$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/YMZivNBUWkeOzeIOgYll5ktG2XE.roa File: YMZivNBUWkeOzeIOgYll5ktG2XE.roa (raw, json) Hash identifier: fekPXCHirOJlT3/VDitk4l1AHJQvp3hHAGAw3m9tm7c= Subject key identifier: 60:C6:62:BC:D0:54:5A:47:8E:CD:E2:0E:81:89:65:E6:4B:46:D9:71 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1E7E Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/YMZivNBUWkeOzeIOgYll5ktG2XE.roa Signing time: Sat 13 Sep 2025 03:05:12 +0000 ROA not before: Sat 13 Sep 2025 03:05:12 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 139259 IP address blocks: 45.252.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 12:36:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7806 (0x1e7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:05:12 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=60C662BCD0545A478ECDE20E818965E64B46D971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:52:7c:78:ba:70:35:ea:52:44:e2:d2:67:32: 21:78:05:c4:96:53:18:df:a4:ec:ce:83:27:87:a5: df:76:e1:ea:82:4f:b2:af:2d:7a:6d:13:aa:d0:4e: aa:be:4a:99:69:65:db:dc:30:f6:e3:f7:be:ed:25: d2:0e:1b:2f:b1:d6:df:9e:ef:46:39:96:bd:3a:6e: 21:49:ec:2a:c4:a2:72:c6:d5:93:b8:39:99:b8:43: 19:39:8f:0e:7b:c4:81:ab:bf:bb:0a:38:cb:c7:77: 7d:7b:be:92:78:b9:6b:0d:e5:0c:25:cd:2c:d4:42: c3:25:2f:9f:e2:46:2b:a1:42:02:bc:e3:c1:d5:9d: 23:b6:96:86:39:52:d1:99:71:6f:0a:63:98:19:58: f1:b2:62:6e:5c:64:32:27:1c:57:0c:98:9d:76:24: a0:00:14:ec:fe:81:82:56:a8:af:88:8c:ca:3d:60: 39:f7:a6:31:6d:87:ea:71:b1:e7:93:87:6a:8a:c7: 04:d2:1d:ec:e6:ab:ec:36:e6:89:21:13:c2:da:23: 13:4d:e0:77:88:f9:9d:62:89:ac:ce:3d:ba:8c:e4: 9d:d9:d4:80:83:c7:89:c6:71:53:07:36:45:d5:c7: 7b:89:2f:80:45:5a:f5:af:ac:0a:d2:b3:30:17:37: 61:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:C6:62:BC:D0:54:5A:47:8E:CD:E2:0E:81:89:65:E6:4B:46:D9:71 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/YMZivNBUWkeOzeIOgYll5ktG2XE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.8.0/22 Signature Algorithm: sha256WithRSAEncryption 99:fe:cb:cf:96:cc:3a:94:49:15:c2:ef:0d:f4:d7:91:bb:fa: 8a:7c:7c:62:54:77:ca:20:16:93:f4:a2:68:10:fe:26:f3:da: 69:63:b0:e3:b7:32:c7:f7:eb:00:e7:62:4f:bb:49:fb:ac:2f: e5:fa:54:10:4a:b4:c0:8a:49:63:aa:af:a3:8b:5a:40:77:c3: 61:d2:a1:6a:84:85:61:21:87:3e:4b:14:32:d2:0b:4a:19:87: e9:2d:7f:a9:ad:f6:9e:ab:47:3c:37:a2:2a:fb:2b:e3:7f:33: 7e:f3:d6:52:e8:28:42:5f:d0:21:a2:6a:ee:73:33:be:e9:b8: 7b:6d:79:77:d7:b2:3b:97:56:22:d1:ed:0c:92:2f:63:30:7a: 0a:e3:0b:6e:28:3f:bd:fa:4d:86:89:c4:63:25:47:5e:d9:e8: 45:73:67:68:42:d1:70:20:b9:b2:3c:9c:79:71:10:bf:dc:20: 42:43:a1:cb:c6:ba:76:26:3d:36:10:9b:48:6b:4e:28:34:f5: 90:5e:8e:e8:54:09:9f:7d:d3:72:52:5f:59:5d:96:da:4b:58: 3e:59:14:6f:51:f1:7f:e4:0e:df:0e:b3:26:8d:13:63:5f:93: ac:a3:54:4b:af:6d:c3:05:af:18:c6:43:82:4e:1c:68:fc:51: 6e:d0:64:4a -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHn4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA1MTJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDYwQzY2MkJDRDA1NDVB NDc4RUNERTIwRTgxODk2NUU2NEI0NkQ5NzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQUnx4unA16lJE4tJnMiF4BcSWUxjfpOzOgyeHpd924eqCT7Kv LXptE6rQTqq+SplpZdvcMPbj977tJdIOGy+x1t+e70Y5lr06biFJ7CrEonLG1ZO4 OZm4Qxk5jw57xIGrv7sKOMvHd317vpJ4uWsN5QwlzSzUQsMlL5/iRiuhQgK848HV nSO2loY5UtGZcW8KY5gZWPGyYm5cZDInHFcMmJ12JKAAFOz+gYJWqK+IjMo9YDn3 pjFth+pxseeTh2qKxwTSHezmq+w25okhE8LaIxNN4HeI+Z1iiazOPbqM5J3Z1ICD x4nGcVMHNkXVx3uJL4BFWvWvrArSszAXN2F1AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUYMZivNBUWkeOzeIOgYll5ktG2XEwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1lNWml2TkJVV2tlT3pl SU9nWWxsNWt0RzJYRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIt/AgwDQYJKoZIhvcNAQELBQADggEBAJn+y8+WzDqUSRXC7w3015G7+op8fGJU d8ogFpP0omgQ/ibz2mljsOO3Msf36wDnYk+7SfusL+X6VBBKtMCKSWOqr6OLWkB3 w2HSoWqEhWEhhz5LFDLSC0oZh+ktf6mt9p6rRzw3oir7K+N/M37z1lLoKEJf0CGi au5zM77puHtteXfXsjuXViLR7QySL2MwegrjC24oP736TYaJxGMlR17Z6EVzZ2hC 0XAgubI8nHlxEL/cIEJDocvGunYmPTYQm0hrTig09ZBejuhUCZ9903JSX1ldltpL WD5ZFG9R8X/kDt8OsyaNE2Nfk6yjVEuvbcMFrxjGQ4JOHGj8UW7QZEo= -----END CERTIFICATE-----Generated at Sun Oct 26 11:50:58 2025 by rpki-client