$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/QujaDLzcCdJfa0ENc1ZS8Ud7aMk.roa File: QujaDLzcCdJfa0ENc1ZS8Ud7aMk.roa (raw, json) Hash identifier: Stm+G3Y8Yc3BPJTX1LgSJir1OK9E7jRrVdkb4UPxH+8= Subject key identifier: 42:E8:DA:0C:BC:DC:09:D2:5F:6B:41:0D:73:56:52:F1:47:7B:68:C9 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1E82 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/QujaDLzcCdJfa0ENc1ZS8Ud7aMk.roa Signing time: Sat 13 Sep 2025 03:05:13 +0000 ROA not before: Sat 13 Sep 2025 03:05:13 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 139259 IP address blocks: 103.221.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 12:36:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7810 (0x1e82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:05:13 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=42E8DA0CBCDC09D25F6B410D735652F1477B68C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4c:ea:b8:75:72:33:78:ac:dd:df:9d:93:be: 3d:c9:12:58:de:96:3b:6f:7d:4d:76:72:0b:bd:ae: 26:65:40:bc:fc:1f:4b:f1:83:69:1e:90:57:d6:07: b2:ee:4e:c9:7d:4b:41:a8:c0:42:90:2c:2d:3a:af: 14:c0:d7:d1:42:31:09:62:94:f7:c8:45:1a:e0:35: a9:0a:88:af:1b:db:28:9a:f9:78:bf:fa:12:6a:f9: cf:a1:1c:0a:2e:aa:4d:e8:af:0f:50:60:2c:ec:00: 2e:8e:3a:2d:e5:98:f7:fc:47:69:85:ad:88:8e:02: ea:59:60:30:c3:6b:fb:17:c7:07:5d:a8:cb:45:21: 50:70:49:25:d6:7e:02:36:c5:74:0a:8f:3a:14:40: 9d:cb:84:56:6e:0f:be:05:e0:13:1c:a7:1e:57:2f: 51:10:7b:b0:7c:0b:84:b8:42:64:69:a8:01:cc:ae: 03:9f:ba:ca:08:c8:15:60:cc:b8:e1:fa:fd:54:01: 8b:c0:d2:01:ab:1a:83:50:5b:07:a1:da:e5:33:eb: 43:58:25:6f:af:4a:c2:5c:cc:38:8a:df:ad:dc:41: 90:0d:d1:19:fe:65:bd:63:fe:54:92:0a:aa:67:46: 5b:da:8a:c4:b6:10:a2:a2:74:5e:6e:f1:f2:c8:f6: fa:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E8:DA:0C:BC:DC:09:D2:5F:6B:41:0D:73:56:52:F1:47:7B:68:C9 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/QujaDLzcCdJfa0ENc1ZS8Ud7aMk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.4.0/22 Signature Algorithm: sha256WithRSAEncryption 8b:d1:6a:29:ce:60:59:7b:12:bc:96:91:83:97:2b:7c:d3:fd: 83:e2:45:6f:fc:6a:d6:56:26:65:d3:8f:a7:d2:bd:1f:c3:a8: cd:98:36:23:42:85:ac:52:a1:bb:ef:e2:4d:28:05:23:13:4c: 1f:41:de:d9:ec:14:9d:15:a1:dc:f4:89:06:f1:59:ca:7a:57: a8:b9:51:02:c7:2b:ef:28:24:1c:f8:22:81:a7:fe:8a:19:67: 0a:fa:7a:9c:d8:bd:65:a5:76:57:3f:c7:d8:c6:d1:96:07:04: fc:2f:2c:5d:a7:81:af:ab:29:a7:95:1c:34:7b:f1:94:1a:a7: dd:4f:e0:01:82:7a:49:8b:8e:e7:2c:5c:9e:52:28:e0:dd:37: 43:53:b4:b7:12:dc:73:cb:72:c8:3f:58:d3:17:e4:04:22:05: 07:de:98:b6:f1:72:82:42:ba:9a:6c:9d:72:df:fa:5e:91:7f: 74:f9:be:4c:f3:be:c8:11:07:b6:58:5a:92:5b:ac:75:5f:07: 7e:4b:df:c8:a0:c1:8c:b0:d6:85:fb:1b:c9:b8:9c:ba:41:76: 79:f0:01:6f:38:92:4d:f2:64:aa:3b:0a:b4:be:6f:83:36:3d: b1:c2:1f:27:51:e2:74:65:6d:a1:bd:92:87:d5:db:38:1a:0a: 32:f9:5f:af -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHoIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA1MTNaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDQyRThEQTBDQkNEQzA5 RDI1RjZCNDEwRDczNTY1MkYxNDc3QjY4QzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJTOq4dXIzeKzd352Tvj3JEljeljtvfU12cgu9riZlQLz8H0vx g2kekFfWB7LuTsl9S0GowEKQLC06rxTA19FCMQlilPfIRRrgNakKiK8b2yia+Xi/ +hJq+c+hHAouqk3orw9QYCzsAC6OOi3lmPf8R2mFrYiOAupZYDDDa/sXxwddqMtF IVBwSSXWfgI2xXQKjzoUQJ3LhFZuD74F4BMcpx5XL1EQe7B8C4S4QmRpqAHMrgOf usoIyBVgzLjh+v1UAYvA0gGrGoNQWweh2uUz60NYJW+vSsJczDiK363cQZAN0Rn+ Zb1j/lSSCqpnRlvaisS2EKKidF5u8fLI9vrlAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUQujaDLzcCdJfa0ENc1ZS8Ud7aMkwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1F1amFETHpjQ2RKZmEw RU5jMVpTOFVkN2FNay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn3QQwDQYJKoZIhvcNAQELBQADggEBAIvRainOYFl7EryWkYOXK3zT/YPiRW/8 atZWJmXTj6fSvR/DqM2YNiNChaxSobvv4k0oBSMTTB9B3tnsFJ0Vodz0iQbxWcp6 V6i5UQLHK+8oJBz4IoGn/ooZZwr6epzYvWWldlc/x9jG0ZYHBPwvLF2nga+rKaeV HDR78ZQap91P4AGCekmLjucsXJ5SKODdN0NTtLcS3HPLcsg/WNMX5AQiBQfemLbx coJCuppsnXLf+l6Rf3T5vkzzvsgRB7ZYWpJbrHVfB35L38igwYyw1oX7G8m4nLpB dnnwAW84kk3yZKo7CrS+b4M2PbHCHydR4nRlbaG9kofV2zgaCjL5X68= -----END CERTIFICATE-----Generated at Sun Oct 26 11:47:57 2025 by rpki-client