$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/jKYF3GDdhkahDJsMdLJScavHvEw.roa File: jKYF3GDdhkahDJsMdLJScavHvEw.roa (raw, json) Hash identifier: DFbH+EFA0A2nQJ3c0G/MwCmGeUgJ1yqaptR0BASAt1s= Subject key identifier: 8C:A6:05:DC:60:DD:86:46:A1:0C:9B:0C:74:B2:52:71:AB:C7:BC:4C Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1CB0 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/jKYF3GDdhkahDJsMdLJScavHvEw.roa Signing time: Thu 17 Jul 2025 03:51:38 +0000 ROA not before: Thu 17 Jul 2025 03:51:38 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 394881 IP address blocks: 103.221.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 12:36:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7344 (0x1cb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jul 17 03:51:38 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=8CA605DC60DD8646A10C9B0C74B25271ABC7BC4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5f:8a:1a:8d:a0:2b:04:ac:30:35:0f:4c:6f: 41:05:ff:ef:18:f5:34:02:8d:20:be:e5:c8:25:4b: c3:b2:a6:ec:49:95:d5:22:b4:d7:a0:d4:45:d7:33: 7d:51:00:31:50:48:dc:73:c9:07:57:92:bf:96:fa: b3:1e:32:42:b4:40:ac:e9:33:9b:9f:3d:f7:ab:74: 60:a5:40:09:ac:12:cc:77:94:ed:8b:ac:40:c5:de: 62:b2:75:dd:c7:3c:f4:0c:36:3e:06:26:cb:7f:97: 01:83:4b:9e:a6:e5:57:bb:50:2b:7e:ac:84:c1:b3: d9:59:b4:03:42:25:10:2e:b4:99:bc:5a:9e:51:6c: 73:bb:d8:be:4a:a2:2a:5b:c5:91:38:9a:27:e1:7d: e7:cf:60:47:65:15:80:95:6b:19:59:1d:38:2b:70: 41:4e:44:08:90:5a:9d:02:51:e0:b3:ec:4d:fd:2c: 3a:7f:e7:fa:e5:9e:7a:9d:cb:ae:e4:74:ab:d9:35: 0f:41:df:ea:d6:bb:67:0b:7a:e1:e8:07:80:4c:51: 89:2c:fc:8a:4c:dd:7d:20:64:a1:27:d2:52:41:58: 71:52:c8:01:e6:40:2e:7d:82:c7:db:aa:7f:80:ed: d2:9f:4b:6d:20:ec:d7:e6:d5:57:83:a9:5f:b3:c5: 97:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:A6:05:DC:60:DD:86:46:A1:0C:9B:0C:74:B2:52:71:AB:C7:BC:4C X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/jKYF3GDdhkahDJsMdLJScavHvEw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.12.0/22 Signature Algorithm: sha256WithRSAEncryption 3f:4a:1e:32:a7:c8:14:6e:cf:af:b9:32:9f:12:ca:3b:f5:a4: e6:8d:cc:02:2e:09:37:18:2a:76:a9:fd:93:a5:87:f0:d2:56: 64:39:08:28:5c:5c:94:ce:22:e5:cb:ff:0a:e8:a4:c6:03:94: 4e:f6:53:b9:2c:d5:e0:11:63:6b:6a:8f:69:47:03:38:0f:b0: e5:af:86:18:93:85:41:b7:55:9e:60:b4:9b:b6:ae:75:fe:25: 08:38:42:15:49:20:77:c1:07:2c:c8:b1:d5:f0:17:67:ec:ca: dd:98:07:2c:66:7c:b7:53:11:86:de:a9:91:11:1a:cb:3b:4e: 4a:10:ae:4d:be:58:14:29:7c:3a:35:0e:7f:cf:c5:0e:4e:7d: ed:31:56:4a:22:65:3f:a2:11:bf:56:97:40:bb:00:76:69:b4: f1:0d:3f:1c:aa:62:d9:5a:69:34:d9:3e:76:93:36:c5:52:36: 57:c9:46:cc:75:5b:b2:94:09:ad:da:69:13:74:ee:9f:01:4d: 4c:83:53:1b:78:29:b8:e3:75:7a:84:65:f7:5f:e6:60:f2:fb: 41:24:66:4e:35:26:fe:3f:5a:90:e9:2a:15:73:63:b9:71:a1: a1:ce:f7:d7:ca:23:04:a5:ae:5d:35:9d:c5:40:0f:d7:82:41: af:2f:21:c4 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHLAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA3MTcw MzUxMzhaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDhDQTYwNURDNjBERDg2 NDZBMTBDOUIwQzc0QjI1MjcxQUJDN0JDNEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkX4oajaArBKwwNQ9Mb0EF/+8Y9TQCjSC+5cglS8OypuxJldUi tNeg1EXXM31RADFQSNxzyQdXkr+W+rMeMkK0QKzpM5ufPferdGClQAmsEsx3lO2L rEDF3mKydd3HPPQMNj4GJst/lwGDS56m5Ve7UCt+rITBs9lZtANCJRAutJm8Wp5R bHO72L5KoipbxZE4mifhfefPYEdlFYCVaxlZHTgrcEFORAiQWp0CUeCz7E39LDp/ 5/rlnnqdy67kdKvZNQ9B3+rWu2cLeuHoB4BMUYks/IpM3X0gZKEn0lJBWHFSyAHm QC59gsfbqn+A7dKfS20g7Nfm1VeDqV+zxZeDAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUjKYF3GDdhkahDJsMdLJScavHvEwwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2pLWUYzR0RkaGthaERK c01kTEpTY2F2SHZFdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn3QwwDQYJKoZIhvcNAQELBQADggEBAD9KHjKnyBRuz6+5Mp8Syjv1pOaNzAIu CTcYKnap/ZOlh/DSVmQ5CChcXJTOIuXL/wropMYDlE72U7ks1eARY2tqj2lHAzgP sOWvhhiThUG3VZ5gtJu2rnX+JQg4QhVJIHfBByzIsdXwF2fsyt2YByxmfLdTEYbe qZERGss7TkoQrk2+WBQpfDo1Dn/PxQ5Ofe0xVkoiZT+iEb9Wl0C7AHZptPENPxyq YtlaaTTZPnaTNsVSNlfJRsx1W7KUCa3aaRN07p8BTUyDUxt4KbjjdXqEZfdf5mDy +0EkZk41Jv4/WpDpKhVzY7lxoaHO99fKIwSlrl01ncVAD9eCQa8vIcQ= -----END CERTIFICATE-----Generated at Sun Oct 26 11:47:27 2025 by rpki-client