$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/XkO6dThkCfQ1LIybVieAuQ-pWnQ.roa File: XkO6dThkCfQ1LIybVieAuQ-pWnQ.roa (raw, json) Hash identifier: lUUbqrx++xrvufjud7TbP6qsKlAMoS2p0yDh+w5qE08= Subject key identifier: 5E:43:BA:75:38:64:09:F4:35:2C:8C:9B:56:27:80:B9:0F:A9:5A:74 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1E93 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/XkO6dThkCfQ1LIybVieAuQ-pWnQ.roa Signing time: Sat 13 Sep 2025 03:05:16 +0000 ROA not before: Sat 13 Sep 2025 03:05:16 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 139259 IP address blocks: 103.221.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 12:36:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7827 (0x1e93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:05:16 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=5E43BA75386409F4352C8C9B562780B90FA95A74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:49:de:42:0d:79:c4:54:f3:78:05:86:5b:6f: c3:5d:01:33:b2:e2:a5:68:bb:d8:2c:21:85:d3:47: fb:85:59:d6:2b:a3:e8:14:98:e3:11:8c:46:a9:30: 01:d9:8f:b4:26:ab:b9:da:e1:80:9b:b1:ac:96:c8: ac:1c:c7:6c:bd:51:3b:de:f9:27:cb:a4:b4:6a:8d: b3:ec:8c:a6:29:5e:75:ee:46:ac:3f:60:15:61:f7: 41:75:01:82:3e:d2:50:6c:ce:a8:3d:33:7f:72:89: df:41:9f:77:60:cc:13:1a:d4:62:6d:b4:54:fa:e4: 7d:b8:3f:e8:ab:a5:69:4d:7d:77:44:7c:ab:a1:3d: 98:55:fa:97:b5:56:ae:92:7c:a1:49:a4:4f:b2:0f: 80:5e:bd:d8:c6:91:4c:33:d7:4a:8a:32:28:dd:46: f8:d6:65:ef:8c:43:9c:7d:18:19:3e:ac:1a:3a:fe: 56:98:33:ec:87:ea:8a:cc:71:1d:11:ac:46:57:9e: 7f:52:10:65:df:13:c6:7b:62:c7:f9:e2:4c:bd:57: 85:02:35:fe:38:c0:e9:8b:2b:8c:74:99:71:4d:68: ae:6f:6b:42:e8:c7:a4:ff:9b:fa:bb:ab:b7:47:cf: 1a:5e:79:9c:f8:0f:d4:86:e9:da:74:cc:96:a3:03: d6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:43:BA:75:38:64:09:F4:35:2C:8C:9B:56:27:80:B9:0F:A9:5A:74 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/XkO6dThkCfQ1LIybVieAuQ-pWnQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.26.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:fa:72:39:44:18:33:4d:9c:21:cb:94:17:0f:d8:f7:8c:ca: 39:d4:98:21:17:19:ba:b4:6e:08:a7:bd:9b:02:69:81:c6:b9: 18:18:84:2c:14:74:31:bf:62:d1:0a:cd:7d:10:80:92:3c:99: ae:51:68:0e:bc:88:f2:29:1f:ac:22:29:39:ce:5d:78:fd:34: 3d:34:40:eb:e0:28:b2:3d:e8:ed:fb:af:86:13:94:69:3d:e8: 2d:07:60:32:b8:db:fb:46:0a:16:0b:d2:d0:da:0f:bc:74:95: d7:8f:bd:10:ff:46:06:c9:e4:0d:5e:d7:2c:90:c2:3b:b2:a4: 04:0e:c6:7d:87:df:ce:b5:6f:19:5c:cd:17:46:61:26:eb:47: 27:c1:47:9a:8c:ce:3c:42:2e:8b:d6:9f:3c:d8:6f:d1:09:fe: b5:e9:38:80:d4:97:d8:df:32:3a:b6:25:fe:e7:f7:44:63:10: ed:2b:39:6c:ff:51:d7:f2:ef:c3:21:ad:92:90:94:e8:54:ca: b3:a3:b6:93:4f:5f:ab:ad:b4:ad:bf:db:36:5a:17:23:9c:8f: c6:f7:d6:58:76:b7:5b:e4:fc:2a:08:58:b5:52:42:9c:17:5f: 83:06:87:8e:21:96:f2:07:0b:31:04:36:f2:1e:93:64:ff:e4: 3b:a7:f6:e5 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHpMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA1MTZaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDVFNDNCQTc1Mzg2NDA5 RjQzNTJDOEM5QjU2Mjc4MEI5MEZBOTVBNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxSd5CDXnEVPN4BYZbb8NdATOy4qVou9gsIYXTR/uFWdYro+gU mOMRjEapMAHZj7Qmq7na4YCbsayWyKwcx2y9UTve+SfLpLRqjbPsjKYpXnXuRqw/ YBVh90F1AYI+0lBszqg9M39yid9Bn3dgzBMa1GJttFT65H24P+irpWlNfXdEfKuh PZhV+pe1Vq6SfKFJpE+yD4BevdjGkUwz10qKMijdRvjWZe+MQ5x9GBk+rBo6/laY M+yH6orMcR0RrEZXnn9SEGXfE8Z7Ysf54ky9V4UCNf44wOmLK4x0mXFNaK5va0Lo x6T/m/q7q7dHzxpeeZz4D9SG6dp0zJajA9ZxAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUXkO6dThkCfQ1LIybVieAuQ+pWnQwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1hrTzZkVGhrQ2ZRMUxJ eWJWaWVBdVEtcFduUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3RowDQYJKoZIhvcNAQELBQADggEBAJ36cjlEGDNNnCHLlBcP2PeMyjnUmCEX Gbq0bginvZsCaYHGuRgYhCwUdDG/YtEKzX0QgJI8ma5RaA68iPIpH6wiKTnOXXj9 ND00QOvgKLI96O37r4YTlGk96C0HYDK42/tGChYL0tDaD7x0ldePvRD/RgbJ5A1e 1yyQwjuypAQOxn2H3861bxlczRdGYSbrRyfBR5qMzjxCLovWnzzYb9EJ/rXpOIDU l9jfMjq2Jf7n90RjEO0rOWz/Udfy78MhrZKQlOhUyrOjtpNPX6uttK2/2zZaFyOc j8b31lh2t1vk/CoIWLVSQpwXX4MGh44hlvIHCzEENvIek2T/5Dun9uU= -----END CERTIFICATE-----Generated at Sun Oct 26 11:44:21 2025 by rpki-client