$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/NQPnNb0F5V-PQ3J8F6BWMBNYfAg.roa File: NQPnNb0F5V-PQ3J8F6BWMBNYfAg.roa (raw, json) Hash identifier: Ug5cZBTZSb5I8ew5Qlw/2UmQYSCkhx7+VloZ36dZKo8= Subject key identifier: 35:03:E7:35:BD:05:E5:5F:8F:43:72:7C:17:A0:56:30:13:58:7C:08 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1E88 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/NQPnNb0F5V-PQ3J8F6BWMBNYfAg.roa Signing time: Sat 13 Sep 2025 03:05:14 +0000 ROA not before: Sat 13 Sep 2025 03:05:14 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 139259 IP address blocks: 45.252.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 12:36:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7816 (0x1e88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:05:14 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=3503E735BD05E55F8F43727C17A0563013587C08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6f:b6:a9:dd:c0:d2:e6:d1:ca:4b:a8:8f:2b: ad:9d:a8:02:a4:4c:0a:a6:2e:c1:a2:1c:12:52:42: c4:1f:c0:4d:b7:11:e9:85:fb:0b:ef:96:61:3e:30: 87:6f:a6:7e:15:d0:4e:01:91:00:2f:12:8c:e6:04: 1c:17:4a:3a:5a:a6:73:05:a8:00:70:26:4f:ab:71: fc:4d:f4:8b:87:82:df:98:77:4b:12:d0:a2:6c:9e: 14:25:37:0e:cc:f9:ac:a0:7c:e0:5c:1f:02:c2:b2: c9:54:3a:08:e7:65:22:a9:07:cd:bf:5e:12:a3:e0: 82:eb:18:98:bb:72:1b:84:bf:6f:58:8d:ec:b6:36: e0:a0:9d:8e:cf:97:6a:d6:04:7f:83:0e:d0:d1:74: 8a:18:55:3f:08:ef:a2:06:3f:55:3b:a9:2c:7d:3d: 6f:c6:55:2d:2b:27:c2:ee:ff:d8:c1:43:9b:66:7a: f3:de:88:a6:c8:e5:06:b7:40:e1:cb:39:34:4d:b8: af:06:1d:65:fb:a7:f8:f9:3f:20:4f:d1:17:5e:6d: e6:62:ab:41:94:f3:51:f4:66:a2:00:53:92:45:2b: de:33:33:38:a6:76:f6:96:99:64:6a:95:32:57:e8: 95:f3:9a:d3:dd:b9:c0:0d:2b:6a:16:1e:ce:73:8b: cd:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:03:E7:35:BD:05:E5:5F:8F:43:72:7C:17:A0:56:30:13:58:7C:08 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/NQPnNb0F5V-PQ3J8F6BWMBNYfAg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.103.0/24 Signature Algorithm: sha256WithRSAEncryption d1:0c:a0:5a:71:2e:ff:88:b1:6d:2a:fb:fb:0e:b7:10:7d:a7: e7:94:4f:83:d7:5b:5e:6e:1f:8f:88:b5:7b:b8:e0:d5:dc:58: 8d:ac:b4:81:b4:7b:99:4f:d9:94:c8:87:b9:ca:0a:9a:b1:e8: e0:bb:b8:ce:92:0d:6b:e5:84:de:60:9b:ed:57:a9:47:6a:51: 7f:2a:64:7a:f6:53:78:35:b4:23:6a:46:69:3e:9c:17:75:c9: 41:9b:91:81:8f:b1:96:57:8d:4c:91:a5:8c:39:c5:7e:69:f0: 07:b5:3f:8b:7f:8c:8f:8f:49:57:6c:e1:39:88:e8:67:f4:13: f6:aa:02:12:9d:4f:ed:ca:1c:88:69:09:8d:23:bb:0c:33:d8: 31:98:2a:23:e8:1a:b2:6a:cf:ee:47:39:77:1a:61:9f:50:ba: bb:17:b6:2c:a0:3c:48:50:fc:16:b4:ea:0e:cd:70:47:12:e3: d2:2d:f3:92:55:ce:57:13:a6:4d:9e:45:9a:62:04:25:66:df: 10:67:65:7f:64:a8:9d:44:50:86:9c:f8:82:ed:d3:11:50:bd: 61:00:03:d4:ab:70:aa:9e:8e:2d:82:14:30:83:06:e9:80:1d: a4:e1:e4:40:e6:2a:e1:5e:97:9f:b8:06:09:8a:9c:b6:ce:ac: 2b:92:73:b3 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHogwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA1MTRaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDM1MDNFNzM1QkQwNUU1 NUY4RjQzNzI3QzE3QTA1NjMwMTM1ODdDMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7b7ap3cDS5tHKS6iPK62dqAKkTAqmLsGiHBJSQsQfwE23EemF +wvvlmE+MIdvpn4V0E4BkQAvEozmBBwXSjpapnMFqABwJk+rcfxN9IuHgt+Yd0sS 0KJsnhQlNw7M+aygfOBcHwLCsslUOgjnZSKpB82/XhKj4ILrGJi7chuEv29Yjey2 NuCgnY7Pl2rWBH+DDtDRdIoYVT8I76IGP1U7qSx9PW/GVS0rJ8Lu/9jBQ5tmevPe iKbI5Qa3QOHLOTRNuK8GHWX7p/j5PyBP0RdebeZiq0GU81H0ZqIAU5JFK94zMzim dvaWmWRqlTJX6JXzmtPducANK2oWHs5zi82LAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUNQPnNb0F5V+PQ3J8F6BWMBNYfAgwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L05RUG5OYjBGNVYtUFEz SjhGNkJXTUJOWWZBZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAt/GcwDQYJKoZIhvcNAQELBQADggEBANEMoFpxLv+IsW0q+/sOtxB9p+eUT4PX W15uH4+ItXu44NXcWI2stIG0e5lP2ZTIh7nKCpqx6OC7uM6SDWvlhN5gm+1XqUdq UX8qZHr2U3g1tCNqRmk+nBd1yUGbkYGPsZZXjUyRpYw5xX5p8Ae1P4t/jI+PSVds 4TmI6Gf0E/aqAhKdT+3KHIhpCY0juwwz2DGYKiPoGrJqz+5HOXcaYZ9QursXtiyg PEhQ/Ba06g7NcEcS49It85JVzlcTpk2eRZpiBCVm3xBnZX9kqJ1EUIac+ILt0xFQ vWEAA9SrcKqeji2CFDCDBumAHaTh5EDmKuFel5+4BgmKnLbOrCuSc7M= -----END CERTIFICATE-----Generated at Sun Oct 26 11:50:59 2025 by rpki-client