$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/qhGzwJOk0sLas0DdLmQWZFxvLk4.roa File: qhGzwJOk0sLas0DdLmQWZFxvLk4.roa (raw, json) Hash identifier: jBEpgRb6EsBzQGEoKSdpxxvGYBEniD8JoHoyQrG/+Qg= Subject key identifier: AA:11:B3:C0:93:A4:D2:C2:DA:B3:40:DD:2E:64:16:64:5C:6F:2E:4E Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1E98 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/qhGzwJOk0sLas0DdLmQWZFxvLk4.roa Signing time: Sat 13 Sep 2025 03:05:17 +0000 ROA not before: Sat 13 Sep 2025 03:05:17 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 138527 IP address blocks: 45.252.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 12:36:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7832 (0x1e98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:05:17 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=AA11B3C093A4D2C2DAB340DD2E6416645C6F2E4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:12:dc:b2:94:54:37:70:5e:4e:c4:98:82:37: fc:e0:1c:11:bc:0c:01:f7:6a:16:ef:58:c2:fb:eb: f3:dc:e4:71:14:98:9f:87:6e:70:e5:a0:cc:12:21: 4f:61:0c:d3:b1:fa:c3:89:3f:f0:33:0a:93:24:57: 06:b5:6d:20:9e:5d:ae:5d:24:dc:91:84:5f:63:04: 83:3d:6d:6c:5e:14:80:90:39:51:12:2c:6f:0c:aa: 1c:8b:9d:85:c9:46:03:10:dc:fd:92:e5:2e:a1:c6: 69:aa:ee:35:b8:3c:06:45:da:7e:b4:16:57:8d:61: 2b:44:c0:5b:84:11:f5:bb:fb:39:1e:77:ff:28:b9: 92:78:c8:6a:53:47:9c:7c:75:03:a2:4f:eb:8b:43: 53:db:8a:a0:84:c7:3d:75:18:2b:d5:7a:b0:a5:81: 4a:93:c5:a3:b5:74:04:05:24:89:26:8f:d8:73:f1: 87:af:2e:9d:71:04:67:af:04:8f:ba:a2:fc:f0:aa: 45:3f:c1:c6:db:86:bd:a9:42:84:76:58:3f:9b:ef: 22:4c:5d:16:a8:ed:af:9e:35:f8:8e:6b:6f:d6:b7: 07:8b:95:06:c2:e9:e5:74:b8:9e:ea:8c:a3:7a:55: 95:0c:16:5b:02:43:18:fa:9f:eb:89:d8:b7:34:38: a4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:11:B3:C0:93:A4:D2:C2:DA:B3:40:DD:2E:64:16:64:5C:6F:2E:4E X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/qhGzwJOk0sLas0DdLmQWZFxvLk4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.28.0/22 Signature Algorithm: sha256WithRSAEncryption 94:e8:19:5b:20:fe:be:4c:bd:35:79:ce:d9:b2:21:9d:5f:96: 5c:a8:e4:ac:86:43:8a:5c:89:04:41:09:c5:91:27:ff:fe:59: 2e:ff:87:82:1b:95:af:fa:4d:ae:bd:47:3f:0c:79:fc:1a:25: ab:4e:cd:07:eb:8f:d9:7f:37:60:cf:47:06:4d:36:9c:82:ad: 79:06:bf:d7:ff:96:74:f5:94:49:38:20:f0:53:67:58:6f:96: d6:72:92:d5:a2:0e:d7:3c:96:49:d6:60:b2:08:86:d4:e3:b6: ec:b0:18:49:e9:e3:57:a5:b7:c1:bd:de:40:e7:c6:1a:c3:6c: ee:04:07:cc:2e:20:99:65:53:49:92:7f:8c:6d:ae:d4:1c:cc: b6:8b:a1:f0:86:b5:34:9b:2c:0f:be:5b:63:55:d7:1f:7d:78: 49:c1:97:a5:c4:eb:04:6f:a7:ce:7f:b0:bb:5e:cf:79:59:54: 45:94:e9:c4:fe:9f:df:35:07:b6:bd:99:95:cd:65:35:02:e3: f1:f4:11:36:00:fa:f2:4f:79:3f:02:20:f0:39:a3:88:f9:0f: 5a:6a:bb:5c:69:df:98:15:02:e5:c6:06:37:7d:d2:ce:f8:08: 5a:ca:e5:89:dc:6e:6c:67:3b:2e:8c:27:c0:f3:b1:92:a8:5f: bc:6f:33:fc -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHpgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA1MTdaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEFBMTFCM0MwOTNBNEQy QzJEQUIzNDBERDJFNjQxNjY0NUM2RjJFNEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIEtyylFQ3cF5OxJiCN/zgHBG8DAH3ahbvWML76/Pc5HEUmJ+H bnDloMwSIU9hDNOx+sOJP/AzCpMkVwa1bSCeXa5dJNyRhF9jBIM9bWxeFICQOVES LG8MqhyLnYXJRgMQ3P2S5S6hxmmq7jW4PAZF2n60FleNYStEwFuEEfW7+zked/8o uZJ4yGpTR5x8dQOiT+uLQ1PbiqCExz11GCvVerClgUqTxaO1dAQFJIkmj9hz8Yev Lp1xBGevBI+6ovzwqkU/wcbbhr2pQoR2WD+b7yJMXRao7a+eNfiOa2/WtweLlQbC 6eV0uJ7qjKN6VZUMFlsCQxj6n+uJ2Lc0OKQZAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUqhGzwJOk0sLas0DdLmQWZFxvLk4wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3FoR3p3Sk9rMHNMYXMw RGRMbVFXWkZ4dkxrNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIt/BwwDQYJKoZIhvcNAQELBQADggEBAJToGVsg/r5MvTV5ztmyIZ1fllyo5KyG Q4pciQRBCcWRJ//+WS7/h4Ibla/6Ta69Rz8MefwaJatOzQfrj9l/N2DPRwZNNpyC rXkGv9f/lnT1lEk4IPBTZ1hvltZyktWiDtc8lknWYLIIhtTjtuywGEnp41elt8G9 3kDnxhrDbO4EB8wuIJllU0mSf4xtrtQczLaLofCGtTSbLA++W2NV1x99eEnBl6XE 6wRvp85/sLtez3lZVEWU6cT+n981B7a9mZXNZTUC4/H0ETYA+vJPeT8CIPA5o4j5 D1pqu1xp35gVAuXGBjd90s74CFrK5YncbmxnOy6MJ8DzsZKoX7xvM/w= -----END CERTIFICATE-----Generated at Sun Oct 26 11:50:22 2025 by rpki-client