$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/YNEqEGZmcurHIoKfB1j6_oh5xjU.roa File: YNEqEGZmcurHIoKfB1j6_oh5xjU.roa (raw, json) Hash identifier: BPUk0TVYxuC/nmcGqcUgXiFEQuruPjah4CbO9ZmQ/ow= Subject key identifier: 60:D1:2A:10:66:66:72:EA:C7:22:82:9F:07:58:FA:FE:88:79:C6:35 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1EB0 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/YNEqEGZmcurHIoKfB1j6_oh5xjU.roa Signing time: Sat 13 Sep 2025 03:05:23 +0000 ROA not before: Sat 13 Sep 2025 03:05:23 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 13444 IP address blocks: 103.221.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7856 (0x1eb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:05:23 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=60D12A10666672EAC722829F0758FAFE8879C635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:81:78:43:3a:d6:0d:d4:72:71:87:71:ea:be: 81:ab:38:83:e5:6f:de:b6:e9:84:59:ee:9c:c9:a5: 8a:54:93:0b:ac:4f:ed:d1:7e:e2:b4:fe:4d:29:8a: ed:de:44:ac:cd:a6:ba:5d:d4:43:c1:62:45:c6:b5: 6e:4c:cd:62:30:d6:c7:14:d0:9a:de:7f:0e:3a:86: a8:32:38:ff:46:cd:05:e2:9b:50:7a:06:42:86:f9: f8:00:5c:9d:ad:5d:30:80:1d:ff:ae:cb:c4:2b:f5: 63:18:5e:e7:d0:de:eb:87:c1:d5:a6:43:ce:33:44: 6d:3d:8a:82:ee:f4:ab:63:bd:ac:c7:26:b8:4b:48: bb:a3:a4:97:3f:7e:da:b6:c2:b3:83:4f:54:2d:e3: eb:f1:8e:33:61:08:73:f7:3c:f9:bf:10:72:b7:c1: 64:76:48:50:4d:13:2d:b3:b7:6e:43:90:15:08:6f: aa:f6:92:2f:b0:ea:9f:97:39:e8:f4:d2:85:a2:03: fe:52:7c:9b:8e:03:f2:d1:0e:a0:c7:f1:a7:08:03: b7:9c:d1:c7:cc:1f:10:f5:61:43:e4:e6:32:c7:50: 2a:d5:8b:44:d1:60:4d:c9:12:45:9a:5c:54:fc:11: 4d:c3:bc:31:97:28:29:1e:20:bd:70:f5:cd:a8:0c: 67:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D1:2A:10:66:66:72:EA:C7:22:82:9F:07:58:FA:FE:88:79:C6:35 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/YNEqEGZmcurHIoKfB1j6_oh5xjU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.32.0/24 Signature Algorithm: sha256WithRSAEncryption 32:36:37:be:2a:80:98:2c:cb:8f:a2:2d:cb:ad:ca:82:d2:3e: 27:f4:be:c1:f2:8e:31:eb:3a:a1:99:a2:68:a2:1c:e4:a5:ea: 49:f2:66:e4:e7:55:aa:70:81:13:ce:6a:e9:55:9c:83:3b:9b: ad:cb:ea:c4:5e:5e:1e:ce:1f:ea:b0:71:79:30:31:9e:3b:99: e3:c6:f1:7d:9b:3d:27:6c:93:83:a4:91:93:be:31:11:16:12: eb:b4:8e:00:3f:62:9b:cf:3e:56:6e:ac:f6:cf:35:8b:91:dc: c3:04:d0:9d:36:42:3d:c2:ca:41:5a:bc:38:5e:f2:f6:ba:64: 63:17:db:eb:93:64:ea:e4:3f:9c:fe:92:03:2c:b8:68:bf:eb: 7a:27:9e:4c:1e:a6:91:d1:b0:ee:4b:e1:50:f0:84:8a:5a:eb: b2:76:4e:0c:c5:96:f3:a2:23:4b:62:c2:fa:bc:97:d9:dd:94: 98:46:40:1d:4c:13:11:f4:d8:73:bd:9f:2b:e3:95:63:47:8c: d8:6b:d9:f6:11:e3:10:bd:72:2a:6d:40:6c:c0:f5:1f:e9:fb: 81:e6:28:51:e3:ff:c4:35:b4:7a:af:2b:f8:0a:a9:43:20:f6: 7f:e4:06:57:d1:3e:c0:27:0f:a9:04:2f:e3:08:42:53:a2:f2: d8:cc:63:f8 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHrAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA1MjNaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDYwRDEyQTEwNjY2Njcy RUFDNzIyODI5RjA3NThGQUZFODg3OUM2MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6gXhDOtYN1HJxh3HqvoGrOIPlb9626YRZ7pzJpYpUkwusT+3R fuK0/k0piu3eRKzNprpd1EPBYkXGtW5MzWIw1scU0Jrefw46hqgyOP9GzQXim1B6 BkKG+fgAXJ2tXTCAHf+uy8Qr9WMYXufQ3uuHwdWmQ84zRG09ioLu9KtjvazHJrhL SLujpJc/ftq2wrODT1Qt4+vxjjNhCHP3PPm/EHK3wWR2SFBNEy2zt25DkBUIb6r2 ki+w6p+XOej00oWiA/5SfJuOA/LRDqDH8acIA7ec0cfMHxD1YUPk5jLHUCrVi0TR YE3JEkWaXFT8EU3DvDGXKCkeIL1w9c2oDGf3AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUYNEqEGZmcurHIoKfB1j6/oh5xjUwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1lORXFFR1ptY3VySElv S2ZCMWo2X29oNXhqVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3SAwDQYJKoZIhvcNAQELBQADggEBADI2N74qgJgsy4+iLcutyoLSPif0vsHy jjHrOqGZomiiHOSl6knyZuTnVapwgRPOaulVnIM7m63L6sReXh7OH+qwcXkwMZ47 mePG8X2bPSdsk4OkkZO+MREWEuu0jgA/YpvPPlZurPbPNYuR3MME0J02Qj3CykFa vDhe8va6ZGMX2+uTZOrkP5z+kgMsuGi/63onnkweppHRsO5L4VDwhIpa67J2TgzF lvOiI0tiwvq8l9ndlJhGQB1MExH02HO9nyvjlWNHjNhr2fYR4xC9ciptQGzA9R/p +4HmKFHj/8Q1tHqvK/gKqUMg9n/kBlfRPsAnD6kEL+MIQlOi8tjMY/g= -----END CERTIFICATE-----Generated at Sun Oct 26 07:17:59 2025 by rpki-client