$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/kH0BO1uFvtT7sbmTsDL1R3Xuzf8.roa File: kH0BO1uFvtT7sbmTsDL1R3Xuzf8.roa (raw, json) Hash identifier: oo+MOqYg0/GZuZG2HPzXaE3CigSlGGRsoh2UASI7fII= Subject key identifier: 90:7D:01:3B:5B:85:BE:D4:FB:B1:B9:93:B0:32:F5:47:75:EE:CD:FF Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1EDD Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/kH0BO1uFvtT7sbmTsDL1R3Xuzf8.roa Signing time: Sat 13 Sep 2025 03:05:33 +0000 ROA not before: Sat 13 Sep 2025 03:05:33 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 139259 IP address blocks: 103.221.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 12:36:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7901 (0x1edd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:05:33 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=907D013B5B85BED4FBB1B993B032F54775EECDFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7c:1e:db:48:50:a0:92:4a:af:3e:92:0a:74: 47:89:72:32:bb:21:db:c7:24:56:c5:de:f5:fa:87: 3f:71:71:4c:f0:c3:49:81:c6:40:a4:aa:5c:21:7e: 9d:77:05:88:2a:c9:0b:2a:18:05:66:3c:d8:76:4a: 17:b0:12:e6:1f:ff:23:26:9c:84:96:94:c7:2f:01: 59:3e:a9:b7:08:3a:dc:fb:3c:b1:32:d8:ba:88:27: 88:2d:5b:c2:d0:2a:e3:28:ca:4c:78:08:04:79:02: 7f:98:34:bf:d0:e1:a9:cd:1e:6c:44:71:42:f0:e1: 25:0a:12:08:1b:55:2f:83:cd:bc:dc:34:ea:05:27: bb:78:3c:88:3c:27:d9:a2:5b:9b:cb:28:f0:50:fb: 22:37:92:30:2e:9f:d2:72:f6:74:98:10:69:16:01: 6d:fd:10:84:bc:0e:40:73:6f:1b:6a:f4:6d:0c:0c: 8e:68:5f:05:c9:50:1f:32:03:ad:53:f3:d8:48:56: 1c:af:4f:0d:23:df:fa:d0:22:e9:a2:c5:e9:92:dc: a7:00:aa:ce:8a:91:4b:53:50:e3:ae:2a:87:30:78: f6:9b:b5:dc:aa:b6:e0:ba:07:7d:75:03:86:e6:15: 8d:e5:bb:15:9a:ec:37:75:f0:55:c2:5f:de:20:48: f6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:7D:01:3B:5B:85:BE:D4:FB:B1:B9:93:B0:32:F5:47:75:EE:CD:FF X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/kH0BO1uFvtT7sbmTsDL1R3Xuzf8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.40.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:20:22:c0:a0:cd:51:5c:c3:00:09:df:48:a2:2f:e8:60:7f: 71:ae:6e:e6:a3:14:db:61:c1:8a:d9:7b:76:b2:51:f3:48:b8: b0:72:22:8a:be:d6:49:f3:29:5d:3a:6d:27:e4:4d:43:1b:52: f2:74:61:4f:b5:88:75:6f:ef:47:40:4e:85:ac:6c:ce:f7:74: 08:69:f4:00:40:e0:95:18:a2:8c:63:4f:a3:2d:b8:7b:85:8a: 5c:f3:fb:af:ed:7e:f7:13:9e:f9:91:0a:56:fe:b2:e6:b9:9e: 37:78:d1:68:d9:13:3f:c4:21:21:d1:88:2c:e9:7a:b0:aa:5a: bb:a5:d8:9f:16:fb:23:1e:88:10:82:65:cf:08:c2:6e:64:6b: 91:a5:af:30:38:08:39:3d:fc:64:6f:a6:29:da:04:ca:87:9a: 30:be:c7:97:a5:44:cd:6e:76:dc:20:73:3c:21:50:8e:5a:9c: 74:f6:df:84:b0:b7:a7:bc:68:73:76:84:45:7a:75:6a:9f:70: 15:32:38:66:b6:43:3f:ef:38:4e:87:0b:df:54:26:51:c7:37: 34:82:80:0f:48:9b:93:47:ff:cf:06:ad:d6:63:a8:03:9a:26: 5f:f1:89:93:db:80:19:e4:35:a3:43:c6:22:6a:65:e0:ae:19: 7d:a4:ce:8f -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHt0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA1MzNaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDkwN0QwMTNCNUI4NUJF RDRGQkIxQjk5M0IwMzJGNTQ3NzVFRUNERkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/fB7bSFCgkkqvPpIKdEeJcjK7IdvHJFbF3vX6hz9xcUzww0mB xkCkqlwhfp13BYgqyQsqGAVmPNh2ShewEuYf/yMmnISWlMcvAVk+qbcIOtz7PLEy 2LqIJ4gtW8LQKuMoykx4CAR5An+YNL/Q4anNHmxEcULw4SUKEggbVS+DzbzcNOoF J7t4PIg8J9miW5vLKPBQ+yI3kjAun9Jy9nSYEGkWAW39EIS8DkBzbxtq9G0MDI5o XwXJUB8yA61T89hIVhyvTw0j3/rQIumixemS3KcAqs6KkUtTUOOuKocwePabtdyq tuC6B311A4bmFY3luxWa7Dd18FXCX94gSPYFAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUkH0BO1uFvtT7sbmTsDL1R3Xuzf8wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2tIMEJPMXVGdnRUN3Ni bVRzREwxUjNYdXpmOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3SgwDQYJKoZIhvcNAQELBQADggEBAA4gIsCgzVFcwwAJ30iiL+hgf3Gubuaj FNthwYrZe3ayUfNIuLByIoq+1knzKV06bSfkTUMbUvJ0YU+1iHVv70dAToWsbM73 dAhp9ABA4JUYooxjT6MtuHuFilzz+6/tfvcTnvmRClb+sua5njd40WjZEz/EISHR iCzperCqWrul2J8W+yMeiBCCZc8Iwm5ka5GlrzA4CDk9/GRvpinaBMqHmjC+x5el RM1udtwgczwhUI5anHT234Swt6e8aHN2hEV6dWqfcBUyOGa2Qz/vOE6HC99UJlHH NzSCgA9Im5NH/88GrdZjqAOaJl/xiZPbgBnkNaNDxiJqZeCuGX2kzo8= -----END CERTIFICATE-----Generated at Sun Oct 26 11:50:56 2025 by rpki-client