$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/bmYl_DL6zMCAVozY4MCsB2nRwWQ.roa File: bmYl_DL6zMCAVozY4MCsB2nRwWQ.roa (raw, json) Hash identifier: D9DZ2bpkwQA+RrR0KlU5IN0cSICrJs+zYZJLAFTfENw= Subject key identifier: 6E:66:25:FC:32:FA:CC:C0:80:56:8C:D8:E0:C0:AC:07:69:D1:C1:64 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1E9F Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/bmYl_DL6zMCAVozY4MCsB2nRwWQ.roa Signing time: Sat 13 Sep 2025 03:05:18 +0000 ROA not before: Sat 13 Sep 2025 03:05:18 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 13444 IP address blocks: 103.221.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7839 (0x1e9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:05:18 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=6E6625FC32FACCC080568CD8E0C0AC0769D1C164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e8:62:30:f2:25:e3:60:e2:6c:53:38:bc:b0: c1:a4:f6:a6:15:15:d3:d6:df:38:1b:85:92:7f:66: 6e:29:d0:91:e8:4f:84:de:ef:3a:88:02:4b:27:fa: 85:61:0f:4b:72:d0:4b:a7:e6:df:04:92:ef:7b:1e: 25:77:65:64:56:74:81:fd:b7:5a:03:1a:b7:e6:c7: dc:16:ad:24:8e:74:0f:09:f5:71:0e:f0:3c:0a:21: da:d8:87:8f:78:cc:10:b5:de:69:cf:e9:6a:06:d2: cf:48:0d:e0:0d:90:61:f6:7d:fc:cc:62:c8:da:08: 54:76:46:33:b0:57:9a:a8:e9:fc:5c:8c:83:e6:d8: 95:26:a0:00:88:8c:26:88:65:b7:f2:48:97:65:7a: 33:c5:93:51:e9:03:30:75:69:a6:fe:c9:c1:50:3f: 45:c6:a2:47:9a:70:28:ef:e8:22:f8:a7:31:dd:d0: ee:70:47:c2:a2:ae:ec:08:1a:4e:38:3f:cb:63:48: 0b:66:77:81:b3:2b:e7:34:04:bd:41:5a:47:c0:01: 0d:d7:1b:5f:14:94:fb:69:70:38:c9:7e:f6:19:a1: 3d:92:18:a9:19:48:fb:f0:bc:a8:d5:b4:4d:35:0b: 81:37:ff:7a:56:5b:37:57:55:ca:32:2c:03:cc:78: 0c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:66:25:FC:32:FA:CC:C0:80:56:8C:D8:E0:C0:AC:07:69:D1:C1:64 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/bmYl_DL6zMCAVozY4MCsB2nRwWQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.48.0/24 Signature Algorithm: sha256WithRSAEncryption 10:d0:7a:16:67:9f:ec:93:80:fb:95:6e:cb:78:5a:f6:04:cf: b0:9b:e5:79:57:3a:83:68:23:19:cc:6a:33:23:07:06:fd:0c: 9c:95:db:7a:5b:81:91:14:b7:65:b5:a0:67:a2:fc:78:52:11: 27:ae:a8:66:55:56:aa:6b:ca:77:29:f3:92:fd:70:71:83:8d: 0f:74:db:4b:74:ae:1c:5e:b3:00:bd:50:05:d9:e2:bb:c5:6c: 54:dc:5f:f7:3f:f8:69:da:8d:4e:4d:17:e8:ba:28:da:0e:f8: e8:40:46:49:bd:6b:20:86:28:35:74:42:4f:6a:fa:75:c2:69: 55:c0:42:e8:61:52:ba:06:89:c3:6d:be:1f:db:37:fb:32:d3: 2b:a3:78:12:00:44:1f:b7:99:b6:57:2e:61:df:f5:46:a6:fe: 36:0c:41:8b:6f:7d:57:10:11:87:06:77:9e:99:02:38:5f:48: af:ea:26:e7:47:32:75:05:14:8f:c0:67:10:52:44:0b:45:49: 26:30:2b:20:d2:86:c3:46:90:6f:af:06:35:1b:66:b0:c2:4d: be:25:9f:20:8e:8e:e5:52:70:70:e4:dd:c8:7a:6d:ba:2a:b1: e6:f0:e6:1e:35:e9:58:1c:88:6e:0c:67:86:6d:ba:c9:8b:c4: d3:79:6f:b9 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHp8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA1MThaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDZFNjYyNUZDMzJGQUND QzA4MDU2OENEOEUwQzBBQzA3NjlEMUMxNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDa6GIw8iXjYOJsUzi8sMGk9qYVFdPW3zgbhZJ/Zm4p0JHoT4Te 7zqIAksn+oVhD0ty0Eun5t8Eku97HiV3ZWRWdIH9t1oDGrfmx9wWrSSOdA8J9XEO 8DwKIdrYh494zBC13mnP6WoG0s9IDeANkGH2ffzMYsjaCFR2RjOwV5qo6fxcjIPm 2JUmoACIjCaIZbfySJdlejPFk1HpAzB1aab+ycFQP0XGokeacCjv6CL4pzHd0O5w R8KiruwIGk44P8tjSAtmd4GzK+c0BL1BWkfAAQ3XG18UlPtpcDjJfvYZoT2SGKkZ SPvwvKjVtE01C4E3/3pWWzdXVcoyLAPMeAxdAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUbmYl/DL6zMCAVozY4MCsB2nRwWQwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2JtWWxfREw2ek1DQVZv elk0TUNzQjJuUndXUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3TAwDQYJKoZIhvcNAQELBQADggEBABDQehZnn+yTgPuVbst4WvYEz7Cb5XlX OoNoIxnMajMjBwb9DJyV23pbgZEUt2W1oGei/HhSESeuqGZVVqpryncp85L9cHGD jQ9020t0rhxeswC9UAXZ4rvFbFTcX/c/+GnajU5NF+i6KNoO+OhARkm9ayCGKDV0 Qk9q+nXCaVXAQuhhUroGicNtvh/bN/sy0yujeBIARB+3mbZXLmHf9Uam/jYMQYtv fVcQEYcGd56ZAjhfSK/qJudHMnUFFI/AZxBSRAtFSSYwKyDShsNGkG+vBjUbZrDC Tb4lnyCOjuVScHDk3ch6bboqsebw5h416VgciG4MZ4ZtusmLxNN5b7k= -----END CERTIFICATE-----Generated at Sun Oct 26 07:18:01 2025 by rpki-client