$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/de9i6WpLeKUw8iuBz6QqVoOH9jo.roa File: de9i6WpLeKUw8iuBz6QqVoOH9jo.roa (raw, json) Hash identifier: gS2rGHn2r6cDE5lN4IYt0B3vFl5GNKXT2onJNYwWLuk= Subject key identifier: 75:EF:62:E9:6A:4B:78:A5:30:F2:2B:81:CF:A4:2A:56:83:87:F6:3A Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1E29 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/de9i6WpLeKUw8iuBz6QqVoOH9jo.roa Signing time: Sat 13 Sep 2025 03:04:53 +0000 ROA not before: Sat 13 Sep 2025 03:04:53 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 13444 IP address blocks: 103.6.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7721 (0x1e29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:04:53 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=75EF62E96A4B78A530F22B81CFA42A568387F63A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:cd:89:ab:0e:ea:db:aa:6e:2e:13:cd:d9:f1: 54:3f:7a:f4:41:b5:08:a8:e1:65:05:72:1a:6e:03: 33:65:69:93:65:21:da:62:4a:24:b5:79:f2:7e:89: b9:ca:90:28:4e:c9:bd:ae:e1:cd:a1:91:b0:6f:22: f6:e7:ea:80:50:78:18:62:3d:ce:62:84:74:f8:85: 25:e6:bf:71:cf:41:ee:a7:81:76:b4:c2:2f:41:f6: 32:f5:ab:1c:a3:38:f6:47:ed:7a:d5:d7:44:28:0b: 4f:2c:f3:d5:fb:ab:08:8c:2f:ed:59:43:8a:8b:ff: 9d:99:ca:c2:f1:9e:b7:2e:67:23:6c:2a:5a:a8:d7: 2c:81:f4:d3:2f:25:fd:93:43:41:2e:1f:16:2d:90: 7c:49:29:38:e7:12:b2:f0:37:4e:d3:5b:b1:93:c1: 9f:1e:41:30:18:a8:93:3f:3e:d1:2a:5f:d7:b7:60: 50:98:9a:41:dd:e6:b5:1a:2f:05:27:7b:0a:b3:81: ee:e8:ba:fa:fb:b0:cf:d0:4d:68:7b:e9:15:dd:da: 9a:43:1c:90:a3:9c:ed:83:42:7e:e4:81:de:e8:02: 06:0d:98:cd:c7:14:cf:6c:7e:67:33:5d:af:cc:bf: d4:0d:85:bd:52:4f:77:0a:d6:0b:9e:0a:36:2d:12: e3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:EF:62:E9:6A:4B:78:A5:30:F2:2B:81:CF:A4:2A:56:83:87:F6:3A X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/de9i6WpLeKUw8iuBz6QqVoOH9jo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.6.111.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:ff:be:26:b6:d8:33:5e:3d:7a:7b:16:82:7d:52:9b:0f:72: 70:44:5a:91:67:b9:09:7b:27:76:14:db:b0:13:05:4a:76:d4: f1:c6:32:99:4b:d3:7d:c6:01:33:65:bc:ad:7a:e7:89:c0:c6: 7e:f9:7f:91:f2:a8:70:3e:07:52:22:a1:29:69:39:29:e4:ca: 43:1b:02:8a:32:fd:82:b6:b6:a4:58:51:ad:9e:3b:4e:fb:92: c5:a5:61:94:06:15:7f:31:37:0d:bd:45:2e:26:04:cf:c4:81: 4d:a5:20:73:98:f0:b2:1e:f2:61:69:37:57:83:23:11:dd:c9: 2a:32:ee:d1:3a:de:20:fd:47:71:c8:d7:49:64:79:a8:32:46: 41:08:77:63:26:76:23:b2:ab:97:f1:5b:53:40:cc:0f:c3:89: 61:39:22:5c:7f:63:1e:7f:2f:88:8b:e2:cd:b6:19:db:a9:61: 83:70:75:bb:e7:22:ae:00:7b:bf:f7:b1:68:a5:17:44:ed:37: eb:b4:c9:a7:6b:40:b0:a9:de:1c:44:d1:25:e4:f9:9f:05:e0: 5a:e1:cf:96:20:ca:80:98:de:65:89:db:6e:04:f2:8a:79:aa: 0b:c5:c0:51:0e:2b:50:d6:ef:22:ec:59:a8:e7:91:d8:ec:16: 5c:fe:30:5f -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHikwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA0NTNaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDc1RUY2MkU5NkE0Qjc4 QTUzMEYyMkI4MUNGQTQyQTU2ODM4N0Y2M0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqzYmrDurbqm4uE83Z8VQ/evRBtQio4WUFchpuAzNlaZNlIdpi SiS1efJ+ibnKkChOyb2u4c2hkbBvIvbn6oBQeBhiPc5ihHT4hSXmv3HPQe6ngXa0 wi9B9jL1qxyjOPZH7XrV10QoC08s89X7qwiML+1ZQ4qL/52ZysLxnrcuZyNsKlqo 1yyB9NMvJf2TQ0EuHxYtkHxJKTjnErLwN07TW7GTwZ8eQTAYqJM/PtEqX9e3YFCY mkHd5rUaLwUnewqzge7ouvr7sM/QTWh76RXd2ppDHJCjnO2DQn7kgd7oAgYNmM3H FM9sfmczXa/Mv9QNhb1ST3cK1gueCjYtEuP9AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUde9i6WpLeKUw8iuBz6QqVoOH9jowHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2RlOWk2V3BMZUtVdzhp dUJ6NlFxVm9PSDlqby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnBm8wDQYJKoZIhvcNAQELBQADggEBAIv/via22DNePXp7FoJ9UpsPcnBEWpFn uQl7J3YU27ATBUp21PHGMplL033GATNlvK1654nAxn75f5HyqHA+B1IioSlpOSnk ykMbAooy/YK2tqRYUa2eO077ksWlYZQGFX8xNw29RS4mBM/EgU2lIHOY8LIe8mFp N1eDIxHdySoy7tE63iD9R3HI10lkeagyRkEId2MmdiOyq5fxW1NAzA/DiWE5Ilx/ Yx5/L4iL4s22GdupYYNwdbvnIq4Ae7/3sWilF0TtN+u0yadrQLCp3hxE0SXk+Z8F 4Frhz5YgyoCY3mWJ224E8op5qgvFwFEOK1DW7yLsWajnkdjsFlz+MF8= -----END CERTIFICATE-----Generated at Sun Oct 26 07:17:59 2025 by rpki-client