$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/YfhLAmlcNQYx6yUi_XS4nxHVJ5I.roa File: YfhLAmlcNQYx6yUi_XS4nxHVJ5I.roa (raw, json) Hash identifier: KsfDEtysEqQ5nkhWzjCIm3pQND6+n8XVGER8F60D1FY= Subject key identifier: 61:F8:4B:02:69:5C:35:06:31:EB:25:22:FD:74:B8:9F:11:D5:27:92 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1DE3 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/YfhLAmlcNQYx6yUi_XS4nxHVJ5I.roa Signing time: Sat 13 Sep 2025 03:04:40 +0000 ROA not before: Sat 13 Sep 2025 03:04:40 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 13444 IP address blocks: 103.6.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7651 (0x1de3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:04:40 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=61F84B02695C350631EB2522FD74B89F11D52792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:2d:81:15:1e:9a:ca:4d:ce:0e:7d:ce:06:cd: c6:6d:d8:fa:a5:9b:f1:92:13:fd:07:e6:bf:d6:59: 73:3a:ef:33:02:5a:6a:fa:05:56:bf:24:e0:d3:6c: eb:3e:1b:9b:c1:b9:61:b8:fd:87:56:05:da:5d:c0: 28:f9:8e:44:25:0c:bd:a5:88:7c:84:7d:58:78:19: a4:ee:ec:99:ab:3d:df:45:9e:41:39:b1:39:56:34: 91:01:74:5d:92:1c:f7:9f:f4:26:09:cf:53:18:8a: 5b:a5:7e:f6:1f:0a:39:f8:10:a8:7b:05:46:60:69: 0b:60:13:48:56:5e:26:39:b2:b4:41:9d:9b:19:c1: df:2c:e2:0a:04:28:f7:f7:6a:81:93:33:cb:70:2a: ac:cf:01:36:f5:dc:53:01:a2:35:1d:8f:d0:5e:76: b8:6a:68:59:65:a4:9d:83:13:ba:4c:7b:50:6b:87: 86:f0:0d:14:4c:2d:e2:21:09:a4:3b:43:e4:c5:ff: 0d:40:46:79:12:26:74:c3:97:5a:20:2d:18:d1:3e: 7f:ac:15:81:ad:ad:a9:8d:f8:e8:1e:58:ed:7d:4d: 06:37:89:c4:cc:26:e1:20:7b:a7:28:a8:7f:d5:4a: 4c:98:3f:63:66:70:d1:05:d9:74:cd:48:81:cf:d1: 1c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:F8:4B:02:69:5C:35:06:31:EB:25:22:FD:74:B8:9F:11:D5:27:92 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/YfhLAmlcNQYx6yUi_XS4nxHVJ5I.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.6.109.0/24 Signature Algorithm: sha256WithRSAEncryption 88:e2:13:cd:fe:cd:15:0b:99:ed:9d:65:1c:4d:26:4e:57:f2: 96:33:f1:0a:ec:99:7e:cd:65:10:a3:60:00:f5:5f:53:32:73: 89:57:ec:7e:51:03:77:7e:fa:3a:7b:83:dd:ac:4b:99:d5:e2: 55:54:e5:ce:2a:43:a1:c6:0c:be:4a:ef:19:39:e6:4d:35:cb: a4:d1:6f:f9:aa:7e:33:b0:27:81:9b:55:54:8b:18:69:3f:60: a2:a8:95:95:84:dd:32:b5:6c:b3:b8:4e:01:01:4b:3e:7f:b7: f2:ad:aa:72:4f:33:12:3e:09:d1:af:87:af:89:5d:e8:57:6f: c3:2b:85:20:2f:9e:0e:16:8d:97:7f:2f:65:31:11:b1:9f:db: aa:bd:3d:6b:8f:3d:a6:cd:61:ac:df:7d:25:2f:5a:80:23:0b: 81:f7:3d:06:26:74:95:1b:ce:f6:7f:ea:5f:f5:9a:85:08:71: ce:13:33:8f:ed:33:d9:74:aa:3c:e1:36:80:b0:6d:b4:fa:73: 31:84:8d:c4:30:e6:6b:2a:77:12:57:a8:4b:20:18:15:61:f2: d5:34:04:09:fd:2e:9f:3d:53:5b:d8:3c:a1:7c:70:04:86:1c: eb:c4:33:77:b5:da:fb:f9:00:fa:c6:8f:ac:ef:e5:2d:2d:28: bf:bc:fc:40 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHeMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA0NDBaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDYxRjg0QjAyNjk1QzM1 MDYzMUVCMjUyMkZENzRCODlGMTFENTI3OTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDiLYEVHprKTc4Ofc4GzcZt2Pqlm/GSE/0H5r/WWXM67zMCWmr6 BVa/JODTbOs+G5vBuWG4/YdWBdpdwCj5jkQlDL2liHyEfVh4GaTu7JmrPd9FnkE5 sTlWNJEBdF2SHPef9CYJz1MYilulfvYfCjn4EKh7BUZgaQtgE0hWXiY5srRBnZsZ wd8s4goEKPf3aoGTM8twKqzPATb13FMBojUdj9BedrhqaFllpJ2DE7pMe1Brh4bw DRRMLeIhCaQ7Q+TF/w1ARnkSJnTDl1ogLRjRPn+sFYGtramN+OgeWO19TQY3icTM JuEge6coqH/VSkyYP2NmcNEF2XTNSIHP0RznAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUYfhLAmlcNQYx6yUi/XS4nxHVJ5IwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1lmaExBbWxjTlFZeDZ5 VWlfWFM0bnhIVko1SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnBm0wDQYJKoZIhvcNAQELBQADggEBAIjiE83+zRULme2dZRxNJk5X8pYz8Qrs mX7NZRCjYAD1X1Myc4lX7H5RA3d++jp7g92sS5nV4lVU5c4qQ6HGDL5K7xk55k01 y6TRb/mqfjOwJ4GbVVSLGGk/YKKolZWE3TK1bLO4TgEBSz5/t/KtqnJPMxI+CdGv h6+JXehXb8MrhSAvng4WjZd/L2UxEbGf26q9PWuPPabNYazffSUvWoAjC4H3PQYm dJUbzvZ/6l/1moUIcc4TM4/tM9l0qjzhNoCwbbT6czGEjcQw5msqdxJXqEsgGBVh 8tU0BAn9Lp89U1vYPKF8cASGHOvEM3e12vv5APrGj6zv5S0tKL+8/EA= -----END CERTIFICATE-----Generated at Sun Oct 26 07:18:01 2025 by rpki-client