$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/lyJKu6ByFyNLBSO_xZEYbK9kGrE.roa File: lyJKu6ByFyNLBSO_xZEYbK9kGrE.roa (raw, json) Hash identifier: A8dqlrmGpLU1bg7W4E2RHf0wHj1ECpx+D77W5erGfks= Subject key identifier: 97:22:4A:BB:A0:72:17:23:4B:05:23:BF:C5:91:18:6C:AF:64:1A:B1 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1E23 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/lyJKu6ByFyNLBSO_xZEYbK9kGrE.roa Signing time: Sat 13 Sep 2025 03:04:52 +0000 ROA not before: Sat 13 Sep 2025 03:04:52 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 139259 IP address blocks: 103.221.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 12:36:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7715 (0x1e23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:04:52 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=97224ABBA07217234B0523BFC591186CAF641AB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:93:72:72:9e:3c:df:02:f6:99:5f:c3:5b:19: e8:11:e7:4a:e2:f8:e6:f2:25:2f:5e:dd:44:d8:23: 66:ff:ea:4b:3d:35:fa:05:a6:a9:8a:0d:8a:0f:ea: 27:57:c8:56:c4:1d:44:55:09:44:57:77:3d:d2:b9: 5a:06:e7:3e:a6:c7:6b:76:8d:1e:90:90:a2:7a:b3: 0c:30:f5:f9:04:8b:6a:d5:9a:27:34:13:4f:b5:14: 69:0c:57:e5:e5:78:81:23:01:e2:a0:38:ba:9b:fd: 40:41:1b:1e:fd:f4:0f:f6:01:fd:63:29:fe:29:1b: 67:c7:5a:51:83:a2:1b:ca:aa:63:ca:cc:72:73:61: 09:e5:82:6c:09:93:af:3c:57:dd:20:8a:08:02:3c: 5c:0c:bc:24:6d:97:25:4a:4b:26:a7:15:fd:fa:1a: 5b:67:94:6b:3a:65:f2:85:79:c5:91:7d:8f:b9:9a: 56:c9:f8:ef:d0:22:d3:ff:7c:f2:84:a2:b6:80:64: 56:8a:e6:3f:86:f1:97:39:7e:0f:b2:a1:7b:33:4a: f6:6a:bb:30:98:5d:8a:e9:42:bb:c6:02:ff:e3:37: ea:a9:26:8c:8c:ef:22:db:76:dd:77:3e:ec:ea:ce: 29:ae:35:db:ae:26:6f:11:26:74:5d:54:36:d0:94: 5c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:22:4A:BB:A0:72:17:23:4B:05:23:BF:C5:91:18:6C:AF:64:1A:B1 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/lyJKu6ByFyNLBSO_xZEYbK9kGrE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.44.0/24 Signature Algorithm: sha256WithRSAEncryption ad:bd:ee:86:a6:07:42:88:e6:17:fe:da:5e:27:5d:60:17:e6: 79:9c:a4:19:d6:a7:f2:b4:19:0d:76:a6:35:4a:25:7b:e9:20: 65:0d:2a:4c:c0:af:e5:df:3c:00:c7:0e:96:fa:06:1b:74:e5: 14:ba:c3:4f:c9:ca:0b:9f:fd:6e:79:e0:ff:7d:dd:c8:0f:da: f1:70:83:04:db:8a:d5:8e:3f:64:60:b0:2f:aa:73:b6:d6:aa: cc:eb:e2:d3:e0:f2:74:54:41:e7:fc:83:e9:34:7b:b3:84:f5: ec:b9:15:15:6e:c2:43:df:1e:26:88:10:78:17:fa:49:5c:a5: 29:9c:97:5e:07:88:da:34:47:f5:84:65:8c:56:31:69:b1:d6: 05:6e:f4:8a:08:70:3b:db:1e:c9:fc:a0:88:f7:0a:ec:34:d4: 48:4d:41:4d:97:2f:be:e1:ce:e9:2f:17:7e:e5:59:ae:23:65: 3c:16:e4:f5:3e:09:33:53:04:4c:62:bc:f7:39:80:a6:93:eb: 05:e8:95:86:95:4c:65:0e:a2:21:28:67:f7:5d:ae:4a:33:b8: 3d:32:b5:75:af:b8:fd:ee:a4:03:9c:cd:9d:94:f8:ae:6b:0e: f2:f4:b0:6d:ac:c3:88:64:17:2e:df:ef:d6:8c:3b:ad:d8:99: 1d:fb:fc:60 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHiMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA0NTJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDk3MjI0QUJCQTA3MjE3 MjM0QjA1MjNCRkM1OTExODZDQUY2NDFBQjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0k3JynjzfAvaZX8NbGegR50ri+ObyJS9e3UTYI2b/6ks9NfoF pqmKDYoP6idXyFbEHURVCURXdz3SuVoG5z6mx2t2jR6QkKJ6swww9fkEi2rVmic0 E0+1FGkMV+XleIEjAeKgOLqb/UBBGx799A/2Af1jKf4pG2fHWlGDohvKqmPKzHJz YQnlgmwJk688V90giggCPFwMvCRtlyVKSyanFf36GltnlGs6ZfKFecWRfY+5mlbJ +O/QItP/fPKEoraAZFaK5j+G8Zc5fg+yoXszSvZquzCYXYrpQrvGAv/jN+qpJoyM 7yLbdt13PuzqzimuNduuJm8RJnRdVDbQlFzJAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUlyJKu6ByFyNLBSO/xZEYbK9kGrEwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2x5Skt1NkJ5RnlOTEJT T194WkVZYks5a0dyRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3SwwDQYJKoZIhvcNAQELBQADggEBAK297oamB0KI5hf+2l4nXWAX5nmcpBnW p/K0GQ12pjVKJXvpIGUNKkzAr+XfPADHDpb6Bht05RS6w0/Jyguf/W554P993cgP 2vFwgwTbitWOP2RgsC+qc7bWqszr4tPg8nRUQef8g+k0e7OE9ey5FRVuwkPfHiaI EHgX+klcpSmcl14HiNo0R/WEZYxWMWmx1gVu9IoIcDvbHsn8oIj3Cuw01EhNQU2X L77hzukvF37lWa4jZTwW5PU+CTNTBExivPc5gKaT6wXolYaVTGUOoiEoZ/ddrkoz uD0ytXWvuP3upAOczZ2U+K5rDvL0sG2sw4hkFy7f79aMO63YmR37/GA= -----END CERTIFICATE-----Generated at Sun Oct 26 11:45:01 2025 by rpki-client