$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/d_hJSah3wG2fB5U4B0vQOfe6pxE.roa File: d_hJSah3wG2fB5U4B0vQOfe6pxE.roa (raw, json) Hash identifier: FHwYCsG/j+nSwBE99Ft5ZRSCb99xS3EisMtAp0XlEVg= Subject key identifier: 77:F8:49:49:A8:77:C0:6D:9F:07:95:38:07:4B:D0:39:F7:BA:A7:11 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1EDE Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/d_hJSah3wG2fB5U4B0vQOfe6pxE.roa Signing time: Sat 13 Sep 2025 03:05:33 +0000 ROA not before: Sat 13 Sep 2025 03:05:33 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 138527 IP address blocks: 45.252.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 12:36:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7902 (0x1ede) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:05:33 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=77F84949A877C06D9F079538074BD039F7BAA711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ae:52:a1:8b:d3:cf:6a:2b:cf:32:97:61:e7: fa:ad:99:95:fc:18:c3:25:0a:b9:c3:0e:17:f7:95: d9:06:db:73:b6:09:a3:14:aa:4c:8a:00:07:5a:0c: 96:99:44:78:c9:ea:71:5b:7b:df:39:65:15:c7:7b: b9:b0:e0:22:50:77:ca:ce:bd:cb:20:09:96:bb:e2: 57:63:2d:15:c1:47:52:63:39:7e:64:ec:a0:65:53: c9:86:8e:9a:c1:d7:ea:e1:e7:31:78:f2:db:f9:35: 55:57:4d:be:f6:0f:ea:aa:d1:7c:65:ba:69:e9:82: f5:40:18:dc:a5:2c:2a:84:94:61:27:d7:99:dc:f4: 48:12:33:22:36:a5:11:d4:8e:3b:1c:04:ea:34:7d: 70:fa:bf:2d:16:e2:f3:88:b1:a0:44:de:a1:63:95: ef:22:38:d4:c3:ea:3f:8a:3b:b3:d6:5e:4d:ae:aa: 48:ec:9e:ce:a1:ed:8e:20:6b:f0:75:08:10:b6:ca: 84:30:df:b6:99:0c:be:7f:99:00:8b:85:b2:fd:ce: d3:69:97:f9:4a:20:07:5d:c2:2f:b2:71:06:10:ee: 98:fa:cc:b3:2d:c2:bd:7d:43:c9:c4:e1:8a:e3:a0: 01:a2:5d:e2:35:3e:c5:fa:19:36:00:80:a7:7f:fa: 4c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F8:49:49:A8:77:C0:6D:9F:07:95:38:07:4B:D0:39:F7:BA:A7:11 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/d_hJSah3wG2fB5U4B0vQOfe6pxE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.20.0/22 Signature Algorithm: sha256WithRSAEncryption 9b:a9:cf:6e:ad:f5:c5:b5:91:7a:38:ae:f9:81:29:2d:ec:49: e0:52:b3:cc:d4:b4:99:7a:99:cf:93:4c:81:96:5f:57:4f:e4: 06:d5:30:33:05:c1:52:5c:08:2c:67:7c:6e:15:c1:c6:aa:69: 9f:2a:06:ea:5d:2f:d1:63:57:e3:93:17:b2:ed:4b:0f:67:1d: 88:88:13:9a:f3:7c:c4:10:8f:93:b9:6e:7a:62:36:7c:0f:e2: 78:9e:e9:be:ac:75:9c:58:8e:90:b7:a4:a0:28:c6:76:10:c1: 83:33:fe:b5:a5:63:26:e8:2a:e4:a1:ba:0f:4f:de:3d:21:56: 44:60:b1:26:0a:be:f6:be:26:75:fd:70:e0:ba:c0:92:0f:9f: b9:13:2f:e5:8b:dc:84:1d:0b:02:a4:c1:62:14:a9:2f:3e:81: ff:69:cd:2d:5e:23:44:0f:45:b4:33:af:b5:66:8e:fc:c4:57: 02:1f:64:95:df:dd:e2:a5:7f:e3:1c:8f:43:8d:1c:02:38:21: b7:fe:01:1e:a0:6b:a3:90:70:48:c9:50:31:dc:1b:6d:35:d2: 00:15:60:86:54:ef:69:36:3d:8e:26:4b:39:7e:fd:52:75:da: aa:bf:7b:0c:90:3b:8c:68:b3:f3:f8:08:e6:22:ad:80:e8:2f: b4:97:43:8b -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHt4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA1MzNaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDc3Rjg0OTQ5QTg3N0Mw NkQ5RjA3OTUzODA3NEJEMDM5RjdCQUE3MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCXrlKhi9PPaivPMpdh5/qtmZX8GMMlCrnDDhf3ldkG23O2CaMU qkyKAAdaDJaZRHjJ6nFbe985ZRXHe7mw4CJQd8rOvcsgCZa74ldjLRXBR1JjOX5k 7KBlU8mGjprB1+rh5zF48tv5NVVXTb72D+qq0XxlumnpgvVAGNylLCqElGEn15nc 9EgSMyI2pRHUjjscBOo0fXD6vy0W4vOIsaBE3qFjle8iONTD6j+KO7PWXk2uqkjs ns6h7Y4ga/B1CBC2yoQw37aZDL5/mQCLhbL9ztNpl/lKIAddwi+ycQYQ7pj6zLMt wr19Q8nE4YrjoAGiXeI1PsX6GTYAgKd/+kwdAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUd/hJSah3wG2fB5U4B0vQOfe6pxEwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2RfaEpTYWgzd0cyZkI1 VTRCMHZRT2ZlNnB4RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIt/BQwDQYJKoZIhvcNAQELBQADggEBAJupz26t9cW1kXo4rvmBKS3sSeBSs8zU tJl6mc+TTIGWX1dP5AbVMDMFwVJcCCxnfG4VwcaqaZ8qBupdL9FjV+OTF7LtSw9n HYiIE5rzfMQQj5O5bnpiNnwP4nie6b6sdZxYjpC3pKAoxnYQwYMz/rWlYyboKuSh ug9P3j0hVkRgsSYKvva+JnX9cOC6wJIPn7kTL+WL3IQdCwKkwWIUqS8+gf9pzS1e I0QPRbQzr7VmjvzEVwIfZJXf3eKlf+Mcj0ONHAI4Ibf+AR6ga6OQcEjJUDHcG201 0gAVYIZU72k2PY4mSzl+/VJ12qq/ewyQO4xos/P4COYirYDoL7SXQ4s= -----END CERTIFICATE-----Generated at Sun Oct 26 11:48:00 2025 by rpki-client