$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/nIc1d1kiJLIGKL58Y_SzKyMAQGo.roa File: nIc1d1kiJLIGKL58Y_SzKyMAQGo.roa (raw, json) Hash identifier: YhAydR34w1HHDfOETImGGjinuPHHB6L1+ZRPNl/Es1c= Subject key identifier: 9C:87:35:77:59:22:24:B2:06:28:BE:7C:63:F4:B3:2B:23:00:40:6A Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1E83 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/nIc1d1kiJLIGKL58Y_SzKyMAQGo.roa Signing time: Sat 13 Sep 2025 03:05:13 +0000 ROA not before: Sat 13 Sep 2025 03:05:13 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 139259 IP address blocks: 103.220.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 12:36:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7811 (0x1e83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:05:13 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=9C873577592224B20628BE7C63F4B32B2300406A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:95:6e:1d:3f:a7:5b:fd:58:38:c5:50:4b:80: 73:4d:9d:8f:3a:1e:c1:78:5f:ed:5e:3f:cc:5c:68: 53:b0:07:c6:26:34:4d:ea:54:7c:0c:d2:09:04:d7: cd:c1:64:dc:08:63:69:d0:2c:77:15:0f:4d:6f:0e: ab:9b:78:dc:3b:2a:02:f6:ab:db:f4:83:9a:31:99: f2:93:8f:07:d9:8b:c1:15:52:75:81:a8:2e:3a:7c: 99:83:5f:fd:ad:e8:b1:e8:95:9e:50:3e:ea:c8:9d: 1b:e7:a0:3a:cb:d3:36:48:dd:cf:89:d2:bb:52:73: 79:04:57:e1:09:1e:a5:54:44:af:e3:b2:6c:10:63: 22:00:b3:0b:db:62:fc:58:76:f5:3d:10:95:15:bf: 3e:36:d7:69:d1:5b:88:d9:db:da:86:2c:ec:fb:68: 6a:33:ca:72:57:fd:84:00:d5:69:86:ff:29:c5:a2: 0f:a9:34:77:ae:d5:1c:32:c5:a8:79:ca:12:e9:1c: 98:52:30:9b:e3:68:f2:cc:4e:4f:8f:05:3b:cc:75: a1:c7:b7:47:88:8e:82:86:8f:c0:58:0c:0b:6e:ac: 0b:15:b4:3c:87:0a:93:b7:82:e3:fd:82:12:c0:82: b1:4a:87:15:50:6c:59:74:a1:a0:b1:5d:b8:b9:24: 73:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:87:35:77:59:22:24:B2:06:28:BE:7C:63:F4:B3:2B:23:00:40:6A X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/nIc1d1kiJLIGKL58Y_SzKyMAQGo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.220.254.0/24 Signature Algorithm: sha256WithRSAEncryption d1:ea:c8:76:21:27:2c:61:42:ab:60:5e:bc:80:cb:00:dd:76: 6f:09:75:b5:0f:be:48:4c:ff:b0:11:cd:21:a2:21:d3:33:b7: 44:27:21:3a:8d:fe:e0:47:c5:93:17:f4:e3:39:0b:9b:32:ed: bb:be:57:b0:ba:75:db:d6:05:d1:16:1e:b9:26:38:64:8b:ea: 2a:90:8f:e6:69:d1:7d:50:cc:b6:69:43:3a:13:c7:68:28:e9: 1f:82:5f:5d:75:e3:a9:6b:36:fd:07:15:71:07:21:7a:2d:f9: 15:dc:31:a6:f9:10:97:d2:34:65:c2:6b:65:1d:7f:ff:a1:f7: 13:6d:f1:be:c3:2c:fd:29:59:a8:94:95:90:f2:ad:25:7b:c7: 41:a9:08:7f:50:e4:8a:9a:c4:ea:6a:12:d3:72:0a:2b:f5:d5: fe:e3:98:15:38:f9:8c:60:bb:31:a3:3e:0f:c5:bd:5f:b1:b0: fa:a5:8d:de:3a:7e:60:92:f6:69:2c:18:84:70:d8:ac:c1:5d: ef:58:ca:79:5f:c2:a1:86:76:5b:1a:fc:25:7c:c6:d5:24:30: 38:8a:2c:0b:e8:1f:ef:9c:f0:f2:4e:7b:9b:4a:48:0e:dc:9c: 67:69:78:11:0f:ff:7d:33:0a:4d:86:79:ee:8c:a7:83:28:78: ce:95:04:4a -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHoMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA1MTNaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDlDODczNTc3NTkyMjI0 QjIwNjI4QkU3QzYzRjRCMzJCMjMwMDQwNkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOlW4dP6db/Vg4xVBLgHNNnY86HsF4X+1eP8xcaFOwB8YmNE3q VHwM0gkE183BZNwIY2nQLHcVD01vDqubeNw7KgL2q9v0g5oxmfKTjwfZi8EVUnWB qC46fJmDX/2t6LHolZ5QPurInRvnoDrL0zZI3c+J0rtSc3kEV+EJHqVURK/jsmwQ YyIAswvbYvxYdvU9EJUVvz4212nRW4jZ29qGLOz7aGozynJX/YQA1WmG/ynFog+p NHeu1Rwyxah5yhLpHJhSMJvjaPLMTk+PBTvMdaHHt0eIjoKGj8BYDAturAsVtDyH CpO3guP9ghLAgrFKhxVQbFl0oaCxXbi5JHOJAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUnIc1d1kiJLIGKL58Y/SzKyMAQGowHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L25JYzFkMWtpSkxJR0tM NThZX1N6S3lNQVFHby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3P4wDQYJKoZIhvcNAQELBQADggEBANHqyHYhJyxhQqtgXryAywDddm8JdbUP vkhM/7ARzSGiIdMzt0QnITqN/uBHxZMX9OM5C5sy7bu+V7C6ddvWBdEWHrkmOGSL 6iqQj+Zp0X1QzLZpQzoTx2go6R+CX11146lrNv0HFXEHIXot+RXcMab5EJfSNGXC a2Udf/+h9xNt8b7DLP0pWaiUlZDyrSV7x0GpCH9Q5IqaxOpqEtNyCiv11f7jmBU4 +YxguzGjPg/FvV+xsPqljd46fmCS9mksGIRw2KzBXe9YynlfwqGGdlsa/CV8xtUk MDiKLAvoH++c8PJOe5tKSA7cnGdpeBEP/30zCk2Gee6Mp4MoeM6VBEo= -----END CERTIFICATE-----Generated at Sun Oct 26 11:44:22 2025 by rpki-client