$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/pgtIiqNKCrGGIh86gto-6Hpjk1w.roa File: pgtIiqNKCrGGIh86gto-6Hpjk1w.roa (raw, json) Hash identifier: Ikm8OYmVugrTNjEfLMGQd4xr4ownlVD8inFp+dPXQZY= Subject key identifier: A6:0B:48:8A:A3:4A:0A:B1:86:22:1F:3A:82:DA:3E:E8:7A:63:93:5C Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1EA9 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/pgtIiqNKCrGGIh86gto-6Hpjk1w.roa Signing time: Sat 13 Sep 2025 03:05:21 +0000 ROA not before: Sat 13 Sep 2025 03:05:21 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 13444 IP address blocks: 103.221.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7849 (0x1ea9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:05:21 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=A60B488AA34A0AB186221F3A82DA3EE87A63935C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:82:ab:71:e9:43:fa:4b:d4:2d:31:94:07:c6: 1b:c8:88:63:c5:45:61:23:3b:72:f2:15:57:fa:95: a4:02:54:9f:ec:8e:59:72:46:2a:88:b7:98:2d:c6: ea:ee:e5:d4:a8:83:c5:ba:03:04:4e:ef:a4:01:82: 3d:12:89:e0:b1:ab:e9:bd:66:12:ec:46:b9:63:16: 7c:11:e0:32:f1:b4:35:3f:47:69:d8:fa:49:21:d0: fd:b7:23:d8:d2:49:b4:18:84:cc:52:b1:97:29:f7: 20:58:9d:07:dd:db:a5:93:1d:73:5c:92:a8:3a:26: d4:dd:70:09:14:46:a6:0e:25:72:e2:b2:cd:6e:85: 11:81:68:4a:23:55:d3:59:e4:7e:40:5e:2f:2c:b7: 8b:92:94:aa:86:8b:d3:e9:2b:b3:60:70:e3:5b:14: 4c:ab:40:d7:74:61:14:32:9d:83:6f:9a:b3:c2:bd: 29:17:32:62:bf:55:d4:da:a3:96:95:f9:b1:c0:d6: e9:bc:17:da:84:11:dc:12:87:56:1f:17:62:57:1a: e4:b1:8a:cb:a4:39:ff:b4:66:3a:5a:19:fc:1b:63: c5:e7:6c:a6:86:f8:bd:75:59:67:3f:92:7a:bd:0a: 8e:e6:9d:a6:25:a8:16:47:03:c2:35:3a:82:7b:ea: 46:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:0B:48:8A:A3:4A:0A:B1:86:22:1F:3A:82:DA:3E:E8:7A:63:93:5C X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/pgtIiqNKCrGGIh86gto-6Hpjk1w.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.3.0/24 Signature Algorithm: sha256WithRSAEncryption dc:b7:83:01:1d:94:5c:da:a3:cf:da:20:68:2d:d6:b7:16:5d: 2d:f9:17:9b:a8:1d:6b:40:20:c7:81:c9:6f:0b:e5:ec:61:74: 27:df:95:12:30:13:e2:ab:fc:ef:10:2a:e3:20:01:e4:ba:54: ad:33:ac:ae:11:12:c4:bd:01:34:5b:25:21:e7:e3:a3:d2:49: d9:5e:b3:a0:75:f4:bb:a6:85:8d:0f:98:9b:b1:b0:e8:fa:30: 69:a4:2c:f9:37:66:d4:cf:ea:5d:61:d0:7b:7f:33:fe:20:6c: 11:3f:55:d0:3d:16:bf:3b:bb:15:e5:27:87:c8:53:dd:95:6e: bd:94:82:39:19:41:c6:c3:e3:1f:a9:a2:54:72:37:e0:11:d9: 4c:84:d4:da:d7:c4:37:2f:e9:67:61:c2:cd:6a:e8:7a:6d:12: c4:2e:1e:85:39:bc:70:bb:87:3a:47:ca:08:be:36:9f:f0:59: f8:9e:c6:36:8a:1b:2a:4c:2c:4c:e7:4d:30:55:49:34:da:46: a1:8f:15:dc:99:b7:43:3b:83:da:e3:9f:23:4a:93:06:e3:8d: 0f:73:3a:a7:65:e7:bd:4d:f2:2f:f3:74:32:71:ab:16:dc:42: 28:3f:bb:7f:b1:fb:2a:e7:ca:ff:12:45:ef:c9:e8:a1:d3:c7: 4b:4b:e5:4b -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHqkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA1MjFaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEE2MEI0ODhBQTM0QTBB QjE4NjIyMUYzQTgyREEzRUU4N0E2MzkzNUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmgqtx6UP6S9QtMZQHxhvIiGPFRWEjO3LyFVf6laQCVJ/sjlly RiqIt5gtxuru5dSog8W6AwRO76QBgj0SieCxq+m9ZhLsRrljFnwR4DLxtDU/R2nY +kkh0P23I9jSSbQYhMxSsZcp9yBYnQfd26WTHXNckqg6JtTdcAkURqYOJXLiss1u hRGBaEojVdNZ5H5AXi8st4uSlKqGi9PpK7NgcONbFEyrQNd0YRQynYNvmrPCvSkX MmK/VdTao5aV+bHA1um8F9qEEdwSh1YfF2JXGuSxisukOf+0ZjpaGfwbY8XnbKaG +L11WWc/knq9Co7mnaYlqBZHA8I1OoJ76kbPAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUpgtIiqNKCrGGIh86gto+6Hpjk1wwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3BndElpcU5LQ3JHR0lo ODZndG8tNkhwamsxdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3QMwDQYJKoZIhvcNAQELBQADggEBANy3gwEdlFzao8/aIGgt1rcWXS35F5uo HWtAIMeByW8L5exhdCfflRIwE+Kr/O8QKuMgAeS6VK0zrK4REsS9ATRbJSHn46PS Sdles6B19LumhY0PmJuxsOj6MGmkLPk3ZtTP6l1h0Ht/M/4gbBE/VdA9Fr87uxXl J4fIU92Vbr2UgjkZQcbD4x+polRyN+AR2UyE1NrXxDcv6Wdhws1q6HptEsQuHoU5 vHC7hzpHygi+Np/wWfiexjaKGypMLEznTTBVSTTaRqGPFdyZt0M7g9rjnyNKkwbj jQ9zOqdl571N8i/zdDJxqxbcQig/u3+x+yrnyv8SRe/J6KHTx0tL5Us= -----END CERTIFICATE-----Generated at Sun Oct 26 07:17:58 2025 by rpki-client