$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/p3vCoCd7TFEK5AU0vWYzPK8Tpzc.roa File: p3vCoCd7TFEK5AU0vWYzPK8Tpzc.roa (raw, json) Hash identifier: KUlBWfAMk9YIvQN4eX+Bxf1bH7NZkLcO/Yy14HIiwos= Subject key identifier: A7:7B:C2:A0:27:7B:4C:51:0A:E4:05:34:BD:66:33:3C:AF:13:A7:37 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1E06 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/p3vCoCd7TFEK5AU0vWYzPK8Tpzc.roa Signing time: Sat 13 Sep 2025 03:04:48 +0000 ROA not before: Sat 13 Sep 2025 03:04:48 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 59083 IP address blocks: 202.136.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 12:36:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7686 (0x1e06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:04:48 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=A77BC2A0277B4C510AE40534BD66333CAF13A737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:70:51:22:29:33:2a:76:14:47:c2:9f:fe:5b: 25:88:48:8c:31:82:6d:f6:b9:ee:03:77:54:01:6c: a3:a6:ef:31:6a:85:ed:d2:10:7a:66:fb:0b:3d:9b: 1b:9c:29:62:7a:c0:c2:65:4e:c4:64:79:6e:34:42: 40:41:04:18:fc:b9:47:63:68:77:3f:d4:9a:ef:95: 5d:fb:63:2d:24:80:ea:1c:4f:6f:88:b8:ed:42:e6: 2a:b4:1d:ad:79:a7:86:9a:fa:af:38:87:e4:77:8e: c0:b8:98:0a:00:e9:df:09:1e:b3:89:5b:3c:78:17: 30:71:74:86:87:15:54:08:41:85:d5:0c:5f:6e:c9: 9f:1d:6b:5c:15:b6:8a:3d:d2:7a:65:d9:c9:36:c3: 97:a6:33:84:b2:5a:aa:c7:a8:ca:51:ac:13:f9:3f: 51:e0:e5:86:cb:f9:cf:d4:a6:35:54:93:1a:74:0b: c8:94:11:6d:d4:3e:ac:60:73:5c:f8:5e:d2:5c:cd: 3c:ca:e2:04:75:b0:f0:bd:64:c5:0f:43:61:06:e2: 2c:03:b9:a4:c4:21:4b:f9:3e:e2:6b:94:be:22:9e: fb:ef:09:15:1d:b9:a2:28:f6:08:66:ba:c9:fe:88: d9:f1:43:35:e3:22:d6:a5:cc:a1:d2:ca:83:91:e9: 9c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:7B:C2:A0:27:7B:4C:51:0A:E4:05:34:BD:66:33:3C:AF:13:A7:37 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/p3vCoCd7TFEK5AU0vWYzPK8Tpzc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.136.248.0/22 Signature Algorithm: sha256WithRSAEncryption 62:19:d7:1b:8a:ee:76:48:a1:0a:6e:36:70:93:f5:df:e8:7a: f4:84:27:43:ca:58:ad:78:31:4d:09:c4:f4:2e:b1:38:10:a7: a8:32:0b:46:ca:c8:bc:46:e2:a6:69:61:86:bd:62:b6:fa:ec: ad:57:01:ec:16:66:d2:e3:50:a4:de:a6:5d:32:5d:1b:0a:44: 02:fa:d4:0e:cb:b9:2b:b7:5a:dc:7b:39:c3:ab:7e:23:3c:3c: bb:ef:4f:9b:8d:85:d7:f8:22:41:8b:62:46:25:94:fb:80:aa: 99:04:fc:4b:0b:2b:80:a2:fd:2b:02:3b:8b:c6:16:c9:07:f3: eb:53:91:08:7e:bf:18:1e:5e:7d:b0:e3:a3:6f:2b:b0:d3:f1: 6b:33:02:f1:ef:e7:d0:3c:c7:e2:db:97:17:80:c3:15:3e:c5: 91:00:99:ca:cc:9c:0b:56:ac:ef:5a:c3:2f:ff:1a:66:ec:f3: dc:e5:d6:b0:3d:b2:3d:58:e0:ad:86:7d:ba:1a:5d:65:23:70: 84:4b:db:62:4c:4e:37:07:68:d9:72:84:7c:2b:4d:76:be:ac: 5f:f8:15:64:b9:2d:54:af:12:a6:97:aa:99:ce:b1:23:fe:99: e2:64:d2:55:d6:54:14:fa:f6:8d:d6:e9:03:ac:09:2b:da:7f: 2a:4d:e9:2d -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHgYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA0NDhaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEE3N0JDMkEwMjc3QjRD NTEwQUU0MDUzNEJENjYzMzNDQUYxM0E3MzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEcFEiKTMqdhRHwp/+WyWISIwxgm32ue4Dd1QBbKOm7zFqhe3S EHpm+ws9mxucKWJ6wMJlTsRkeW40QkBBBBj8uUdjaHc/1JrvlV37Yy0kgOocT2+I uO1C5iq0Ha15p4aa+q84h+R3jsC4mAoA6d8JHrOJWzx4FzBxdIaHFVQIQYXVDF9u yZ8da1wVtoo90npl2ck2w5emM4SyWqrHqMpRrBP5P1Hg5YbL+c/UpjVUkxp0C8iU EW3UPqxgc1z4XtJczTzK4gR1sPC9ZMUPQ2EG4iwDuaTEIUv5PuJrlL4invvvCRUd uaIo9ghmusn+iNnxQzXjItalzKHSyoOR6ZyfAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUp3vCoCd7TFEK5AU0vWYzPK8TpzcwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3AzdkNvQ2Q3VEZFSzVB VTB2V1l6UEs4VHB6Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BALKiPgwDQYJKoZIhvcNAQELBQADggEBAGIZ1xuK7nZIoQpuNnCT9d/oevSEJ0PK WK14MU0JxPQusTgQp6gyC0bKyLxG4qZpYYa9Yrb67K1XAewWZtLjUKTepl0yXRsK RAL61A7LuSu3Wtx7OcOrfiM8PLvvT5uNhdf4IkGLYkYllPuAqpkE/EsLK4Ci/SsC O4vGFskH8+tTkQh+vxgeXn2w46NvK7DT8WszAvHv59A8x+LblxeAwxU+xZEAmcrM nAtWrO9awy//Gmbs89zl1rA9sj1Y4K2GfboaXWUjcIRL22JMTjcHaNlyhHwrTXa+ rF/4FWS5LVSvEqaXqpnOsSP+meJk0lXWVBT69o3W6QOsCSvafypN6S0= -----END CERTIFICATE-----Generated at Sun Oct 26 11:50:57 2025 by rpki-client