$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/VKAo93vroHvz-jce4Fmk9hy2NNg.roa File: VKAo93vroHvz-jce4Fmk9hy2NNg.roa (raw, json) Hash identifier: J3tQdvzpQXRXkbiR0MB3eveJCR9wVmDDcSr3wrDGiTw= Subject key identifier: 54:A0:28:F7:7B:EB:A0:7B:F3:FA:37:1E:E0:59:A4:F6:1C:B6:34:D8 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1CA1 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/VKAo93vroHvz-jce4Fmk9hy2NNg.roa Signing time: Thu 17 Jul 2025 03:51:33 +0000 ROA not before: Thu 17 Jul 2025 03:51:33 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 25734 IP address blocks: 103.221.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Jul 2025 09:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7329 (0x1ca1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jul 17 03:51:33 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=54A028F77BEBA07BF3FA371EE059A4F61CB634D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:be:e8:dd:e8:fd:32:e7:4b:03:23:38:d4:c2: bb:f5:41:a0:c6:4e:0b:1a:38:6e:01:67:79:f0:e9: 88:56:28:cf:43:3d:8e:9b:f9:eb:85:92:6c:fc:9c: 04:71:98:21:c4:f1:b5:62:f6:68:f5:0b:53:a6:0a: ab:91:f6:a8:59:2d:c3:65:aa:59:8b:2f:9f:b9:57: d7:26:59:9e:c2:12:01:d0:53:38:18:84:cf:3c:86: 40:0a:29:c1:af:d9:5e:91:c8:2d:23:ff:90:30:5c: eb:f3:37:b5:fc:5f:34:69:74:dd:63:2d:b2:90:c8: d8:7b:fe:2c:e0:13:71:bd:8e:4a:66:1c:e6:9f:11: f2:96:ea:6a:fa:71:ec:6d:84:52:30:d7:0a:a8:ef: e5:15:df:85:fe:04:96:4b:b9:50:c2:0e:5c:bb:79: db:09:e5:5a:54:97:c7:67:41:f0:cd:24:94:83:88: 95:06:a0:9f:46:a0:86:9d:11:bd:bf:6a:d3:29:8b: 90:d8:e5:81:23:66:de:a9:53:f4:8a:a4:cc:58:ca: 45:72:92:fc:4d:93:cd:26:f6:ac:ce:df:c4:d0:69: 6f:77:4c:6f:86:d5:cb:9c:a4:ae:4c:e7:0b:f0:a4: fc:54:ed:ec:af:ae:90:f9:4d:38:09:64:9e:47:3f: ba:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:A0:28:F7:7B:EB:A0:7B:F3:FA:37:1E:E0:59:A4:F6:1C:B6:34:D8 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/VKAo93vroHvz-jce4Fmk9hy2NNg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.12.0/22 Signature Algorithm: sha256WithRSAEncryption 96:79:5e:62:d9:c3:6e:da:3a:5e:df:07:9a:dd:a4:66:5a:6b: b2:45:2f:ab:47:88:a3:2d:ca:6c:52:99:95:05:c8:78:fc:cb: 41:c9:84:5a:b7:4f:1d:fc:9e:e6:65:9e:a1:68:7e:f2:1a:56: c0:72:a6:41:5a:4f:b3:51:5d:9e:04:b4:3a:be:37:77:b3:40: 91:be:03:a5:cb:b1:e2:25:7a:55:88:f5:6c:ce:3c:33:ea:05: 9e:4a:e6:5f:9d:c7:32:7f:2b:94:d2:6c:c7:27:0f:99:db:7b: 0a:2e:74:6d:a3:e0:ae:86:7b:9d:f4:13:c4:c6:db:44:c6:a8: b9:99:70:f9:56:07:67:84:f8:c6:48:2e:42:bc:e2:31:56:39: c5:30:83:04:1b:a9:f8:8c:38:17:89:6f:60:bb:20:27:e2:d7: 92:bd:91:10:76:5e:35:fc:53:cd:b0:bd:4c:c5:e7:43:66:fa: b0:03:43:21:c3:c7:11:d4:ab:bc:ee:4d:b8:be:f3:01:ef:2c: db:82:1f:89:30:16:81:f3:1e:91:83:5c:c5:e1:6d:a5:be:13: 87:d0:f8:1a:67:41:36:76:a1:d4:c8:a8:d3:0b:a6:e4:db:f1: 88:0b:43:07:37:44:f0:de:8d:e0:b1:1b:00:e6:0c:ea:23:6b: 77:dd:55:cd -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHKEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA3MTcw MzUxMzNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDU0QTAyOEY3N0JFQkEw N0JGM0ZBMzcxRUUwNTlBNEY2MUNCNjM0RDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCavujd6P0y50sDIzjUwrv1QaDGTgsaOG4BZ3nw6YhWKM9DPY6b +euFkmz8nARxmCHE8bVi9mj1C1OmCquR9qhZLcNlqlmLL5+5V9cmWZ7CEgHQUzgY hM88hkAKKcGv2V6RyC0j/5AwXOvzN7X8XzRpdN1jLbKQyNh7/izgE3G9jkpmHOaf EfKW6mr6cexthFIw1wqo7+UV34X+BJZLuVDCDly7edsJ5VpUl8dnQfDNJJSDiJUG oJ9GoIadEb2/atMpi5DY5YEjZt6pU/SKpMxYykVykvxNk80m9qzO38TQaW93TG+G 1cucpK5M5wvwpPxU7eyvrpD5TTgJZJ5HP7pBAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUVKAo93vroHvz+jce4Fmk9hy2NNgwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1ZLQW85M3Zyb0h2ei1q Y2U0Rm1rOWh5Mk5OZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn3QwwDQYJKoZIhvcNAQELBQADggEBAJZ5XmLZw27aOl7fB5rdpGZaa7JFL6tH iKMtymxSmZUFyHj8y0HJhFq3Tx38nuZlnqFofvIaVsBypkFaT7NRXZ4EtDq+N3ez QJG+A6XLseIlelWI9WzOPDPqBZ5K5l+dxzJ/K5TSbMcnD5nbewoudG2j4K6Ge530 E8TG20TGqLmZcPlWB2eE+MZILkK84jFWOcUwgwQbqfiMOBeJb2C7ICfi15K9kRB2 XjX8U82wvUzF50Nm+rADQyHDxxHUq7zuTbi+8wHvLNuCH4kwFoHzHpGDXMXhbaW+ E4fQ+BpnQTZ2odTIqNMLpuTb8YgLQwc3RPDejeCxGwDmDOoja3fdVc0= -----END CERTIFICATE-----Generated at Mon Jul 21 07:58:58 2025 by rpki-client