$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/fvrQ3nC74Q0CbFk7UZAO-PKIfmM.roa File: fvrQ3nC74Q0CbFk7UZAO-PKIfmM.roa (raw, json) Hash identifier: sQJb+uqKOVGTnQVheAPz7Hwy0tPNHi2C2vGsOjDQSwE= Subject key identifier: 7E:FA:D0:DE:70:BB:E1:0D:02:6C:59:3B:51:90:0E:F8:F2:88:7E:63 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1E11 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/fvrQ3nC74Q0CbFk7UZAO-PKIfmM.roa Signing time: Sat 13 Sep 2025 03:04:49 +0000 ROA not before: Sat 13 Sep 2025 03:04:49 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 138527 IP address blocks: 45.252.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 12:36:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7697 (0x1e11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:04:49 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=7EFAD0DE70BBE10D026C593B51900EF8F2887E63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f0:0d:52:ba:5d:bc:66:42:38:30:e3:5f:91: 28:eb:ea:c6:cd:c6:af:cd:64:47:02:d5:48:b3:0b: 4f:3f:3c:5f:9b:47:64:c7:13:e2:4e:71:52:85:26: ce:6b:35:d3:5c:bb:9c:9f:96:7f:cb:8a:8c:c2:e0: 68:ac:ad:d1:f5:dc:e8:57:80:62:4b:7e:f5:29:a1: 02:6b:74:2b:6a:e2:3f:65:52:c0:fc:71:1e:0e:3a: 25:ba:6a:85:0e:bc:20:e7:12:31:53:b9:74:f9:bd: 7c:69:92:89:0d:8e:b6:62:89:3c:16:08:28:bb:4d: a2:31:a8:ee:56:35:1f:ce:41:b1:c6:74:ba:13:08: d8:9f:a4:e5:60:18:2b:aa:f7:bd:68:ae:16:4b:97: 58:8d:25:eb:a1:8e:d5:eb:3a:17:9b:c4:41:10:af: 7f:02:15:3f:41:bd:26:f0:6b:fa:06:7f:8b:b6:5b: 0b:47:cf:6f:cf:db:48:6e:e4:4f:05:61:4d:d2:da: b7:75:20:ee:f5:5c:cb:14:f2:e5:01:0f:aa:43:36: c9:89:ef:38:d4:3a:98:a7:a3:79:1d:26:2a:87:c4: 7a:21:52:32:b6:17:64:f8:dd:88:4f:8c:a1:38:df: f9:44:65:1c:ed:49:5a:d6:6c:37:a6:94:a9:93:c8: 15:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:FA:D0:DE:70:BB:E1:0D:02:6C:59:3B:51:90:0E:F8:F2:88:7E:63 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/fvrQ3nC74Q0CbFk7UZAO-PKIfmM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.48.0/22 Signature Algorithm: sha256WithRSAEncryption 9d:59:e8:87:b7:f0:a5:a5:c5:3a:14:dc:d8:81:bc:ac:fa:34: 9d:3b:3e:9b:3b:08:eb:06:f3:3f:e5:d9:6b:b5:11:4b:f3:5e: 87:3b:15:23:3e:f2:fc:f4:f0:b4:03:a6:7d:7e:7f:02:ee:e8: 2f:13:81:cd:c1:11:4d:c6:61:a0:88:fe:6e:b6:72:5e:ac:f0: f5:77:5c:dd:16:fb:1e:08:4a:29:d8:a6:0a:3f:fc:ef:d7:fe: a6:1c:36:c1:ca:2c:02:d7:aa:c0:c6:b1:9a:e1:d7:c8:e5:d4: 81:21:00:11:ca:8e:4f:c8:02:f5:18:30:15:df:d0:b9:59:bd: 5a:3a:d9:75:08:c4:02:cf:34:29:ad:4a:88:25:31:ad:71:7f: ab:2e:ae:48:3d:d7:4d:36:0c:fb:6b:05:4b:fb:f6:b1:ae:2b: 16:12:d2:7b:0e:44:81:ff:01:12:24:08:15:33:4d:ff:01:74: 83:be:0e:ba:c0:b7:23:88:18:6d:e7:0b:9e:5c:10:79:0c:90: 9f:9f:11:fd:d4:81:89:c5:4b:35:a1:a7:1c:2f:f2:71:2f:e8: d5:be:26:80:80:74:10:4c:a3:7e:fc:a4:9a:c0:a1:16:52:34: bb:5e:c2:6a:14:ed:c0:36:71:b3:84:86:48:41:87:8a:ad:54: 47:c8:8d:44 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHhEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA0NDlaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDdFRkFEMERFNzBCQkUx MEQwMjZDNTkzQjUxOTAwRUY4RjI4ODdFNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDA8A1Sul28ZkI4MONfkSjr6sbNxq/NZEcC1UizC08/PF+bR2TH E+JOcVKFJs5rNdNcu5yfln/LiozC4GisrdH13OhXgGJLfvUpoQJrdCtq4j9lUsD8 cR4OOiW6aoUOvCDnEjFTuXT5vXxpkokNjrZiiTwWCCi7TaIxqO5WNR/OQbHGdLoT CNifpOVgGCuq971orhZLl1iNJeuhjtXrOhebxEEQr38CFT9BvSbwa/oGf4u2WwtH z2/P20hu5E8FYU3S2rd1IO71XMsU8uUBD6pDNsmJ7zjUOpino3kdJiqHxHohUjK2 F2T43YhPjKE43/lEZRztSVrWbDemlKmTyBW7AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUfvrQ3nC74Q0CbFk7UZAO+PKIfmMwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2Z2clEzbkM3NFEwQ2JG azdVWkFPLVBLSWZtTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIt/DAwDQYJKoZIhvcNAQELBQADggEBAJ1Z6Ie38KWlxToU3NiBvKz6NJ07Pps7 COsG8z/l2Wu1EUvzXoc7FSM+8vz08LQDpn1+fwLu6C8Tgc3BEU3GYaCI/m62cl6s 8PV3XN0W+x4ISinYpgo//O/X/qYcNsHKLALXqsDGsZrh18jl1IEhABHKjk/IAvUY MBXf0LlZvVo62XUIxALPNCmtSoglMa1xf6surkg91002DPtrBUv79rGuKxYS0nsO RIH/ARIkCBUzTf8BdIO+DrrAtyOIGG3nC55cEHkMkJ+fEf3UgYnFSzWhpxwv8nEv 6NW+JoCAdBBMo378pJrAoRZSNLtewmoU7cA2cbOEhkhBh4qtVEfIjUQ= -----END CERTIFICATE-----Generated at Sun Oct 26 11:45:03 2025 by rpki-client