c:18:0e:ea:56:e1:ce:15:3a:df:4e:1b:b7: a0:26:d6:35:b9:cb:aa:a5:fd:4c:f5:c2:01:83:7c: 76:60:d1:b1:91:fe:fa:c9:e3:34:03:b7:5a:ad:76: 52:4d:44:e8:63:6f:ed:56:50:e8:b6:d6:ee:38:bd: 1c:f6:52:23:7c:ad:c5:1f:9d:a4:36:26:59:a9:fc: 91:dd:2e:5d:cf:49:4c:6d:71:56:99:ce:bb:74:83: ae:2b:c2:af:c5:67:90:9c:87:4e:8c:38:2c:38:f8: 9a:ab:1f:3b:ac:10:31:45:f3:6f:ca:79:30:0e:07: 7a:7e:0e:d4:ab:09:6a:fd:d2:60:a7:e1:ae:a0:9b: de:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:EB:07:58:22:BB:CD:1B:A3:65:DB:77:2C:F1:A0:15:CF:3F:6A:4E X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/MusHWCK7zRujZdt3LPGgFc8_ak4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.0.0/22 Signature Algorithm: sha256WithRSAEncryption 19:c2:13:91:9e:ac:94:d5:60:7e:a5:96:0d:64:b9:a3:d6:38: 3e:b7:f4:cb:4d:99:e0:5c:ae:b8:e1:44:0f:ba:f4:c8:32:ef: 55:95:7c:e8:22:fe:66:dc:3d:f5:4b:09:bd:5f:1e:54:91:d9: 68:77:9e:69:85:e0:06:3e:c9:c3:2a:70:74:06:3b:89:f8:71: e7:50:e6:da:a1:bf:c6:2f:05:4f:64:2c:44:f7:e3:0a:74:1a: 8a:d9:1e:a1:27:f1:e3:89:23:92:c1:17:d6:34:08:96:ae:7a: 19:1e:8b:9f:4d:5d:19:23:29:bf:89:84:e6:16:90:28:5d:17: 1e:ab:48:66:c2:ff:68:58:57:da:50:59:81:5a:26:37:08:ff: cd:91:97:cc:87:c7:de:0f:80:d1:25:02:14:54:5d:15:52:06: aa:a2:68:83:61:74:f2:ef:f0:e6:6a:26:2b:69:74:f5:80:2f: 77:fc:42:74:e1:40:b7:17:aa:a0:8e:0b:c4:f0:12:93:4a:59: 83:89:01:b4:d9:a6:9b:33:6f:43:02:a1:7d:a9:42:14:f0:5c: 02:5a:ed:65:a5:7d:5e:0a:06:29:1e:4a:45:3e:c2:7a:3b:43: d1:93:c8:9e:6e:d6:17:b0:d4:53:08:90:c3:29:0d:eb:dd:49: fe:46:49:63 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHuIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA1MzVaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDMyRUIwNzU4MjJCQkNE MUJBMzY1REI3NzJDRjFBMDE1Q0YzRjZBNEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLA0m+CXThWSI8YFC5DRnKtxJ4twivyoruLK9TmuCcDlWDCBxq ZuWeClIJmsfA6SOlRrkWamj2oL9ltdoQlLwi1IFwdvnRKqBpPUjJkdNizDCETQjK bvvAaa3r5CNCCSGkWIH2MXxtKzSg3dE5AuEIVpn2e4ZaMzSQbBgO6lbhzhU6304b t6Am1jW5y6ql/Uz1wgGDfHZg0bGR/vrJ4zQDt1qtdlJNROhjb+1WUOi21u44vRz2 UiN8rcUfnaQ2Jlmp/JHdLl3PSUxtcVaZzrt0g64rwq/FZ5Cch06MOCw4+JqrHzus EDFF82/KeTAOB3p+DtSrCWr90mCn4a6gm96pAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUMusHWCK7zRujZdt3LPGgFc8/ak4wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L011c0hXQ0s3elJ1alpk dDNMUEdnRmM4X2FrNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn3QAwDQYJKoZIhvcNAQELBQADggEBABnCE5GerJTVYH6llg1kuaPWOD639MtN meBcrrjhRA+69Mgy71WVfOgi/mbcPfVLCb1fHlSR2Wh3nmmF4AY+ycMqcHQGO4n4 cedQ5tqhv8YvBU9kLET34wp0GorZHqEn8eOJI5LBF9Y0CJauehkei59NXRkjKb+J hOYWkChdFx6rSGbC/2hYV9pQWYFaJjcI/82Rl8yHx94PgNElAhRUXRVSBqqiaINh dPLv8OZqJitpdPWAL3f8QnThQLcXqqCOC8TwEpNKWYOJAbTZppszb0MCoX2pQhTw XAJa7WWlfV4KBikeSkU+wno7Q9GTyJ5u1hew1FMIkMMpDevdSf5GSWM= -----END CERTIFICATE-----Generated at Sun Oct 26 11:50:25 2025 by rpki-client